StackRadar

CVE-2020-10878

High

Advisory

Published 1 Jun 2020In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.6
base score, highest
EPSS
0.049
92nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
202
of 17,781 indexed, latest versions
Container images
117
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 202 of 17,781 indexed charts deploy, on 117 images.

Affected packageAffected versionsFixed inImages
perldeb5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+10 more5.18.2-2ubuntu1.7+esm3, 5.22.1-9ubuntu0.9, 5.26.1-6ubuntu0.5, 5.30.0-9ubuntu0.2115
perlapk5.26.3-r0, 5.30.2-r05.26.3-r1, 5.30.3-r02
OSV records
ALPINE-CVE-2020-10878UBUNTU-CVE-2020-10878
Also known as
USN-4602-1, USN-4602-2

Charts affected

202 by stars
ChartLatestAffected imagesRadar Score
istiocloudposse1.1.02 of 8See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
perl@5.22.1-9ubuntu0.6
5.22.1-9ubuntu0.9
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
perl@5.22.1-9ubuntu0.6
5.22.1-9ubuntu0.9

Open the chart page →

23,964
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
perl@5.22.1-9ubuntu0.6
5.22.1-9ubuntu0.9

Open the chart page →

96,941
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
perl@5.22.1-9
5.22.1-9ubuntu0.9

Open the chart page →

13,562
auto-deploy-appav1o-chartsVerified publisher0.15.41 of 1See more

auto-deploy-app av1o-charts 0.15.4

1 of the 1 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
perl@5.22.1-9
5.22.1-9ubuntu0.9

Open the chart page →

11,007
lightsteplightstepsatellite1.2.41 of 1See more

lightstep lightstepsatellite 1.2.4

1 of the 1 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
perl@5.22.1-9ubuntu0.6
5.22.1-9ubuntu0.9

Open the chart page →

15,330
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
perl@5.22.1-9ubuntu0.5
5.22.1-9ubuntu0.9
hyperledger/fabric-couchdb:0.4.15f6c724592abf
perl@5.22.1-9ubuntu0.6
5.22.1-9ubuntu0.9

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
perl@5.22.1-9ubuntu0.5
5.22.1-9ubuntu0.9
hyperledger/fabric-couchdb:0.4.15f6c724592abf
perl@5.22.1-9ubuntu0.6
5.22.1-9ubuntu0.9

Open the chart page →

77,687
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
perl@5.22.1-9ubuntu0.2
5.22.1-9ubuntu0.9

Open the chart page →

36,094
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

12,908
pgbouncerkubernetes-helm-chart-pgbouncer1.0.151 of 1See more

pgbouncer kubernetes-helm-chart-pgbouncer 1.0.15

1 of the 1 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
cradlepoint/pgbouncer:1.0.18f5720b0cd03
perl@5.26.1-6ubuntu0.2
5.26.1-6ubuntu0.5

Open the chart page →

5,802
clickhouseliwenhe1.0.11 of 3See more

clickhouse liwenhe 1.0.1

1 of the 3 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.14ccf9c2b5e3f2
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

6,761
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
library/mongo:4.2.358b25d51baa1
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

19,187
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

15,970
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
perl@5.18.2-2ubuntu1
5.18.2-2ubuntu1.7+esm3

Open the chart page →

41,427
acos-prometheus-exporter-helm-charta10-prometheus-exporter0.1.01 of 1See more

acos-prometheus-exporter-helm-chart a10-prometheus-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
a10networks/acos-prometheus-exporter:latest8dc58d434d71
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

12,007
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
free5gmano/nextepc-mongodb:latest36f806935519
perl@5.22.1-9ubuntu0.6
5.22.1-9ubuntu0.9

Open the chart page →

25,443
pagesalstom-pages-app1.0.01 of 3See more

pages alstom-pages-app 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

20,190
pagesandrei-pages1.0.01 of 3See more

pages andrei-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

20,190
keystonearzu0.2.291 of 4See more

keystone arzu 0.2.29

1 of the 4 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
library/rabbitmq:3.7-managementb6dd45cc35b3
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

