StackRadar

CVE-2026-69247

High

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
344
of 17,781 indexed, latest versions
Container images
237
deployed by those charts
Fix available
1 of 2
affected packages

cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing

Carried by container images the latest versions of 344 of 17,781 indexed charts deploy, on 237 images.

Affected packageAffected versionsFixed inImages
cryptographypypi44.0.0, 44.0.1, 44.0.2, 44.0.3+18 more50.0.0237
python-cryptographydeb46.0.5-1ubuntu2no fix listed1
OSV records
GHSA-g6cj-pr64-35w5UBUNTU-CVE-2026-69247
Also known as
PYSEC-2026-3552

Charts affected

344 by stars
ChartLatestAffected imagesRadar Score
pgadmin4runixVerified publisher1.66.01 of 1See more

pgadmin4 runix 1.66.0

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.172f4ce946ddf8
cryptography@49.0.0
50.0.0

Open the chart page →

398
argocd-image-updaterargoOfficialVerified publisher1.3.11 of 1See more

argocd-image-updater argo 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
cryptography@47.0.0
50.0.0

Open the chart page →

718
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.92.11 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.92.1

1 of the 7 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
cryptography@49.0.0
50.0.0

Open the chart page →

1,889
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
boky/postfix:5.1.0aafc77238423
cryptography@46.0.3
50.0.0

Open the chart page →

5,366
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
cryptography@44.0.0
50.0.0

Open the chart page →

10,622
semaphoresemaphoreuiOfficialVerified publisher16.2.21 of 1See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.18.3e9260bfa8255
cryptography@48.0.0
50.0.0

Open the chart page →

2,221
stackgres-operatorstackgres-chartsOfficialVerified publisher1.19.11 of 2See more

stackgres-operator stackgres-charts 1.19.1

1 of the 2 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
quay.io/stackgres/operator:1.19.1f241b0b20326
cryptography@49.0.0
50.0.0

Open the chart page →

2,119
difydify-helmVerified publisher0.38.02 of 11See more

dify dify-helm 0.38.0

2 of the 11 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
langgenius/dify-agent-backend:1.16.1097d3fd27a7b
cryptography@46.0.7
50.0.0
langgenius/dify-api:1.16.1dcefa5f7c47c
cryptography@49.0.0
50.0.0

Open the chart page →

22,002
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
grafana/oncall:v1.16.5499851658393
cryptography@44.0.1
50.0.0

Open the chart page →

16,251
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.3f09282d281f6
cryptography@44.0.1
50.0.0

Open the chart page →

11,384
stacks-blockchain-apihirosystemsVerified publisher6.5.11 of 5See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
google/cloud-sdk:alpinef7d3e6d6d4f4
cryptography@46.0.7
50.0.0

Open the chart page →

8,364
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
cryptography@45.0.5
50.0.0

Open the chart page →

5,987
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ilum/api:6.7.3624fd09528c8
cryptography@49.0.0
50.0.0

Open the chart page →

23,228
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
cryptography@46.0.7
50.0.0

Open the chart page →

4,332
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
openmined/syft-backend:0.9.5b72f74a68b32
cryptography@44.0.1
50.0.0

Open the chart page →

17,245
home-assistantalekcVerified publisher2.11.21 of 1See more

home-assistant alekc 2.11.2

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
cryptography@48.0.1
50.0.0

Open the chart page →

2,133
home-assistantandrenarchyVerified publisher14.103.01 of 1See more

home-assistant andrenarchy 14.103.0

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.1612d76760b54
cryptography@48.0.1
50.0.0

Open the chart page →

2,133
gluugluuOfficialVerified publisher1.8.521 of 5See more

gluu gluu 1.8.52

1 of the 5 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
gluufederation/cloudtools:4.5.17-1fe944d2e5d0f
cryptography@47.0.0
50.0.0

Open the chart page →

227
wordpresshelmforgeVerified publisher3.0.61 of 3See more

wordpress helmforge 3.0.6

1 of the 3 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
cryptography@46.0.5
50.0.0

Open the chart page →

4,148
lightrun-helm-chartlightrun-helm-chartOfficialVerified publisher3.51.01 of 9See more

lightrun-helm-chart lightrun-helm-chart 3.51.0

1 of the 9 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
library/mysql:8.4.108dbcf531a03a
cryptography@46.0.5
50.0.0

Open the chart page →

463
py-kube-downscalerpy-kube-downscalerVerified publisher0.3.121 of 1See more

py-kube-downscaler py-kube-downscaler 0.3.12

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/caas-team/py-kube-downscaler:26.4.0af05a098b0d2
cryptography@46.0.7
50.0.0

Open the chart page →

731
abcdesktopabcdesktopOfficialVerified publisher4.4.121 of 9See more

abcdesktop abcdesktop 4.4.12

1 of the 9 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/abcdesktopio/route:4.449c972229c6b
cryptography@46.0.7
50.0.0

