StackRadar

CVE-2025-4565

High

Advisory

Published 16 Jun 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
172
of 17,781 indexed, latest versions
Container images
171
deployed by those charts
Fix available
2 of 2
affected packages

protobuf-python has a potential Denial of Service issue

Carried by container images the latest versions of 172 of 17,781 indexed charts deploy, on 171 images.

Affected packageAffected versionsFixed inImages
protobufpypi3.5.1, 3.5.2, 3.6.1, 3.7.0+47 more4.25.8, 5.29.5, 6.31.1160
protobufdeb2.6.1-1.3, 3.0.0-9.1ubuntu1, 3.0.0-9.1ubuntu1.1, 3.6.1.3-2ubuntu5+2 more2.6.1-1.3ubuntu0.1~esm4, 3.0.0-9.1ubuntu1.1+esm3, 3.6.1.3-2ubuntu5.2+esm2, 3.21.12-3+deb12u114
OSV records
GHSA-8qvm-5x2c-j2w7DEBIAN-CVE-2025-4565UBUNTU-CVE-2025-4565
Also known as
PYSEC-2026-1806, USN-7629-2

Charts affected

172 by stars
ChartLatestAffected imagesRadar Score
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
protobuf@4.25.3
4.25.8

Open the chart page →

11,367
rook-cephrookOfficialVerified publisher1.20.71 of 2See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
rook/ceph:v1.20.72f970c425617
protobuf@3.14.0
4.25.8

Open the chart page →

1,447
ceph-csi-cephfsceph-csiOfficialVerified publisher3.17.11 of 6See more

ceph-csi-cephfs ceph-csi 3.17.1

1 of the 6 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
protobuf@3.14.0
4.25.8

Open the chart page →

4,061
ceph-csi-rbdceph-csiOfficialVerified publisher3.17.11 of 6See more

ceph-csi-rbd ceph-csi 3.17.1

1 of the 6 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
protobuf@3.14.0
4.25.8

Open the chart page →

4,061
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
protobuf@4.21.4
4.25.8

Open the chart page →

9,145
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
protobuf@3.19.1
4.25.8

Open the chart page →

32,259
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
protobuf@5.29.2
5.29.5

Open the chart page →

10,622
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
protobuf@3.13.0
4.25.8

Open the chart page →

4,086
emissary-ingressdatawire7.1.8-ea1 of 1See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
datawire/emissary:2.0.2-ea9716efbdd24b
protobuf@3.13.0
4.25.8

Open the chart page →

4,918
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
protobuf@3.20.1
4.25.8

Open the chart page →

7,705
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
protobuf@3.20.2
4.25.8

Open the chart page →

5,987
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
protobuf@4.25.1
4.25.8

Open the chart page →

6,041
edge-stackdatawire7.1.8-ea1 of 2See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
datawire/aes:2.0.3-ea07f8fe4f4f8e
protobuf@3.13.0
4.25.8

Open the chart page →

5,173
milvusmilvus-helm5.0.271 of 4See more

milvus milvus-helm 5.0.27

1 of the 4 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
protobuf@3.20.3
4.25.8

Open the chart page →

10,670
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
protobuf@3.11.2
4.25.8

Open the chart page →

5,851
frigateblakeblackshear7.8.01 of 1See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
protobuf@5.27.3
5.29.5

Open the chart page →

3,004
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
openmined/syft-backend:0.9.5b72f74a68b32
protobuf@5.29.3
5.29.5

Open the chart page →

17,245
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.11.11da5c38c6a78
protobuf@3.19.6
4.25.8

Open the chart page →

6,168
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
protobuf@3.11.2
4.25.8

Open the chart page →

52,919
kamu-api-serverkamuVerified publisher0.89.01 of 1See more

kamu-api-server kamu 0.89.0

1 of the 1 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
protobuf@3.6.1
protobuf@3.6.1.3-2ubuntu5.2
4.25.8
3.6.1.3-2ubuntu5.2+esm2

Open the chart page →

6,307
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
protobuf@3.19.3
4.25.8

Open the chart page →

96,941
netboxstartechnicaVerified publisher5.1.01 of 4See more

netbox startechnica 5.1.0

1 of the 4 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
protobuf@4.25.3
4.25.8

Open the chart page →

1,650
alerta-webalerta-webVerified publisher0.1.121 of 2See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
hayk96/alerta-web:9.0.486377705e9e3
protobuf@3.20.3
4.25.8

Open the chart page →

3,569
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
protobuf@4.25.3
4.25.8

