StackRadar

CVE-2026-41324

High

Advisory

Published 16 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
26th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
43
of 17,781 indexed, latest versions
Container images
49
deployed by those charts
Fix available
1 of 2
affected packages

basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()

Carried by container images the latest versions of 43 of 17,781 indexed charts deploy, on 49 images.

Affected packageAffected versionsFixed inImages
basic-ftpnpm5.0.3, 5.0.4, 5.0.5, 5.1.0+2 more5.3.048
node-proxy-agentsdeb7.1.0~0~2023071921-5no fix listed1
OSV records
GHSA-rp42-5vxx-qpwrUBUNTU-CVE-2026-41324

Charts affected

43 by stars
ChartLatestAffected imagesRadar Score
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
langgenius/dify-web:1.10.1-fix.1c306ac577912
basic-ftp@5.0.5
5.3.0

Open the chart page →

19,391
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.14.391e4f0a7feed
basic-ftp@5.0.5
5.3.0

Open the chart page →

11,384
krokicowboysysopVerified publisher6.1.04 of 5See more

kroki cowboysysop 6.1.0

4 of the 5 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
yuzutech/kroki-bpmn:0.29.1444805c4b917
basic-ftp@5.0.5
5.3.0
yuzutech/kroki-diagramsnet:0.29.1b810edbf9c62
basic-ftp@5.0.5
5.3.0
yuzutech/kroki-excalidraw:0.29.157917319ea70
basic-ftp@5.0.5
5.3.0
yuzutech/kroki-mermaid:0.29.1963b4acfde6e
basic-ftp@5.0.5
5.3.0

Open the chart page →

6,743
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.11.10c58e7b47bb6
basic-ftp@5.0.5
5.3.0

Open the chart page →

6,168
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
basic-ftp@5.0.3
5.3.0

Open the chart page →

9,746
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
basic-ftp@5.0.5
5.3.0

Open the chart page →

7,450
soketisoketi2.0.01 of 1See more

soketi soketi 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
quay.io/soketi/soketi:1.6-16-debian713223456cf1
basic-ftp@5.0.3
5.3.0

Open the chart page →

1,636
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
basic-ftp@5.2.0
5.3.0

Open the chart page →

4,016
joplin-serverdjjudas21Verified publisher5.5.81 of 1See more

joplin-server djjudas21 5.5.8

1 of the 1 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
joplin/server:2.14.2-betab87564ef34e9
basic-ftp@5.0.3
5.3.0

Open the chart page →

3,925
enbuildenbuildVerified publisher0.0.503 of 6See more

enbuild enbuild 0.0.50

3 of the 6 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
basic-ftp@5.2.0
5.3.0
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
basic-ftp@5.0.5
5.3.0
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
basic-ftp@5.2.0
5.3.0

Open the chart page →

31,510
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
langgenius/dify-web:0.6.11a2a294743634
basic-ftp@5.0.5
5.3.0

Open the chart page →

20,403
litlyxlitlyx0.2.01 of 5See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
litlyx/litlyx-dashboard:lateste64ff2d52385
basic-ftp@5.0.5
5.3.0

Open the chart page →

7,874
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
basic-ftp@5.2.2
5.3.0

Open the chart page →

31,844
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.26.3092384dba45d
basic-ftp@5.0.5
5.3.0

Open the chart page →

10,380
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
basic-ftp@5.0.5
5.3.0

Open the chart page →

4,880
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad2 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
basic-ftp@5.0.5
5.3.0
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
basic-ftp@5.0.5
5.3.0

Open the chart page →

18,293
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
node-proxy-agents@7.1.0~0~2023071921-5
no fix listed

Open the chart page →

13,220
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
basic-ftp@5.0.5
5.3.0

Open the chart page →

14,559
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
langgenius/dify-web:1.0.0d64914ff0d6d
basic-ftp@5.0.5
5.3.0

Open the chart page →

19,224
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
basic-ftp@5.0.5
5.3.0

Open the chart page →

4,551
dumpstoredumpstore0.1.11 of 2See more

dumpstore dumpstore 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
basic-ftp@5.0.5
5.3.0

Open the chart page →

4,251
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
library/kibana:7.17.150172f1c538e7
basic-ftp@5.0.3
5.3.0

Open the chart page →

34,754
h2ph2pVerified publisher1.0.11 of 1See more

h2p h2p 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
dacinfomotion/h2p:latest68fa393b472c
basic-ftp@5.0.3
5.3.0

Open the chart page →

1,713
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
basic-ftp@5.0.4
5.3.0

Open the chart page →

63,461
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
basic-ftp@5.2.0
5.3.0

Open the chart page →

8,405
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
basic-ftp@5.0.3
5.3.0

Open the chart page →

4,560
readability-js-serverreadability-js-server0.1.01 of 1See more

readability-js-server readability-js-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
phpdockerio/readability-js-server:1.8.0ea8354b42600
basic-ftp@5.1.0
5.3.0

Open the chart page →

1,858
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
basic-ftp@5.0.3
5.3.0

Open the chart page →

7,413
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
basic-ftp@5.1.0
5.3.0

Open the chart page →

5,819
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
basic-ftp@5.0.5
5.3.0

Open the chart page →

4,684
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
basic-ftp@5.0.5
5.3.0

Open the chart page →

5,950
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e11 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of the 5 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
basic-ftp@5.0.5
5.3.0

Open the chart page →

16,368
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb1 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of the 5 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
basic-ftp@5.0.5
5.3.0

Open the chart page →

16,400
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091141 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