22,568
dltkvassist-iot-data-integrity-verification0.2.02 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
perl@5.22.1-9ubuntu0.5
5.22.1-9ubuntu0.9
hyperledger/fabric-couchdb:0.4.15f6c724592abf
perl@5.22.1-9ubuntu0.6
5.22.1-9ubuntu0.9

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.02 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
perl@5.22.1-9ubuntu0.5
5.22.1-9ubuntu0.9
hyperledger/fabric-couchdb:0.4.15f6c724592abf
perl@5.22.1-9ubuntu0.6
5.22.1-9ubuntu0.9

Open the chart page →

77,706
pagesberrutig-pages1.0.01 of 3See more

pages berrutig-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

20,190
istio-bookinfobookinfo1.2.23 of 6See more

istio-bookinfo bookinfo 1.2.2

3 of the 6 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.15.040e8aba77c1b
perl@5.22.1-9ubuntu0.6
5.22.1-9ubuntu0.9
istio/examples-bookinfo-reviews-v2:1.15.0e86d247b7ac2
perl@5.22.1-9ubuntu0.6
5.22.1-9ubuntu0.9
istio/examples-bookinfo-reviews-v3:1.15.0e454cab754cf
perl@5.22.1-9ubuntu0.6
5.22.1-9ubuntu0.9

Open the chart page →

18,980
jaegerbook-k8sinfra-v23.4.01 of 5See more

jaeger book-k8sinfra-v2 3.4.0

1 of the 5 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
library/cassandra:3.11.65aa8400b4b3b
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

19,229
pagesbrian-pages1.0.01 of 3See more

pages brian-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

20,190
pagesbrixton-mayuribhavsar23-pages1.0.01 of 3See more

pages brixton-mayuribhavsar23-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

20,190
pagesbrixton-pages1.0.01 of 3See more

pages brixton-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

20,190
ombibryanalves0.4.01 of 1See more

ombi bryanalves 0.4.0

1 of the 1 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

10,776
pagescamden-pages1.0.01 of 3See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

20,190
pagescarina-pages1.0.01 of 3See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

20,190
pagescarmel-pages-dell1.0.01 of 3See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

20,190
clechaosnative0.2.71 of 6See more

cle chaosnative 0.2.7

1 of the 6 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
litmuschaos/mongo:4.2.899961210d467
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

16,389
opensipschetan-opensips0.1.01 of 1See more

opensips chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
chetangautamm/repo:Opensips_Buildb4b94155ff5a
perl@5.18.2-2ubuntu1.7
5.18.2-2ubuntu1.7+esm3

Open the chart page →

30,140
bitcoindcloudnativeapp0.2.11 of 2See more

bitcoind cloudnativeapp 0.2.1

1 of the 2 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
arilot/docker-bitcoind:0.17.127a4f7e0f9f1
perl@5.22.1-9ubuntu0.6
5.22.1-9ubuntu0.9

Open the chart page →

5,051
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

29,901
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
perl@5.22.1-9ubuntu0.2
5.22.1-9ubuntu0.9

Open the chart page →

36,094
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
perl@5.22.1-9ubuntu0.2
5.22.1-9ubuntu0.9

Open the chart page →

27,417
guestbookcloudnativeapp0.2.01 of 3See more

guestbook cloudnativeapp 0.2.0

1 of the 3 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
resouer/redis-slave:v2e2f198b49ba7
perl@5.18.2-2ubuntu1
5.18.2-2ubuntu1.7+esm3

Open the chart page →

36,839
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
perl@5.22.1-9ubuntu0.5
5.22.1-9ubuntu0.9

