StackRadar

CVE-2021-23840

High

Advisory

Published 16 Feb 2021In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.507
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
933
of 17,790 indexed, latest versions
Container images
863
deployed by those charts
Fix available
3 of 4
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 933 of 17,790 indexed charts deploy, on 863 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+50 more1.0.1f-1ubuntu2.27+esm10, 1.0.2g-1ubuntu4.19, 1.0.2g-1ubuntu4.fips.4.19.3, 1.1.1-1ubuntu2.1~18.04.8+3 more447
opensslapk1.1.1a-r1, 1.1.1b-r1, 1.1.1c-r0, 1.1.1d-r0+6 more1.1.1j-r0411
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.41.0.2n-1ubuntu5.66
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
OSV records
ALPINE-CVE-2021-23840UBUNTU-CVE-2021-23840
Also known as
USN-4738-1, USN-7018-1

Charts affected

933 by stars
ChartLatestAffected imagesRadar Score
seldon-core-oauth-gatewayseldon0.3.11 of 2See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
seldonio/apife:0.3.1eea0d3f578ca
openssl@1.1.1b-r1
1.1.1j-r0

Open the chart page →

8,098
sentry-dbsentry0.9.42 of 10See more

sentry-db sentry 0.9.4

2 of the 10 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
library/rabbitmq:3.8.0-alpine72ff40a31dc4
openssl@1.1.1d-r0
1.1.1j-r0
yandex/clickhouse-server:19.16d210dc69321e
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.8

Open the chart page →

10,972
shenyushenyu0.6.32 of 2See more

shenyu shenyu 0.6.3

2 of the 2 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.5.1e2be712fc4f4
openssl@1.1.1b-r1
1.1.1j-r0
apache/shenyu-bootstrap:2.5.11bd5756f6273
openssl@1.1.1b-r1
1.1.1j-r0

Open the chart page →

8,804
shenyushenyu-helm-chart-test2.4.272 of 2See more

shenyu shenyu-helm-chart-test 2.4.27

2 of the 2 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
openssl@1.1.1b-r1
1.1.1j-r0
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
openssl@1.1.1b-r1
1.1.1j-r0

Open the chart page →

12,512
pagesshrutiujlan-pages1.0.02 of 3See more

pages shrutiujlan-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.2
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.8

Open the chart page →

20,233
sistas-chatbotsistas-chatbot5.0.21 of 6See more

sistas-chatbot sistas-chatbot 5.0.2

1 of the 6 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
jhipster/jhipster-registry:latest7184525acd4d
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.7.2

Open the chart page →

5,894
mailhogsitepilot1.0.21 of 1See more

mailhog sitepilot 1.0.2

1 of the 1 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
mailhog/mailhog:v1.0.18d76a3d4ffa3
openssl@1.1.1g-r0
1.1.1j-r0

Open the chart page →

778
pontoonskills-network2.2.01 of 2See more

pontoon skills-network 2.2.0

1 of the 2 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
library/redis:6.0.7-alpine5326e0af4341
openssl@1.1.1g-r0
1.1.1j-r0

Open the chart page →

778
archivaslamdev0.0.71 of 2See more

archiva slamdev 0.0.7

1 of the 2 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
xetusoss/archiva:v2.2.588f25242b9ee
openssl@1.1.1b-r1
1.1.1j-r0

Open the chart page →

6,907
docker-registry-proxyslamdev0.0.91 of 1See more

docker-registry-proxy slamdev 0.0.9

1 of the 1 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
rpardini/docker-registry-proxy:0.6.383d5f6a96682
openssl@1.1.1i-r0
1.1.1j-r0

Open the chart page →

848
envoyslamdev0.0.171 of 2See more

envoy slamdev 0.0.17

1 of the 2 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.18.2e8b37c1d7578
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.fips.2.1~18.04.9.1

Open the chart page →

4,705
flux-notifierslamdev0.0.71 of 1See more

flux-notifier slamdev 0.0.7

1 of the 1 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
slamdev/flux-notifier:v0.0.8b173d809132d
openssl@1.1.1g-r0
1.1.1j-r0

Open the chart page →

2,015
gitlab-runnerslamdev0.0.11 of 1See more

gitlab-runner slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.fips.7.2

Open the chart page →

9,235
gke-preemptible-notifierslamdev0.0.61 of 1See more

gke-preemptible-notifier slamdev 0.0.6

1 of the 1 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
slamdev/gke-preemptible-notifier:v0.0.3d5d6430108a3
openssl@1.1.1g-r0
1.1.1j-r0

