StackRadar

CVE-2026-104844

Medium

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.004
31st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
780
of 18,035 indexed, latest versions
Container images
784
deployed by those charts
Fix available
1 of 1
affected package

PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion

Carried by container images the latest versions of 780 of 18,035 indexed charts deploy, on 784 images.

Affected packageAffected versionsFixed inImages
postcss-selector-parsernpm2.2.3, 3.1.1, 3.1.2, 5.0.0+21 more7.1.6784
OSV records
GHSA-rj75-hqrm-r3gf
Trending
Rank 4 in indexed charts, since 6 Oct 2026. See the ranking →

Charts affected

780 by stars
ChartLatestAffected imagesRadar Score
skoonerkfirfer0.0.61 of 1See more

skooner kfirfer 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
postcss-selector-parser@6.0.10
7.1.6

Open the chart page →

1,440
cdashkitwareVerified publisher0.20.01 of 3See more

cdash kitware 0.20.0

1 of the 3 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
kitware/cdash:v5.4.0da5abe941506
postcss-selector-parser@7.1.4
7.1.6

Open the chart page →

13,265
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
postcss-selector-parser@6.1.2
7.1.6

Open the chart page →

1,823
visual-regression-trackerkokuwa5.1.02 of 4See more

visual-regression-tracker kokuwa 5.1.0

2 of the 4 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
postcss-selector-parser@6.1.0
7.1.6
visualregressiontracker/migration:5.0.1f983a1d4306e
postcss-selector-parser@6.0.13
7.1.6

Open the chart page →

9,927
argocd-servicekrateo1.0.71 of 1See more

argocd-service krateo 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/argocd-service:1.0.749b727854938
postcss-selector-parser@6.0.10
7.1.6

Open the chart page →

5,220
auth-servicekrateo1.2.361 of 1See more

auth-service krateo 1.2.36

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/auth-service:1.2.36794bc5877f76
postcss-selector-parser@6.0.13
7.1.6

Open the chart page →

5,643
capi-servicekrateo1.1.91 of 1See more

capi-service krateo 1.1.9

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/capi-service:1.1.92eee721260eb
postcss-selector-parser@6.0.10
7.1.6

Open the chart page →

4,927
codequality-servicekrateo1.1.11 of 1See more

codequality-service krateo 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/codequality-service:1.1.19a9a77b01eb1
postcss-selector-parser@6.0.10
7.1.6

Open the chart page →

4,803
component-servicekrateo0.2.11 of 1See more

component-service krateo 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/component-service:0.2.14a5f506c0560
postcss-selector-parser@6.0.10
7.1.6

Open the chart page →

5,137
deployment-servicekrateo1.2.591 of 1See more

deployment-service krateo 1.2.59

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/deployment-service:1.2.59da9f93f2f731
postcss-selector-parser@6.0.15
7.1.6

Open the chart page →

10,273
event-servicekrateo1.1.61 of 1See more

event-service krateo 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/event-service:1.1.671fd074020f4
postcss-selector-parser@6.0.10
7.1.6

Open the chart page →

5,257
git-servicekrateo1.0.131 of 1See more

git-service krateo 1.0.13

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/git-service:1.0.13c22f183fedf0
postcss-selector-parser@6.0.13
7.1.6

Open the chart page →

6,196
keptn-servicekrateo1.0.121 of 1See more

keptn-service krateo 1.0.12

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/keptn-service:1.0.12f9fef2435636
postcss-selector-parser@6.0.13
7.1.6

Open the chart page →

5,343
krateo-remote-clientkrateo0.4.161 of 1See more

krateo-remote-client krateo 0.4.16

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/krateo-remote-client:0.4.167ccd4382f3fa
postcss-selector-parser@6.0.13
7.1.6

Open the chart page →

5,414
krateo-remote-serverkrateo0.2.41 of 1See more

krateo-remote-server krateo 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/krateo-remote-server:0.2.40df58c99cc6f
postcss-selector-parser@6.0.13
7.1.6

Open the chart page →

5,572
kubernetes-servicekrateo1.1.11 of 1See more

kubernetes-service krateo 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/kubernetes-service:1.1.1974fbc0d93ed
postcss-selector-parser@6.0.10
7.1.6

Open the chart page →

5,194
notification-servicekrateo1.1.61 of 1See more

notification-service krateo 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/notification-service:1.1.6f9eeac1d7e47
postcss-selector-parser@6.0.10
7.1.6

Open the chart page →

5,298
pipeline-servicekrateo1.1.21 of 1See more

pipeline-service krateo 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/pipeline-service:1.1.25e6ad7395921
postcss-selector-parser@6.0.10
7.1.6

Open the chart page →

4,666
provider-servicekrateo1.0.81 of 1See more

provider-service krateo 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/provider-service:1.0.8014ed41cb6e5
postcss-selector-parser@6.0.10
7.1.6

Open the chart page →

5,137
secret-servicekrateo1.1.41 of 1See more

secret-service krateo 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/secret-service:1.1.4292bd05fb781
postcss-selector-parser@6.0.10
7.1.6

