StackRadar

CVE-2025-5222

High

Advisory

Published 27 May 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.0
base score, highest
EPSS
0.004
36th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
841
of 17,787 indexed, latest versions
Container images
885
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: icu security update

Carried by container images the latest versions of 841 of 17,787 indexed charts deploy, on 885 images.

Affected packageAffected versionsFixed inImages
icudeb55.1-7ubuntu0.2, 55.1-7ubuntu0.3, 55.1-7ubuntu0.4, 55.1-7ubuntu0.5+12 more67.1-7+deb11u1, 72.1-3+deb12u1838
icuapk73.2-r2, 74.1-r0, 74.2-r0, 76.1-r074.1-r1, 74.2-r1, 76.1-r144
icurpm67.1-9.el90:67.1-10.el9_63
OSV records
ALPINE-CVE-2025-5222DEBIAN-CVE-2025-5222RHSA-2025:12083UBUNTU-CVE-2025-5222DLA-4217-1
Also known as
DSA-5951-1, RHSA-2025:12332

Charts affected

841 by stars
ChartLatestAffected imagesRadar Score
apachedevops0.1.02 of 4See more

apache devops 0.1.0

2 of the 4 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.0ae6dadd9cf3c
icu@67.1-7
67.1-7+deb11u1
ghcr.io/codingducksrl/laravel:8.15be52524664c
icu@70.1-2
no fix listed

Open the chart page →

30,150
laraveldevops0.10.32 of 4See more

laravel devops 0.10.3

2 of the 4 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.0ae6dadd9cf3c
icu@67.1-7
67.1-7+deb11u1
ghcr.io/codingducksrl/laravel:8.15be52524664c
icu@70.1-2
no fix listed

Open the chart page →

29,151
wordpressdevops0.12.02 of 4See more

wordpress devops 0.12.0

2 of the 4 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.0ae6dadd9cf3c
icu@67.1-7
67.1-7+deb11u1
ghcr.io/codingducksrl/wordpress:6.0.23113c0960507
icu@67.1-7
67.1-7+deb11u1

Open the chart page →

13,036
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
icu@72.1-3
72.1-3+deb12u1

Open the chart page →

9,152
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
icu@70.1-2
no fix listed

Open the chart page →

12,999
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
icu@72.1-3
72.1-3+deb12u1

Open the chart page →

66,542
migration-incluster-cddevtron0.10.01 of 1See more

migration-incluster-cd devtron 0.10.0

1 of the 1 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
icu@72.1-3
72.1-3+deb12u1

Open the chart page →

3,699
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
icu@72.1-3
72.1-3+deb12u1

Open the chart page →

9,152
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
icu@70.1-2
no fix listed

Open the chart page →

12,999
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
icu@72.1-3
72.1-3+deb12u1

Open the chart page →

66,542
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
icu@72.1-3
72.1-3+deb12u1

Open the chart page →

31,447
migration-incluster-cddevtron-labs0.10.01 of 1See more

migration-incluster-cd devtron-labs 0.10.0

1 of the 1 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
icu@72.1-3
72.1-3+deb12u1

Open the chart page →

3,699
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.01 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
oscarsotosanchez/weatherservice:v1.0911ec961d10b
icu@60.2-3ubuntu3.1
no fix listed

Open the chart page →

27,608
dial-admindialVerified publisher0.18.01 of 3See more

dial-admin dial 0.18.0

1 of the 3 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.0-debian-12-r1285198aae0aed
icu@72.1-3
72.1-3+deb12u1

Open the chart page →

4,053
difydify1.0.02 of 4See more

dify dify 1.0.0

2 of the 4 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
icu@72.1-3
72.1-3+deb12u1
langgenius/dify-plugin-daemon:main-localda995c129e2f
icu@74.2-1ubuntu3.1
no fix listed

Open the chart page →

19,063
direktivdirektivVerified publisher0.10.01 of 6See more

direktiv direktiv 0.10.0

1 of the 6 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
icu@74.2-r0
74.2-r1

Open the chart page →

3,470
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
postgis/postgis:15-3.3a2fc46b52819
icu@67.1-7
67.1-7+deb11u1

Open the chart page →

7,480
domainmoddjjudas21Verified publisher1.0.01 of 1See more

domainmod djjudas21 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
domainmod/domainmod:4.23.04017bfe4c597
icu@72.1-3
72.1-3+deb12u1

