StackRadar

CVE-2026-67214

Medium

Advisory

Published 29 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.003
26th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
306
of 17,781 indexed, latest versions
Container images
317
deployed by those charts
Fix available
1 of 2
affected packages

nanoid: non-secure generators can loop indefinitely with negative size

Carried by container images the latest versions of 306 of 17,781 indexed charts deploy, on 317 images.

Affected packageAffected versionsFixed inImages
nanoidnpm2.1.11, 3.1.12, 3.1.16, 3.1.20+26 more3.3.16, 5.1.16317
node-postcssdeb8.4.31+~cs8.0.26-1no fix listed1
OSV records
GHSA-28wg-ghj8-5hjvUBUNTU-CVE-2026-67214

Charts affected

306 by stars
ChartLatestAffected imagesRadar Score
ethereumjsethereum-helm-chartsVerified publisher0.1.21 of 2See more

ethereumjs ethereum-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
ethpandaops/ethereumjs:masterfb84b718500f
nanoid@3.3.11
3.3.16

Open the chart page →

1,442
cap-captcha-serverf3k-techVerified publisher0.21.01 of 1See more

cap-captcha-server f3k-tech 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
tiago2/cap:2.159f5ae4e261e
nanoid@5.1.5
5.1.16

Open the chart page →

1,664
ranetogabisonfire0.1.21 of 1See more

raneto gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
nanoid@3.1.12
3.3.16

Open the chart page →

2,519
ghostgeek-cookbookVerified publisher2.2.01 of 1See more

ghost geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
library/ghost:4.37.0767230c0f263
nanoid@3.2.0
3.3.16

Open the chart page →

4,260
overseerrgeek-cookbookVerified publisher5.4.21 of 1See more

overseerr geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.26.1254d16af8f71
nanoid@3.1.23
3.3.16

Open the chart page →

3,444
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
nanoid@3.2.0
3.3.16

Open the chart page →

7,801
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
nanoid@3.3.4
3.3.16

Open the chart page →

5,079
youtubedl-materialgeek-cookbookVerified publisher4.4.21 of 1See more

youtubedl-material geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.23720b856bd2f
nanoid@2.1.11
3.3.16

Open the chart page →

4,410
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
nanoid@3.3.7
3.3.16

Open the chart page →

4,196
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
nanoid@3.3.11
3.3.16

Open the chart page →

15,712
kenerkenerVerified publisher0.2.01 of 1See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
nanoid@3.3.8
3.3.16

Open the chart page →

5,228
kikplatekikplateVerified publisher0.22.01 of 3See more

kikplate kikplate 0.22.0

1 of the 3 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
ghcr.io/kikplate/kikplate-web:main34bbb61e8e42
nanoid@3.3.11
3.3.16

Open the chart page →

2,770
dashykrzwiatrzyk1.0.01 of 1See more

dashy krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
nanoid@3.3.4
3.3.16

Open the chart page →

3,143
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
langgenius/dify-web:0.6.11a2a294743634
nanoid@3.3.6
3.3.16

Open the chart page →

20,403
bulwark-maill4gVerified publisher0.2.21 of 1See more

bulwark-mail l4g 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
ghcr.io/bulwarkmail/webmail:1.6.0f0a266506fcf
nanoid@3.3.11
3.3.16

Open the chart page →

800
chibisafel4gVerified publisher0.1.12 of 3See more

chibisafe l4g 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
chibisafe/chibisafe:latest836467a50792
nanoid@3.3.7
3.3.16
chibisafe/chibisafe-server:latest3da4fcbc1a18
nanoid@3.3.7
3.3.16

Open the chart page →

5,654
mcpmcp-chartsVerified publisher0.0.231 of 7See more

mcp mcp-charts 0.0.23

1 of the 7 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
glarad/mcp-management-portal-clr:0.6.8807e453354a7
nanoid@2.1.11
3.3.16

Open the chart page →

6,929
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
nanoid@3.3.11
3.3.16

Open the chart page →

2,575
kuttone-acre-fundVerified publisher0.2.51 of 1See more

kutt one-acre-fund 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
kutt/kutt:latestfa3d24a89b04
nanoid@3.3.8
3.3.16

Open the chart page →

454
opentelemetry-demoopentelemetry-helmVerified publisher0.41.11 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

1 of the 34 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.0.0-frontend9505e349e140
nanoid@3.3.15
3.3.16

Open the chart page →

22,420
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
nanoid@3.3.11
3.3.16