Open the chart page →

5,124
service-deploymentkrateo0.1.61 of 1See more

service-deployment krateo 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/service-deployment:0.1.541fb833f36ee
postcss-selector-parser@6.0.10
7.1.6

Open the chart page →

5,001
template-servicekrateo1.2.131 of 1See more

template-service krateo 1.2.13

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/template-service:1.2.139f82e7cb2348
postcss-selector-parser@6.0.13
7.1.6

Open the chart page →

6,524
terminal-clientkrateo0.1.31 of 1See more

terminal-client krateo 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/terminal-client:0.1.36c7c965e739c
postcss-selector-parser@6.1.0
7.1.6

Open the chart page →

7,335
terminal-serverkrateo0.1.61 of 1See more

terminal-server krateo 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/terminal-server:0.1.3f5fd8ba6fea3
postcss-selector-parser@6.1.0
7.1.6

Open the chart page →

7,274
kubeflowkromanow94-kubeflow0.5.11 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

1 of the 30 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
kubeflownotebookswg/centraldashboard:v1.9.2af55c22ef5de
postcss-selector-parser@6.0.10
7.1.6

Open the chart page →

82,552
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
postcss-selector-parser@7.1.0
7.1.6

Open the chart page →

3,892
component-storekubebb0.0.231 of 1See more

component-store kubebb 0.0.23

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
kubebb/component-store:latestfd8ecbd73213
postcss-selector-parser@6.0.11
7.1.6

Open the chart page →

2,326
u4a-componentkubebb0.2.101 of 8See more

u4a-component kubebb 0.2.10

1 of the 8 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
kubebb/bff-server:v0.2.0-202312040fbb732379bc
postcss-selector-parser@6.0.11
7.1.6

Open the chart page →

18,523
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
postcss-selector-parser@6.1.0
7.1.6

Open the chart page →

9,501
gptchat-api-feishubotkubegemsapp0.1.11 of 3See more

gptchat-api-feishubot kubegemsapp 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
kubegems/chatgpt-api:latestf3c492a938ad
postcss-selector-parser@6.0.10
7.1.6

Open the chart page →

11,473
ghostkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

ghost kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
library/ghost:6.39.0-alpine77196da4b0df
postcss-selector-parser@7.1.1
7.1.6

Open the chart page →

3,867
homepagekubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

homepage kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/gethomepage/homepage:v1.13.1d8d784e50901
postcss-selector-parser@7.1.1
7.1.6

Open the chart page →

1,520
portfolio-trackerkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

portfolio-tracker kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/harish2k01/portfolio-tracker:0.1.056efa3085895
postcss-selector-parser@7.1.1
7.1.6

Open the chart page →

1,809
seerrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

seerr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
postcss-selector-parser@7.1.0
7.1.6

Open the chart page →

3,022
umamikubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

umami kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.1.0e3f80c0625aa
postcss-selector-parser@7.1.1
7.1.6

Open the chart page →

2,768
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
postcss-selector-parser@7.1.0
7.1.6

Open the chart page →

7,667
kube-mailkubernetes-replicator0.11.11 of 3See more

kube-mail kubernetes-replicator 0.11.1

1 of the 3 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-mail:latest04f1099241fc
postcss-selector-parser@6.1.0
7.1.6

Open the chart page →

2,902
penpotkubitodevVerified publisher1.2.11 of 5See more

penpot kubitodev 1.2.1

1 of the 5 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
penpotapp/exporter:2.2.15c835ffd87ab
postcss-selector-parser@6.0.13
7.1.6

Open the chart page →

19,105
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.42 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

2 of the 9 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
postcss-selector-parser@6.1.0
7.1.6
ghcr.io/kubiyabot/workflow-engine:v1.46.2560a16a56d4e
postcss-selector-parser@6.0.13
7.1.6

Open the chart page →

24,544
kyso-frontkyso1.0.01 of 1See more

kyso-front kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
kyso/kyso-front:lateste52595c5c16f
postcss-selector-parser@6.0.13
7.1.6

Open the chart page →

2,882
landing-pagelanding-pageVerified publisher0.1.01 of 1See more

landing-page landing-page 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
felipecs8/landing-page:v1db6d44e325a1
postcss-selector-parser@7.1.0
7.1.6

Open the chart page →

1,281
helm-pilotlbenicio-communityVerified publisher0.2.41 of 1See more

helm-pilot lbenicio-community 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
lbenicio/helm-pilot:0.2.54594a2632510
postcss-selector-parser@7.1.1
7.1.6

Open the chart page →

832
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
homebridge/homebridge:latest22cdfca31934
postcss-selector-parser@7.1.4
7.1.6

Open the chart page →

37,091
jellyseerrlbenicio-communityVerified publisher0.1.01 of 1See more

jellyseerr lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:latest4538137bc5af
postcss-selector-parser@7.1.0
7.1.6

Open the chart page →

3,969
stremiolbenicio-communityVerified publisher0.1.11 of 2See more

stremio lbenicio-community 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
lbenicio/stremio-web:latest732f9003de33
postcss-selector-parser@7.1.1
7.1.6

