StackRadar

CVE-2026-42505

Unscored

Advisory

Published 7 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.004
32nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
4,298
of 17,821 indexed, latest versions
Container images
4,958
deployed by those charts
Fix available
1 of 1
affected package

Invoking Encrypted Client Hello privacy leak in crypto/tls

Carried by container images the latest versions of 4,298 of 17,821 indexed charts deploy, on 4,958 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+188 more1.25.124,958
OSV records
GO-2026-5856
Also known as
BIT-golang-2026-42505

Charts affected

4,298 by stars
ChartLatestAffected imagesRadar Score
knative-helm-operatorsalaboy1.9.02 of 2See more

knative-helm-operator salaboy 1.9.0

2 of the 2 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/operator/cmd/webhookdigest-pinned6c5c90cdf707
stdlib@go1.19.5
1.25.12
gcr.io/knative-releases/knative.dev/serving/cmd/default-domaindigest-pinned5e0429b70299
stdlib@go1.19.5
1.25.12

Open the chart page →

2,346
pagessamanvithkaranth1.0.01 of 3See more

pages samanvithkaranth 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.25.12

Open the chart page →

20,285
hellowsamarthya2.0.01 of 1See more

hellow samarthya 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
samarthya/spinnaker:v1.0ef06d81036af
stdlib@go1.17.6
1.25.12

Open the chart page →

2,122
saml-exportersaml-exporter0.5.02 of 2See more

saml-exporter saml-exporter 0.5.0

2 of the 2 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
ghcr.io/doodlescheduling/saml-exporter:v0.5.03d5a99841bc2
stdlib@go1.22.3
1.25.12
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
stdlib@go1.24.2
1.25.12

Open the chart page →

1,522
samplesample0.1.01 of 2See more

sample sample 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
library/mongo:noble6ede2806c78e
stdlib@go1.24.6
1.25.12

Open the chart page →

2,382
sample-applicationsample-application1.0.61 of 1See more

sample-application sample-application 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
ghcr.io/patricklaabs/sample-application:0.0.1f0935fa2eee3
stdlib@go1.22.0
1.25.12

Open the chart page →

532
speedtestsantisbon0.1.02 of 3See more

speedtest santisbon 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
stdlib@go1.26.3
1.25.12
library/influxdb:2.7b8d940ca9376
stdlib@go1.18.2
1.25.12

Open the chart page →

12,923
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
stdlib@go1.19.6
1.25.12

Open the chart page →

4,796
pagessarubits-pages1.0.01 of 3See more

pages sarubits-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.25.12

Open the chart page →

20,285
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
stdlib@go1.19.8
1.25.12

Open the chart page →

10,308
grafanasb-helm-charts0.4.01 of 1See more

grafana sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
grafana/grafana:12.2.22ebef928d7e5
stdlib@go1.25.3
1.25.12

Open the chart page →

1,832
harborsb-helm-charts0.3.02 of 2See more

harbor sb-helm-charts 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.11.1c017dd84ee96
stdlib@go1.22.6
1.25.12
goharbor/registry-photon:v2.11.15645d459af2b
stdlib@go1.22.6
1.25.12

Open the chart page →

1,695
keycloaksb-helm-charts0.3.01 of 2See more

keycloak sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
library/postgres:16-alpinecf78e76683b9
stdlib@go1.24.6
1.25.12

Open the chart page →

2,627
lokisb-helm-charts0.4.01 of 1See more

loki sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
grafana/loki:3.6.192bd5700577b
stdlib@go1.24.10
1.25.12

Open the chart page →

828
mimirsb-helm-charts0.3.01 of 1See more

mimir sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
grafana/mimir:2.15.085f55510e0d3
stdlib@go1.23.2
1.25.12

Open the chart page →

895
mongodbsb-helm-charts0.4.01 of 1See more

mongodb sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
library/mongo:7.0.140032d2ca20db
stdlib@go1.21.12
1.25.12

Open the chart page →

4,118
mysqlsb-helm-charts0.4.01 of 1See more

mysql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
library/mysql:8.4.3106d5197fd8e
stdlib@go1.18.2
1.25.12

