StackRadar

CVE-2024-27280

Critical

Advisory

Published 25 Mar 2024In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.024
83rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
57
of 17,781 indexed, latest versions
Container images
65
deployed by those charts
Fix available
3 of 4
affected packages

StringIO buffer overread vulnerability

Carried by container images the latest versions of 57 of 17,781 indexed charts deploy, on 65 images.

Affected packageAffected versionsFixed inImages
stringiogem0.0.1, 0.0.2, 0.1.0, 3.0.0+1 more3.0.1.163
ruby2.7deb2.7.0-5ubuntu1.4, 2.7.0-5ubuntu1.5, 2.7.0-5ubuntu1.82.7.0-5ubuntu1.146
ruby2.3deb2.3.1-2~16.04.5no fix listed2
ruby3.0deb3.0.2-7ubuntu2.43.0.2-7ubuntu2.71
OSV records
GHSA-v5h6-c2hv-hv3rUBUNTU-CVE-2024-27280
Also known as
USN-6853-1, USN-7734-1

Charts affected

57 by stars
ChartLatestAffected imagesRadar Score
puppetserverpuppetserver9.5.22 of 5See more

puppetserver puppetserver 9.5.2

2 of the 5 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
stringio@0.1.0
3.0.1.1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
ruby3.0@3.0.2-7ubuntu2.4
stringio@0.1.0
3.0.2-7ubuntu2.7
3.0.1.1

Open the chart page →

14,184
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
ceticasbl/pg-ldap-sync:latest6c0aa7567145
stringio@0.0.1
3.0.1.1

Open the chart page →

52,919
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
uffizzi/app:latest66e9e3937c60
stringio@0.1.0
3.0.1.1

Open the chart page →

19,337
efkcryptexlabsVerified publisher7.17.31 of 3See more

efk cryptexlabs 7.17.3

1 of the 3 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:v1.12.4-debian-elasticsearch7-1.0656423b5fabb
stringio@0.0.2
3.0.1.1

Open the chart page →

1,299
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
stringio@0.0.1
3.0.1.1

Open the chart page →

18,137
pact-brokeralmorgvVerified publisher0.1.01 of 1See more

pact-broker almorgv 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
pactfoundation/pact-broker:2.79.1.112861b0bd4d9
stringio@0.0.2
3.0.1.1

Open the chart page →

4,995
mastodondefault-ghVerified publisher0.3.11 of 3See more

mastodon default-gh 0.3.1

1 of the 3 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
stringio@3.0.1
3.0.1.1

Open the chart page →

5,056
zammaddevplayer0Verified publisher4.0.51 of 4See more

zammad devplayer0 4.0.5

1 of the 4 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
zammad/zammad-docker-compose:zammad-4.1.0-312808e2dfa810
stringio@0.0.2
3.0.1.1

Open the chart page →

6,110
gollumgeek-cookbookVerified publisher3.4.21 of 3See more

gollum geek-cookbook 3.4.2

1 of the 3 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
gollumorg/gollum:latest7cd5305a3cf7
stringio@0.1.0
3.0.1.1

Open the chart page →

4,629
docker-registry-browsergmelilloVerified publisher0.1.21 of 1See more

docker-registry-browser gmelillo 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
klausmeyer/docker-registry-browser:1.3.5430a440d95af
stringio@0.1.0
3.0.1.1

Open the chart page →

4,108
openprojecthomeenterpriseinc0.5.01 of 1See more

openproject homeenterpriseinc 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
openproject/community:12.0.2734743d11094
stringio@0.1.0
3.0.1.1

Open the chart page →

6,810
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
ruby2.7@2.7.0-5ubuntu1.5
stringio@0.1.0
2.7.0-5ubuntu1.14
3.0.1.1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
ruby2.7@2.7.0-5ubuntu1.4
stringio@0.1.0
2.7.0-5ubuntu1.14
3.0.1.1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
ruby2.7@2.7.0-5ubuntu1.5
stringio@0.1.0
2.7.0-5ubuntu1.14
3.0.1.1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
ruby2.7@2.7.0-5ubuntu1.5
stringio@0.1.0
2.7.0-5ubuntu1.14
3.0.1.1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
ruby2.7@2.7.0-5ubuntu1.5
stringio@0.1.0
2.7.0-5ubuntu1.14
3.0.1.1

