StackRadar

CVE-2026-41991

Medium

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.7
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,258
of 17,803 indexed, latest versions
Container images
2,216
deployed by those charts
Fix available
2 of 2
affected packages

Security update for gzip

Carried by container images the latest versions of 2,258 of 17,803 indexed charts deploy, on 2,216 images.

Affected packageAffected versionsFixed inImages
gzipdeb1.6-3ubuntu1, 1.6-4ubuntu1, 1.6-5ubuntu1, 1.6-5ubuntu1.1+11 more1.6-4ubuntu1+esm2, 1.10-4ubuntu4.2, 1.12-1ubuntu3.2, 1.13-1+deb13u1+2 more2,207
gziprpm1.10-150200.10.1, 1.13-160000.2.21.10-150200.13.1, 1.13-160000.3.19
OSV records
DEBIAN-CVE-2026-41991UBUNTU-CVE-2026-41991ECHO-233f-78f2-a73bSUSE-SU-2026:22818-1SUSE-SU-2026:3269-1
Also known as
USN-8512-1, USN-8733-1

Charts affected

2,258 by stars
ChartLatestAffected imagesRadar Score
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
library/redis:6.2143f7bfc2358
gzip@1.12-1
no fix listed

Open the chart page →

6,667
elastictranscoderluiscajl0.46.04 of 4See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
gzip@1.6-5ubuntu1
no fix listed
elastictranscoder/media-storage:f6d861a026208b8c2359
gzip@1.6-5ubuntu1
no fix listed
elastictranscoder/transcoder:627e21dcb4a0327029e6
gzip@1.6-5ubuntu1
no fix listed
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
gzip@1.6-5ubuntu1
no fix listed

Open the chart page →

58,289
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:latest139dfee1c6f8
gzip@1.12-1
no fix listed

Open the chart page →

27,754
hyperglassm0nsterrr-hyperglassVerified publisher4.2.11 of 2See more

hyperglass m0nsterrr-hyperglass 4.2.1

1 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
valkey/valkey:9.0.2930b41430fb7
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

4,699
jellyfinm0nsterrr-jellyfinVerified publisher2.3.51 of 1See more

jellyfin m0nsterrr-jellyfin 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

2,658
kea-exporterm0nsterrr-kea-exporterVerified publisher2.2.11 of 1See more

kea-exporter m0nsterrr-kea-exporter 2.2.1

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ghcr.io/mweinelt/kea-exporter:v0.7.1d7b77020e924
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,093
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
gzip@1.12-1
no fix listed

Open the chart page →

9,848
magistralamagistrala-devopsVerified publisher0.16.22 of 42See more

magistrala magistrala-devops 0.16.2

2 of the 42 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31-latestcaa5b411be16
gzip@1.10-4ubuntu4.1
1.10-4ubuntu4.2
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
gzip@1.10-4ubuntu4.1
1.10-4ubuntu4.2

Open the chart page →

24,748
docker-mailservermailserverVerified publisher0.2.651 of 9See more

docker-mailserver mailserver 0.2.65

1 of the 9 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
mvance/unbound:1.22.076906da36d18
gzip@1.12-1
no fix listed

Open the chart page →

11,536
demoshopmakaira2.4.02 of 4See more

demoshop makaira 2.4.0

2 of the 4 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
gzip@1.13-1
1.13-1+deb13u1
library/php:8.4-fpm59fa733c9af6
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

4,565
plane-mcp-servermakeplaneVerified publisher1.0.02 of 2See more

plane-mcp-server makeplane 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
makeplane/plane-mcp-server:v0.3.071b7252adef0
gzip@1.13-1
1.13-1+deb13u1
valkey/valkey:9.1.164e361b630ec
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

2,647
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
gzip@1.12-1
no fix listed

Open the chart page →

7,366
marge-botmarge-bot-helm1.3.51 of 1See more

marge-bot marge-bot-helm 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.16.0b59f01bc0418
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

3,619
circleci-runnermatic-insurance0.1.11 of 1See more

circleci-runner matic-insurance 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
circleci/runner:launch-agent9bdc62f02162
gzip@1.10-0ubuntu4.1
no fix listed

Open the chart page →

4,163
nginxmatic-insurance1.1.11 of 1See more

nginx matic-insurance 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,879
mauticmautic-chartVerified publisher1.0.22 of 3See more

mautic mautic-chart 1.0.2

2 of the 3 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.2.6-debian-12-r0373c3c260571
gzip@1.12-1
no fix listed
mautic/mautic:7-apacheeb8cc73d97e1
gzip@1.12-1
no fix listed

