StackRadar

CVE-2026-69248

High

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
693
of 17,781 indexed, latest versions
Container images
570
deployed by those charts
Fix available
1 of 2
affected packages

python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

Carried by container images the latest versions of 693 of 17,781 indexed charts deploy, on 570 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.7.2, 1.9, 2.1.4, 2.2.2+74 more49.0.0570
python-cryptographydeb38.0.4-3, 38.0.4-3+deb12u1, 43.0.0-3+deb13u1, 46.0.5-1ubuntu2no fix listed15
OSV records
DEBIAN-CVE-2026-69248GHSA-m2h6-j472-rp4cPYSEC-2026-3554UBUNTU-CVE-2026-69248

Charts affected

693 by stars
ChartLatestAffected imagesRadar Score
helm-taigamvitale1989-helm-taigaVerified publisher0.2.51 of 2See more

helm-taiga mvitale1989-helm-taiga 0.2.5

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
cryptography@2.3.1
49.0.0

Open the chart page →

5,104
opencveopencve1.2.01 of 3See more

opencve opencve 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
cleveritcz/opencve:1.5.0c75c1636e0b7
cryptography@42.0.5
49.0.0

Open the chart page →

2,097
open-notificatiesopen-zaak0.7.01 of 4See more

open-notificaties open-zaak 0.7.0

1 of the 4 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
openzaak/open-notificaties:1.3.02e65313b9b10
cryptography@3.4.8
49.0.0

Open the chart page →

2,850
opikopikOfficialVerified publisher2.2.591 of 13See more

opik opik 2.2.59

1 of the 13 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.4.2ac80b6e09e5b
cryptography@42.0.7
49.0.0

Open the chart page →

14,334
ovh-snapshoterovh-snapshoterOfficialVerified publisher0.4.101 of 1See more

ovh-snapshoter ovh-snapshoter 0.4.10

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/hoverkraft-tech/ovh-snapshoter/app:0.4.1010d271f08ab3
cryptography@43.0.3
49.0.0

Open the chart page →

761
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
cryptography@48.0.1
49.0.0

Open the chart page →

3,681
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
cryptography@38.0.4
python-cryptography@38.0.4-3+deb12u1
49.0.0
no fix listed

Open the chart page →

6,883
phonebook-chartphonebook-chart0.1.01 of 3See more

phonebook-chart phonebook-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
49.0.0

Open the chart page →

3,034
phpipamphpipam-helmVerified publisher1.0.121 of 3See more

phpipam phpipam-helm 1.0.12

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.0.40d58ac93387f6
cryptography@42.0.8
49.0.0

Open the chart page →

3,778
home-assistantpree-helm-chartsVerified publisher1.80.01 of 1See more

home-assistant pree-helm-charts 1.80.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
cryptography@48.0.1
49.0.0

Open the chart page →

2,133
privacyideaprivacyidea1.0.61 of 2See more

privacyidea privacyidea 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
gpappsoft/privacyidea-docker:3.12.2af7841adad26
cryptography@44.0.2
49.0.0

Open the chart page →

5,440
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
cryptography@46.0.7
49.0.0

Open the chart page →

8,158
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
cryptography@41.0.7
49.0.0

Open the chart page →

23,964
kube-resource-reportrlex0.10.11 of 2See more

kube-resource-report rlex 0.10.1

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
hjacobs/kube-resource-report:22.11.0c173cd02f5af
cryptography@38.0.4
49.0.0

Open the chart page →

1,266
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg16d7db8f1085a3
cryptography@3.4.8
49.0.0

Open the chart page →

12,930
mealiertomik-helm-chartsVerified publisher0.0.21 of 1See more

mealie rtomik-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
cryptography@41.0.7
49.0.0

Open the chart page →

3,929
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
cryptography@2.1.4
49.0.0

Open the chart page →

13,541
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
cryptography@38.0.4
python-cryptography@38.0.4-3+deb12u1
49.0.0
no fix listed