Open the chart page →

1,097
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
library/postgres:16-alpinecf78e76683b9
stdlib@go1.24.6
1.25.12

Open the chart page →

10,002
opentelemetry-collectorsb-helm-charts0.3.01 of 1See more

opentelemetry-collector sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
stdlib@go1.21.7
1.25.12

Open the chart page →

1,742
postgresqlsb-helm-charts0.4.01 of 1See more

postgresql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
library/postgres:16.11468e1f126ca5
stdlib@go1.24.6
1.25.12

Open the chart page →

2,448
promtailsb-helm-charts0.4.01 of 1See more

promtail sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
grafana/promtail:3.6.18dcfdf466da0
stdlib@go1.24.10
1.25.12

Open the chart page →

2,295
pushgatewaysb-helm-charts0.3.01 of 1See more

pushgateway sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
quay.io/prometheus/pushgateway:v1.6.2979a69ab4a40
stdlib@go1.21.1
1.25.12

Open the chart page →

1,173
redissb-helm-charts0.4.01 of 1See more

redis sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
library/redis:7.4.1-alpinec1e88455c852
stdlib@go1.18.2
1.25.12

Open the chart page →

1,326
temposb-helm-charts0.4.01 of 1See more

tempo sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
grafana/tempo:2.9.065a578975943
stdlib@go1.25.1
1.25.12

Open the chart page →

948
thanos-compactorsb-helm-charts0.3.01 of 1See more

thanos-compactor sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.25.12

Open the chart page →

978
thanos-querysb-helm-charts0.3.01 of 1See more

thanos-query sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.25.12

Open the chart page →

978
thanos-query-frontendsb-helm-charts0.3.01 of 1See more

thanos-query-frontend sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.25.12

Open the chart page →

978
thanos-receivesb-helm-charts0.3.01 of 1See more

thanos-receive sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.25.12

Open the chart page →

978
thanos-rulersb-helm-charts0.3.01 of 1See more

thanos-ruler sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.25.12

Open the chart page →

978
thanos-sidecarsb-helm-charts0.3.01 of 1See more

thanos-sidecar sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.25.12

Open the chart page →

978
thanos-storesb-helm-charts0.3.01 of 1See more

thanos-store sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.25.12

Open the chart page →

978
wordpresssb-helm-charts0.4.01 of 2See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
library/mysql:8.0-debian9382e4f6f7f0
stdlib@go1.24.6
1.25.12

Open the chart page →

13,781
ed-traefikscaleway-charts0.2.01 of 1See more

ed-traefik scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
library/traefik:v1.7.345d47b7bb2546
stdlib@go1.16.12
1.25.12

Open the chart page →

2,141
ed-traefik2scaleway-charts0.2.01 of 1See more

ed-traefik2 scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
library/traefik:2.5.62f603f8d3abe
stdlib@go1.17.5
1.25.12

Open the chart page →

3,169
postgresscalified-postgresVerified publisher18.4.01 of 1See more

postgres scalified-postgres 18.4.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.25.12

Open the chart page →

1,734
sonarqubescalified-sonarqubeVerified publisher26.9.01 of 2See more

sonarqube scalified-sonarqube 26.9.0

1 of the 2 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
library/postgres:16-alpinecf78e76683b9
stdlib@go1.24.6
1.25.12

Open the chart page →

494
scalyr-k8snode-managerscalyr-k8snode-managerVerified publisher0.1.71 of 1See more

scalyr-k8snode-manager scalyr-k8snode-manager 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
ghcr.io/dodevops/scalyr-k8snode-manager:latestfc39fcdd3968
stdlib@go1.18.1
1.25.12

Open the chart page →

2,151
cert-manager-webhook-cloudnsschichtelVerified publisher1.2.01 of 1See more

cert-manager-webhook-cloudns schichtel 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
stdlib@go1.21.6
1.25.12

Open the chart page →

1,411
cosischichtelVerified publisher0.1.01 of 1See more

cosi schichtel 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-sig-storage/objectstorage-controller:v20221027-v0.1.1-8-g300019fa84b574e8027
stdlib@go1.18.3
1.25.12

