VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
104719 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-106586 | suse_vex | SUSE CVE CVE-2026-106586 | known affected: 269 | 2026-10-15T23:43:08+00:00 | Vulnerability · Source |
| CVE-2026-106587 | suse_vex | SUSE CVE CVE-2026-106587 | known affected: 269 | 2026-10-15T23:43:06+00:00 | Vulnerability · Source |
| CVE-2026-107708 | suse_vex | SUSE CVE CVE-2026-107708 | known affected: 326 | 2026-10-15T23:43:01+00:00 | Vulnerability · Source |
| CVE-2026-107778 | suse_vex | SUSE CVE CVE-2026-107778 | known affected: 326 | 2026-10-15T23:42:59+00:00 | Vulnerability · Source |
| CVE-2026-107888 | suse_vex | SUSE CVE CVE-2026-107888 | known affected: 395 | 2026-10-15T23:42:57+00:00 | Vulnerability · Source |
| CVE-2026-107935 | suse_vex | SUSE CVE CVE-2026-107935 | known affected: 116 known not affected: 16 | 2026-10-15T23:42:55+00:00 | Vulnerability · Source |
| CVE-2026-19032 | redhat_vex | com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: Jackson-databind: Uncontrolled URI scheme resolution in Path deserialization | fixed: 2 known affected: 284 known not affected: 2072 | 2026-10-15T23:41:46+00:00 | Vulnerability · Source |
| CVE-2026-93432 | redhat_vex | io.quarkus.qute:quarkus-core: Cross-Site Scripting (XSS) and JSON Injection via Qute {#eval} Section in Quarkus | fixed: 2 known affected: 9 known not affected: 2071 | 2026-10-15T23:41:31+00:00 | Vulnerability · Source |
| CVE-2026-88032 | redhat_vex | mongodb-java-driver: mongodb-driver-reactivestreams: mongodb-crypt: MongoDB Java Driver: Denial of Service via use-after-free in client-side encryption cancellation | fixed: 2 known affected: 2 known not affected: 2072 | 2026-10-15T23:41:21+00:00 | Vulnerability · Source |
| CVE-2026-83557 | redhat_vex | com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: Path traversal via incomplete type validation | fixed: 2 known affected: 287 known not affected: 2072 | 2026-10-15T23:41:18+00:00 | Vulnerability · Source |
| CVE-2026-59949 | redhat_vex | lz4-java: lz4-java: Denial of Service via insufficient validation in XXHash JNI implementations | fixed: 2 known affected: 26 known not affected: 2071 | 2026-10-15T23:41:13+00:00 | Vulnerability · Source |
| CVE-2026-59295 | redhat_vex | io.micrometer/micrometer-core: Micrometer Instrumentation for Apache HttpAsyncClient: Denial of Service via asynchronous request failures | fixed: 2 known affected: 1 known not affected: 2092 | 2026-10-15T23:41:11+00:00 | Vulnerability · Source |
| CVE-2026-107294 | redhat_vex | pydantic-ai: pydantic-ai: Denial of Service via unbounded HTTP response buffering | known affected: 5 | 2026-10-15T23:33:58+00:00 | Vulnerability · Source |
| CVE-2026-107293 | redhat_vex | pydantic-ai: pydantic-ai: Information disclosure via OpenTelemetry retry prompt logging | known affected: 5 | 2026-10-15T23:33:57+00:00 | Vulnerability · Source |
| CVE-2026-107292 | redhat_vex | pydantic-ai: pydantic-ai: Unauthorized tool execution via DNS rebinding | known affected: 5 | 2026-10-15T23:33:53+00:00 | Vulnerability · Source |
| CVE-2026-107291 | redhat_vex | pydantic-ai: pydantic-ai-slim: Pydantic AI: Information disclosure via incomplete telemetry content redaction | known affected: 5 | 2026-10-15T23:33:52+00:00 | Vulnerability · Source |
| CVE-2026-107290 | redhat_vex | pydantic-ai: pydantic-ai: Denial of Service via inefficient web response parsing | known affected: 5 | 2026-10-15T23:33:49+00:00 | Vulnerability · Source |