Open the chart page →

113,791
bookinfobasictechno0.1.01 of 6See more

bookinfo basictechno 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
istio/examples-bookinfo-details-v1:1.17.02b081e3c86dd
stringio@0.1.0
3.0.1.1

Open the chart page →

20,671
istio-bookinfobookinfo1.2.21 of 6See more

istio-bookinfo bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
istio/examples-bookinfo-details-v1:1.15.0fce0bcbff0be
stringio@0.0.2
3.0.1.1

Open the chart page →

18,980
fluentdbryanalves0.1.01 of 1See more

fluentd bryanalves 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
bryanalves/fluentd:0.5d3605be4b178
stringio@0.0.1
3.0.1.1

Open the chart page →

723
honeywell-exporterbryanalves0.1.11 of 1See more

honeywell-exporter bryanalves 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
stringio@0.0.1
3.0.1.1

Open the chart page →

5,437
smart-exporterbryanalves0.2.21 of 1See more

smart-exporter bryanalves 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
bryanalves/smart_exporter:0.2af47dfbb9413
stringio@0.0.1
3.0.1.1

Open the chart page →

4,131
prometheus-puppetdb-sdcamptocamp38.0.21 of 2See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
puppet/puppet-agent:7.14.00b6fd9a6b7da
stringio@0.1.0
3.0.1.1

Open the chart page →

6,143
puppetservercamptocamp31.0.11 of 2See more

puppetserver camptocamp3 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
stringio@3.0.0
3.0.1.1

Open the chart page →

5,886
showoffcamptocamp31.0.01 of 1See more

showoff camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
binford2k/showoff:0.20.2a64937052ce7
stringio@0.0.1
3.0.1.1

Open the chart page →

1,584
pact-brokercloud-native-toolkit0.3.01 of 1See more

pact-broker cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
pactfoundation/pact-broker:2.101.0.0a3021fc42834
stringio@0.1.0
3.0.1.1

Open the chart page →

2,814
fluentd-kubernetes-awscloudposse0.2.11 of 2See more

fluentd-kubernetes-aws cloudposse 0.2.1

1 of the 2 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:v1.4.2-debian-elasticsearch-1.1ce4885865850
stringio@0.0.2
3.0.1.1

Open the chart page →

1,305
coralogix-fluentddevtron1.0.31 of 1See more

coralogix-fluentd devtron 1.0.3

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
coralogixrepo/fluentd-coralogix-image:1.1.6b976e0412424
stringio@0.0.1
3.0.1.1

Open the chart page →

750
coralogix-fluentddevtron-labs1.0.31 of 1See more

coralogix-fluentd devtron-labs 1.0.3

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
coralogixrepo/fluentd-coralogix-image:1.1.6b976e0412424
stringio@0.0.1
3.0.1.1

Open the chart page →

750
yelbfairwinds-incubator0.1.11 of 5See more

yelb fairwinds-incubator 0.1.1

1 of the 5 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
quay.io/fairwinds/yelb-appserver:v0.6.0fae21f06131f
stringio@0.1.0
3.0.1.1

Open the chart page →

5,089
icinga2g0dscookie0.2.01 of 1See more

icinga2 g0dscookie 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
stringio@0.1.0
3.0.1.1

Open the chart page →

4,428
docker-registry-browsergtaylor0.4.41 of 1See more

docker-registry-browser gtaylor 0.4.4

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
klausmeyer/docker-registry-browser:1.4.0bdc4c6b8595b
stringio@3.0.0
3.0.1.1

Open the chart page →

3,564
gwangju_2-3gwangju2-30.1.01 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

