StackRadar

CVE-2025-61729

High

Advisory

Published 2 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
39th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,499
of 17,813 indexed, latest versions
Container images
3,948
deployed by those charts
Fix available
2 of 3
affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 3,499 of 17,813 indexed charts deploy, on 3,948 images.

Affected packageAffected versionsFixed inImages
git-lfsrpm2.13.3-3.el8_60:3.4.1-7.el8_101
golang-1.19deb1.19.8-2no fix listed1
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+169 more1.24.113,948
OSV records
DEBIAN-CVE-2025-61729RHSA-2026:2323GO-2025-4155
Also known as
BIT-golang-2025-61729

Charts affected

3,499 by stars
ChartLatestAffected imagesRadar Score
configmapsecretsmozilla0.0.11 of 1See more

configmapsecrets mozilla 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
mzinc/configmapsecret-controller:v0.5.1eebbcbf2d1f7
stdlib@go1.16.1
1.24.11

Open the chart page →

2,110
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
stdlib@go1.20.12
1.24.11

Open the chart page →

4,574
ms-hello-webms-hello-test0.1.01 of 1See more

ms-hello-web ms-hello-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
irakli/ms-web-hello:latest966a4bfefe27
stdlib@go1.19.2
1.24.11

Open the chart page →

755
codimdmt1905027.2.21 of 3See more

codimd mt190502 7.2.2

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
stdlib@go1.24.6
1.24.11

Open the chart page →

1,688
commafeedmt1905028.2.01 of 3See more

commafeed mt190502 8.2.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
stdlib@go1.24.6
1.24.11

Open the chart page →

3,802
ghostmt1905028.25.12 of 3See more

ghost mt190502 8.25.1

2 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
stdlib@go1.24.6
1.24.11
library/mysql:8b3b90af2a655
stdlib@go1.24.6
1.24.11

Open the chart page →

5,037
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
stdlib@go1.24.6
1.24.11

Open the chart page →

2,993
maddymt1905024.1.21 of 1See more

maddy mt190502 4.1.2

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
foxcpp/maddy:0.9.2a4b839985b9b
stdlib@go1.23.12
1.24.11

Open the chart page →

1,045
memosmt1905027.3.21 of 3See more

memos mt190502 7.3.2

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
stdlib@go1.24.6
1.24.11

Open the chart page →

2,657
minifluxmt1905021.1.61 of 3See more

miniflux mt190502 1.1.6

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
stdlib@go1.24.6
1.24.11

Open the chart page →

2,733
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
stdlib@go1.21.12
1.24.11

Open the chart page →

6,673
open-webuimt1905022.3.101 of 3See more

open-webui mt190502 2.3.10

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
stdlib@go1.24.6
1.24.11

Open the chart page →

1,688
paperless-ngxmt1905027.6.142 of 4See more

paperless-ngx mt190502 7.6.14

2 of the 4 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
stdlib@go1.24.6
1.24.11
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
stdlib@go1.24.4
1.24.11

Open the chart page →

12,222
umamimt1905028.1.41 of 3See more

umami mt190502 8.1.4

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
stdlib@go1.24.6
1.24.11

Open the chart page →

4,076
vaultwardenmt1905027.3.41 of 3See more

vaultwarden mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
stdlib@go1.24.6
1.24.11

Open the chart page →

4,819
vikunjamt1905027.1.22 of 3See more

vikunja mt190502 7.1.2

2 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
stdlib@go1.24.6
1.24.11
vikunja/vikunja:0.24.6ed1f3ed467fe
stdlib@go1.23.4
1.24.11

Open the chart page →

3,031
mongodbmulti-chart-app0.1.01 of 1See more

mongodb multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mongo:7b096b4cb9269
stdlib@go1.24.6
1.24.11

Open the chart page →

2,007
my-multi-chart-appmulti-chart-app0.1.01 of 2See more

my-multi-chart-app multi-chart-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mongo:7b096b4cb9269
stdlib@go1.24.6
1.24.11