Open the chart page →

8,475
mayastormayastorVerified publisher2.12.12 of 31See more

mayastor mayastor 2.12.1

2 of the 31 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
gzip@1.12-1ubuntu3
1.12-1ubuntu3.2
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
gzip@1.12-1
no fix listed

Open the chart page →

21,596
eoloplantmca-eoloplaner0.1.03 of 7See more

eoloplant mca-eoloplaner 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
hugohg34/toposervice:0.0.2812a03b3f274
gzip@1.10-0ubuntu4
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
gzip@1.10-0ubuntu4
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
gzip@1.10-4ubuntu4.1
1.10-4ubuntu4.2

Open the chart page →

29,857
mcp-hangarmcp-hangarVerified publisher0.15.221 of 1See more

mcp-hangar mcp-hangar 0.15.22

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ghcr.io/mcp-hangar/mcp-hangar:2.21.0ee409f91176c
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

854
mcroutermcrouterVerified publisher0.2.02 of 2See more

mcrouter mcrouter 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
library/memcached:1.6.4226983a43c918
gzip@1.13-1
1.13-1+deb13u1
ghcr.io/dragoangel/mcrouter:v2026.06.29.0042afcffe67d0
gzip@1.12-1ubuntu3.1
1.12-1ubuntu3.2

Open the chart page →

2,347
backstagemcwarmanVerified publisher0.10.102 of 2See more

backstage mcwarman 0.10.10

2 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
gzip@1.13-1
1.13-1+deb13u1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
gzip@1.12-1
no fix listed

Open the chart page →

9,816
mdai-hubmdai-hubVerified publisher0.10.11 of 14See more

mdai-hub mdai-hub 0.10.1

1 of the 14 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
public.ecr.aws/decisiveai/valkey:9.0.159c7e728fb3a
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

4,920
dependency-trackmediamarktsaturn1.9.21 of 2See more

dependency-track mediamarktsaturn 1.9.2

1 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.14.21ba4f004e1ec
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

3,855
flaresolverrmedia-servarrVerified publisher0.18.21 of 1See more

flaresolverr media-servarr 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
gzip@1.12-1
no fix listed

Open the chart page →

6,613
tinymediamanagermedia-servarrVerified publisher1.6.31 of 2See more

tinymediamanager media-servarr 1.6.3

1 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

8,088
cameramedia-streaming-meshVerified publisher0.2.52 of 3See more

camera media-streaming-mesh 0.2.5

2 of the 3 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
gzip@1.10-0ubuntu4.1
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
gzip@1.10-0ubuntu4.1
no fix listed

Open the chart page →

18,682
crdsmedia-streaming-meshVerified publisher0.0.11 of 2See more

crds media-streaming-mesh 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ciscolabs/msm-nc:0710202336d02faad958
gzip@1.10-4ubuntu4.1
1.10-4ubuntu4.2

Open the chart page →

3,728
msmmedia-streaming-meshVerified publisher0.1.175 of 6See more

msm media-streaming-mesh 0.1.17

5 of the 6 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
gzip@1.12-1ubuntu3
1.12-1ubuntu3.2
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
gzip@1.12-1ubuntu3
1.12-1ubuntu3.2
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
gzip@1.12-1ubuntu3
1.12-1ubuntu3.2
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
gzip@1.12-1ubuntu3
1.12-1ubuntu3.2
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
gzip@1.12-1ubuntu3
1.12-1ubuntu3.2

Open the chart page →

11,603
msm-rtspmedia-streaming-meshVerified publisher0.0.22 of 2See more

msm-rtsp media-streaming-mesh 0.0.2

2 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
gzip@1.10-0ubuntu4.1
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
gzip@1.10-0ubuntu4.1
no fix listed

Open the chart page →

18,682
rtspmedia-streaming-meshVerified publisher0.0.142 of 2See more

rtsp media-streaming-mesh 0.0.14

2 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
gzip@1.10-0ubuntu4.1
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
gzip@1.10-0ubuntu4.1
no fix listed

Open the chart page →

18,682
meerschaummeerschaumVerified publisher0.2.01 of 1See more

meerschaum meerschaum 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
bmeares/meerschaum:2.8.48e9c5bacaa82
gzip@1.12-1
no fix listed