Open the chart page →

6,873
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
nanoid@3.3.11
3.3.16

Open the chart page →

6,883
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
nanoid@3.3.11
3.3.16

Open the chart page →

7,035
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
nanoid@5.0.6
5.1.16

Open the chart page →

31,844
pumejwebapppumejnodejswebapp0.1.01 of 1See more

pumejwebapp pumejnodejswebapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
pumejlab/nodejs-webapp:latestf563eabcb819
nanoid@3.3.3
3.3.16

Open the chart page →

1,164
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
nanoid@5.1.7
5.1.16

Open the chart page →

5,482
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
nanoid@3.3.8
3.3.16

Open the chart page →

2,823
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
nanoid@3.3.7
3.3.16

Open the chart page →

30,234
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
nanoid@3.3.11
3.3.16

Open the chart page →

38,107
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
nanoid@3.3.11
3.3.16

Open the chart page →

5,213
vuiseriohub1.0.61 of 3See more

vui seriohub 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
dserio83/velero-ui:0.3.1b4e1ec6664d3
nanoid@3.3.11
3.3.16

Open the chart page →

11,532
speckle-serverspeckleVerified publisher2.26.34 of 4See more

speckle-server speckle 2.26.3

4 of the 4 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.26.3d51e1b0cf231
nanoid@5.1.5
5.1.16
speckle/speckle-preview-service:2.26.3092384dba45d
nanoid@5.1.5
5.1.16
speckle/speckle-server:2.26.379f14a2bf931
nanoid@3.3.11
3.3.16
speckle/speckle-webhook-service:2.26.3c58eb372c488
nanoid@5.1.5
5.1.16

Open the chart page →

10,380
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
nanoid@3.3.7
3.3.16

Open the chart page →

12,581
devportal-admin-uiveecode-platformVerified publisher0.5.41 of 1See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
veecode/devportal-admin-ui:0.4.30c69fd286b489
nanoid@3.3.7
3.3.16

Open the chart page →

5,225
tdarrvhdirkVerified publisher5.0.51 of 2See more

tdarr vhdirk 5.0.5

1 of the 2 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
nanoid@2.1.11
3.3.16

Open the chart page →

26,657
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
nanoid@3.2.0
3.3.16

Open the chart page →

3,833
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
nanoid@3.3.11
3.3.16

Open the chart page →

10,090
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
nanoid@3.3.1
3.3.16

Open the chart page →

9,783
trifidzazukoOfficialVerified publisher0.2.11 of 1See more

trifid zazuko 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
ghcr.io/zazuko/trifid:v6.0.159bda2bf65d4
nanoid@3.3.12
3.3.16

Open the chart page →

338
adeptia-automate-mcpadeptia-automate-mcp1.0.02 of 2See more

adeptia-automate-mcp adeptia-automate-mcp 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
nanoid@3.3.11
3.3.16
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
nanoid@3.3.11
3.3.16

Open the chart page →

3,600
admin-portaladmin-web-portal1.2.11 of 2See more

admin-portal admin-web-portal 1.2.1

1 of the 2 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
soulou2019/node-server:latest5e6ecfcc109e
nanoid@3.3.6
3.3.16

Open the chart page →

3,419
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
nanoid@3.3.11
3.3.16

Open the chart page →

3,820
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
nanoid@3.3.7
3.3.16

Open the chart page →

4,497
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
nanoid@3.3.3
3.3.16

Open the chart page →

3,437
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
nanoid@3.3.4
3.3.16

Open the chart page →

2,353
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
nanoid@3.3.4
3.3.16

Open the chart page →

2,396
argonix-apiargonix0.2.01 of 4See more

argonix-api argonix 0.2.0

1 of the 4 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api-frontend:1.0.0b6a67099e4c5
nanoid@3.3.11
3.3.16

Open the chart page →

4,923
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
nanoid@3.3.4
3.3.16

Open the chart page →

18,277
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
nanoid@3.3.7
3.3.16

Open the chart page →

32,501
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-67214.

