StackRadar

CVE-2025-0913

Unscored

Advisory

Published 11 Jun 2025In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,825
of 17,805 indexed, latest versions
Container images
3,422
deployed by those charts
Fix available
1 of 1
affected package

Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

Carried by container images the latest versions of 2,825 of 17,805 indexed charts deploy, on 3,422 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+154 more1.23.103,422
OSV records
GO-2025-3750
Also known as
BIT-golang-2025-0913

Charts affected

2,825 by stars
ChartLatestAffected imagesRadar Score
kiamuswitch6.1.21 of 1See more

kiam uswitch 6.1.2

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
quay.io/uswitch/kiam:v4.0be3a5846922d
stdlib@go1.13.8
1.23.10

Open the chart page →

2,972
utho-app-operator-chartutho-operatorVerified publisher0.1.61 of 2See more

utho-app-operator-chart utho-operator 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
utho/utho-app-operator:0.1.46e8a690e8b7a
stdlib@go1.22.8
1.23.10

Open the chart page →

491
gohttpserverutkuozdemirVerified publisher0.2.01 of 1See more

gohttpserver utkuozdemir 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
codeskyblue/gohttpserver:latestcaa862590e34
stdlib@go1.16.3
1.23.10

Open the chart page →

1,899
transmission-exporterutkuozdemirVerified publisher1.1.01 of 1See more

transmission-exporter utkuozdemir 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
metalmatze/transmission-exporter:0.3.090d6acb6d47d
stdlib@go1.13
1.23.10

Open the chart page →

1,647
proxyv2flyVerified publisher0.0.61 of 1See more

proxy v2fly 0.0.6

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
v2fly/v2fly-core:latestd06727b221fe
stdlib@go1.24.2
1.23.10

Open the chart page →

1,436
openldap-havcnngrVerified publisher1.0.01 of 3See more

openldap-ha vcnngr 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
osixia/openldap:1.5.018742e9c449c
stdlib@go1.15.5
1.23.10

Open the chart page →

5,517
verhuis-serviceverhuis-service1.0.01 of 3See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
stdlib@go1.13.10
1.23.10

Open the chart page →

7,521
verzoekconversieserviceverzoekconversieservice1.0.01 of 3See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
stdlib@go1.13.10
1.23.10

Open the chart page →

7,538
verzoekregistratiecomponentverzoekregistratiecomponent1.1.01 of 4See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
stdlib@go1.13.10
1.23.10

Open the chart page →

7,441
verzoektypecatalogusverzoektypecatalogus1.1.01 of 4See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
stdlib@go1.13.10
1.23.10

Open the chart page →

7,441
homarrvhdirkVerified publisher0.1.51 of 1See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:lateste103abadfb52
stdlib@go1.22.5
1.23.10

Open the chart page →

2,799
scrutinyvhdirkVerified publisher0.1.31 of 1See more

scrutiny vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
stdlib@go1.20.14
1.23.10

Open the chart page →

4,438
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
stdlib@go1.21.7
1.23.10

Open the chart page →

69,328
kube-monitoring-telegram-botviento-repository1.0.01 of 1See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
stdlib@go1.16.4
1.23.10

Open the chart page →

7,905
vineyard-operatorvineyardVerified publisher0.24.22 of 2See more

vineyard-operator vineyard 0.24.2

2 of the 2 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
vineyardcloudnative/vineyard-operator:latest9d419aa18faa
stdlib@go1.19.13
1.23.10
ghcr.io/v6d-io/v6d/kube-rbac-proxy:v0.13.0a2523c532c0c
stdlib@go1.18.3
1.23.10

Open the chart page →

4,575
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
stdlib@go1.17.8
1.23.10

Open the chart page →

7,779
vm-console-proxyvm-console-proxyVerified publisher0.2.01 of 1See more

vm-console-proxy vm-console-proxy 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
quay.io/kubevirt/vm-console-proxy:v0.8.08d6b4b6e99bd
stdlib@go1.22.4
1.23.10

Open the chart page →

645
go-devvoid-xmh1.0.11 of 1See more

go-dev void-xmh 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
voidxmh/golang:1.19-alpine-dev423c6195fab2
stdlib@go1.19
1.23.10