Open the chart page →

17,404
dyff-apidyff-apiVerified publisher0.57.41 of 1See more

dyff-api dyff-api 0.57.4

1 of the 1 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-api:0.57.4911acf4052e5
protobuf@3.20.2
4.25.8

Open the chart page →

1,314
edgelessdbedgelesssysVerified publisher0.3.21 of 1See more

edgelessdb edgelesssys 0.3.2

1 of the 1 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
protobuf@3.6.1.3-2ubuntu5
3.6.1.3-2ubuntu5.2+esm2

Open the chart page →

4,830
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
dpage/pgadmin4:7.537946e4f3e7b
protobuf@4.23.4
4.25.8

Open the chart page →

14,546
esphomegeek-cookbookVerified publisher8.4.21 of 1See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
esphome/esphome:1.18.03f51ec10e823
protobuf@3.15.8
4.25.8

Open the chart page →

3,717
mlflowgetindataVerified publisher0.1.21 of 1See more

mlflow getindata 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
protobuf@4.25.3
4.25.8

Open the chart page →

2,452
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
flagsmith/flagsmith-api:v2.6.0fd58556339a4
protobuf@3.14.0
4.25.8

Open the chart page →

6,868
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
protobuf@3.20.3
4.25.8

Open the chart page →

17,877
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
protobuf@4.25.3
4.25.8

Open the chart page →

2,388
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
ddosify/selfhosted_backend:3.2.93c11e3182652
protobuf@4.25.3
4.25.8

Open the chart page →

22,202
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
protobuf@3.17.3
4.25.8

Open the chart page →

10,730
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
protobuf@3.5.1
4.25.8

Open the chart page →

36,094
pgbenchcloudnative-pgVerified publisher0.1.01 of 1See more

pgbench cloudnative-pg 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
protobuf@4.21.9
4.25.8

Open the chart page →

2,713
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
protobuf@4.25.3
4.25.8

Open the chart page →

11,205
datadogdatadog-test2.4.231 of 2See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
datadog/agent:7.22.08f20e56b5311
protobuf@3.7.0
4.25.8

Open the chart page →

4,568
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
protobuf@3.13.0
4.25.8

Open the chart page →

7,984
archerydoubanVerified publisher0.4.31 of 6See more

archery douban 0.4.3

1 of the 6 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
hhyo/archery:v1.9.11aa41843419e
protobuf@4.21.7
4.25.8

Open the chart page →

5,853
genesis-generatorethereum-helm-chartsVerified publisher0.2.31 of 2See more

genesis-generator ethereum-helm-charts 0.2.3

1 of the 2 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
skylenet/ethereum-genesis-generator:latest210353ce7c89
protobuf@3.20.3
4.25.8

Open the chart page →

3,135
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
protobuf@5.29.3
5.29.5

Open the chart page →

1,965
deepstackgeek-cookbookVerified publisher1.5.21 of 2See more

deepstack geek-cookbook 1.5.2

1 of the 2 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
robmarkcole/deepstack-ui:latest410275726459
protobuf@3.17.3
4.25.8

Open the chart page →

5,305
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
protobuf@3.20.3
4.25.8

Open the chart page →

12,397
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
protobuf@4.25.2
4.25.8

Open the chart page →

15,712
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
protobuf@4.25.3
4.25.8

Open the chart page →

20,403
mlflow-controllermlflow-deployment-controller0.1.82 of 2See more

mlflow-controller mlflow-deployment-controller 0.1.8

2 of the 2 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
tachyongroup/mlflow-deployment-controller:mlflow-controller-0.1.87e79b9000856
protobuf@3.20.0
4.25.8
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
protobuf@4.22.0
4.25.8

Open the chart page →

8,957
mlflow-servermlflowserver0.1.91 of 3See more

mlflow-server mlflowserver 0.1.9

1 of the 3 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
buntha/mlflow:2.1.1154542cc3083
protobuf@4.21.12
4.25.8

Open the chart page →

5,804
iopsciencemeshVerified publisher0.4.01 of 2See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
protobuf@4.22.0
4.25.8

Open the chart page →

4,052
smarter-demosmarterOfficialVerified publisher0.1.52 of 7See more

smarter-demo smarter 0.1.5

2 of the 7 container images this version deploys carry CVE-2025-4565.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
protobuf@3.19.6
4.25.8
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
protobuf@3.19.6
4.25.8

