StackRadar

CVE-2026-110306

Medium

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
201
of 18,232 indexed, latest versions
Container images
196
deployed by those charts
Fix available
1 of 1
affected package

fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding

Carried by container images the latest versions of 201 of 18,232 indexed charts deploy, on 196 images.

Affected packageAffected versionsFixed inImages
fast-urinpm2.1.0, 2.2.0, 2.3.0, 2.4.0+15 more2.4.8, 3.1.9, 4.2.3196
OSV records
GHSA-w74x-v6f9-j3xg

Charts affected

201 by stars
ChartLatestAffected imagesRadar Score
connector-helm-chartenmeshed-connectorOfficialVerified publisher7.5.71 of 1See more

connector-helm-chart enmeshed-connector 7.5.7

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
ghcr.io/nmshd/connector:7.5.7c18dcfb81d12
fast-uri@3.1.8
3.1.9

Open the chart page →

378
edp-installepmdedpOfficialVerified publisher3.16.01 of 7See more

edp-install epmdedp 3.16.0

1 of the 7 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
epamedp/krci-portal:0.9.0ebc7ca162d87
fast-uri@3.1.8
3.1.9

Open the chart page →

1,953
krci-portalepmdedpVerified publisher0.9.01 of 1See more

krci-portal epmdedp 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
epamedp/krci-portal:0.9.0ebc7ca162d87
fast-uri@3.1.8
3.1.9

Open the chart page →

273
lodestarethereum-helm-chartsVerified publisher1.2.21 of 2See more

lodestar ethereum-helm-charts 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
chainsafe/lodestar:latestf3d339e96267
fast-uri@3.1.0
3.1.9

Open the chart page →

3,369
consent-managerfiware0.2.01 of 1See more

consent-manager fiware 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
quay.io/wi_stefan/consent-manager:0.0.656399619568b
fast-uri@3.1.6
3.1.9

Open the chart page →

2,545
facetflanksourceVerified publisher0.1.731 of 1See more

facet flanksource 0.1.73

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
fast-uri@3.1.2
3.1.9

Open the chart page →

32,835
flanksource-uiflanksourceVerified publisher1.4.3541 of 1See more

flanksource-ui flanksource 1.4.354

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.3542bb089c79fc0
fast-uri@3.1.3
3.1.9

Open the chart page →

3,657
mission-controlflanksourceVerified publisher0.1.3391 of 8See more

mission-control flanksource 0.1.339

1 of the 8 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.3228d17f0c08b20
fast-uri@3.1.3
3.1.9

Open the chart page →

12,093
activepiecesfmjstudios0.2.31 of 1See more

activepieces fmjstudios 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
activepieces/activepieces:0.28.0a12efde0c535
fast-uri@2.4.0
2.4.8

Open the chart page →

3,875
qryn-helmgigapipeVerified publisher0.1.91 of 1See more

qryn-helm gigapipe 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
qxip/qryn:3.2.3977acc9c7a9fd
fast-uri@3.0.1
3.1.9

Open the chart page →

3,505
redis-uigin0.0.11 of 1See more

redis-ui gin 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
patrikx3/p3x-redis-ui:latestf19eb45b0694
fast-uri@3.1.6
3.1.9

Open the chart page →

1,583
opentelemetry-demogpg-dev0.33.82 of 27See more

opentelemetry-demo gpg-dev 0.33.8

2 of the 27 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
fast-uri@3.0.1
3.1.9
ghcr.io/open-telemetry/demo:1.12.0-flagduif6bdafaa9075
fast-uri@3.0.1
3.1.9

Open the chart page →

199,455
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latest1cd3f9599dd5
fast-uri@3.1.8
3.1.9

Open the chart page →

8,462
automatischhelmforgeVerified publisher1.3.121 of 4See more

automatisch helmforge 1.3.12

1 of the 4 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
automatischio/automatisch:0.15.03bace7a12d5f
fast-uri@3.0.3
3.1.9

Open the chart page →

6,668
bytestashhelmforgeVerified publisher1.0.41 of 1See more

bytestash helmforge 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
ghcr.io/jordan-dalby/bytestash:1.6.04326e143e2bd
fast-uri@3.1.8
3.1.9

Open the chart page →

59
documensohelmforgeVerified publisher1.0.01 of 3See more

documenso helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
ghcr.io/documenso/documensodigest-pinnedd9985f66c19c
fast-uri@3.1.8
3.1.9