Open the chart page →

2,860
hetzner-iroboslamdev0.0.51 of 1See more

hetzner-irobo slamdev 0.0.5

1 of the 1 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
slamdev/hetzner-irobo:0.0.13ca20c184c55
openssl@1.1.1g-r0
1.1.1j-r0

Open the chart page →

3,754
pgwebslamdev0.0.81 of 1See more

pgweb slamdev 0.0.8

1 of the 1 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
sosedoff/pgweb:0.11.785e0132e0cce
openssl@1.1.1g-r0
1.1.1j-r0

Open the chart page →

600
aafsmo-helm-chart6.0.02 of 14See more

aaf smo-helm-chart 6.0.0

2 of the 14 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
dibi/envsubst:latestfc2d92db8024
openssl@1.1.1g-r0
1.1.1j-r0
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.19

Open the chart page →

25,793
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.19

Open the chart page →

25,827
dgbuildersmo-helm-chart6.0.02 of 3See more

dgbuilder smo-helm-chart 6.0.0

2 of the 3 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
dibi/envsubst:latestfc2d92db8024
openssl@1.1.1g-r0
1.1.1j-r0
oomk8s/readiness-check:2.0.07daa08b81954
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.19

Open the chart page →

28,494
dmaap-listenersmo-helm-chart6.0.02 of 3See more

dmaap-listener smo-helm-chart 6.0.0

2 of the 3 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
dibi/envsubst:latestfc2d92db8024
openssl@1.1.1g-r0
1.1.1j-r0
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.19

Open the chart page →

25,793
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.19

Open the chart page →

24,800
logsmo-helm-chart6.0.02 of 6See more

log smo-helm-chart 6.0.0

2 of the 6 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.19
taskrabbit/elasticsearch-dump:latestc967fe68b9c7
openssl@1.1.1b-r1
1.1.1j-r0

Open the chart page →

29,244
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.19

Open the chart page →

24,800
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.19

Open the chart page →

27,501
multicloudsmo-helm-chart6.0.01 of 14See more

multicloud smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
oomk8s/ubuntu-init:1.0.03adf3d21ad3b
openssl@1.0.2g-1ubuntu4.6
1.0.2g-1ubuntu4.19

Open the chart page →

9,442
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.19

Open the chart page →

27,501
pombasmo-helm-chart6.0.02 of 17See more

pomba smo-helm-chart 6.0.0

2 of the 17 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.19
taskrabbit/elasticsearch-dump:latestc967fe68b9c7
openssl@1.1.1b-r1
1.1.1j-r0

Open the chart page →

29,244
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.19

Open the chart page →

27,501
sdcsmo-helm-chart6.0.02 of 14See more

sdc smo-helm-chart 6.0.0

2 of the 14 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
dibi/envsubst:latestfc2d92db8024
openssl@1.1.1g-r0
1.1.1j-r0
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.19

Open the chart page →

25,793
sdnc-ansible-serversmo-helm-chart6.0.02 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

2 of the 3 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
dibi/envsubst:latestfc2d92db8024
openssl@1.1.1g-r0
1.1.1j-r0
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.19

Open the chart page →

25,793
sdnc-portalsmo-helm-chart6.0.02 of 3See more

sdnc-portal smo-helm-chart 6.0.0

2 of the 3 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
dibi/envsubst:latestfc2d92db8024
openssl@1.1.1g-r0
1.1.1j-r0
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.19

Open the chart page →

25,793
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.19

Open the chart page →

24,800
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.19

Open the chart page →

24,800
ueb-listenersmo-helm-chart6.0.02 of 3See more

ueb-listener smo-helm-chart 6.0.0

2 of the 3 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
dibi/envsubst:latestfc2d92db8024
openssl@1.1.1g-r0
1.1.1j-r0
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.19

Open the chart page →

25,793
kwatchmansnl-charts0.1.01 of 1See more

kwatchman snl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
snebel29/kwatchman:latest27600e17b5d7
openssl@1.1.1b-r1
1.1.1j-r0

Open the chart page →

283
gar-exportersoftonic0.1.11 of 1See more

gar-exporter softonic 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
softonic/gar-exporter:0.2.1a64d6c0e0ae5
openssl@1.1.1g-r0
1.1.1j-r0

Open the chart page →

2,296
webhook-receiversoftonic2.1.11 of 1See more

webhook-receiver softonic 2.1.1

1 of the 1 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
almir/webhook:2.8.01698346f6077
openssl@1.1.1g-r0
1.1.1j-r0

Open the chart page →

1,927
statsd-proxysomeblackmagic0.1.21 of 1See more

statsd-proxy someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
adgoal/statsd-proxy:latest75ed282ad613
openssl@1.1.1d-r3
1.1.1j-r0

Open the chart page →

682
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
openssl@1.1.1f-1ubuntu2.13
1.1.1f-1ubuntu2.fips.7.2