Open the chart page →

7,167
ownclouddjjudas21Verified publisher0.3.232 of 3See more

owncloud djjudas21 0.3.23

2 of the 3 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.3.2-debian-12-r9320c70dfd914
icu@72.1-3
72.1-3+deb12u1
owncloud/server:10.16.3b3f9efdcd7f7
icu@70.1-2
no fix listed

Open the chart page →

10,129
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
icu@74.2-1ubuntu3
no fix listed

Open the chart page →

17,053
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
icu@72.1-3
72.1-3+deb12u1

Open the chart page →

13,031
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
icu@70.1-2
no fix listed

Open the chart page →

24,975
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
icu@67.1-7
67.1-7+deb11u1

Open the chart page →

4,550
tinyproxy-exporterdoubanVerified publisher0.1.21 of 1See more

tinyproxy-exporter douban 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
icu@67.1-7
67.1-7+deb11u1

Open the chart page →

3,421
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.01 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
oscarsotosanchez/weatherservice:v1.0911ec961d10b
icu@60.2-3ubuntu3.1
no fix listed

Open the chart page →

24,714
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
icu@70.1-2
no fix listed

Open the chart page →

30,759
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
icu@72.1-3
72.1-3+deb12u1

Open the chart page →

9,251
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-nginx:latestd785c893096c
icu@67.1-7
67.1-7+deb11u1

Open the chart page →

7,255
idmeclipse-aeriosVerified publisher2.0.01 of 2See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
library/postgres:16.4e62fbf9d3e2b
icu@72.1-3
72.1-3+deb12u1

Open the chart page →

4,593
marblerun-coordinatoredgelesssysVerified publisher0.5.01 of 1See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
icu@60.2-3ubuntu3.1
no fix listed

Open the chart page →

10,995
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-nginx:latest38900bc76ee0
icu@67.1-7
67.1-7+deb11u1

Open the chart page →

7,327
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
icu@66.1-2ubuntu2
no fix listed

Open the chart page →

25,239
sftpemberstackVerified publisher5.1.711 of 1See more

sftp emberstack 5.1.71

1 of the 1 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
emberstack/sftp:5.1.711d81a5df909b
icu@67.1-7
67.1-7+deb11u1

Open the chart page →

680
reddarkemmas-chartsVerified publisher0.0.21 of 1See more

reddark emmas-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
ghcr.io/0xemma/reddark:main2a115e991894
icu@67.1-7
67.1-7+deb11u1

Open the chart page →

1,998
emptyempty1.1.01 of 1See more

empty empty 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
library/nginx:1.22.0f0d28f204785
icu@67.1-7
67.1-7+deb11u1

Open the chart page →

967
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
emqx/ecp-ui:2.5.1e33e9816f147
icu@72.1-3
72.1-3+deb12u1

Open the chart page →

22,845
enclaveenclave0.1.11 of 1See more

enclave enclave 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
enclavenetworks/enclave:latest0a99759300d1
icu@66.1-2ubuntu2.1
no fix listed

Open the chart page →

2,740
kube-packetloss-exporterenixVerified publisher0.2.11 of 2See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.3164614ef8290f
icu@72.1-3
72.1-3+deb12u1

Open the chart page →

6,154
backbone-helm-chartenmeshed-backboneVerified publisher7.2.01 of 7See more

backbone-helm-chart enmeshed-backbone 7.2.0

1 of the 7 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
ghcr.io/nmshd/backbone-admin-cli:7.2.0cece68d17393
icu@74.2-1ubuntu3.1
no fix listed

Open the chart page →

3,643
internal-appeoc-chartsVerified publisher1.0.01 of 1See more

internal-app eoc-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
library/nginx:1.24.0f6daac2445b0
icu@67.1-7
67.1-7+deb11u1

Open the chart page →

532
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
oscarsotosanchez/weatherservice:v1.0911ec961d10b
icu@60.2-3ubuntu3.1
no fix listed

Open the chart page →

27,349
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
oscarsotosanchez/weatherservice:v1.0911ec961d10b
icu@60.2-3ubuntu3.1
no fix listed

Open the chart page →

27,314
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
icu@72.1-3
72.1-3+deb12u1

Open the chart page →

5,316
postgresql-backupeosc-lot-1Verified publisher0.4.21 of 2See more

postgresql-backup eosc-lot-1 0.4.2

1 of the 2 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
library/postgres:15.7-alpine3.20468d34fefd63
icu@74.2-r0
74.2-r1