Open the chart page →

3,225
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
postcss-selector-parser@7.1.1
7.1.6

Open the chart page →

38,950
dashboardleechistest1.0.01 of 1See more

dashboard leechistest 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
sysnet4admin/dashboard:bluec5bd3bb1b5a6
postcss-selector-parser@6.1.0
7.1.6

Open the chart page →

1,693
kinesaliteleprechaun-charts0.1.21 of 1See more

kinesalite leprechaun-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
instructure/kinesalite:latest34400d82f28f
postcss-selector-parser@6.0.13
7.1.6

Open the chart page →

4,535
lgtv2mqttleprechaun-charts0.1.11 of 1See more

lgtv2mqtt leprechaun-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/leprechaun/lgtv2mqtt:latestac2e11c41ffb
postcss-selector-parser@6.0.10
7.1.6

Open the chart page →

1,143
libredb-studiolibredb-studio-oci0.1.781 of 1See more

libredb-studio libredb-studio-oci 0.1.78

1 of the 1 container images this version deploys carry CVE-2026-104844.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:0.18.0095a5ed5f7a1
postcss-selector-parser@7.1.4
7.1.6

Open the chart page →

1,447

Container images carrying it

784 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
postcss-selector-parser@6.0.13
7.1.6
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
postcss-selector-parser@6.0.13
7.1.6
1
quay.io/ai-lab/llamacpp_python:latest70d138997acd
postcss-selector-parser@6.1.0
7.1.6
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
postcss-selector-parser@6.0.6
7.1.6
1
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
postcss-selector-parser@7.1.1
7.1.6
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
postcss-selector-parser@3.1.1
7.1.6
1
quay.io/k3rnel-pan1c/uptime-kuma:1.19.3f975fde9329b
postcss-selector-parser@6.0.10
7.1.6
1
quay.io/kuberay/dashboard:v1.7.07e43d4b4fd9f
postcss-selector-parser@7.1.4
7.1.6
1
quay.io/maximilianopizarro/neuroface-backend:v1.4.13194d46df0f9
postcss-selector-parser@7.1.1
7.1.6
1
quay.io/maximilianopizarro/neuroface-backend:latestcba71dc08c8a
postcss-selector-parser@7.1.1
7.1.6
1
quay.io/mittwald/kube-mail:latest04f1099241fc
postcss-selector-parser@6.1.0
7.1.6
1
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
postcss-selector-parser@5.0.0
7.1.6
1
quay.io/netwarps/walletconnect-relay:v2.1.3-rc.15d90b9c193e0
postcss-selector-parser@6.0.10
7.1.6
1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
postcss-selector-parser@6.0.15
7.1.6
1
quay.io/rhdh/rhdh-hub-rhel9:latest4f8c0f8a8ee0
postcss-selector-parser@7.1.4
7.1.6
1
quay.io/seamware/fdsc-dashboard:0.6.63478af70bdc2
postcss-selector-parser@6.1.0
7.1.6
1
quay.io/seamware/onboarding:0.2.2b406475f9f00
postcss-selector-parser@7.1.1
7.1.6
1
quay.io/soketi/k8soketi:0.1-18-debian4cd9ea9434c4
postcss-selector-parser@6.0.10
7.1.6
1
quay.io/soketi/soketi:1.6-16-debian713223456cf1
postcss-selector-parser@6.0.10
7.1.6
1
quay.io/wekan/wekan:v5.65cb17600883a3
postcss-selector-parser@3.1.2
7.1.6
1
quay.io/wi_stefan/consent-manager:0.0.656399619568b
postcss-selector-parser@7.1.1
7.1.6
1
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
postcss-selector-parser@6.1.2
7.1.6
1
registry.gitlab.com/dyff/dyff-frontend:0.21.06418c3c0d24a
postcss-selector-parser@6.1.0
7.1.6
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
postcss-selector-parser@7.1.1
7.1.6
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
postcss-selector-parser@7.1.1
7.1.6
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
postcss-selector-parser@7.1.1
7.1.6
1
registry.gitlab.com/evolves-fr/s3-browser:0.4.1c350c941fe7b
postcss-selector-parser@7.1.1
7.1.6
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-api-gateway:prodf8474a665b11
postcss-selector-parser@7.1.4
7.1.6
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-events:prod764ca253f951
postcss-selector-parser@7.1.4
7.1.6
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-runtime:prodbdb1bcedf26f
postcss-selector-parser@7.1.4
7.1.6
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-workspaces:prode64a1cb3aa42
postcss-selector-parser@7.1.4
7.1.6
1
registry.gitlab.com/xrow-public/ci-tools/tools:mainaa62b23f2b5e
postcss-selector-parser@7.1.1
7.1.6
1
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
postcss-selector-parser@6.1.0
7.1.6
1
registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.105.13f87eebbba88
postcss-selector-parser@7.1.4
7.1.6
1

syft 1.42.1 · advisories as of 7 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.