StackRadar

CVE-2026-91187

Critical

Advisory

Published 24 Sept 2026In the index since 25 Sept 2026
Severity
Critical
worst across findings
CVSS
9.3
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,238
of 17,879 indexed, latest versions
Container images
1,167
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,238 of 17,879 indexed charts deploy, on 1,167 images.

Affected packageAffected versionsFixed inImages
dashdeb0.5.7-4ubuntu1, 0.5.8-2.1ubuntu2, 0.5.8-2.10, 0.5.10.2-6+3 moreno fix listed1,167
OSV records
UBUNTU-CVE-2026-91187
Trending
Rank 1 in indexed charts, since 25 Sept 2026. See the ranking →

Charts affected

1,238 by stars
ChartLatestAffected imagesRadar Score
hertzbeatkubesphere-carryon-test1.4.11 of 4See more

hertzbeat kubesphere-carryon-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
dash@0.5.10.2-6
no fix listed

Open the chart page →

8,014
mongodbkubesphere-carryon-test0.3.21See more

mongodb kubesphere-carryon-test 0.3.2

1 container image this version deploys carries CVE-2026-91187.

Container imageDigestPackageFixed in
library/mongo:4.2.16ca49afbcb2b
dash@0.5.8-2.10
no fix listed

Open the chart page →

—
mysqlkubesphere-carryon-test1.0.21See more

mysql kubesphere-carryon-test 1.0.2

1 container image this version deploys carries CVE-2026-91187.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
dash@0.5.10.2-6
no fix listed

Open the chart page →

—
deepflowkubesphere-stable6.2.6062 of 8See more

deepflow kubesphere-stable 6.2.606

2 of the 8 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
dash@0.5.10.2-6
no fix listed
deepflowce/deepflow-agent:v6.2.6.529332fee7fc2
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

18,905
iomeshkubesphere-stable1.1.04 of 25See more

iomesh kubesphere-stable 1.1.0

4 of the 25 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.7.25d3f9bf9240b
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
iomesh/node-disk-exporter:1.8.0f03148764f38
dash@0.5.10.2-6
no fix listed
iomesh/node-disk-manager:1.8.0002c4b92fd34
dash@0.5.10.2-6
no fix listed
iomesh/node-disk-operator:1.8.0f6c76380db34
dash@0.5.10.2-6
no fix listed

Open the chart page →

49,618
IOMeshkubesphere-stable1.2.04 of 25See more

IOMesh kubesphere-stable 1.2.0

4 of the 25 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.8.01a151f602451
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
iomesh/node-disk-exporter:1.8.0f03148764f38
dash@0.5.10.2-6
no fix listed
iomesh/node-disk-manager:1.8.0-2292ad270082e
dash@0.5.12-6ubuntu5
no fix listed
iomesh/node-disk-operator:1.8.0-1de4aa40684ad
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

47,365
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
dash@0.5.10.2-6
no fix listed

Open the chart page →

92,005
clickhousekubesphere-testVerified publisher0.1.11 of 2See more

clickhouse kubesphere-test 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
radondb/clickhouse-server:v21.1.3.32-stable4732df471073
dash@0.5.8-2.10
no fix listed

Open the chart page →

6,862
csi-neonsankubesphere-testVerified publisher1.3.01 of 6See more

csi-neonsan kubesphere-test 1.3.0

1 of the 6 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
csiplugin/csi-neonsan:v1.2.21fa83d45417f
dash@0.5.8-2.1ubuntu2
no fix listed

Open the chart page →

18,700
mongodbkubesphere-testVerified publisher0.3.21 of 2See more

mongodb kubesphere-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/mongo:4.2.16ca49afbcb2b
dash@0.5.8-2.10
no fix listed

Open the chart page →

9,774
mysqlkubesphere-testVerified publisher1.0.21 of 3See more

mysql kubesphere-test 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
dash@0.5.10.2-6
no fix listed

Open the chart page →

7,545
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-reviews-v2:1.13.06d93129beb32
dash@0.5.8-2.1ubuntu2
no fix listed

Open the chart page →

9,883
xenondbkubesphere-testVerified publisher1.0.01 of 3See more

xenondb kubesphere-test 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
dash@0.5.10.2-6
no fix listed

