StackRadar

CVE-2026-84450

Medium

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
384
of 17,781 indexed, latest versions
Container images
268
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 384 of 17,781 indexed charts deploy, on 268 images.

Affected packageAffected versionsFixed inImages
libheifdeb1.12.0-2build1, 1.15.1-1, 1.15.1-1+deb12u1, 1.17.6-1ubuntu4+11 moreno fix listed268
OSV records
UBUNTU-CVE-2026-84450DEBIAN-CVE-2026-84450

Charts affected

384 by stars
ChartLatestAffected imagesRadar Score
tenantsbrbarmex-tenant2.0.01 of 1See more

tenants brbarmex-tenant 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,827
node-appbryopsida0.5.12 of 2See more

node-app bryopsida 0.5.1

2 of the 2 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
libheif@1.15.1-1+deb12u1
no fix listed
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
libheif@1.17.6-1ubuntu4.1
no fix listed

Open the chart page →

14,352
nginx-chartbtrepoVerified publisher0.1.01 of 1See more

nginx-chart btrepo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,827
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
libheif@1.15.1-1
no fix listed

Open the chart page →

5,039
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

10,776
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

14,130
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
library/nginx:trixie05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

15,371
nginx-chartchanhk10.1.01 of 1See more

nginx-chart chanhk1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,827
calibre-webcharts-derwitt-devVerified publisher1.1.21 of 1See more

calibre-web charts-derwitt-dev 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

4,911
paperless-ngxcharts-derwitt-devVerified publisher2.1.41 of 1See more

paperless-ngx charts-derwitt-dev 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

4,626
mysqld-exporterchoerodon0.1.01 of 1See more

mysqld-exporter choerodon 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,827
helmchartclouddrove1.4.01 of 1See more

helmchart clouddrove 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,827
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
libheif@1.12.0-2build1
no fix listed

Open the chart page →

20,900
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

23,665
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

8,009
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

9,128
web-chartcms-ktcloudlab0.1.01 of 1See more

web-chart cms-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,827
appcnapVerified publisher1.2.01 of 1See more

app cnap 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,827
genericcolearendt0.2.71 of 1See more

generic colearendt 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,827
opencloudcommunity-opencloud3.0.01 of 11See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
libheif@1.21.2-3ubuntu0.4
no fix listed

Open the chart page →

3,773
datumcosmicrocks1.0.51 of 2See more

datum cosmicrocks 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
libheif@1.17.6-1ubuntu4.2
no fix listed

Open the chart page →

2,944
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

14,559
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
libheif@1.15.1-1
no fix listed

Open the chart page →

15,380
cypikcypik-app0.1.02 of 2See more

cypik cypik-app 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed
library/nginx:1.25a484819eb602
libheif@1.15.1-1
no fix listed

Open the chart page →

7,503
view-cadvisorcypik-helm-chart0.1.01 of 1See more

view-cadvisor cypik-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,827
nginx-chartdaeho12Verified publisher0.1.01 of 1See more

nginx-chart daeho12 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,827
damap-chartdamapVerified publisher0.3.01 of 5See more

damap-chart damap 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
libheif@1.19.8-1
no fix listed

Open the chart page →

13,936
helm-chart-testdasmeta0.1.41 of 1See more

helm-chart-test dasmeta 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,827
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

10,090
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
libheif@1.15.1-1
no fix listed

Open the chart page →

6,075
my-helm-chartdemohelm20.1.01 of 1See more

my-helm-chart demohelm2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,827
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
libheif@1.12.0-2build1
no fix listed

Open the chart page →

30,031
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
libheif@1.12.0-2build1
no fix listed

Open the chart page →

29,033
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

68,240
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

68,240
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:main-localda995c129e2f
libheif@1.17.6-1ubuntu4.8
no fix listed

Open the chart page →

19,224
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

7,459
ownclouddjjudas21Verified publisher0.3.231 of 3See more

owncloud djjudas21 0.3.23

1 of the 3 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
owncloud/server:10.16.3b3f9efdcd7f7
libheif@1.12.0-2build1
no fix listed

Open the chart page →

10,035
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
libheif@1.17.6-1ubuntu4
no fix listed

Open the chart page →

16,954
webtreesdjjudas21Verified publisher3.0.01 of 1See more

webtrees djjudas21 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
libheif@1.19.8-1
no fix listed

Open the chart page →

5,966
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
libheif@1.15.1-1
no fix listed

Open the chart page →

14,627
dominodomino-iisasVerified publisher0.3.11 of 3See more

domino domino-iisas 0.3.1

1 of the 3 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
ghcr.io/iisas/domino-frontend:k8s8e53861be292
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

10,270
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
libheif@1.12.0-2build1
no fix listed

Open the chart page →

24,917
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
libheif@1.12.0-2build1
no fix listed

Open the chart page →

30,699
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

19,802
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
libheif@1.19.8-1
no fix listed

Open the chart page →

13,391
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
emqx/ecp-ui:2.5.1e33e9816f147
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

23,685
nginx-charteoc-chartsVerified publisher2.0.01 of 1See more

nginx-chart eoc-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libheif@1.19.8-1+deb13u1
no fix listed

Open the chart page →

1,827
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
libheif@1.19.8-1
no fix listed