Open the chart page →

30,759
spinnakerspinnakerVerified publisher2.2.132 of 4See more

spinnaker spinnaker 2.2.13

2 of the 4 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2020-11-25T23-04-07Zbf85c57cdfcc
openssl@1.1.1g-r0
1.1.1j-r0
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
openssl@1.1.1b-r1
1.1.1j-r0

Open the chart page →

6,836
spotinst-ocean-network-clientspot1.0.01 of 1See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
openssl@1.1.1-1ubuntu2.1~18.04.20
1.1.1-1ubuntu2.fips.2.1~18.04.9.1

Open the chart page →

6,955
pagessrinipages1.0.02 of 3See more

pages srinipages 1.0.0

2 of the 3 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.2
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.8

Open the chart page →

20,233
ecr-cleanersstarcher0.1.1+d13a1ab1 of 1See more

ecr-cleaner sstarcher 0.1.1+d13a1ab

1 of the 1 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
sstarcher/ecr-cleaner:0.1.12d43c390cb19
openssl@1.1.1d-r3
1.1.1j-r0

Open the chart page →

2,575
kube-ebs-taggersstarcher0.1.0+7abf4f71 of 1See more

kube-ebs-tagger sstarcher 0.1.0+7abf4f7

1 of the 1 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
sstarcher/kube-ebs-tagger:0.1.01f8cae8cfa80
openssl@1.1.1d-r3
1.1.1j-r0

Open the chart page →

3,096
newrelic-operatorsstarcher0.1.0+32463481 of 1See more

newrelic-operator sstarcher 0.1.0+3246348

1 of the 1 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
sstarcher/newrelic-operator:0.1.01b702330047f
openssl@1.1.1c-r0
1.1.1j-r0

Open the chart page →

280
newrelic-private-minionsstarcher0.1.21 of 1See more

newrelic-private-minion sstarcher 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
openssl@1.1.1d-r2
1.1.1j-r0

Open the chart page →

3,165
cerebrostakaterVerified publisher0.5.11 of 2See more

cerebro stakater 0.5.1

1 of the 2 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
lmenezes/cerebro:0.8.13e860068e403
openssl@1.1.1a-r1
1.1.1j-r0

Open the chart page →

2,956
chowkidarstakaterVerified publisher0.0.351 of 1See more

chowkidar stakater 0.0.35

1 of the 1 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
stakater/chowkidar:v0.0.351dae2b995d81
openssl@1.1.1g-r0
1.1.1j-r0

Open the chart page →

181
jamadarstakaterVerified publisher0.0.171 of 1See more

jamadar stakater 0.0.17

1 of the 1 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
stakater/jamadar:v0.0.174e130e265f87
openssl@1.1.1g-r0
1.1.1j-r0

Open the chart page →

181
pgadminstakaterVerified publisher0.1.141 of 1See more

pgadmin stakater 0.1.14

1 of the 1 container images this version deploys carry CVE-2021-23840.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.5a5a656e1d5fd
openssl@1.1.1b-r1
1.1.1j-r0

Open the chart page →

2,060

Container images carrying it

863 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
openssl@1.0.2g-1ubuntu4.17
1.0.2g-1ubuntu4.19
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
openssl@1.1.1d-r2
1.1.1j-r0
1
quay.io/oauth2-proxy/oauth2-proxy:v6.1.1791aef35b8d1
openssl@1.1.1g-r0
1.1.1j-r0
1
quay.io/opsmxpublic/k8s-decoder:halfec086394aa9
openssl@1.1.1i-r0
1.1.1j-r0
1
quay.io/opsmxpublic/oes-pre-configure:v29b052fbb046f
openssl@1.1.1g-r0
1.1.1j-r0
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.19
1
quay.io/opstree/druid-exporter:v0.83f6d9885cfe2
openssl@1.1.1g-r0
1.1.1j-r0
1
quay.io/simplyzee/kube-rclone:v1.52.389a0c23d5ad3
openssl@1.1.1g-r0
1.1.1j-r0
1
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
openssl@1.1.1d-r3
1.1.1j-r0
1
quay.io/uswitch/kiam:v4.0be3a5846922d
openssl@1.1.1i-r0
1.1.1j-r0
1
registry.gitlab.com/autokubeops/kube-image-webhook:v0.2.0fcf464708a21
openssl@1.1.1-1ubuntu2.1~18.04.17
1.1.1-1ubuntu2.fips.2.1~18.04.9.1
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
openssl@1.1.1f-1ubuntu2.2
1.1.1f-1ubuntu2.fips.7.2
1
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
openssl@1.1.1d-r2
1.1.1j-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.