StackRadar

CVE-2026-73566

High

Advisory

Published 24 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
31st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
942
of 17,787 indexed, latest versions
Container images
971
deployed by those charts
Fix available
3 of 4
affected packages

node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

Carried by container images the latest versions of 942 of 17,787 indexed charts deploy, on 971 images.

Affected packageAffected versionsFixed inImages
tarnpm1.0.3, 2.2.1, 2.2.2, 4.0.2+34 more7.5.21971
node-tardeb1.0.3-2, 2.2.1-1, 4.4.10+ds1-2ubuntu1, 6.1.13+~cs7.0.5-3+1 moreno fix listed7
node-gypapk13.0.0-r013.0.1-r11
npmapk11.17.0-r012.0.1-r21
OSV records
CGA-63gq-6rq6-x5wcCGA-cppm-m8p8-rqr4DEBIAN-CVE-2026-73566GHSA-r292-9mhp-454mUBUNTU-CVE-2026-73566
Also known as
CGA-hm85-254c-g849, CGA-jp96-8764-w59g

Charts affected

942 by stars
ChartLatestAffected imagesRadar Score
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
tar@6.1.11
7.5.21

Open the chart page →

10,655
home-assistant-matter-hubhelm-chart-roeiVerified publisher3.0.21 of 1See more

home-assistant-matter-hub helm-chart-roei 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
luligu/matterbridge:3.0.28f97884bebc2
tar@7.4.3
7.5.21

Open the chart page →

3,818
zigbee2mqtthelm-chart-roeiVerified publisher1.19.01 of 1See more

zigbee2mqtt helm-chart-roei 1.19.0

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
tar@4.4.13
7.5.21

Open the chart page →

2,173
iofoghelm-chartsVerified publisher0.1.11 of 3See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
tar@2.2.2
7.5.21

Open the chart page →

24,174
streamsheetshelm-chartsVerified publisher0.2.35 of 8See more

streamsheets helm-charts 0.2.3

5 of the 8 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
tar@4.4.13
7.5.21
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
tar@4.4.13
7.5.21
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
tar@4.4.13
7.5.21
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
tar@4.4.13
7.5.21
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
tar@4.4.13
7.5.21

Open the chart page →

89,949
nodeapphelmcharts0.1.41 of 1See more

nodeapp helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
kaushaln1/helm_node_app:lateste9f2d5dfdba0
tar@6.2.1
7.5.21

Open the chart page →

948
backstagehelm-charts-nr0.1.151 of 2See more

backstage helm-charts-nr 0.1.15

1 of the 2 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
tar@2.2.2
7.5.21

Open the chart page →

8,213
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
tar@6.2.1
7.5.21

Open the chart page →

3,451
crucixhelm-crucix0.2.01 of 1See more

crucix helm-crucix 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
ghcr.io/calesthio/crucix:latest67c5244b6acf
tar@7.5.11
7.5.21

Open the chart page →

778
affinehelmforgeVerified publisher1.0.01 of 3See more

affine helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
tar@7.5.11
7.5.21

Open the chart page →

3,895
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
tar@7.5.13
7.5.21

Open the chart page →

7,648
automatischhelmforgeVerified publisher1.3.71 of 4See more

automatisch helmforge 1.3.7

1 of the 4 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
automatischio/automatisch:0.15.03bace7a12d5f
tar@6.2.1
7.5.21

Open the chart page →

5,794
bytestashhelmforgeVerified publisher1.0.01 of 1See more

bytestash helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
ghcr.io/jordan-dalby/bytestash:1.5.12eb4f736b8cd4
tar@6.2.1
7.5.21

Open the chart page →

739
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
tar@6.2.1
7.5.21

Open the chart page →

18,923
croniclehelmforgeVerified publisher1.1.101 of 1See more

cronicle helmforge 1.1.10

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
soulteary/cronicle:0.9.80ac2512fa6e39
tar@6.2.1
7.5.21