Open the chart page →

1,310
crproxyschichtelVerified publisher0.1.41 of 1See more

crproxy schichtel 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
ghcr.io/daocloud/crproxy/crproxy:v0.8.0ee1eb3c9c9a1
stdlib@go1.21.11
1.25.12

Open the chart page →

1,379
draytek-exporterschichtelVerified publisher0.2.41 of 1See more

draytek-exporter schichtel 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
quay.io/superq/draytek-exporter:v0.2.03b577bdceaae
stdlib@go1.25.4
1.25.12

Open the chart page →

540
gickupschichtelVerified publisher0.0.41 of 1See more

gickup schichtel 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
buddyspencer/gickup:0.10.386b656f19b0c1
stdlib@go1.22.5
1.25.12

Open the chart page →

1,548
photonschichtelVerified publisher0.2.01 of 1See more

photon schichtel 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
rtuszik/photon-docker:2.4.021549c60f9e6
stdlib@go1.22.2
1.25.12

Open the chart page →

2,908
rabbitmq-cluster-operatorschichtelVerified publisher0.1.81 of 1See more

rabbitmq-cluster-operator schichtel 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
ghcr.io/rabbitmq/cluster-operator:2.17.25d690e6cd856
stdlib@go1.25.4
1.25.12

Open the chart page →

320
rabbitmq-topology-operatorschichtelVerified publisher0.1.91 of 1See more

rabbitmq-topology-operator schichtel 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
quay.io/rabbitmqoperator/messaging-topology-operator:1.18.1f97c36882244
stdlib@go1.24.6
1.25.12

Open the chart page →

385
s3-backupschichtelVerified publisher0.10.01 of 1See more

s3-backup schichtel 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
stdlib@go1.26.4
1.25.12

Open the chart page →

2,418
satisfactoryschichtelVerified publisher0.3.31 of 1See more

satisfactory schichtel 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.9464d11e36e10
stdlib@go1.18.1
1.25.12

Open the chart page →

3,588
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
stdlib@go1.20.2
1.25.12

Open the chart page →

5,602
cert-manager-desec-webhookschmitzis0.0.11 of 1See more

cert-manager-desec-webhook schmitzis 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
su541/cert-manager-desec-webhook:latest371ee33f83c1
stdlib@go1.19.10
1.25.12

Open the chart page →

1,785
cert-manager-webhook-bunnyschmitzis0.1.11 of 1See more

cert-manager-webhook-bunny schmitzis 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42505.

Container imageDigestPackageFixed in
ghcr.io/schmitzis/cert-manager-webhook-bunny:latest125e31c8e85a
stdlib@go1.19.13
1.25.12