Open the chart page →

38,107
sceptresceptreai0.1.122 of 5See more

sceptre sceptreai 0.1.12

2 of the 5 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
maponyacharles/sceptreai:mlflow-0.1.1242d418654ebd
cryptography@48.0.1
49.0.0
maponyacharles/sceptreai:api-0.1.127b37b092130a
cryptography@48.0.1
49.0.0

Open the chart page →

4,369
iopsciencemeshVerified publisher0.4.01 of 2See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
cryptography@39.0.1
49.0.0

Open the chart page →

4,052
securosecuroVerified publisher0.15.11 of 4See more

securo securo 0.15.1

1 of the 4 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/securo-finance/securo-backend:0.15.162e030110745
cryptography@46.0.7
49.0.0

Open the chart page →

3,436
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
cryptography@44.0.3
49.0.0

Open the chart page →

5,213
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/getsentry/snuba:26.7.210f8d164109b
cryptography@46.0.7
49.0.0

Open the chart page →

16,449
kube-resource-reportslamdev0.1.31 of 2See more

kube-resource-report slamdev 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
hjacobs/kube-resource-report:21.2.145f93491c434
cryptography@3.4.1
49.0.0

Open the chart page →

1,534
slo-reportingslo-reportingVerified publisher0.3.341 of 2See more

slo-reporting slo-reporting 0.3.34

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
cryptography@44.0.0
49.0.0

Open the chart page →

2,928
snappasssnappassVerified publisher0.4.31 of 3See more

snappass snappass 0.4.3

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
lmacka/snappass:2.1.293f5c048b7d4
cryptography@43.0.1
49.0.0

Open the chart page →

2,995
alertasomeblackmagic0.2.31 of 2See more

alerta someblackmagic 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
alerta/alerta-web:8.5.04786b9eaa606
cryptography@3.4.6
49.0.0

Open the chart page →

3,162
healthchecksstackhelmVerified publisher0.1.01 of 2See more

healthchecks stackhelm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
healthchecks/healthchecks:v2.8.1e82bb0836e30
cryptography@39.0.2
49.0.0

Open the chart page →

2,236
prometheus-pve-exporterstenicVerified publisher0.1.11 of 1See more

prometheus-pve-exporter stenic 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
cryptography@2.9.2
49.0.0

Open the chart page →

2,469
streamlit-appstreamlit-appVerified publisher0.2.01 of 1See more

streamlit-app streamlit-app 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
sruthitanneru/pi-sample:ui-lateste565ea454ffd
cryptography@44.0.0
49.0.0

Open the chart page →

1,696
synapsesudermanjr1.1.51 of 1See more

synapse sudermanjr 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
cryptography@36.0.1
49.0.0

Open the chart page →

3,332
supabasesupabse0.8.01 of 11See more

supabase supabse 0.8.0

1 of the 11 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
supabase/realtime:v2.102.3aa1c92c0cf32
cryptography@38.0.4
python-cryptography@38.0.4-3+deb12u1
49.0.0
no fix listed

Open the chart page →

18,075
tocktock0.6.31 of 9See more

tock tock 0.6.3

1 of the 9 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
cryptography@46.0.4
49.0.0

Open the chart page →

12,907
taigaunxwaresVerified publisher2026.3.81 of 6See more

taiga unxwares 2026.3.8

1 of the 6 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
cryptography@46.0.3
49.0.0

Open the chart page →

9,148
phonebook-chartusuladamsVerified publisher0.1.51 of 3See more

phonebook-chart usuladams 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
49.0.0

Open the chart page →

3,176
verbacapverbacapVerified publisher1.0.71 of 1See more

verbacap verbacap 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
cryptography@42.0.6
49.0.0

Open the chart page →

2,233
pghoardwiremindVerified publisher0.8.11 of 1See more

pghoard wiremind 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
wiremind/pghoard:12-2019-11-264dea42c8166c
cryptography@2.8
49.0.0