Open the chart page →

33,963
hlf-ordcloudnativeapp1.2.51 of 1See more

hlf-ord cloudnativeapp 1.2.5

1 of the 1 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
hyperledger/fabric-orderer:1.3.06ee1abcfd840
perl@5.22.1-9ubuntu0.5
5.22.1-9ubuntu0.9

Open the chart page →

5,345
hlf-peercloudnativeapp1.2.61 of 1See more

hlf-peer cloudnativeapp 1.2.6

1 of the 1 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:1.3.06756c7c48234
perl@5.22.1-9ubuntu0.5
5.22.1-9ubuntu0.9

Open the chart page →

5,345
risk-advisorcloudnativeapp2.0.41 of 1See more

risk-advisor cloudnativeapp 2.0.4

1 of the 1 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
pposkrobko/risk-advisor:v1.0.0eaf260341dba
perl@5.22.1-9
5.22.1-9ubuntu0.9

Open the chart page →

5,025
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
perl@5.22.1-9ubuntu0.6
5.22.1-9ubuntu0.9

Open the chart page →

23,665
seqcloudnativeapp1.0.01 of 1See more

seq cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
datalust/seq:5.0.832-pre9c731bb207a6
perl@5.22.1-9ubuntu0.2
5.22.1-9ubuntu0.9

Open the chart page →

10,541
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
lightbend/curl:7.47.0b0c9894ac8dd
perl@5.22.1-9ubuntu0.5
5.22.1-9ubuntu0.9

Open the chart page →

14,066
unificloudnativeapp0.4.21 of 1See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
jacobalberty/unifi:5.10.19c409924e2463
perl@5.22.1-9ubuntu0.6
5.22.1-9ubuntu0.9

Open the chart page →

22,442
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
perl@5.22.1-9ubuntu0.2
5.22.1-9ubuntu0.9

Open the chart page →

77,758
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
perl@5.18.2-2ubuntu1.4
5.18.2-2ubuntu1.7+esm3
galaxy/galaxy-stable:v18.018e577a626dfd
perl@5.18.2-2ubuntu1.4
5.18.2-2ubuntu1.7+esm3

Open the chart page →

70,895
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
cloudve/janis-terminal:latestaf56e77ca587
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

14,270
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2020-10878.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5

Open the chart page →

13,156

Container images carrying it

117 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
voltha/voltha-netconf:1.6.037f80524c207
perl@5.22.1-9ubuntu0.5
5.22.1-9ubuntu0.9
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
perl@5.22.1-9ubuntu0.5
5.22.1-9ubuntu0.9
1
voltha/voltha-onos:5.1.8e038acb950d3
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5
1
voltha/voltha-tester:1.7.0655c3048a602
perl@5.22.1-9ubuntu0.6
5.22.1-9ubuntu0.9
1
voltha/voltha-voltha:1.6.0ff596b62de59
perl@5.22.1-9ubuntu0.5
5.22.1-9ubuntu0.9
1
wavefronthq/proxy:9.2d1064d28f6eb
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5
1
wekanteam/wekan:v4.2268a51f0327df
perl@5.30.0-9build1
5.30.0-9ubuntu0.2
1
woojoong/wowza:latestec230db19652
perl@5.26.1-6ubuntu0.2
5.26.1-6ubuntu0.5
1
yandex/clickhouse-server:19.17ab1738a64b70
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5
1
yandex/clickhouse-server:19.14ccf9c2b5e3f2
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5
1
yandex/clickhouse-server:19.16d210dc69321e
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
perl@5.26.1-6ubuntu0.3
5.26.1-6ubuntu0.5
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
perl@5.22.1-9
5.22.1-9ubuntu0.9
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
perl@5.22.1-9
5.22.1-9ubuntu0.9
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
perl@5.22.1-9ubuntu0.6
5.22.1-9ubuntu0.9
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
perl@5.22.1-9ubuntu0.6
5.22.1-9ubuntu0.9
1
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
perl@5.22.1-9ubuntu0.6
5.22.1-9ubuntu0.9
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.