Open the chart page →

1,513

Container images carrying it

4,958 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
hetznercloud/hcloud-csi-driver:1.6.01475d525f9a4
stdlib@go1.17
1.25.12
1
hetznercloud/hcloud-csi-driver:1.5.141dce5b33644
stdlib@go1.15.3
1.25.12
1
hetznercloud/hcloud-csi-driver:v2.3.2b7ed90d5fab2
stdlib@go1.19.7
1.25.12
1
hhaluk/mocktail:2.0.3350d19360038
stdlib@go1.17.7
1.25.12
1
hhyo/archery:v1.9.11aa41843419e
stdlib@go1.15.6
1.25.12
1
hibiken/asynqmon:latestac80bcffd2f9
stdlib@go1.18.10
1.25.12
1
hipages/php-fpm_exporter:2.2.09b5be9d3d955
stdlib@go1.17.10
1.25.12
1
hiversh/antigravity:0.1.45-microvm0e36d98402bc
stdlib@go1.19.8
1.25.12
1
hiversh/browser:0.1.45-microvmb5048c6342ce
stdlib@go1.19.8
1.25.12
1
hiversh/claude:0.1.45-microvm2fbf9f264498
stdlib@go1.19.8
1.25.12
1
hiversh/codex:0.1.45-microvm4f43130f51e5
stdlib@go1.19.8
1.25.12
1
hiversh/controller:0.1.45b0b85f8942c7
stdlib@go1.19.8
1.25.12
1
hiversh/copilot:0.1.45-microvm50c07b84f298
stdlib@go1.19.8
1.25.12
1
hiversh/node:0.1.45-alpine-microvm836a37641941
stdlib@go1.19.8
1.25.12
1
hiversh/openclaw:0.1.45-microvm958b7ebb4eb4
stdlib@go1.19.8
1.25.12
1
hiversh/python:0.1.45-3.13-alpine-microvm63a5ae179a9f
stdlib@go1.19.8
1.25.12
1
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
stdlib@go1.17.10
1.25.12
1
holiman/nodemonitor:latest5cd609761065
stdlib@go1.20.3
1.25.12
1
holoinsight/agent:latest5c3994e742f8
stdlib@go1.22.1
1.25.12
1
holoinsight/otelcontribcol:latest42ba8dc3113c
stdlib@go1.19
1.25.12
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
stdlib@go1.17.1
1.25.12
1
homeassistant/home-assistant:2026.75a531753cea9
stdlib@go1.25.6
1.25.12
1
homeassistant/home-assistant:2023.12.48d000332b09b
stdlib@go1.17.1
1.25.12
1
honeycombio/honeycomb-kubernetes-agent:2.7.448c38d0870f2
stdlib@go1.24.3
1.25.12
1
honglab/slack-emoji-maker:v0.0.1ca075a926fe1
stdlib@go1.20.7
1.25.12
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
stdlib@go1.21.10
1.25.12
1
huacnlee/gobackup:v3.1.1560be93229a5
stdlib@go1.26.3
1.25.12
1
huangchengwu6904/hi-app:cac-16910478061b932f8221a9
stdlib@go1.20.4
1.25.12
1
huseyinbabal/demory:0.0.0-rc.20ae8eb4053c60
stdlib@go1.17.2
1.25.12
1
huzafach/aws-cli-k8:1.0.06e271d43ea48
stdlib@go1.22.4
1.25.12
1
hyperledger/fabric-ca:1.5.1c7f3422ec1d5
stdlib@go1.15.7
1.25.12
1
hyperledger/fabric-ca:1.5.0f270dfeee91d
stdlib@go1.15.7
1.25.12
1
hyperledger/fabric-orderer:2.2.137294e05209b
stdlib@go1.14.4
1.25.12
1
hyperledger/fabric-peer:2.2.1bf4995c86af6
stdlib@go1.14.4
1.25.12
1
hyperledgerk8s/bc-explorer:v202305041f1a06b61f18
stdlib@go1.20.2
1.25.12
1
hyperledgerk8s/bc-saas:v0.0.1-20230524d8bc31176257
stdlib@go1.20.2
1.25.12
1
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
stdlib@go1.18.4
1.25.12
1
hyperledgerk8s/minio-mc:RELEASE.2023-01-28T20-29-38Z729b3d128487
stdlib@go1.19.4
1.25.12
1
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
stdlib@go1.19.4
1.25.12
1
hyperledgerk8s/tektoncd-operator:v0.64.0d0a3a35a138d
stdlib@go1.18.7
1.25.12
1
hyperledgerk8s/tekton-operator-webhook:v0.64.02237cb80f52b
stdlib@go1.18.7
1.25.12
1
iamdorsah/bastillion:v0.1db83a0254d81
stdlib@go1.17.13
1.25.12
1
ianw/quickchart:v1.7.1dc49dd460c37
stdlib@go1.13.1
1.25.12
1
ibarreche/cloud-reporting-ci:latest1f45af91da6a
stdlib@go1.16.15
1.25.12
1
igrantio/bb-consent-api:2023.12.22d2ea6546ffe
stdlib@go1.18.8
1.25.12
1
ildarmukhametzyanov/priceapp:0.115d23720a3ee
stdlib@go1.21.1
1.25.12
1
inaccel/cloud-init:latesta5d3d0af05c1
stdlib@go1.21.6
1.25.12
1
inaccel/device-selector:latest44b4f274f40b
stdlib@go1.21.9
1.25.12
1
inaccel/kubevirt-hack:latestbdfd61803a70
stdlib@go1.21.7
1.25.12
1
inbucket/inbucket:3.0.01f10a0efea69
stdlib@go1.17.1
1.25.12
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.