Open the chart page →

2,952
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

7,696
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:885b9bf2e29cf
cryptography@46.0.5
49.0.0

Open the chart page →

8,217
workflows-sinkworkflows-sinkVerified publisher0.16.31 of 1See more

workflows-sink workflows-sink 0.16.3

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
cryptography@46.0.5
49.0.0

Open the chart page →

1,397
changedetection-iozekker6Verified publisher1.99.01 of 1See more

changedetection-io zekker6 1.99.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
cryptography@44.0.0
49.0.0

Open the chart page →

2,595
plausible-analyticszekker6Verified publisher1.4.01 of 2See more

plausible-analytics zekker6 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.2.133e60bfb40f2
cryptography@44.0.3
49.0.0

Open the chart page →

1,170
acos-prometheus-exporter-helm-charta10-prometheus-exporter0.1.01 of 1See more

acos-prometheus-exporter-helm-chart a10-prometheus-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
a10networks/acos-prometheus-exporter:latest8dc58d434d71
cryptography@2.1.4
49.0.0

Open the chart page →

12,007
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
cryptography@38.0.4
python-cryptography@38.0.4-3+deb12u1
49.0.0
no fix listed

Open the chart page →

30,028
akeyless-gatewayakeyless-services-helmVerified publisher3.5.31 of 2See more

akeyless-gateway akeyless-services-helm 3.5.3

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
akeyless/gateway:5.3.13d2e7dce5eb9
cryptography@48.0.1
49.0.0

Open the chart page →

1,522
aktoakto0.2.02 of 7See more

akto akto 0.2.0

2 of the 7 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
cryptography@39.0.2
49.0.0
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
cryptography@39.0.2
49.0.0

Open the chart page →

13,613
akto-protectionakto0.1.02 of 4See more

akto-protection akto 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
cryptography@39.0.2
49.0.0
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
cryptography@39.0.2
49.0.0

Open the chart page →

11,285
akto-regional-setupakto1.3.11 of 9See more

akto-regional-setup akto 1.3.1

1 of the 9 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
aktosecurity/akto-agent-guard-anonymizer:1.1.6cc9aac5cf7ef
cryptography@48.0.1
49.0.0

Open the chart page →

7,603
browserlessalekcVerified publisher1.2.71 of 1See more

browserless alekc 1.2.7

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
cryptography@41.0.7
49.0.0

Open the chart page →

2,078
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
cryptography@43.0.0
49.0.0