Open the chart page →

3,892
multusmultusVerified publisher0.2.02 of 2See more

multus multus 0.2.0

2 of the 2 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.1.409fdfb7ce090
stdlib@go1.23.4
1.24.11
ghcr.io/k8snetworkplumbingwg/multus-dynamic-networks-controller:v0.3.72a2bb32c0ea8
stdlib@go1.22.12
1.24.11

Open the chart page →

1,866
devops-demomungari-development-charts1.0.42 of 4See more

devops-demo mungari-development-charts 1.0.4

2 of the 4 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
stdlib@go1.24.6
1.24.11
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
stdlib@go1.18.4
1.24.11

Open the chart page →

9,030
pagesmuthu-pages1.0.01 of 3See more

pages muthu-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
approuvezmvisonneau0.1.11 of 1See more

approuvez mvisonneau 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
ghcr.io/mvisonneau/approuvez:v0.1.0441da62e6cb3
stdlib@go1.15.6
1.24.11

Open the chart page →

1,979
unpollermvisonneau0.1.01 of 1See more

unpoller mvisonneau 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
golift/unifi-poller:v2.9.2585a29a06d05
stdlib@go1.21.0
1.24.11

Open the chart page →

1,190
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
stdlib@go1.18
1.24.11

Open the chart page →

101,985
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
stdlib@go1.18
1.24.11

Open the chart page →

101,985
authmyaVerified publisher22.4.31 of 1See more

auth mya 22.4.3

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.6.04d16885f3d4c
stdlib@go1.13.7
1.24.11

Open the chart page →

2,382
clickhousemyaVerified publisher0.2403.11 of 1See more

clickhouse mya 0.2403.1

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.2ed9640bfff07
stdlib@go1.19.10
1.24.11

Open the chart page →

3,620
cognativemyaVerified publisher0.2403.33 of 3See more

cognative mya 0.2403.3

3 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.2ed9640bfff07
stdlib@go1.19.10
1.24.11
grafana/grafana:10.4.0f9811e4e687f
stdlib@go1.21.8
1.24.11
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
stdlib@go1.21.7
1.24.11

Open the chart page →

7,406
giteamyaVerified publisher23.12.51 of 1See more

gitea mya 23.12.5

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
gitea/gitea:1.21.6ac73e0da341f
stdlib@go1.21.7
1.24.11

Open the chart page →

3,437
redismyaVerified publisher22.4.101 of 2See more

redis mya 22.4.10

1 of the 2 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
quay.io/oliver006/redis_exporter:v1.35.1908dbee5c546
stdlib@go1.17.7
1.24.11

Open the chart page →

1,051
redis-queuemyaVerified publisher22.4.61 of 2See more

redis-queue mya 22.4.6

1 of the 2 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
quay.io/oliver006/redis_exporter:v1.35.1908dbee5c546
stdlib@go1.17.7
1.24.11

Open the chart page →

1,051
redis-raftmyaVerified publisher22.5.41 of 2See more

redis-raft mya 22.5.4

1 of the 2 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
quay.io/oliver006/redis_exporter:v1.35.1908dbee5c546
stdlib@go1.17.7
1.24.11

Open the chart page →

1,051
myhelmappmyhelmapp0.1.11 of 1See more

myhelmapp myhelmapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
tobirachel/node-project3:v17d9f37154994
stdlib@go1.17.5
1.24.11

Open the chart page →

3,368
Practica_4_helmmy-heml-appVerified publisher0.1.03 of 7See more

Practica_4_helm my-heml-app 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
stdlib@go1.18.10
1.24.11
library/mongo:5.0.6-focal8e70544b6c76
stdlib@go1.16.7
1.24.11
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.24.11

Open the chart page →

27,933
influxdbmy-personal-influxdb20.1.01 of 1See more

influxdb my-personal-influxdb2 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
stdlib@go1.18.2
1.24.11

Open the chart page →

3,919
phonebook-chartmy-phonebook-chart0.1.01 of 3See more

phonebook-chart my-phonebook-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.24.11

Open the chart page →

3,032
mychartmysqlweb0.1.01 of 1See more

mychart mysqlweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
qichenxu4pd/mysqlweb:1.2d758d41d9c6b
stdlib@go1.18.2
1.24.11