Open the chart page →

1,271
ghosthelmforgeVerified publisher1.2.61 of 3See more

ghost helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
library/ghost:6.62.0a7a268bbfb7f
tar@7.5.16
7.5.21

Open the chart page →

2,475
homarrhelmforgeVerified publisher1.2.81 of 1See more

homarr helmforge 1.2.8

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
ghcr.io/homarr-labs/homarr:v1.77.0f23ad77a681b
tar@7.5.15
7.5.21

Open the chart page →

435
immichhelmforgeVerified publisher1.2.81 of 5See more

immich helmforge 1.2.8

1 of the 5 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
tar@7.5.16
7.5.21

Open the chart page →

11,080
matterbridgehelmforgeVerified publisher1.0.21 of 1See more

matterbridge helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
luligu/matterbridge:3.10.81ec50ecd0694
tar@7.5.19
7.5.21

Open the chart page →

892
memoshelmforgeVerified publisher2.0.01 of 2See more

memos helmforge 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
library/node:24.21.0-alpine3.23159fe6464903
tar@7.5.19
7.5.21

Open the chart page →

793
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
tar@7.4.3
7.5.21

Open the chart page →

9,704
opencuthelmforgeVerified publisher1.1.91 of 5See more

opencut helmforge 1.1.9

1 of the 5 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
helmforge/opencut:v0.3.0bf11156e0ab5
tar@7.5.16
7.5.21

Open the chart page →

3,751
paprahelmforgeVerified publisher1.0.01 of 1See more

papra helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
tar@7.5.2
7.5.21

Open the chart page →

2,536
pocket-idhelmforgeVerified publisher1.0.01 of 2See more

pocket-id helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
library/node:24.21.0-alpine3.23159fe6464903
tar@7.5.19
7.5.21

Open the chart page →

455
reactive-resumehelmforgeVerified publisher1.0.02 of 4See more

reactive-resume helmforge 1.0.0

2 of the 4 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
library/node:24.21.0-alpinebe80f76cf40e
tar@7.5.19
7.5.21
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
tar@7.5.19
7.5.21

Open the chart page →

2,986
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
tar@7.4.3
7.5.21

Open the chart page →

5,916
twentyhelmforgeVerified publisher1.0.01 of 5See more

twenty helmforge 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
library/node:24.21.0-alpinebe80f76cf40e
tar@7.5.19
7.5.21

Open the chart page →

2,844
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
tar@6.2.1
7.5.21

Open the chart page →

30,106
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
tar@6.2.0
7.5.21

Open the chart page →

25,099
self-learning-platformhelm-self-learning-platformVerified publisher1.1.01 of 1See more

self-learning-platform helm-self-learning-platform 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
devopsiaci/self-learning-platform:1.1.3d9441c931f75
tar@7.5.7
7.5.21

Open the chart page →

1,469
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
tar@4.4.19
7.5.21

Open the chart page →

4,253
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
tar@6.2.1
7.5.21

Open the chart page →

3,615
http-folderhttp-folder2.0.01 of 1See more

http-folder http-folder 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
aureliengasser/http-folder:1.1.111c4318c2571
tar@4.4.13
7.5.21

Open the chart page →

1,847
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
tar@6.2.1
7.5.21

Open the chart page →

3,355
crypto-watchdoghuseyinnurbaki0.1.01 of 1See more

crypto-watchdog huseyinnurbaki 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
hhaluk/crypto-watchdog:0.4.0a6555953d941
tar@4.4.13
7.5.21

Open the chart page →

2,656
ibm-app-navigatoribm-charts1.0.12 of 5See more

ibm-app-navigator ibm-charts 1.0.1

2 of the 5 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
ibmcom/app-nav-init:1.0.1240ff499eb5b
tar@4.0.2
7.5.21
ibmcom/app-nav-ui:1.0.1e2a86997b36b
tar@4.0.2
7.5.21

Open the chart page →

32,911
ibm-business-automation-insights-devibm-charts3.2.02 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

2 of the 6 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
ibmcom/bai-admin-dev:19.0.202d882f2836e
tar@4.4.6
7.5.21
ibmcom/bai-setup-dev:19.0.2b8e8df11072d
tar@2.2.1
7.5.21