Open the chart page →

768
openvpn-asas-helm-chartOfficialVerified publisher0.2.11 of 1See more

openvpn-as as-helm-chart 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
openvpn/openvpn-as:latest2253c10ec652
cryptography@46.0.6
50.0.0

Open the chart page →

2,668
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
baserow/backend:2.3.37c00549b3a6f
cryptography@49.0.0
50.0.0

Open the chart page →

17,263
pgadmincetic0.1.121 of 1See more

pgadmin cetic 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
dpage/pgadmin4:latest2f4ce946ddf8
cryptography@49.0.0
50.0.0

Open the chart page →

398
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
cryptography@45.0.6
50.0.0

Open the chart page →

27,267
dolibarrhelmforgeVerified publisher1.2.181 of 3See more

dolibarr helmforge 1.2.18

1 of the 3 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
cryptography@46.0.5
50.0.0

Open the chart page →

4,109
matrixzekker6Verified publisher3.30.01 of 4See more

matrix zekker6 3.30.0

1 of the 4 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.160.078de1d10bef0
cryptography@46.0.7
50.0.0

Open the chart page →

5,557
changedetectionalekcVerified publisher0.14.21 of 1See more

changedetection alekc 0.14.2

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
cryptography@44.0.0
50.0.0

Open the chart page →

2,595
alerta-webalerta-webVerified publisher0.1.121 of 2See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
hayk96/alerta-web:9.0.486377705e9e3
cryptography@44.0.0
50.0.0

Open the chart page →

3,569
dns-exporterchristianhuthVerified publisher2.6.11 of 1See more

dns-exporter christianhuth 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
tykling/dns_exporter:1.2.3cd6d650c01c1
cryptography@48.0.0
50.0.0

Open the chart page →

458
dumpscriptcloudscriptVerified publisher1.8.31 of 1See more

dumpscript cloudscript 1.8.3

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/cloudscript-technology/dumpscript:v0.0.42-alpine-edgefce5b6fd161c
cryptography@46.0.7
50.0.0

Open the chart page →

2,125
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
cryptography@46.0.5
50.0.0

Open the chart page →

9,316
bscdysnixVerified publisher0.6.591 of 4See more

bsc dysnix 0.6.59

1 of the 4 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine6d35276c2562
cryptography@46.0.7
50.0.0

Open the chart page →

2,012
flyte-binaryflyte2.0.481 of 4See more

flyte-binary flyte 2.0.48

1 of the 4 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
cryptography@48.0.0
50.0.0

Open the chart page →

4,641
healthchecksgabe565Verified publisher0.17.01 of 1See more

healthchecks gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
cryptography@44.0.3
50.0.0

Open the chart page →

2,286
ghost-on-kubernetesghost-on-kubernetes-helmVerified publisher1.1.21 of 3See more

ghost-on-kubernetes ghost-on-kubernetes-helm 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
library/mysql:8.4b3b90af2a655
cryptography@46.0.5
50.0.0

Open the chart page →

1,447
home-assistanthome-assistantVerified publisher0.5.101 of 3See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
cryptography@48.0.1
50.0.0

Open the chart page →

2,331
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
cryptography@46.0.5
50.0.0

Open the chart page →

4,634
kiali-operatorkiali2.31.01 of 1See more

kiali-operator kiali 2.31.0

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
quay.io/kiali/kiali-operator:v2.31.0f837d8f25545
cryptography@44.0.2
50.0.0

Open the chart page →

1,157
platzioplatz-ioVerified publisher0.6.51 of 2See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
platzio/backend:v0.6.5d5e5972f344b
cryptography@44.0.3
50.0.0

Open the chart page →

2,866
plausiblesinextraVerified publisher1.1.21 of 1See more

plausible sinextra 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.2.133e60bfb40f2
cryptography@44.0.3
50.0.0

Open the chart page →

859
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
cryptography@48.0.1
50.0.0

Open the chart page →

5,852
pretixtechwolf12Verified publisher2026.7.01 of 3See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
pretix/standalone:2026.7.05df3b7aa852e
cryptography@49.0.0
50.0.0

Open the chart page →

9,770
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
cryptography@46.0.3
50.0.0

Open the chart page →

3,804
wgerwgerOfficialVerified publisher1.0.01 of 8See more

wger wger 1.0.0

1 of the 8 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
wger/server:2.6997ead43aabd
cryptography@48.0.1
50.0.0

Open the chart page →

8,491
agentareaagentareaVerified publisher0.0.182 of 16See more

agentarea agentarea 0.0.18

2 of the 16 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
agentarea/agentarea-api:latest9e15e16fa758
cryptography@49.0.0
50.0.0
agentarea/agentarea-worker:latest1e5cb68ee77a
cryptography@49.0.0
50.0.0

Open the chart page →

14,914
akeyless-api-gatewayakeyless-services-helmVerified publisher1.62.221 of 1See more

akeyless-api-gateway akeyless-services-helm 1.62.22

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
akeyless/base:latest759e4289fae8
cryptography@46.0.7
50.0.0

Open the chart page →

2,358
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
cryptography@44.0.3
50.0.0