Open the chart page →

2,196
ghosthelmforgeVerified publisher1.2.131 of 3See more

ghost helmforge 1.2.13

1 of the 3 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
library/ghost:6.71.000032f157262
fast-uri@3.1.8
3.1.9

Open the chart page →

3,067
ghostfoliohelmforgeVerified publisher1.1.21 of 4See more

ghostfolio helmforge 1.1.2

1 of the 4 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.88.0256c524a6116
fast-uri@3.1.0
3.1.9

Open the chart page →

5,372
hoppscotchhelmforgeVerified publisher1.1.151 of 2See more

hoppscotch helmforge 1.1.15

1 of the 2 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2026.9.03160f5b3acf4
fast-uri@3.1.6
3.1.9

Open the chart page →

2,586
immichhelmforgeVerified publisher1.2.131 of 5See more

immich helmforge 1.2.13

1 of the 5 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
fast-uri@3.1.3
3.1.9

Open the chart page →

13,985
opensignhelmforgeVerified publisher1.0.01 of 3See more

opensign helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
opensign/opensigndigest-pinned0ebc230eed21
fast-uri@3.1.5
3.1.9

Open the chart page →

70,650
reactive-resumehelmforgeVerified publisher1.0.21 of 4See more

reactive-resume helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
fast-uri@3.1.7
3.1.9

Open the chart page →

4,422
ryothelmforgeVerified publisher1.0.21 of 2See more

ryot helmforge 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
fast-uri@3.1.0
3.1.9

Open the chart page →

7,473
strapihelmforgeVerified publisher2.3.171 of 3See more

strapi helmforge 2.3.17

1 of the 3 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
helmforge/strapi-base:5.52.25a6c2c449840
fast-uri@3.1.5
3.1.9

Open the chart page →

2,761
zigbee2mqtthelm-zigbee2mqttVerified publisher1.4.21 of 1See more

zigbee2mqtt helm-zigbee2mqtt 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:2.14.1fef0de769dcd
fast-uri@3.1.6
3.1.9

Open the chart page →

335
browserlessicoretechVerified publisher0.18.41 of 1See more

browserless icoretech 0.18.4

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.57.340dff7c23e0e
fast-uri@3.1.8
3.1.9

Open the chart page →

1,284
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
fast-uri@3.0.1
3.1.9

Open the chart page →

68,389
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
infisical/infisical:latestdbc5be2079b6
fast-uri@3.1.8
3.1.9

Open the chart page →

2,830
infisical-standaloneinfisical-charts1.11.11 of 5See more

infisical-standalone infisical-charts 1.11.1

1 of the 5 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
infisical/infisical:v0.167.0dbc5be2079b6
fast-uri@3.1.8
3.1.9

Open the chart page →

2,830
nocodbinseefrlab0.2.01 of 1See more

nocodb inseefrlab 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
nocodb/nocodb:lateste8fee91b205b
fast-uri@3.1.8
3.1.9

Open the chart page →

257
ghostjanip81-helm-chartsVerified publisher0.1.21 of 1See more

ghost janip81-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
library/ghost:6.37.01ef2e532ca4d
fast-uri@3.1.0
3.1.9

Open the chart page →

4,947
n8njanip81-helm-chartsVerified publisher0.1.51 of 1See more

n8n janip81-helm-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
fast-uri@3.0.6
3.1.9

Open the chart page →

7,318
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
homebridge/homebridge:latestd2370beb6a02
fast-uri@4.2.2
4.2.3

Open the chart page →

25,956
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
fast-uri@3.1.0
3.1.9

Open the chart page →

4,468
k8s-jacoco-operatork8s-jacoco-operator0.4.01 of 4See more

k8s-jacoco-operator k8s-jacoco-operator 0.4.0

1 of the 4 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/k8s-jacoco-operator:maina558ceae6cdb
fast-uri@2.1.0
2.4.8

Open the chart page →

3,173
k8s-mutating-webhookk8s-mutating-webhook0.3.01 of 2See more

k8s-mutating-webhook k8s-mutating-webhook 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/k8s-mutating-webhook:mainaaab005242ae
fast-uri@2.1.0
2.4.8

Open the chart page →

2,768
k8s-validating-webhookk8s-validating-webhook0.4.01 of 2See more

k8s-validating-webhook k8s-validating-webhook 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/k8s-validating-webhook:main8344061b2f22
fast-uri@2.1.0
2.4.8