Open the chart page →

1,157
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
stdlib@go1.22.2
1.24.11

Open the chart page →

18,117
fargate-sidecar-injectormziyaboVerified publisher0.1.51 of 1See more

fargate-sidecar-injector mziyabo 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
mziyabo/fargate-eks-sidecar-injector:latest3067dce17983
stdlib@go1.19.13
1.24.11

Open the chart page →

1,394
victoria-metrics-singlenaps0.0.61 of 1See more

victoria-metrics-single naps 0.0.6

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
victoriametrics/victoria-metrics:v1.34.7b50d5c0153f9
stdlib@go1.14.1
1.24.11

Open the chart page →

1,316
pagesnarain1.0.01 of 3See more

pages narain 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagesnarasimha-pages1.0.01 of 3See more

pages narasimha-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
traefik-forward-auth-openidnas-helm-chartsVerified publisher1.0.11 of 1See more

traefik-forward-auth-openid nas-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
thomseddon/traefik-forward-auth:latestb364aa6a4117
stdlib@go1.13.15
1.24.11

Open the chart page →

2,198
nats-kafkanatsVerified publisher0.15.41 of 1See more

nats-kafka nats 0.15.4

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
natsio/nats-kafka:1.4.2bb241956b0dc
stdlib@go1.20
1.24.11

Open the chart page →

1,732
nats-operatornatsVerified publisher0.8.31 of 1See more

nats-operator nats 0.8.3

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
natsio/nats-operator:0.8.31261dae38389
stdlib@go1.16.10
1.24.11

Open the chart page →

2,354
account-servernatz-operatorVerified publisher0.9.51 of 1See more

account-server natz-operator 0.9.5

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
ghcr.io/zeiss/natz-operator/account-server:0.9.5b380b5f17c3f
stdlib@go1.23.3
1.24.11

Open the chart page →

746
navidromenavidrome0.2.51 of 1See more

navidrome navidrome 0.2.5

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
deluan/navidrome:0.41.1fc4d8b6ad9f9
stdlib@go1.16.2
1.24.11

Open the chart page →

3,318
pagesnavin-brixton1.0.01 of 3See more

pages navin-brixton 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
incorencsaVerified publisher1.38.02 of 29See more

incore ncsa 1.38.0

2 of the 29 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
stdlib@go1.21.10
1.24.11
bitnamilegacy/mongodb:4.4.5e3c9d6b4bc92
stdlib@go1.15.8
1.24.11

Open the chart page →

15,553
jupyterhub-metricsncsaVerified publisher1.3.03 of 5See more

jupyterhub-metrics ncsa 1.3.0

3 of the 5 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/postgres:15-alpinefe0737ba566a
stdlib@go1.24.6
1.24.11
migrate/migrate:latestcc4ad8e19d66
stdlib@go1.25.4
1.24.11
timescale/timescaledb:latest-pg156343bdc87ca1
stdlib@go1.24.6
1.24.11