Open the chart page →

39,343
ibm-kerify-devibm-charts1.0.01 of 1See more

ibm-kerify-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
tar@2.2.1
7.5.21

Open the chart page →

8,221
ibm-microclimateibm-charts0.1.03 of 8See more

ibm-microclimate ibm-charts 0.1.0

3 of the 8 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
tar@2.2.1
7.5.21
ibmcom/microclimate-portal:latested5505e5c7ec
tar@4.0.2
7.5.21
ibmcom/microclimate-theia:lateste17bdccc5030
tar@2.2.1
7.5.21

Open the chart page →

57,728
ibm-voice-gateway-devibm-charts3.1.01 of 2See more

ibm-voice-gateway-dev ibm-charts 3.1.0

1 of the 2 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
ibmcom/voice-gateway-mr:1.0.5.00762ab1df6c1
tar@2.2.1
7.5.21

Open the chart page →

4,504
multicaicoretechVerified publisher0.4.421 of 5See more

multica icoretech 0.4.42

1 of the 5 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
ghcr.io/multica-ai/multica-web:v0.4.43fc937fbbf8e5
tar@7.5.11
7.5.21

Open the chart page →

2,730
iframelyiframelyVerified publisher2.3.51 of 1See more

iframely iframely 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
tar@6.2.1
7.5.21

Open the chart page →

3,181
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4d95725b24dbe
tar@7.5.15
7.5.21

Open the chart page →

9,032
ilum-marquezilumVerified publisher6.7.01 of 3See more

ilum-marquez ilum 6.7.0

1 of the 3 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
ilum/marquez-web:0.53.2716437a51a6c
tar@7.5.1
7.5.21

Open the chart page →

6,282
ilum-uiilumOfficialVerified publisher6.7.31 of 2See more

ilum-ui ilum 6.7.3

1 of the 2 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
ilum/ui:6.7.3998937726679
tar@7.5.2
7.5.21

Open the chart page →

1,236
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
tar@6.2.1
7.5.21

Open the chart page →

11,838
erpnextimprowisedVerified publisher3.3.02 of 3See more

erpnext improwised 3.3.0

2 of the 3 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
frappe/frappe-socketio:v13.4.12095767a9e82
tar@6.1.0
7.5.21
improwised/erpnext-worker:v13.4.197280b55cbd4
tar@4.4.13
7.5.21

Open the chart page →

6,502
indexer-chartindexer-application0.1.01 of 1See more

indexer-chart indexer-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
ibarreche/cloud-indexer-ci:latestb7a08274e69f
tar@2.2.1
7.5.21

Open the chart page →

3,289
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
infisical/infisical:latest02082bf13163
tar@7.4.3
7.5.21

Open the chart page →

2,954
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-73566.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
tar@6.1.11
7.5.21