Open the chart page →

1,154
volantmqvolantmq0.1.21 of 1See more

volantmq volantmq 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
volantmq/volantmq:v0.4.0-rc.69bfe7857ebc3
stdlib@go1.13.6
1.23.10

Open the chart page →

2,551
vpa-managervpa-managerVerified publisher0.4.91 of 1See more

vpa-manager vpa-manager 0.4.9

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
quay.io/jcluppnow/vpa-manager:0.6.4e459d2fba277
stdlib@go1.22.7
1.23.10

Open the chart page →

491
cert-manager-webhook-vultrvultrVerified publisher1.0.01 of 1See more

cert-manager-webhook-vultr vultr 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
vultr/cert-manager-webhook-vultr:v0.1.0541c3e0aec58
stdlib@go1.16.3
1.23.10

Open the chart page →

2,508
vultr-csivultrVerified publisher2.0.01 of 4See more

vultr-csi vultr 2.0.0

1 of the 4 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
vultr/vultr-csi:v0.3.041d26735d437
stdlib@go1.16.8
1.23.10

Open the chart page →

2,354
websitewaldo-visionVerified publisher0.33.01 of 2See more

website waldo-vision 0.33.0

1 of the 2 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
ghcr.io/waldo-vision/migrate:v0.3.6ae31923312ed
stdlib@go1.20.2
1.23.10

Open the chart page →

3,479
kongwallarmVerified publisher4.6.33 of 7See more

kong wallarm 4.6.3

3 of the 7 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
wallarm/ingress-python:4.6.0-15cb2ae08b40f
stdlib@go1.18.2
1.23.10
wallarm/ingress-ruby:4.6.0-1aecdb35c4def
stdlib@go1.18.3
1.23.10
wallarm/kong-kubernetes-ingress-controller:2.8b55ff6cecbd5
stdlib@go1.19.4
1.23.10

Open the chart page →

74,809
kong-previewwallarmVerified publisher4.2.32 of 5See more

kong-preview wallarm 4.2.3

2 of the 5 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
kong/kubernetes-ingress-controller:2.1.160e4102ab2da
stdlib@go1.17.5
1.23.10
wallarm/ingress-ruby:4.2.1-195ea2632326c
stdlib@go1.18.3
1.23.10

Open the chart page →

2,907
wallarm-ingress-rcwallarmVerified publisher4.8.42 of 2See more

wallarm-ingress-rc wallarm 4.8.4

2 of the 2 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
wallarm/ingress-controller:4.8.0-1a591b9c91570
stdlib@go1.20.5
1.23.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230407543c40fd0939
stdlib@go1.20.1
1.23.10

Open the chart page →

2,635
wallarm-node-nextwallarmVerified publisher0.5.32 of 2See more

wallarm-node-next wallarm 0.5.3

2 of the 2 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
wallarm/node-helpers:5.0.2-1097cadc42336
stdlib@go1.22.7
1.23.10
wallarm/node-next:0.5.24314f3d2b918
stdlib@go1.22.7
1.23.10

Open the chart page →

2,410
wallarm-oobwallarmVerified publisher0.23.01 of 3See more

wallarm-oob wallarm 0.23.0

1 of the 3 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
wallarm/ebpf-agent:0.11.0-rc0c8920e60c726
stdlib@go1.22.1
1.23.10

Open the chart page →

2,842
consulwarjiang1.3.02 of 2See more

consul warjiang 1.3.0

2 of the 2 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
hashicorp/consul:1.17.0712fe02d2f84
stdlib@go1.20.10
1.23.10
hashicorp/consul-k8s-control-plane:1.3.00e4452f0f265
stdlib@go1.20.10
1.23.10

Open the chart page →

4,102
eth-validatorwateim1.4.51 of 3See more

eth-validator wateim 1.4.5

1 of the 3 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
wateim/lighthouse-launch:latest2520149ee574
stdlib@go1.23.8
1.23.10

Open the chart page →

5,142
prometheus-storage-adapterwavefront0.1.61 of 2See more

prometheus-storage-adapter wavefront 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
wavefronthq/prometheus-storage-adapter:latestded77b38c7c6
stdlib@go1.18
1.23.10

Open the chart page →

1,285
wavefront-hpa-adapterwavefront0.2.101 of 1See more

wavefront-hpa-adapter wavefront 0.2.10

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
wavefronthq/wavefront-hpa-adapter:0.9.12af5fef9a4768
stdlib@go1.18
1.23.10