Open the chart page →

4,170

Container images carrying it

3,948 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
stakkato95/twitter-service-tweets:0.1.18412d8a8cac3
stdlib@go1.18.3
1.24.11
1
stakkato95/twitter-service-users:0.1.1456049efee9a
stdlib@go1.18.3
1.24.11
1
stashapp/stash:latest24dbd7607174
stdlib@go1.13.15
1.24.11
1
stashapp/stash:v0.31.1df744af5a0c9
stdlib@go1.24.3
1.24.11
1
stashapp/stash-box:latesta534c8afdf39
stdlib@go1.23.10
1.24.11
1
statcan/ingress-istio-controller:1.4.0d7d6bd180c46
stdlib@go1.18.10
1.24.11
1
statcan/kubernetes-sidecar-terminator:2.0.2bc361ee7748f
stdlib@go1.19.10
1.24.11
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
stdlib@go1.15.6
1.24.11
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
stdlib@go1.13.4
1.24.11
1
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
stdlib@go1.17.11
1.24.11
1
stubin87/tiny-api:v1.1.02e5c42e92ec8
stdlib@go1.19.1
1.24.11
1
su541/cert-manager-desec-webhook:latest371ee33f83c1
stdlib@go1.19.10
1.24.11
1
subspacecommunity/subspace:1.5.0e2042b63fb35
stdlib@go1.14.6
1.24.11
1
summerwind/actions-runner-controller:v0.27.62128f81dbede
stdlib@go1.20.7
1.24.11
1
sumuduliya/hello-world:latestb7788a2984a3
stdlib@go1.19.13
1.24.11
1
supabase/gotrue:v2.91.07174d551d720
stdlib@go1.20.7
1.24.11
1
supabase/gotrue:v2.163.0ba4ddc594b0b
stdlib@go1.22.3
1.24.11
1
superorbital/cludod:0.0.2-alphad59732f61d6e
stdlib@go1.17.6
1.24.11
1
supporttools/do-database-metrics-adapter:1.0.2ab55fd5a69c3
stdlib@go1.22.3
1.24.11
1
supporttools/go-redis-proxy:0.0.7cbd45f6b02b8
stdlib@go1.21.6
1.24.11
1
supporttools/go-web-cache:v1.3.2f4f775dd43b9
stdlib@go1.21.6
1.24.11
1
supporttools/powerdns-admin-proxy:5e3687d66bcfa
stdlib@go1.21.3
1.24.11
1
surajwarbhe/grafana:v185248611e9f1
stdlib@go1.14.3
1.24.11
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
stdlib@go1.20.4
1.24.11
1
svtechnmaa/svtech_icingadb:v1.1.26d91c2e4e882
stdlib@go1.21.5
1.24.11
1
svtechnmaa/svtech_icingaweb2:v1.0.2a59d0b81dde2
stdlib@go1.21.6
1.24.11
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
stdlib@go1.20.5
1.24.11
1
svtechnmaa/svtech_syncthing:v1.0.41a75d88031fe
stdlib@go1.21.5
1.24.11
1
syepes/network_exporter:1.8.000af1691570e
stdlib@go1.25.1
1.24.11
1
syncthing/syncthing:1.18.2966433161272
stdlib@go1.17
1.24.11
1
sysintelligent/hello-app:2.0.177fb30df847d
stdlib@go1.19.3
1.24.11
1
sysnet4admin/colosseum-nti:logc947c3629371
stdlib@go1.23.12
1.24.11
1
t3nde/tideways:1.7.2777e008f764db
stdlib@go1.16.4
1.24.11
1
tailscale/k8s-operator:v1.70.08edd06cf5bac
stdlib@go1.22.5
1.24.11
1
tailwarden/komiser:3.1.103f68c8ae7993
stdlib@go1.22.0
1.24.11
1
tautulli/tautulli:latest670e68dd9efc
stdlib@go1.24.4
1.24.11
1
tdengine/tdengine:3.0.2.24140a4021ddb
stdlib@go1.17.6
1.24.11
1
tdeutsch/podsync:v2.4.2b67186f4c9a5
stdlib@go1.19.3
1.24.11
1
tektonops/ipup-dynu:latestc2198746cf8f
stdlib@go1.22.6
1.24.11
1
temporalio/admin-tools:1.22.4258958fe2ff2
stdlib@go1.20.10
1.24.11
1
temporalio/admin-tools:1.26.237e2e33dbd7b
stdlib@go1.22.5
1.24.11
1
temporalio/admin-tools:1.22.0836af062af30
stdlib@go1.19.11
1.24.11
1
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
stdlib@go1.25.0
1.24.11
1
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
stdlib@go1.22.3
1.24.11
1
temporalio/auto-setup:1.29.15b3502a3b685
stdlib@go1.25.0
1.24.11
1
temporalio/auto-setup:1.27.2b44cbfeb43db
stdlib@go1.23.2
1.24.11
1
temporalio/server:1.26.21e2626efcbc1
stdlib@go1.23.2
1.24.11
1
temporalio/server:1.25.08a5798191dea
stdlib@go1.22.3
1.24.11
1
temporalio/server:1.29.1c1e3326b2ce1
stdlib@go1.25.0
1.24.11
1
temporalio/server:1.22.0ddeebf8bad8f
stdlib@go1.19.11
1.24.11
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.