Open the chart page →

4,944

Container images carrying it

971 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
pachyderm/grpc-proxy:0.4.92b27f41d4d02
tar@4.4.6
7.5.21
1
parithoshj/testnet-faucet:9859e0dcdca426fea6d
tar@4.4.13
7.5.21
1
patdada/bella-docker:v1.0.075127147a624
tar@4.4.19
7.5.21
1
patrickhulce/lhci-server:0.8.174b4b6a3954d
tar@4.4.13
7.5.21
1
pawelmalak/flame:2.1.193e7b0abb603
tar@6.1.11
7.5.21
1
pawelmalak/flame:multiarch2.3.19f88b17692a0
tar@6.1.11
7.5.21
1
penpotapp/exporter:2.2.15c835ffd87ab
tar@6.2.1
7.5.21
1
penpotapp/exporter:2.17.272a8061e8806
tar@7.5.16
7.5.21
1
penpotapp/mcp:2.17.284f3f07ead11
tar@7.5.15
7.5.21
1
phntom/camo:2.3.1a9b1304d6c71
tar@4.4.15
7.5.21
1
phntom/codimd:2.4.31b9aafbb62e6
tar@5.0.11
7.5.21
1
phpdockerio/readability-js-server:1.8.0ea8354b42600
tar@7.5.1
7.5.21
1
plumdog/db-operator:latest0c2fa2db0357
tar@6.1.11
7.5.21
1
polonel/trudesk:1.2.60cf6513f6fe3
tar@6.1.11
7.5.21
1
pretix/standalone:2026.7.05df3b7aa852e
tar@7.5.11
7.5.21
1
project2team4/react:latest3ff031a08887
tar@4.4.19
7.5.21
1
promasu/cryptpad:v4.14.1-nginx51d1142b9f95
tar@6.1.11
7.5.21
1
prowlercloud/prowler-ui:5.31.179ee83c8e702
tar@7.5.1
7.5.21
1
pschiffe/pdns-admin:0.4.137ebba8c2b8f
tar@6.2.1
7.5.21
1
psorab/elibrary:latest53b68896c4ce
tar@6.1.11
7.5.21
1
pumejlab/nodejs-webapp:latestf563eabcb819
tar@6.1.15
7.5.21
1
punkerside/noroot:v0.0.7be20c81d6ca1
tar@6.1.11
7.5.21
1
qxip/qryn:3.2.3977acc9c7a9fd
tar@6.2.1
7.5.21
1
rahulbhiwagade122/desishowbiz:latest08490b70998c
tar@6.2.1
7.5.21
1
rakii8585/angular-node-webapp:latest026082a515ac
tar@4.4.13
7.5.21
1
redis/redisinsight:2.68019fcf774631
tar@6.2.1
7.5.21
1
redis/redisinsight:3.2.055542a762210
tar@6.2.1
7.5.21
1
redis/redisinsight:2.46699d341bd329
tar@6.1.15
7.5.21
1
redis/redisinsight:3.485562d67a912
tar@7.4.3
7.5.21
1
refar/apm-portal:v5.7.1dcca8e4477a6
tar@4.4.13
7.5.21
1
requarks/wiki:canary-2.5.2438b5865a7386c
tar@4.4.19
7.5.21
1
rlex/jsonvisio:1.9.5cd50ff65118e
tar@4.4.19
7.5.21
1
roadiehq/community-backstage-image:latestef355bf5b639
tar@4.4.13
7.5.21
1
robotshop/rs-cart:latest388349d5cb3c
tar@4.4.15
7.5.21
1
robotshop/rs-catalogue:latestd545747c1b97
tar@4.4.15
7.5.21
1
robotshop/rs-user:latestea509182c180
tar@4.4.15
7.5.21
1
rocketadmin/rocketadmin:1.17.710955ef540b9
tar@7.5.13
7.5.21
1
rocketchat/account-service:8.6.144af8ac4e711
tar@7.5.16
7.5.21
1
rocketchat/authorization-service:8.6.16bc18fb5d0e5
tar@7.5.16
7.5.21
1
rocketchat/ddp-streamer-service:8.6.1819771c4abe4
tar@7.5.16
7.5.21
1
rocketchat/presence-service:8.6.1c1170bdfe797
tar@7.5.11
7.5.21
1
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
tar@6.2.1
7.5.21
1
saidsef/aws-kinesis-local:v2026.0667025e3a163e
tar@7.5.15
7.5.21
1
samajh/alprbackend:latestea742b4372ad
tar@6.1.11
7.5.21
1
samajh/alprfrontend:latest05ef4fddbb75
tar@6.1.11
7.5.21
1
shahanafarooqui/rtl:0.11.0d0cd3d868aca
tar@4.4.13
7.5.21
1
sharanalwar/redchef-frontend:latest5e82950b16b7
tar@6.2.1
7.5.21
1
shieldsio/shields:nextfa194b446e42
tar@7.5.19
7.5.21
1
shinobisystems/shinobi:dev3ca746937856
tar@6.1.0
7.5.21
1
shinobisystems/shinobi:latestc2f5ce2e1067
tar@6.1.0
7.5.21
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.