Open the chart page →

7,233
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-84450.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
libheif@1.15.1-1+deb12u1
no fix listed

Open the chart page →

4,456

Container images carrying it

268 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
carlosmz87/test_helm_backend:latest8ffa63aa995d
libheif@1.15.1-1+deb12u1
no fix listed
1
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
libheif@1.19.8-1
no fix listed
1
ckulka/baikal:0.10.1-nginx434bdd162247
libheif@1.15.1-1+deb12u1
no fix listed
1
cloudtooling/moodle:5.2.3f4f04e0fc401
libheif@1.15.1-1+deb12u1
no fix listed
1
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
libheif@1.15.1-1
no fix listed
1
dannielkil/book-frontend:latest937993927694
libheif@1.15.1-1
no fix listed
1
deconzcommunity/deconz:2.29.2062de2362641
libheif@1.15.1-1+deb12u1
no fix listed
1
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
libheif@1.19.8-1
no fix listed
1
dragonflyoss/client:v0.1.82edf3e921f4e0
libheif@1.15.1-1
no fix listed
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
libheif@1.19.8-1
no fix listed
1
emqx/ecp-ui:2.5.1e33e9816f147
libheif@1.15.1-1+deb12u1
no fix listed
1
felipecs8/app-db-connection-test:v129e06c9c6385
libheif@1.15.1-1+deb12u1
no fix listed
1
firefart/requesttracker:5.0.40d6249906d8c
libheif@1.15.1-1
no fix listed
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
libheif@1.15.1-1+deb12u1
no fix listed
1
hazegoodlife/haaze:veggiesite50f02d2d5d4d
libheif@1.15.1-1+deb12u1
no fix listed
1
hazegoodlife/haaze:milksite8d4c63169e14
libheif@1.15.1-1+deb12u1
no fix listed
1
hecrom/myweatherangularclient:1.3.11bb0372939c19
libheif@1.15.1-1
no fix listed
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
libheif@1.15.1-1
no fix listed
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
libheif@1.15.1-1
no fix listed
1
itzg/bungeecord:latest1c59f9631f3b
libheif@1.21.2-3ubuntu0.4
no fix listed
1
itzg/minecraft-server:2026.9.04e29d14082d9
libheif@1.17.6-1ubuntu4.8
no fix listed
1
itzg/minecraft-server:latest8672e335dbef
libheif@1.17.6-1ubuntu4.8
no fix listed
1
jaedb/iris:latest048cfbf58d57
libheif@1.15.1-1+deb12u1
no fix listed
1
jbtronics/part-db1:latest5db71f6db59d
libheif@1.15.1-1+deb12u1
no fix listed
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
libheif@1.15.1-1
no fix listed
1
jordan/icinga2:latestf75025fe8ea8
libheif@1.15.1-1+deb12u1
no fix listed
1
juicedata/juicefs-csi-driver:v0.32.595008ba63318
libheif@1.15.1-1+deb12u1
no fix listed
1
knspar/phronetis-operator:0.1.60c4f0543ee58
libheif@1.15.1-1
no fix listed
1
kuzwolka/aws9:main1ad759b961b1
libheif@1.15.1-1+deb12u1
no fix listed
1
kuzwolka/aws9:news3e8880fbbb96
libheif@1.15.1-1+deb12u1
no fix listed
1
kuzwolka/aws9:blog4a7707410bf1
libheif@1.15.1-1+deb12u1
no fix listed
1
kuzwolka/aws9:shop84a9d9766345
libheif@1.15.1-1+deb12u1
no fix listed
1
laly9999/node-app:1dd0e503913e1
libheif@1.15.1-1+deb12u1
no fix listed
1
langflowai/langflow-frontend:latest54f67f1961fe
libheif@1.15.1-1+deb12u1
no fix listed
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
libheif@1.17.6-1ubuntu4.4
no fix listed
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
libheif@1.17.6-1ubuntu4.1
no fix listed
1
langgenius/dify-plugin-daemon:main-localda995c129e2f
libheif@1.17.6-1ubuntu4.8
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
libheif@1.15.1-1+deb12u1
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
libheif@1.19.8-1
no fix listed
1
library/nginx:1.27.409369da6b103
libheif@1.15.1-1+deb12u1
no fix listed
1
library/nginx:1.291881968aff6f
libheif@1.19.8-1
no fix listed
1
library/nginx:1.276784fb0834aa
libheif@1.15.1-1+deb12u1
no fix listed
1
library/nginx:1.25.167f9a4f10d14
libheif@1.15.1-1
no fix listed
1
library/nginx:1.25.49ff236ed47fe
libheif@1.15.1-1
no fix listed
1
library/nginx:1.27.3fb197595ebe7
libheif@1.15.1-1+deb12u1
no fix listed
1
library/node:208f693eaa7e0a
libheif@1.15.1-1+deb12u1
no fix listed
1
library/node:latestf5d1cc40abc1
libheif@1.19.8-1+deb13u1
no fix listed
1
library/python:3.1070c9cc675605
libheif@1.19.8-1+deb13u1
no fix listed
1
library/python:3.8d41127070014
libheif@1.15.1-1
no fix listed
1
library/python:3.9da5aee29682d
libheif@1.19.8-1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.