Open the chart page →

1,692
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.45a065930682d
stdlib@go1.14.12
1.23.10

Open the chart page →

5,616
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
stdlib@go1.14.12
1.23.10

Open the chart page →

11,208
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
stdlib@go1.20.1
1.23.10

Open the chart page →

6,302
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
stdlib@go1.19.12
1.23.10

Open the chart page →

9,395
myweatherhelmwebapp11.3.501 of 8See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
stdlib@go1.22.2
1.23.10

Open the chart page →

9,329
myweatherhelm-schedulingwebapp11.3.921 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
stdlib@go1.22.2
1.23.10

Open the chart page →

9,329
azure-janitorwebdevopsVerified publisher1.0.131 of 1See more

azure-janitor webdevops 1.0.13

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
webdevops/azure-janitor:24.9.02446baee7b69
stdlib@go1.23.1
1.23.10

Open the chart page →

802
azure-keyvault-exporterwebdevopsVerified publisher1.0.121 of 1See more

azure-keyvault-exporter webdevops 1.0.12

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
webdevops/azure-keyvault-exporter:24.9.1f333704ecd60
stdlib@go1.23.1
1.23.10

Open the chart page →

801
azure-resourcegraph-exporterwebdevopsVerified publisher1.1.51 of 1See more

azure-resourcegraph-exporter webdevops 1.1.5

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
webdevops/azure-resourcegraph-exporter:24.9.0381136dda026
stdlib@go1.23.1
1.23.10

Open the chart page →

786
azure-scheduledevents-managerwebdevopsVerified publisher1.0.171 of 1See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
stdlib@go1.22.5
1.23.10

Open the chart page →

1,124
kube-pool-managerwebdevopsVerified publisher1.0.161 of 1See more

kube-pool-manager webdevops 1.0.16

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
webdevops/kube-pool-manager:24.9.04fad7e14ad67
stdlib@go1.23.1
1.23.10

Open the chart page →

499
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
stdlib@go1.21.12
1.23.10

Open the chart page →

28,824
generic-webhookwebhooks0.1.11 of 1See more

generic-webhook webhooks 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
ghcr.io/thecatlady/webhook:2.8.0f04718704dab
stdlib@go1.20.1
1.23.10

Open the chart page →

2,031
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
stdlib@go1.13.10
1.23.10

Open the chart page →

7,563
ambassadorwener6.9.51 of 2See more

ambassador wener 6.9.5

1 of the 2 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
stdlib@go1.15
1.23.10

Open the chart page →

4,128
argo-cdwener10.9.21 of 3See more

argo-cd wener 10.9.2

1 of the 3 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
stdlib@go1.24.0
1.23.10

Open the chart page →

3,042
athens-proxywener0.5.21 of 2See more

athens-proxy wener 0.5.2

1 of the 2 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
stdlib@go1.13.10
1.23.10

Open the chart page →

5,009
cadencewener0.23.02 of 5See more

cadence wener 0.23.0

2 of the 5 container images this version deploys carry CVE-2025-0913.

Container imageDigestPackageFixed in
ubercadence/server:0.23.22ac5491d13bb
stdlib@go1.13.6
1.23.10
ghcr.io/banzaicloud/tcheck:latest0147d87c2019
stdlib@go1.15.2
1.23.10