| CVE-2026-107287 | redhat_vex | pydantic-ai: pydantic-ai: Denial of Service via resource exhaustion during HTML conversion | known affected: 5 | 2026-10-15T23:33:46+00:00 | Vulnerability · Source |
| CVE-2026-106454 | redhat_vex | twisted: Twisted: Denial of Service via regular expression backtracking in IMAP search patterns | known affected: 20 known not affected: 1 | 2026-10-15T23:33:43+00:00 | Vulnerability · Source |
| CVE-2026-105775 | redhat_vex | vllm: vLLM: Denial of Service via out-of-bounds read in completions request handler | known affected: 27 | 2026-10-15T23:33:39+00:00 | Vulnerability · Source |
| CVE-2026-106444 | redhat_vex | handlebars: Handlebars: Cross-Site Scripting via unescaped closing script tags in precompiled templates | known not affected: 10 | 2026-10-15T23:33:39+00:00 | Vulnerability · Source |
| CVE-2026-105760 | redhat_vex | vllm: vllm: Denial of Service via excessive resource consumption in GLMGA video backend | known affected: 27 | 2026-10-15T23:33:35+00:00 | Vulnerability · Source |
| CVE-2026-105758 | redhat_vex | vllm: vllm: Denial of Service via unbounded video frame parameters | known affected: 27 | 2026-10-15T23:33:26+00:00 | Vulnerability · Source |
| CVE-2026-105757 | redhat_vex | vllm: vllm: Denial of Service via unhandled structured-output errors | known affected: 27 | 2026-10-15T23:33:24+00:00 | Vulnerability · Source |
| CVE-2026-105756 | redhat_vex | vllm: vllm: Denial of Service via unvalidated cache salt in API requests | known affected: 27 | 2026-10-15T23:33:19+00:00 | Vulnerability · Source |
| CVE-2026-105755 | redhat_vex | vllm: vllm: Scoring result corruption via user-controlled request identifier | known affected: 27 | 2026-10-15T23:33:16+00:00 | Vulnerability · Source |
| CVE-2026-105754 | redhat_vex | vllm: vllm: Denial of Service via unvalidated multimodal parameters in scale-out endpoint | known affected: 27 | 2026-10-15T23:33:09+00:00 | Vulnerability · Source |
| CVE-2026-105753 | redhat_vex | vllm: vllm: Denial of Service via multimodal cache desynchronization | known affected: 27 | 2026-10-15T23:33:06+00:00 | Vulnerability · Source |
| CVE-2026-105750 | redhat_vex | docling: docling: Information disclosure via unrestricted local file requests in HTML rendering | known affected: 7 | 2026-10-15T23:33:03+00:00 | Vulnerability · Source |
| CVE-2026-105749 | redhat_vex | docling: docling: Denial of Service via unbounded table span attributes | known affected: 7 | 2026-10-15T23:33:03+00:00 | Vulnerability · Source |
| CVE-2026-105747 | redhat_vex | docling: docling: Denial of Service via excessive memory allocation in archive processing | known affected: 7 | 2026-10-15T23:32:58+00:00 | Vulnerability · Source |
| CVE-2026-105745 | redhat_vex | docling: docling: Arbitrary code execution via premature plugin loading | known affected: 7 | 2026-10-15T23:32:56+00:00 | Vulnerability · Source |
| CVE-2026-105268 | redhat_vex | code.gitea.io/gitea: Gitea: Unauthorized deletion and renaming of comment attachments via issue attachment API | known not affected: 1 | 2026-10-15T23:32:39+00:00 | Vulnerability · Source |
| CVE-2026-105267 | redhat_vex | code.gitea.io/gitea: Gitea: Unauthorized release deletion via tag deletion endpoint | known not affected: 1 | 2026-10-15T23:32:39+00:00 | Vulnerability · Source |