Open the chart page →

7,545
vector-controllerkubevela0.2.31 of 2See more

vector-controller kubevela 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
oamdev/vector-controller:v0.2.39dd8be44ffc9
dash@0.5.8-2.10
no fix listed

Open the chart page →

4,902
penpotkubitodevVerified publisher1.2.12 of 5See more

penpot kubitodev 1.2.1

2 of the 5 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
penpotapp/exporter:2.2.15c835ffd87ab
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

18,088
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
grafana/alloy:v1.5.101a63f4e032c
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

21,018
ctrlmeshkusionstackVerified publisher0.2.01 of 1See more

ctrlmesh kusionstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
kusionstack/ctrlmesh-manager:v0.2.065e3c32b64d7
dash@0.5.10.2-6
no fix listed

Open the chart page →

3,619
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

65,504
sample-operatorkusionstackVerified publisher0.1.21 of 1See more

sample-operator kusionstack 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
chaerr/kridge:demo-operator-v0.1.266833deec017
dash@0.5.10.2-6
no fix listed

Open the chart page →

2,619
fstyr-ddp-keycloak-application-platform-configkvalitetsitVerified publisher0.1.131 of 1See more

fstyr-ddp-keycloak-application-platform-config kvalitetsit 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

3,312
keycloak-application-platform-configkvalitetsitVerified publisher0.0.291 of 1See more

keycloak-application-platform-config kvalitetsit 0.0.29

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

3,540
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
dash@0.5.8-2.10
no fix listed

Open the chart page →

17,054
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

8,024
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
dash@0.5.8-2.10
no fix listed

Open the chart page →

26,830
pageslatif-pages1.0.02 of 3See more

pages latif-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
dash@0.5.10.2-6
no fix listed
flyway/flyway:6.4.422d97ceb0c47
dash@0.5.8-2.10
no fix listed

Open the chart page →

20,585
pageslavanya-pages1.0.02 of 3See more

pages lavanya-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
dash@0.5.10.2-6
no fix listed
flyway/flyway:6.4.422d97ceb0c47
dash@0.5.8-2.10
no fix listed

Open the chart page →

20,585
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

36,733
kubernetes-dashboardlbenicio-communityVerified publisher7.14.101 of 5See more

kubernetes-dashboard lbenicio-community 7.14.10

1 of the 5 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
library/kong:3.912972ce1ab63
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

1,981
kinesaliteleprechaun-charts0.1.21 of 1See more

kinesalite leprechaun-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
instructure/kinesalite:latest34400d82f28f
dash@0.5.10.2-6
no fix listed

Open the chart page →

4,429
kube-iptables-tailerlifen0.2.31 of 1See more

kube-iptables-tailer lifen 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
honestica/kube-iptables-tailer:master-91a393242fb939
dash@0.5.10.2-6
no fix listed

Open the chart page →

4,569
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

11,243
pagesliviu884422-pages1.0.02 of 3See more

pages liviu884422-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
dash@0.5.10.2-6
no fix listed
flyway/flyway:6.4.422d97ceb0c47
dash@0.5.8-2.10
no fix listed

Open the chart page →

20,585
vnode-runtimeloftVerified publisher0.3.31 of 1See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

2,631
nightingalelogic3579Verified publisher0.3.11 of 6See more

nightingale logic3579 0.3.1

1 of the 6 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

9,472
rocketmq-exporterlogic3579Verified publisher0.0.21 of 1See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
apache/rocketmq-exporter:0.0.2c8fb51195444
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

6,882
clickhouselohmag0.2.01 of 1See more

clickhouse lohmag 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.17ab1738a64b70
dash@0.5.8-2.10
no fix listed

Open the chart page →

6,062
allure_docker_servicelovemew67Verified publisher0.0.11 of 1See more

allure_docker_service lovemew67 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.27.00815040339a9
dash@0.5.8-2.10
no fix listed

Open the chart page →

65,329
vulnerability-scaninglovemew67Verified publisher0.0.31 of 2See more

vulnerability-scaning lovemew67 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.35.14154286c0209
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