Open the chart page →

12,037
easyhaproxybyjgVerified publisher2.0.41 of 1See more

easyhaproxy byjg 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
byjg/easy-haproxy:6.1.1230fdb7b00ae
cryptography@47.0.0
50.0.0

Open the chart page →

933

Container images carrying it

237 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
opendatacube/wps:latest80df355a660b
cryptography@45.0.4
50.0.0
1
openmined/syft-backend:0.9.5b72f74a68b32
cryptography@44.0.1
50.0.0
1
openvpn/openvpn-as:latest2253c10ec652
cryptography@46.0.6
50.0.0
1
platzio/backend:v0.6.5d5e5972f344b
cryptography@44.0.3
50.0.0
1
pretix/standalone:2026.7.05df3b7aa852e
cryptography@49.0.0
50.0.0
1
prompve/prometheus-pve-exporter:3.8.2e3d501a82df5
cryptography@46.0.5
50.0.0
1
prowlercloud/prowler-api:5.31.14f252d579be2
cryptography@46.0.7
50.0.0
1
redash/redash:25.8.000d813437db5
cryptography@45.0.5
50.0.0
1
redash/redash:26.3.0c5c9148f5c38
cryptography@46.0.5
50.0.0
1
rommapp/romm:5.2.03512f2ca4557
cryptography@49.0.0
50.0.0
1
rommapp/romm:4.4.1b909e95d1aab
cryptography@45.0.5
50.0.0
1
saidsef/scapy-containerised:v2025.02f17f7c435891
cryptography@44.0.1
50.0.0
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
cryptography@44.0.0
50.0.0
1
semaphoreui/semaphore:v2.18.3e9260bfa8255
cryptography@48.0.0
50.0.0
1
signalen/backend:2.50.14760256000738
cryptography@49.0.0
50.0.0
1
sruthitanneru/pi-sample:ui-lateste565ea454ffd
cryptography@44.0.0
50.0.0
1
sslhep/servicex-did-finder:v1.8.5ab0090083567
cryptography@49.0.0
50.0.0
1
sslhep/x509-secrets:v1.8.5d9e9ecb12d59
cryptography@49.0.0
50.0.0
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
cryptography@48.0.1
50.0.0
1
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
cryptography@48.0.1
50.0.0
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
cryptography@46.0.5
50.0.0
1
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
cryptography@46.0.4
50.0.0
1
tombursch/kitchenowl-backend:v0.7.8b48e4ab727cd
cryptography@47.0.0
50.0.0
1
tussanakorndev/kube-pod-alerts:1.0.5216fdadadf9a
cryptography@46.0.5
50.0.0
1
tykling/dns_exporter:1.2.3cd6d650c01c1
cryptography@48.0.0
50.0.0
1
vabene1111/recipes:2.3.50f8d061895e9
cryptography@45.0.5
50.0.0
1
wazuh/wazuh-manager:4.14.45a065930682d
cryptography@44.0.1
50.0.0
1
wazuh/wazuh-manager:4.14.3f09282d281f6
cryptography@44.0.1
50.0.0
1
wger/server:2.6997ead43aabd
cryptography@48.0.1
50.0.0
1
yetiplatform/yeti:2.9.09bcbe2650a14
cryptography@44.0.2
50.0.0
1
yetiplatform/yeti:latest9c3006cedcca
cryptography@44.0.2
50.0.0
1
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
cryptography@45.0.4
50.0.0
1
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
cryptography@49.0.0
50.0.0
1
gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine6d35276c2562
cryptography@46.0.7
50.0.0
1
gcr.io/kubecost1/kubecost-modeling:v0.1.24a2259b098b13
cryptography@44.0.2
50.0.0
1
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
cryptography@44.0.1
50.0.0
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
cryptography@44.0.2
50.0.0
1
ghcr.io/abcdesktopio/route:4.449c972229c6b
cryptography@46.0.7
50.0.0
1
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
cryptography@48.0.1
50.0.0
1
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
cryptography@49.0.0
50.0.0
1
ghcr.io/caas-team/py-kube-downscaler:26.4.0af05a098b0d2
cryptography@46.0.7
50.0.0
1
ghcr.io/cloudscript-technology/dumpscript:v0.0.42-alpine-edgefce5b6fd161c
cryptography@46.0.7
50.0.0
1
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
cryptography@44.0.0
50.0.0
1
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
cryptography@45.0.6
50.0.0
1
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latestf9f34c8ed688
cryptography@48.0.1
50.0.0
1
ghcr.io/dask/dask-gateway-server:2026.3.0afa5a729114e
cryptography@46.0.6
50.0.0
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
cryptography@46.0.5
50.0.0
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
cryptography@46.0.3
50.0.0
1
ghcr.io/donkie/spoolman:0.24.042135965c42d
cryptography@49.0.0
50.0.0
1
ghcr.io/erlkoenig91/prompt-db-backend:1.0.7ab120359810d
cryptography@48.0.0
50.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.