1 of the 5 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
basic-ftp@5.0.5
5.3.0

Open the chart page →

16,400
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b21 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

1 of the 5 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
basic-ftp@5.0.5
5.3.0

Open the chart page →

16,019
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef1 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
basic-ftp@5.0.5
5.3.0

Open the chart page →

15,635
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e1 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
basic-ftp@5.0.5
5.3.0

Open the chart page →

11,100
lodestar-validatorstakewise1.2.01 of 1See more

lodestar-validator stakewise 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
chainsafe/lodestar:v1.27.07b9fe4aa8073
basic-ftp@5.0.3
5.3.0

Open the chart page →

4,052
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
basic-ftp@5.2.0
5.3.0

Open the chart page →

4,305
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
basic-ftp@5.0.5
5.3.0

Open the chart page →

5,984
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.14.491c8d793746f
basic-ftp@5.0.5
5.3.0

Open the chart page →

5,484
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
basic-ftp@5.0.3
5.3.0

Open the chart page →

6,285
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2026-41324.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:2.18.00ecd8444add2
basic-ftp@5.0.5
5.3.0

Open the chart page →

9,381

Container images carrying it

49 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
basic-ftp@5.0.5
5.3.0
1
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
basic-ftp@5.2.0
5.3.0
1
chainsafe/lodestar:v1.27.07b9fe4aa8073
basic-ftp@5.0.3
5.3.0
1
codetogether/codetogether:latest4348c8a38752
basic-ftp@5.0.5
5.3.0
1
dacinfomotion/h2p:latest68fa393b472c
basic-ftp@5.0.3
5.3.0
1
directus/directus:11.1.0e3c8bb975350
basic-ftp@5.0.5
5.3.0
1
diygod/rsshub:2025-11-097a6312cac0d5
basic-ftp@5.0.5
5.3.0
1
joplin/server:3.0-beta52af57880c0e
basic-ftp@5.0.3
5.3.0
1
joplin/server:2.14.2-betab87564ef34e9
basic-ftp@5.0.3
5.3.0
1
jupyterhub/jupyterhub:5.4.63974ba945e65
node-proxy-agents@7.1.0~0~2023071921-5
no fix listed
1
langgenius/dify-web:0.6.11a2a294743634
basic-ftp@5.0.5
5.3.0
1
langgenius/dify-web:1.10.1-fix.1c306ac577912
basic-ftp@5.0.5
5.3.0
1
langgenius/dify-web:1.0.0d64914ff0d6d
basic-ftp@5.0.5
5.3.0
1
library/kibana:7.17.150172f1c538e7
basic-ftp@5.0.3
5.3.0
1
library/kibana:8.18.004c0fc150f3a
basic-ftp@5.0.3
5.3.0
1
litlyx/litlyx-dashboard:lateste64ff2d52385
basic-ftp@5.0.5
5.3.0
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
basic-ftp@5.0.3
5.3.0
1
nocodb/nocodb:0.301.5d9516f0bf546
basic-ftp@5.2.0
5.3.0
1
opensearchproject/opensearch-dashboards:2.18.00ecd8444add2
basic-ftp@5.0.5
5.3.0
1
phpdockerio/readability-js-server:1.8.0ea8354b42600
basic-ftp@5.1.0
5.3.0
1
sigp/siren:v3.0.42c219b04758e
basic-ftp@5.0.5
5.3.0
1
speckle/speckle-preview-service:2.26.3092384dba45d
basic-ftp@5.0.5
5.3.0
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
basic-ftp@5.0.5
5.3.0
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
basic-ftp@5.0.5
5.3.0
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
basic-ftp@5.0.5
5.3.0
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
basic-ftp@5.0.5
5.3.0
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
basic-ftp@5.0.5
5.3.0
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
basic-ftp@5.0.5
5.3.0
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
basic-ftp@5.0.5
5.3.0
1
treskon/portrait-ui:DEV-lateste7970783bc8d
basic-ftp@5.2.2
5.3.0
1
wazuh/wazuh-dashboard:4.11.10c58e7b47bb6
basic-ftp@5.0.5
5.3.0
1
wazuh/wazuh-dashboard:4.14.491c8d793746f
basic-ftp@5.0.5
5.3.0
1
wazuh/wazuh-dashboard:4.14.391e4f0a7feed
basic-ftp@5.0.5
5.3.0
1
yuzutech/kroki-bpmn:0.29.1444805c4b917
basic-ftp@5.0.5
5.3.0
1
yuzutech/kroki-diagramsnet:0.29.1b810edbf9c62
basic-ftp@5.0.5
5.3.0
1
yuzutech/kroki-excalidraw:0.29.157917319ea70
basic-ftp@5.0.5
5.3.0
1
yuzutech/kroki-mermaid:0.29.1963b4acfde6e
basic-ftp@5.0.5
5.3.0
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
basic-ftp@5.2.0
5.3.0
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
basic-ftp@5.0.5
5.3.0
1
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
basic-ftp@5.0.5
5.3.0
1
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
basic-ftp@5.0.5
5.3.0
1
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
basic-ftp@5.0.5
5.3.0
1
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
basic-ftp@5.1.0
5.3.0
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
basic-ftp@5.0.3
5.3.0
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
basic-ftp@5.0.4
5.3.0
1
quay.io/soketi/soketi:1.6-16-debian713223456cf1
basic-ftp@5.0.3
5.3.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
basic-ftp@5.2.0
5.3.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
basic-ftp@5.0.5
5.3.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
basic-ftp@5.2.0
5.3.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.