5,399
loxilbloxilbVerified publisher0.1.02 of 2See more

loxilb loxilb 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ghcr.io/loxilb-io/kube-loxilb:latest6f65e53e252d
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
ghcr.io/loxilb-io/loxilb:latesta475b43946b3
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

4,653
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
dash@0.5.10.2-6
no fix listed

Open the chart page →

92,261
elastictranscoderluiscajl0.46.04 of 4See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
dash@0.5.8-2.10
no fix listed
elastictranscoder/media-storage:f6d861a026208b8c2359
dash@0.5.8-2.10
no fix listed
elastictranscoder/transcoder:627e21dcb4a0327029e6
dash@0.5.8-2.10
no fix listed
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
dash@0.5.8-2.10
no fix listed

Open the chart page →

59,437
plex-rclone-wireguardluiscajl1.0.191 of 2See more

plex-rclone-wireguard luiscajl 1.0.19

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latestbe083133dfe0
dash@0.5.12-12ubuntu3
no fix listed

Open the chart page →

597
magistralamagistrala-devopsVerified publisher0.16.22 of 42See more

magistrala magistrala-devops 0.16.2

2 of the 42 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31-latestcaa5b411be16
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

25,103
circleci-runnermatic-insurance0.1.11 of 1See more

circleci-runner matic-insurance 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
circleci/runner:launch-agent9bdc62f02162
dash@0.5.10.2-6
no fix listed

Open the chart page →

4,317
mayastormayastorVerified publisher2.12.11 of 31See more

mayastor mayastor 2.12.1

1 of the 31 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

19,316
eoloplantmca-eoloplaner0.1.03 of 7See more

eoloplant mca-eoloplaner 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
hugohg34/toposervice:0.0.2812a03b3f274
dash@0.5.10.2-6
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
dash@0.5.10.2-6
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

30,565
mcroutermcrouterVerified publisher0.2.01 of 2See more

mcrouter mcrouter 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ghcr.io/dragoangel/mcrouter:v2026.06.29.0042afcffe67d0
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

2,513
cameramedia-streaming-meshVerified publisher0.2.52 of 3See more

camera media-streaming-mesh 0.2.5

2 of the 3 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
dash@0.5.10.2-6
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
dash@0.5.10.2-6
no fix listed

Open the chart page →

19,344
crdsmedia-streaming-meshVerified publisher0.0.11 of 2See more

crds media-streaming-mesh 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ciscolabs/msm-nc:0710202336d02faad958
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

3,860
msmmedia-streaming-meshVerified publisher0.1.175 of 6See more

msm media-streaming-mesh 0.1.17

5 of the 6 container images this version deploys carry CVE-2026-91187.

Container imageDigestPackageFixed in
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
dash@0.5.12-6ubuntu5
no fix listed
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
dash@0.5.12-6ubuntu5
no fix listed
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
dash@0.5.12-6ubuntu5
no fix listed
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
dash@0.5.12-6ubuntu5
no fix listed
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

12,169

Container images carrying it

1,167 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/cilium/cilium:v1.18.2858f807ea4e2
dash@0.5.12-6ubuntu5
no fix listed
1
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
dash@0.5.12-6ubuntu5
no fix listed
1
quay.io/cilium/cilium-envoy:v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be60031f396695
dash@0.5.12-6ubuntu5
no fix listed
1
quay.io/cilium/cilium-envoy:v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f77913247932d656b63f
dash@0.5.12-6ubuntu5
no fix listed
1
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
dash@0.5.8-2.10
no fix listed
1
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
quay.io/go-skynet/local-ai:latest0632c21ddbe4
dash@0.5.12-6ubuntu5
no fix listed
1
quay.io/isindir/sops-secrets-operator:0.21.27bba7083dfa0
dash@0.5.12-12ubuntu3
no fix listed
1
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
dash@0.5.8-2.1ubuntu2
no fix listed
1
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
dash@0.5.12-6ubuntu5
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
dash@0.5.8-2.1ubuntu2
no fix listed
1
quay.io/poundex/tekton-stash-and-cache:0.2.2e854423caa09
dash@0.5.12-12ubuntu3
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
dash@0.5.12-6ubuntu5
no fix listed
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
dash@0.5.12-12ubuntu3
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
dash@0.5.10.2-6
no fix listed
1

syft 1.42.1 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.