1 of the 5 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:v1.10.3-debian-cloudwatch-1.019a8f0662241
stringio@0.0.2
3.0.1.1

Open the chart page →

6,491
fluentdhelm0.2.161 of 1See more

fluentd helm 0.2.16

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:v1.14.0-debian-elasticsearch7-1.03933cae61054
stringio@0.0.2
3.0.1.1

Open the chart page →

1,217
coralogix-fluentdhelmtest1.0.41 of 1See more

coralogix-fluentd helmtest 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
coralogixrepo/fluentd-coralogix-image:1.1.6b976e0412424
stringio@0.0.1
3.0.1.1

Open the chart page →

750
istio-bookinfoistio-bookinfo1.2.21 of 6See more

istio-bookinfo istio-bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
istio/examples-bookinfo-details-v1:1.15.0fce0bcbff0be
stringio@0.0.2
3.0.1.1

Open the chart page →

18,980
fluentd-elasticsearchkfirfer13.9.11 of 1See more

fluentd-elasticsearch kfirfer 13.9.1

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
quay.io/fluentd_elasticsearch/fluentd:v4.2.399079df58561
stringio@3.0.1
3.0.1.1

Open the chart page →

1,178
gitlabkubesphereVerified publisher4.2.36 of 17See more

gitlab kubesphere 4.2.3

6 of the 17 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
stringio@0.0.2
3.0.1.1
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
stringio@0.0.2
3.0.1.1
mirrorgitlabcontainers/gitlab-sidekiq-ce:v13.2.294d1431683fa
stringio@0.0.2
3.0.1.1
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
stringio@0.0.2
3.0.1.1
mirrorgitlabcontainers/gitlab-webservice-ce:v13.2.230393f990f5c
stringio@0.0.2
3.0.1.1
mirrorgitlabcontainers/gitlab-workhorse-ce:v13.2.2a6d7bf42805a
stringio@0.0.2
3.0.1.1

Open the chart page →

38,133
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-details-v1:1.13.0108d022f64f0
stringio@0.0.2
3.0.1.1

Open the chart page →

9,378
lm-logslogicmonitorVerified publisher0.3.51 of 1See more

lm-logs logicmonitor 0.3.5

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
logicmonitor/lm-logs-k8s-fluentd:1.0.55ac21b3f1572
stringio@3.0.1
3.0.1.1

Open the chart page →

1,029
fluentd-papertrailmozilla0.2.21 of 1See more

fluentd-papertrail mozilla 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:papertrail9c209835eea1
stringio@0.0.1
3.0.1.1

Open the chart page →

1,001
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
stringio@3.0.1
3.0.1.1

Open the chart page →

12,791
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
stringio@3.0.1
3.0.1.1

Open the chart page →

12,791
betydbncsaVerified publisher0.6.11 of 4See more

betydb ncsa 0.6.1

1 of the 4 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
pecan/bety:5.4.1f825d480cd62
stringio@0.0.2
3.0.1.1

Open the chart page →

9,542
pecanncsaVerified publisher0.6.21 of 15See more

pecan ncsa 0.6.2

1 of the 15 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
pecan/bety:5.4.1f825d480cd62
stringio@0.0.2
3.0.1.1

Open the chart page →

14,154
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
ruby2.3@2.3.1-2~16.04.5
no fix listed

Open the chart page →

88,546
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
ruby2.3@2.3.1-2~16.04.5
no fix listed

Open the chart page →

38,865
pact-brokerqamatic0.1.01 of 2See more

pact-broker qamatic 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
pactfoundation/pact-broker:2.32.0-2062d6c710099
stringio@0.0.2
3.0.1.1

Open the chart page →

3,533
cf-operatorquarks2.3.0+0.g27a91cdf2 of 2See more

cf-operator quarks 2.3.0+0.g27a91cdf

2 of the 2 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
cfcontainerization/cf-operator:v2.3.0-0.g27a91cdf82fa261c18a8
stringio@0.0.1
3.0.1.1
cfcontainerization/quarks-job:v0.0.0-0.g70ae34b58fb1c173a46
stringio@0.0.1
3.0.1.1