Open the chart page →

45,832

Container images carrying it

171 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
opea/llm-tgi:1.00c25aab3f106
protobuf@4.25.5
4.25.8
4
cloudve/cloudlaunch-server:latest4a3d7fae90bb
protobuf@3.19.1
4.25.8
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
protobuf@2.6.1-1.3
2.6.1-1.3ubuntu0.1~esm4
3
amancevice/superset:0.35.212a0a9e66550
protobuf@3.11.2
4.25.8
2
cs3org/wopiserver:v9.4.202a9e78757b4
protobuf@4.22.0
4.25.8
2
datawire/aes:1.14.48588eafe6862
protobuf@3.13.0
4.25.8
2
larribas/mlflow:1.9.105ccb0b46bfb
protobuf@3.12.2
4.25.8
2
lncm/specter-desktop:v1.10.536eaa06f99f4
protobuf@3.17.3
4.25.8
2
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
protobuf@3.7.0
4.25.8
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
protobuf@3.5.2
4.25.8
2
opea/embedding-tei:1.05c9639de61c1
protobuf@4.25.5
4.25.8
2
opea/reranking-tei:1.0e48613afb191
protobuf@4.25.5
4.25.8
2
opea/retriever-redis:1.0eb746b263705
protobuf@4.25.5
4.25.8
2
weblate/weblate:4.2.2-169c160d37a3c
protobuf@3.13.0
4.25.8
2
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
protobuf@3.14.0
4.25.8
2
airbyte/manifest-server:7.23.73b3a670af168
protobuf@5.29.4
5.29.5
1
alerta/alerta-web:8.5.04786b9eaa606
protobuf@3.19.1
4.25.8
1
allegroai/clearml:2.0.0-613713ae38f7daf
protobuf@5.29.2
5.29.5
1
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
protobuf@3.20.3
4.25.8
1
amancevice/superset:0.28.1c8c04bfe3d66
protobuf@3.7.1
4.25.8
1
apache/airflow:2.8.4-python3.964e58748b6b9
protobuf@4.25.3
4.25.8
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
protobuf@4.25.4
4.25.8
1
apache/airflow:2.8.1e5560ad0b86e
protobuf@4.25.2
4.25.8
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
protobuf@3.20.3
4.25.8
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
protobuf@3.19.4
4.25.8
1
apachepulsar/pulsar:2.6.14db6ff0b4045
protobuf@3.13.0
4.25.8
1
apachepulsar/pulsar:3.0.79c9947de139d
protobuf@3.20.3
4.25.8
1
apachepulsar/pulsar:2.9.0d056c89b7131
protobuf@3.19.1
4.25.8
1
apachepulsar/pulsar:2.8.2d538416d5afe
protobuf@3.19.1
4.25.8
1
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
protobuf@3.17.3
4.25.8
1
assistiot/fl_local_operations_inference:latest0518b63a2e69
protobuf@4.22.3
4.25.8
1
assistiot/fl_training_collector:latest792715dd3084
protobuf@3.19.0
4.25.8
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
protobuf@4.22.1
protobuf@3.6.1.3-2ubuntu5.2
4.25.8
3.6.1.3-2ubuntu5.2+esm2
1
baserow/backend:1.31.1e0b3c8130b91
protobuf@4.25.3
4.25.8
1
baserow/baserow:1.30.1df0c42eb67e8
protobuf@4.25.3
4.25.8
1
behnambm/docker-sample:v1bd3ad88afff9
protobuf@4.21.12
4.25.8
1
buntha/mlflow:2.1.1154542cc3083
protobuf@4.21.12
4.25.8
1
cheyang/distributed-tf:1.6.046cc34755493
protobuf@3.5.1
4.25.8
1
codecov/self-hosted-api:24.4.10475cb1c3136
protobuf@4.24.3
4.25.8
1
codecov/self-hosted-worker:24.4.1837f546b479b
protobuf@4.24.3
4.25.8
1
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
protobuf@5.29.3
5.29.5
1
datadog/agent:7.22.08f20e56b5311
protobuf@3.7.0
4.25.8
1
datadog/agent:6aad9994de6a7
protobuf@3.17.3
4.25.8
1
datawire/aes:2.0.3-ea07f8fe4f4f8e
protobuf@3.13.0
4.25.8
1
datawire/aes:1.13.62beb65062c8b
protobuf@3.13.0
4.25.8
1
datawire/emissary:2.0.2-ea9716efbdd24b
protobuf@3.13.0
4.25.8
1
ddosify/selfhosted_backend:3.2.93c11e3182652
protobuf@4.25.3
4.25.8
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
protobuf@4.25.3
4.25.8
1
dpage/pgadmin4:8.418cd5711fc9a
protobuf@4.25.3
4.25.8
1
dpage/pgadmin4:7.537946e4f3e7b
protobuf@4.23.4
4.25.8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.