Container imageDigestPackageFixed in
ltdstudio/terraforming-mars:latest0e76c6f4eac0
nanoid@3.1.23
3.3.16

Open the chart page →

7,152

Container images carrying it

317 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
rcdelacruz/my-strapi-app:js-amd6438007f358355
nanoid@3.3.7
3.3.16
3
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
nanoid@3.3.4
3.3.16
3
ghcr.io/seerr-team/seerr:latest:v3.4.1f4768de5f616
nanoid@3.3.12
3.3.16
3
governify/assets-manager:v1.4.12987672448c7
nanoid@3.1.25
3.3.16
2
hookiesolutions/webhookie:latest0629694246ba
nanoid@2.1.11
3.3.16
2
hoppscotch/hoppscotch:2024.8.2f1da831950b7
nanoid@3.3.7
3.3.16
2
kutt/kutt:latest:v3.2.6fa3d24a89b04
nanoid@3.3.8
3.3.16
2
louislam/uptime-kuma:2.3.29aeb4e51d038
nanoid@3.3.12
3.3.16
2
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
nanoid@3.3.11
3.3.16
2
moreillon/api-proxy:a3e8b41e9e578c9653b6
nanoid@3.3.3
3.3.16
2
moreillon/group-manager:v4.9.0d5a0ec8394c0
nanoid@3.3.1
3.3.16
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
nanoid@3.3.3
3.3.16
2
opensearchproject/opensearch-dashboards:3.8.0ca28e40a095f
nanoid@5.1.9
5.1.16
2
outlinewiki/outline:0.69.1d060dcd8f9aa
nanoid@3.3.4
3.3.16
2
rajnandan1/kener:3.2.1930407afca731
nanoid@3.3.8
3.3.16
2
requarks/wiki:2:latest68f0d1848261
nanoid@3.2.0
3.3.16
2
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
nanoid@3.3.12
3.3.16
2
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
nanoid@3.1.23
3.3.16
2
sysnet4admin/dashboard:bluec5bd3bb1b5a6
nanoid@3.3.7
3.3.16
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
nanoid@3.3.1
3.3.16
2
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
nanoid@3.3.4
3.3.16
2
ghcr.io/nucleuscloud/neosync/app:0.5.41ca31ec35b829
nanoid@3.3.8
3.3.16
2
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
nanoid@2.1.11
3.3.16
2
activepieces/activepieces:0.23.0c26188b44e62
nanoid@3.3.6
3.3.16
1
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
nanoid@3.3.11
3.3.16
1
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
nanoid@3.3.11
3.3.16
1
alquimiaai/studio:certification38a1f0341982
nanoid@3.3.11
3.3.16
1
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
nanoid@3.3.7
3.3.16
1
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
nanoid@3.3.11
3.3.16
1
apimap/developer:v1.3.1406d3858e20c
nanoid@3.3.4
3.3.16
1
apimap/portal:v2.4.0041a4790c65c
nanoid@3.3.4
3.3.16
1
arfath29/3-tier-app-frontend:latest384b3e377f47
nanoid@3.1.23
3.3.16
1
assistiot/open_api_frontend:1.0.1f11d82defc70
nanoid@3.3.4
3.3.16
1
automatischio/automatisch:0.15.03bace7a12d5f
nanoid@3.3.11
3.3.16
1
baserow/baserow:1.30.1df0c42eb67e8
nanoid@3.3.7
3.3.16
1
belirta/beli-docker:v1.0.0f65ad0e23b4d
nanoid@3.3.3
3.3.16
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
nanoid@3.3.4
3.3.16
1
bnwokoye/nodejswebapp:latest74de7dc7ebfb
nanoid@3.3.3
3.3.16
1
ccjacobs14/amazon:59a9b14a6f09e
nanoid@3.3.6
3.3.16
1
chainsafe/lodestar:latest5593f6e97912
nanoid@3.3.11
3.3.16
1
chainsafe/lodestar:v1.27.07b9fe4aa8073
nanoid@3.3.8
3.3.16
1
chibisafe/chibisafe:latest836467a50792
nanoid@3.3.7
3.3.16
1
chibisafe/chibisafe-server:latest3da4fcbc1a18
nanoid@3.3.7
3.3.16
1
chocobozzz/peertube:v8.1.5052712130691
nanoid@3.3.11
3.3.16
1
coderaiser/cloudcmd:16.6.1b34a9775c7ce
nanoid@3.3.4
3.3.16
1
coldatom/containers-security-front:latest7c2fbbb41bcf
nanoid@3.3.4
3.3.16
1
conduction/conduction-ui-app:devd591f5e6f2a9
nanoid@3.1.20
3.3.16
1
countly/api:25.05.4f4cc7447c4f5
nanoid@3.3.3
3.3.16
1
countly/countly-server:25.05.4e3c238248f99
nanoid@3.3.3
3.3.16
1
countly/frontend:25.05.42acbc11499b6
nanoid@3.3.3
3.3.16
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.