Open the chart page →

2,768
kube-admission-controller-starterk8s-validating-webhook0.2.01 of 2See more

kube-admission-controller-starter k8s-validating-webhook 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/kube-admission-controller-starter:maine9716966f30b
fast-uri@2.1.0
2.4.8

Open the chart page →

2,933
cdashkitwareVerified publisher0.21.11 of 3See more

cdash kitware 0.21.1

1 of the 3 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
kitware/cdash:v5.5.16fab5f5ec6f2
fast-uri@3.1.8
3.1.9

Open the chart page →

12,842
ghostkubernetes-homelab-helm-chartsVerified publisher0.3.01 of 2See more

ghost kubernetes-homelab-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
library/ghost:6.71.0-alpine8e07c5ec63d9
fast-uri@3.1.8
3.1.9

Open the chart page →

2,157
seerrkubernetes-homelab-helm-chartsVerified publisher0.3.01 of 1See more

seerr kubernetes-homelab-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.027602401178d
fast-uri@3.1.0
3.1.9

Open the chart page →

2,472
umamikubernetes-homelab-helm-chartsVerified publisher0.3.01 of 3See more

umami kubernetes-homelab-helm-charts 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.4.085909afc45bd
fast-uri@3.1.8
3.1.9

Open the chart page →

1,108
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
homebridge/homebridge:latestd2370beb6a02
fast-uri@4.2.2
4.2.3

Open the chart page →

25,956
libredb-studiolibredb-studio-oci0.1.1021 of 1See more

libredb-studio libredb-studio-oci 0.1.102

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:1.0.00cb0177dd278
fast-uri@3.1.8
3.1.9

Open the chart page →

1,560
node-redlmatfyVerified publisher0.1.61 of 1See more

node-red lmatfy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
nodered/node-red:4.1.10-minimald73ae167cb9b
fast-uri@3.1.2
3.1.9

Open the chart page →

2,316
zigbee2mqttlmatfyVerified publisher0.1.141 of 2See more

zigbee2mqtt lmatfy 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:2.7.260a295b40f4e
fast-uri@3.0.6
3.1.9

Open the chart page →

1,557
logtidelogtideVerified publisher2.1.142 of 4See more

logtide logtide 2.1.14

2 of the 4 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
ghcr.io/logtide-dev/logtide-backend:1.0.265463e02f887
fast-uri@3.1.2
3.1.9
ghcr.io/logtide-dev/logtide-frontend:1.0.22a7da1451f86
fast-uri@3.1.2
3.1.9

Open the chart page →

4,334
lynxpromptlynxpromptVerified publisher0.1.41 of 3See more

lynxprompt lynxprompt 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
drumsergio/lynxprompt:2.1.40e66bb00c2696
fast-uri@3.1.8
3.1.9

Open the chart page →

980
docker-mailservermailserverVerified publisher0.2.651 of 9See more

docker-mailserver mailserver 0.2.65

1 of the 9 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
ghcr.io/jeboehm/fetchmailmgr:0.3.2126c4691b28a4
fast-uri@3.0.6
3.1.9

Open the chart page →

15,496
mauticmautic-chartVerified publisher1.0.21 of 3See more

mautic mautic-chart 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-110306.

Container imageDigestPackageFixed in
mautic/mautic:7-apacheeb8cc73d97e1
fast-uri@3.1.0
3.1.9