Open the chart page →

6,324

Container images carrying it

570 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
dysnix/pritunl:v1.29-r819951e3e7a32
cryptography@2.8
49.0.0
1
elastichq/elasticsearch-hq:latestbb3bd22c2b87
cryptography@2.8
49.0.0
1
errbotio/errbot:6.1.900ee4e0953ab
cryptography@37.0.2
49.0.0
1
esphome/esphome:1.18.03f51ec10e823
cryptography@2.6.1
49.0.0
1
esphome/esphome:2024.3.09ab8cc88b28c
cryptography@42.0.2
49.0.0
1
esphome/esphome:2024.12.2b2c6322700ac
cryptography@43.0.0
49.0.0
1
esphome/esphome:2025.3.0def8b6e4f517
cryptography@44.0.2
49.0.0
1
ethanbergstrom/duoauthproxy:5.5.0345c2a46c103
cryptography@2.7
49.0.0
1
evk02/mlflow:2.2.1ef6ff257ef35
cryptography@39.0.2
49.0.0
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
cryptography@39.0.0
49.0.0
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
cryptography@47.0.0
49.0.0
1
fiware/ishare-satellite:1.2.0c3c1c8ccfb45
cryptography@37.0.4
49.0.0
1
flanksource/batch-runner:v1.0.44689687a7cf95
cryptography@44.0.1
49.0.0
1
fossology/fossology:4.2.18bd1f22ba7bb
cryptography@38.0.3
49.0.0
1
frankescobar/allure-docker-service:latestdc171ec796d5
cryptography@48.0.1
49.0.0
1
freedom98/flask:k3.0d7ce1533f297
cryptography@45.0.4
49.0.0
1
freeipa/freeipa-server:fedora-37-4.10.1c87d77342bf5
cryptography@37.0.2
49.0.0
1
galaxy/cloudman-server:lateste5c265fe9fcd
cryptography@38.0.1
49.0.0
1
galaxy/galaxy-init:v18.010267bad550e6
cryptography@2.2.2
49.0.0
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
cryptography@44.0.3
49.0.0
1
gethue/hue:4.11.011b649636e68
cryptography@36.0.1
49.0.0
1
gethue/hue:4.10.05702b2c37ff9
cryptography@3.3.2
49.0.0
1
gethue/hue:latest7d5c1b9f8a79
cryptography@42.0.8
49.0.0
1
getsentry/sentry-kubernetes:latest6ac37974fd2a
cryptography@2.6.1
49.0.0
1
gluufederation/cloudtools:4.5.17-1fe944d2e5d0f
cryptography@47.0.0
49.0.0
1
gluufederation/opendj:4.3.0_011a1128b28b95
cryptography@3.3.2
49.0.0
1
goofball222/pritunl:1.30.3070.5943c0743701d4
cryptography@3.4.7
49.0.0
1
goofball222/pritunl:1.32.3602.807bf26032dfce
cryptography@38.0.4
49.0.0
1
google/cloud-sdk:alpinef7d3e6d6d4f4
cryptography@46.0.7
49.0.0
1
gpappsoft/privacyidea-docker:3.12.2af7841adad26
cryptography@44.0.2
49.0.0
1
grafana/oncall:v1.16.5499851658393
cryptography@44.0.1
49.0.0
1
hansehe/locust:1.1.0bc8e45262bc4
cryptography@44.0.2
49.0.0
1
hayk96/alerta-web:9.0.486377705e9e3
cryptography@44.0.0
49.0.0
1
healthchecks/healthchecks:v2.8.1e82bb0836e30
cryptography@39.0.2
49.0.0
1
heartexlabs/label-studio:latestaa461572e8f9
cryptography@46.0.5
49.0.0
1
helga09/my_sql_shoes:v1.1.1a03657d97897
cryptography@37.0.2
49.0.0
1
helmforge/fastmcp-server:0.2.061f759a1421f
cryptography@46.0.6
49.0.0
1
helmforge/fastmcp-server:0.11.2fcb7017327d6
cryptography@46.0.7
49.0.0
1
hhyo/archery:v1.9.11aa41843419e
cryptography@38.0.1
49.0.0
1
hjacobs/kube-downscaler:23.2.05d328c003efe
cryptography@39.0.1
49.0.0
1
hjacobs/kube-janitor:23.7.0fbb303ed463c
cryptography@41.0.1
49.0.0
1
hjacobs/kube-ops-view:23.5.0a4fae38f93d7
cryptography@40.0.2
49.0.0
1
hjacobs/kube-resource-report:21.2.145f93491c434
cryptography@3.4.1
49.0.0
1
hjacobs/kube-resource-report:22.11.0c173cd02f5af
cryptography@38.0.4
49.0.0
1
hjacobs/kube-web-view:23.8.0431f1bf013d0
cryptography@41.0.1
49.0.0
1
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
cryptography@3.1.1
49.0.0
1
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
cryptography@37.0.2
49.0.0
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
cryptography@41.0.4
49.0.0
1
homeassistant/home-assistant:2026.75a531753cea9
cryptography@48.0.1
49.0.0
1
homeassistant/home-assistant:2023.12.48d000332b09b
cryptography@41.0.7
49.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.