| CVE-2026-104635 | redhat_vex | protobuf: protobuf: Denial of Service via deeply nested JSON input | known affected: 47 known not affected: 1 | 2026-10-15T23:32:29+00:00 | Vulnerability · Source |
| CVE-2026-104633 | redhat_vex | code.gitea.io/gitea: Gitea: Denial of Service via unbounded pagination loop during repository migration | known not affected: 1 | 2026-10-15T23:32:28+00:00 | Vulnerability · Source |
| CVE-2026-104056 | redhat_vex | authlib: authlib: Information disclosure via unvalidated discovery metadata | known affected: 11 known not affected: 1 | 2026-10-15T23:32:20+00:00 | Vulnerability · Source |
| CVE-2026-103923 | redhat_vex | katex: katex: Cross-site scripting via prototype pollution inheritance | known affected: 3 known not affected: 1 | 2026-10-15T23:32:10+00:00 | Vulnerability · Source |
| CVE-2026-103435 | redhat_vex | claude-code: claude-code: Arbitrary file write via TOCTOU race condition | known affected: 1 | 2026-10-15T23:31:58+00:00 | Vulnerability · Source |
| CVE-2026-103263 | redhat_vex | tornado: Tornado: Information disclosure via symlink path traversal in StaticFileHandler | known affected: 71 | 2026-10-15T23:31:54+00:00 | Vulnerability · Source |
| CVE-2026-103261 | redhat_vex | tornado: tornado: Denial of Service (DoS) via unbounded query string parsing | known affected: 71 | 2026-10-15T23:31:46+00:00 | Vulnerability · Source |
| CVE-2026-102995 | redhat_vex | pypdf: pypdf: Denial of Service via excessive memory consumption in font mapping | known affected: 15 | 2026-10-15T23:31:42+00:00 | Vulnerability · Source |
| CVE-2026-102904 | redhat_vex | jupyterlab: JupyterLab: Information disclosure via extension uninstallation argument injection | known affected: 21 | 2026-10-15T23:31:32+00:00 | Vulnerability · Source |
| CVE-2026-9678 | redhat_vex | undici: Undici: Information disclosure due to improper cache-control header parsing | fixed: 286 known affected: 36 known not affected: 15 | 2026-10-15T23:17:39+00:00 | Vulnerability · Source |
| CVE-2023-48161 | redhat_vex | giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function | fixed: 2636 known affected: 45 known not affected: 1 | 2026-10-15T23:15:20+00:00 | Vulnerability · Source |
| CVE-2026-94449 | redhat_vex | quarkus-smallrye-fault-tolerance: quarkus-smallrye-fault-tolerance: Memory leak in @ApplyGuard leads to Denial of Service | fixed: 2 known affected: 2 known not affected: 2072 under investigation: 1 | 2026-10-15T23:12:05+00:00 | Vulnerability · Source |
| CVE-2026-91776 | redhat_vex | jackson-databind: com.fasterxml.jackson/jackson-core: jackson-databind: Denial of Service via unbounded cache growth in TypeDeserializerBase | fixed: 2 known not affected: 2072 under investigation: 164 | 2026-10-15T23:11:58+00:00 | Vulnerability · Source |
| CVE-2026-88033 | redhat_vex | org.mongodb/mongodb-driver-core: MongoDB Java Driver: Data disclosure and denial of service via query-operator injection in GridFS file IDs | fixed: 2 known affected: 2 known not affected: 2073 | 2026-10-15T23:11:44+00:00 | Vulnerability · Source |
| CVE-2026-107295 | redhat_vex | pydantic-ai-slim: pydantic-ai-slim: Unauthorized tool execution via missing Content-Type validation | known affected: 1 | 2026-10-15T23:04:47+00:00 | Vulnerability · Source |
| CVE-2026-107286 | redhat_vex | pydantic-ai: pydantic-ai: Denial of Service via unreleased concurrency slots in streaming requests | known affected: 5 | 2026-10-15T23:04:45+00:00 | Vulnerability · Source |