Open the chart page →

50,289

Container images carrying it

196 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
decisionrules/server:latest6f6d024a87b8
fast-uri@3.1.8
3.1.9
3
koenkk/zigbee2mqtt:2.14.2addbfb08fcef
fast-uri@3.1.6
3.1.9
3
opensearchproject/opensearch-dashboards:3.9.04bdb8ded547c
fast-uri@3.1.7
3.1.9
3
verdaccio/verdaccio:6.10.7d394c36d62a6
fast-uri@3.1.8
3.1.9
3
ghcr.io/seerr-team/seerr:latest:v3.5.027602401178d
fast-uri@3.1.0
3.1.9
3
epamedp/krci-portal:0.9.0ebc7ca162d87
fast-uri@3.1.8
3.1.9
2
homebridge/homebridge:latestd2370beb6a02
fast-uri@4.2.2
4.2.3
2
infisical/infisical:latest:v0.167.0dbc5be2079b6
fast-uri@3.1.8
3.1.9
2
koenkk/zigbee2mqtt:2.14.1fef0de769dcd
fast-uri@3.1.6
3.1.9
2
library/ghost:6.71.000032f157262
fast-uri@3.1.8
3.1.9
2
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
fast-uri@3.0.6
3.1.9
2
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
fast-uri@3.0.6
3.1.9
2
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
fast-uri@3.1.0
3.1.9
2
n8nio/n8n:2.36.714c4285bc303
fast-uri@3.1.5
3.1.9
2
patrikx3/p3x-redis-ui:latestf19eb45b0694
fast-uri@3.1.6
3.1.9
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
fast-uri@3.1.3
3.1.9
2
ghcr.io/libredb/libredb-studio:1.0.00cb0177dd278
fast-uri@3.1.8
3.1.9
2
ghcr.io/openclaw/openclaw:2026.10.6:main7dbff0fe5f53
fast-uri@4.2.1
4.2.3
2
ghcr.io/umami-software/umami:3.4.085909afc45bd
fast-uri@3.1.8
3.1.9
2
ghcr.io/unionai-oss/flyteconsole-v2:latest7e19bbdd2e7d
fast-uri@3.1.5
3.1.9
2
activepieces/activepieces:0.92.326daa5e1807f
fast-uri@4.2.1
4.2.3
1
activepieces/activepieces:0.28.0a12efde0c535
fast-uri@2.4.0
2.4.8
1
activepieces/activepieces:0.23.0c26188b44e62
fast-uri@2.3.0
2.4.8
1
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
fast-uri@3.1.0
3.1.9
1
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
fast-uri@3.1.0
3.1.9
1
akeyless/gateway:5.5.30f582fc294a0
fast-uri@3.1.8
3.1.9
1
automatischio/automatisch:0.15.03bace7a12d5f
fast-uri@3.0.3
3.1.9
1
betterdb/monitor:0.51.1-no-aic4910692b3fc
fast-uri@3.1.7
3.1.9
1
bluerange/bluerange-mosquitto:2690a4e5b92cc6
fast-uri@3.1.6
3.1.9
1
budibase/apps:3.41.344fe6feab985
fast-uri@3.1.5
3.1.9
1
chainsafe/lodestar:v1.27.07b9fe4aa8073
fast-uri@3.0.1
3.1.9
1
chainsafe/lodestar:latestf3d339e96267
fast-uri@3.1.0
3.1.9
1
chibisafe/chibisafe-server:latesta3a8606cd9b5
fast-uri@2.3.0
2.4.8
1
contane/foreman:0.5.2efb98bdcc4e9
fast-uri@3.0.6
3.1.9
1
continuoussecuritytooling/keycloak-reporting-cli:1.3.51be60d1bc942
fast-uri@3.1.8
3.1.9
1
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
fast-uri@3.0.6
3.1.9
1
cryptexlabs/authf:0.12.11189c07411d7c
fast-uri@3.0.3
3.1.9
1
cyfershepard/jellystat:1.1.12e61c759ec706
fast-uri@3.1.2
3.1.9
1
decisionrules/server:latestbb3a93224b5a
fast-uri@3.1.8
3.1.9
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
fast-uri@3.0.1
3.1.9
1
directus/directus:12.0.29c8470ea465c
fast-uri@3.1.2
3.1.9
1
docmost/docmost:0.96.0b56947fcfd08
fast-uri@3.1.7
3.1.9
1
drumsergio/lynxprompt:2.1.40e66bb00c2696
fast-uri@3.1.8
3.1.9
1
dserio83/velero-ui:0.3.1b4e1ec6664d3
fast-uri@3.0.6
3.1.9
1
ducktors/turborepo-remote-cache:lateste77820ae8c41
fast-uri@3.1.2
3.1.9
1
epam/ai-dial-admin-frontend:0.22.07bceacad3de2
fast-uri@3.1.8
3.1.9
1
etherpad/etherpad:latest3d59d633d285
fast-uri@3.1.8
3.1.9
1
etherpad/etherpad:3.3.6:latest98d395769b3b
fast-uri@3.1.8
3.1.9
1
evershop/evershop:latest2acdcd7ed59f
fast-uri@3.1.8
3.1.9
1
evoapicloud/evolution-api:latest966625532d90
fast-uri@3.1.0
3.1.9
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.