Open the chart page →

1,467
equizequiz0.0.11 of 3See more

equiz equiz 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
yzhou442/equiz:latesta3f7ca69e28d
icu@67.1-7
67.1-7+deb11u1

Open the chart page →

7,542
equizequiz-chart0.0.11 of 3See more

equiz equiz-chart 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
yzhou442/equiz:latesta3f7ca69e28d
icu@67.1-7
67.1-7+deb11u1

Open the chart page →

7,542
doraethereum-helm-chartsVerified publisher1.0.121 of 2See more

dora ethereum-helm-charts 1.0.12

1 of the 2 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.3.0-debian-11-r7cc301eef7436
icu@67.1-7
67.1-7+deb11u1

Open the chart page →

3,002
nethermindethereum-helm-chartsVerified publisher1.1.21 of 2See more

nethermind ethereum-helm-charts 1.1.2

1 of the 2 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
nethermind/nethermind:latest1b6b01419de4
icu@78.2-2ubuntu1
no fix listed

Open the chart page →

971
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
icu@72.1-3
72.1-3+deb12u1

Open the chart page →

4,117
nethermindethersphereVerified publisher0.2.11 of 1See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-5222.

Container imageDigestPackageFixed in
nethermind/nethermind:1.14.615517708c3b6
icu@70.1-2
no fix listed

Open the chart page →

4,964

Container images carrying it

885 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
icu@72.1-3
72.1-3+deb12u1
1
ghcr.io/zoriya/kyoo_migrations:4.7.1f7e607f24071
icu@72.1-3
72.1-3+deb12u1
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
icu@72.1-3
72.1-3+deb12u1
1
mcr.microsoft.com/mssql/server:2017-latest13221ac5f673
icu@60.2-3ubuntu3.2
no fix listed
1
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
icu@66.1-2ubuntu2.1
no fix listed
1
mcr.microsoft.com/mssql/server:latest4bab24f36c1e
icu@74.2-1ubuntu3.1
no fix listed
1
mcr.microsoft.com/mssql/server:2022-latestba4c8329f48f
icu@70.1-2
no fix listed
1
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
icu@74.2-1ubuntu3.1
no fix listed
1
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
icu@60.2-3ubuntu3.2
no fix listed
1
public.ecr.aws/jtekt-corporation/annotation-tool:ef974ad9abd817eb6845
icu@67.1-7
67.1-7+deb11u1
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
icu@72.1-3
72.1-3+deb12u1
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
icu@72.1-3
72.1-3+deb12u1
1
public.ecr.aws/jtekt-corporation/polygonal-annotation-tool:a3fa936056efd38500d6
icu@67.1-7
67.1-7+deb11u1
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
icu@72.1-3
72.1-3+deb12u1
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
icu@72.1-3
72.1-3+deb12u1
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
icu@72.1-3
72.1-3+deb12u1
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
icu@66.1-2ubuntu2
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
icu@72.1-3
72.1-3+deb12u1
1
quay.io/ai-lab/llamacpp_python:latest70d138997acd
icu@67.1-9.el9
0:67.1-10.el9_6
1
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
icu@60.2-3ubuntu3.2
no fix listed
1
quay.io/fossa/postgres:17.2-15af45ac79f38
icu@67.1-7
67.1-7+deb11u1
1
quay.io/go-skynet/local-ai:latestd78cd113b2bc
icu@74.2-1ubuntu3.1
no fix listed
1
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
icu@67.1-7
67.1-7+deb11u1
1
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
icu@67.1-7
67.1-7+deb11u1
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
icu@55.1-7ubuntu0.4
no fix listed
1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
icu@67.1-9.el9
0:67.1-10.el9_6
1
quay.io/shivering-isles/dovecot:2.3.214599ada9aa06
icu@74.2-r0
74.2-r1
1
quay.io/underndog/samba:1.2.0-not-recyclecca801de9fa5
icu@74.2-r0
74.2-r1
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
icu@72.1-3
72.1-3+deb12u1
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
icu@74.2-1ubuntu3.1
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
icu@66.1-2ubuntu2
no fix listed
1
registry.k8s.io/ingress-nginx/controller:v1.10.042b3f0e5d084
icu@74.1-r0
74.1-r1
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
icu@74.2-r0
74.2-r1
1
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
icu@74.1-r0
74.1-r1
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
icu@74.2-r0
74.2-r1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.