Open the chart page →

11,942
quarksquarks7.0.1+0.g5396b114 of 5See more

quarks quarks 7.0.1+0.g5396b11

4 of the 5 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
ghcr.io/cloudfoundry-incubator/quarks-job:v1.0.213760eee87f839
stringio@0.0.1
3.0.1.1
ghcr.io/cloudfoundry-incubator/quarks-operator:v7.0.1-0.g5396b116a1432b0d503
stringio@0.0.1
3.0.1.1
ghcr.io/cloudfoundry-incubator/quarks-secret:v1.0.754f059af4de8ed
stringio@0.0.1
3.0.1.1
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1308-g6a8b2220e24a9e0a21b6
stringio@0.0.1
3.0.1.1

Open the chart page →

18,197
quarks-jobquarks0.0.124-g03faac81 of 1See more

quarks-job quarks 0.0.124-g03faac8

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
cfcontainerization/quarks-job:v0.0.124-g03faac87366b11c5fa5
stringio@0.0.1
3.0.1.1

Open the chart page →

1,804
quarks-secretquarks0.0.677-ga060bb61 of 1See more

quarks-secret quarks 0.0.677-ga060bb6

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
cfcontainerization/quarks-secret:v0.0.677-ga060bb643131dbc0c8f
stringio@0.0.1
3.0.1.1

Open the chart page →

1,814
quarks-statefulsetquarks0.0.1304-g4b4f2ac51 of 1See more

quarks-statefulset quarks 0.0.1304-g4b4f2ac5

1 of the 1 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1304-g4b4f2ac5c7c70b527255
stringio@0.0.1
3.0.1.1

Open the chart page →

4,010
bookinforgnu1.0.01 of 7See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
istio/examples-bookinfo-details-v1:1.14.04c3379923c8a
stringio@0.0.2
3.0.1.1

Open the chart page →

20,462
istio-bookinforgnu1.0.21 of 7See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2024-27280.

Container imageDigestPackageFixed in
istio/examples-bookinfo-details-v1:1.14.04c3379923c8a
stringio@0.0.2
3.0.1.1

Open the chart page →

20,462

Container images carrying it

65 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1308-g6a8b2220e24a9e0a21b6
stringio@0.0.1
3.0.1.1
1
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
stringio@0.1.0
3.0.1.1
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
ruby2.7@2.7.0-5ubuntu1.5
stringio@0.1.0
2.7.0-5ubuntu1.14
3.0.1.1
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
ruby2.7@2.7.0-5ubuntu1.4
stringio@0.1.0
2.7.0-5ubuntu1.14
3.0.1.1
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
ruby2.7@2.7.0-5ubuntu1.5
stringio@0.1.0
2.7.0-5ubuntu1.14
3.0.1.1
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
ruby2.7@2.7.0-5ubuntu1.5
stringio@0.1.0
2.7.0-5ubuntu1.14
3.0.1.1
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
ruby2.7@2.7.0-5ubuntu1.5
stringio@0.1.0
2.7.0-5ubuntu1.14
3.0.1.1
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
stringio@3.0.1
3.0.1.1
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
stringio@3.0.1
3.0.1.1
1
ghcr.io/simoncaron/velero-notifications:1.0.0d058963d4de7
stringio@0.1.0
3.0.1.1
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
stringio@0.1.0
3.0.1.1
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
ruby3.0@3.0.2-7ubuntu2.4
stringio@0.1.0
3.0.2-7ubuntu2.7
3.0.1.1
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
stringio@3.0.0
3.0.1.1
1
quay.io/fairwinds/yelb-appserver:v0.6.0fae21f06131f
stringio@0.1.0
3.0.1.1
1
quay.io/fluentd_elasticsearch/fluentd:v4.2.399079df58561
stringio@3.0.1
3.0.1.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.