Open the chart page →

10,151

Container images carrying it

3,422 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/influxdb:2.0.8ba10ac9ba17a
stdlib@go1.16.5
1.23.10
1
library/influxdb:2.3.0-alpined7f5dd5f70e2
stdlib@go1.18.3
1.23.10
1
library/kapacitor:1.6.37232f6388a4d
stdlib@go1.17.2
1.23.10
1
library/logstash:7.17.817a4f64e9cf5
stdlib@go1.19.3
1.23.10
1
library/mariadb:10.7.307e06f2e7ae9
stdlib@go1.16.7
1.23.10
1
library/mariadb:10.11.21c33370a599c
stdlib@go1.16.7
1.23.10
1
library/mariadb:10.422edfe1c7834
stdlib@go1.18.2
1.23.10
1
library/mariadb:10.8.2-focal490f01279be1
stdlib@go1.16.7
1.23.10
1
library/mariadb:12.0.25b6a1eac15b8
stdlib@go1.18.2
1.23.10
1
library/mariadb:10.6.218a16204dc96c
stdlib@go1.18.2
1.23.10
1
library/mariadb:10.79a48ac9f196f
stdlib@go1.16.7
1.23.10
1
library/mariadb:10.10.2bfc25a68e113
stdlib@go1.16.7
1.23.10
1
library/mariadb:10.6.15e22328f4d714
stdlib@go1.16.7
1.23.10
1
library/mariadb:10.9.4fbb8456ebdb1
stdlib@go1.16.7
1.23.10
1
library/mariadb:11.7.2fcc7fcd7114a
stdlib@go1.18.2
1.23.10
1
library/mongo:7.0.140032d2ca20db
stdlib@go1.21.12
1.23.10
1
library/mongo:4.4.1305678ae4e5e1
stdlib@go1.16.7
1.23.10
1
library/mongo:5.0.32-focal3b6c281e1c08
stdlib@go1.24.0
1.23.10
1
library/mongo:4.4-bionic3d0e6df9fd5b
stdlib@go1.16.3
1.23.10
1
library/mongo:5.0.14-focal50cae5081ab4
stdlib@go1.17.10
1.23.10
1
library/mongo:6.0.12646902910d6a
stdlib@go1.18.2
1.23.10
1
library/mongo:4.2699d652ed674
stdlib@go1.18.2
1.23.10
1
library/mongo:6.0.271a63fc2438e
stdlib@go1.17.10
1.23.10
1
library/mongo:5.0.217c81758cb295
stdlib@go1.19.12
1.23.10
1
library/mongo:7.0.28-jammy88785f6f665a
stdlib@go1.24.0
1.23.10
1
library/mongo:7.0.12ae1cf99fa7bf
stdlib@go1.21.12
1.23.10
1
library/mongo:4.4.18d23ec07162ca
stdlib@go1.17.10
1.23.10
1
library/mongo:8.0.11dca8d11fe467
stdlib@go1.23.8
1.23.10
1
library/mysql:8.4.3106d5197fd8e
stdlib@go1.18.2
1.23.10
1
library/mysql:8.0.303c1aab708f6e
stdlib@go1.16.7
1.23.10
1
library/mysql:9.0.192dc86967801
stdlib@go1.18.2
1.23.10
1
library/mysql:8.0.41bf577825b52a
stdlib@go1.18.2
1.23.10
1
library/mysql:8.0.39ccb8f749bb5e
stdlib@go1.18.2
1.23.10
1
library/mysql:8.0.40d58ac93387f6
stdlib@go1.18.2
1.23.10
1
library/nats:2.10.17-alpineb7752304692b
stdlib@go1.22.4
1.23.10
1
library/nats:2.10.12-alpinebca70839d953
stdlib@go1.21.8
1.23.10
1
library/nats:2.11.4c8cd23806eef
stdlib@go1.24.3
1.23.10
1
library/nats:2.9.11-alpineccbe811b8575
stdlib@go1.19.4
1.23.10
1
library/nats:2.9-alpined402af4147fc
stdlib@go1.20.14
1.23.10
1
library/nats:2.9.20-alpined6c6ae7df4a0
stdlib@go1.19.11
1.23.10
1
library/nats:2.9.6-alpine3.16f576cdc17cc3
stdlib@go1.19.3
1.23.10
1
library/nats-streaming:0.25.60ad6861379c9
stdlib@go1.20.11
1.23.10
1
library/nats-streaming:0.25.5ced93c701875
stdlib@go1.19.10
1.23.10
1
library/postgres:13.703652c675ae1
stdlib@go1.16.7
1.23.10
1
library/postgres:14.32d1e636f0778
stdlib@go1.16.7
1.23.10
1
library/postgres:17.4304ab8135187
stdlib@go1.18.2
1.23.10
1
library/postgres:16.6557fea37a744
stdlib@go1.18.2
1.23.10
1
library/postgres:13.11-bullseye5c265bf1fd30
stdlib@go1.18.2
1.23.10
1
library/postgres:17.5-alpine6567bca8d7bc
stdlib@go1.18.2
1.23.10
1
library/postgres:17.4-alpine7062a2109c4b
stdlib@go1.18.2
1.23.10
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.