Open the chart page →

5,933
memgptmemgptVerified publisher0.3.191 of 2See more

memgpt memgpt 0.3.19

1 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ankane/pgvector:v0.5.1d3a9d8ac27bb
gzip@1.12-1
no fix listed

Open the chart page →

5,921
memgraph-mcpmemgraphVerified publisher1.0.01 of 1See more

memgraph-mcp memgraph 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,725
istiomesosphere1.25.11 of 2See more

istio mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
gzip@1.12-1
no fix listed

Open the chart page →

5,480
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
gzip@1.12-1ubuntu3.1
1.12-1ubuntu3.2

Open the chart page →

2,598
istio-helm-istiodmesosphere1.25.11 of 2See more

istio-helm-istiod mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
gzip@1.12-1ubuntu3.1
1.12-1ubuntu3.2

Open the chart page →

3,844
kubeaddons-catalogmesosphere0.1.161 of 2See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
gzip@1.10-0ubuntu4
no fix listed

Open the chart page →

12,067
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
gzip@1.12-1
no fix listed

Open the chart page →

7,513
kudomesosphere0.1.41 of 1See more

kudo mesosphere 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
kudobuilder/controller:v0.9.069072d979708
gzip@1.6-5ubuntu1
no fix listed

Open the chart page →

5,702
nvidiamesosphere0.4.42 of 2See more

nvidia mesosphere 0.4.4

2 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
gzip@1.10-0ubuntu4
no fix listed
nvidia/k8s-device-plugin:v0.9.0964847cc3fd8
gzip@1.6-4ubuntu1
1.6-4ubuntu1+esm2

Open the chart page →

10,516
testmesosphere0.1.01 of 1See more

test mesosphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,879
dexmesosphere-stable2.14.12 of 5See more

dex mesosphere-stable 2.14.1

2 of the 5 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
gzip@1.12-1
no fix listed
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
gzip@1.6-4ubuntu1
1.6-4ubuntu1+esm2

Open the chart page →

19,307
istiomesosphere-stable1.25.11 of 2See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
gzip@1.12-1
no fix listed

Open the chart page →

5,480
istio-helm-cnimesosphere-stable1.23.61 of 1See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
istio/install-cni:1.23.6ab34c4740f44
gzip@1.12-1ubuntu3
1.12-1ubuntu3.2

Open the chart page →

3,349
istio-helm-istiodmesosphere-stable1.23.61 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
gzip@1.12-1ubuntu3
1.12-1ubuntu3.2

Open the chart page →

4,672
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
gzip@1.10-0ubuntu4
no fix listed

Open the chart page →

68,442
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
gzip@1.12-1
no fix listed

Open the chart page →

10,568
localpathprovisionermesosphere-stable0.1.21 of 1See more

localpathprovisioner mesosphere-stable 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.5e66f32d19eb9
gzip@1.6-4ubuntu1
1.6-4ubuntu1+esm2

Open the chart page →

18,113
multusmesosphere-stable0.1.11 of 1See more

multus mesosphere-stable 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.2.4-thick3c20900b5381
gzip@1.13-1
1.13-1+deb13u1

Open the chart page →

1,827
valkeymesosphere-stable3.0.221 of 1See more

valkey mesosphere-stable 3.0.22

1 of the 1 container images this version deploys carry CVE-2026-41991.

Container imageDigestPackageFixed in
bitnamilegacy/valkey:8.1.3-debian-12-r1a185655855b3
gzip@1.12-1
no fix listed

Open the chart page →

2,671

Container images carrying it

2,216 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
gzip@1.12-1
no fix listed
1
registry.gitlab.com/egos-tech/smtp:latestdf842ed79211
gzip@1.13-1
1.13-1+deb13u1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
gzip@1.13-1
1.13-1+deb13u1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
gzip@1.12-1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq:3.12.145a9334f371f3
gzip@1.12-1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
gzip@1.13-1
1.13-1+deb13u1
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
gzip@1.10-0ubuntu4
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
gzip@1.12-1
no fix listed
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
gzip@1.12-1
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
gzip@1.13-1
1.13-1+deb13u1
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
gzip@1.12-1
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
gzip@1.12-1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
gzip@1.12-1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
gzip@1.12-1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
gzip@1.12-1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
gzip@1.12-1
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.