StackRadar

CVE-2026-98436

Medium

Advisory

Published 18 Oct 2026In the index since 20 Oct 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
367
of 18,219 indexed, latest versions
Container images
368
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 367 of 18,219 indexed charts deploy, on 368 images.

Affected packageAffected versionsFixed inImages
linuxdeb3.13.0-46.77, 3.13.0-126.175, 3.13.0-149.199, 3.13.0-170.220+140 moreno fix listed368
OSV records
DEBIAN-CVE-2026-98436UBUNTU-CVE-2026-98436

Charts affected

367 by stars
ChartLatestAffected imagesRadar Score
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
linux@6.1.90-1
no fix listed

Open the chart page →

91,919
craftycontrollerdrewburr-labs-helm-chartsVerified publisher0.3.01 of 1See more

craftycontroller drewburr-labs-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
linux@6.8.0-139.139
no fix listed

Open the chart page →

40,069
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
linux@6.8.0-57.59
no fix listed

Open the chart page →

76,088
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
linux@6.1.172-1
no fix listed

Open the chart page →

76,469
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
linux@6.1.99-1
no fix listed

Open the chart page →

79,173
api-umbrellafiware0.2.01 of 1See more

api-umbrella fiware 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
fiware/api-umbrella:0.18.06e5159d29c3c
linux@4.15.0-189.200
no fix listed

Open the chart page →

78,031
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
linux@4.15.0-88.88
no fix listed

Open the chart page →

77,958
games-on-whalesgeek-cookbookVerified publisher1.8.21 of 7See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
linux@5.4.0-81.91
no fix listed

Open the chart page →

112,217
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
linux@5.4.0-121.137
no fix listed

Open the chart page →

86,393
tdarrgeek-cookbookVerified publisher4.6.21 of 2See more

tdarr geek-cookbook 4.6.2

1 of the 2 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
linux@5.4.0-109.123
no fix listed

Open the chart page →

103,787
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
linux@6.1.106-3
no fix listed

Open the chart page →

75,821
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
linux@6.1.133-1
no fix listed

Open the chart page →

62,072
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
linux@5.15.0-143.153
no fix listed

Open the chart page →

66,993
valkey-clusterinnagoVerified publisher1.1.01 of 2See more

valkey-cluster innago 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
valkey/valkey:8.0.1c5d4f082b76d
linux@6.1.106-3
no fix listed

Open the chart page →

67,933
cniistio1.10.31 of 1See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
istio/install-cni:1.10.32232f365aed6
linux@4.15.0-147.151
no fix listed

Open the chart page →

73,505
discoveryistio1.10.31 of 1See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
istio/pilot:1.10.3e7e110a421c2
linux@4.15.0-147.151
no fix listed

Open the chart page →

73,577
egressistio1.10.31 of 1See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
linux@4.15.0-147.151
no fix listed

Open the chart page →

73,522
ingressistio1.10.31 of 1See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
linux@4.15.0-147.151
no fix listed

Open the chart page →

73,522
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
linux@4.15.0-147.151
no fix listed

Open the chart page →

73,824
opennebulakvaps2.1.12 of 9See more

opennebula kvaps 2.1.1

2 of the 9 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
linux@5.4.0-80.90
no fix listed
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
linux@5.4.0-80.90
no fix listed

Open the chart page →

271,049
mend-renovate-enterprise-editionmend-renovateVerified publisher10.8.01 of 2See more

mend-renovate-enterprise-edition mend-renovate 10.8.0

1 of the 2 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/mend/renovate-ee-server:15.8.02df8d6bb970b
linux@6.8.0-147.147
no fix listed

Open the chart page →

26,022
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
linux@6.1.137-1
no fix listed

Open the chart page →

69,868
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
linux@6.1.76-1
no fix listed

Open the chart page →

120,451
openvaultopenvaultVerified publisher0.9.01 of 2See more

openvault openvault 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
linux@6.1.140-1
no fix listed

Open the chart page →

61,541
opsopsVerified publisher1.2.02 of 2See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
shaowenchen/ops-controller-manager:latest35575d4f2bfe
linux@5.15.0-191.201
no fix listed
shaowenchen/ops-server:latest6bac5cebd125
linux@5.15.0-153.163
no fix listed

Open the chart page →

97,701
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
linux@6.1.128-1
no fix listed

Open the chart page →

94,776
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
linux@6.1.174-1
no fix listed

Open the chart page →

50,051
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
linux@6.8.0-136.136
no fix listed

Open the chart page →

64,185
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latestf611790ecffa
linux@5.15.0-124.134
no fix listed

Open the chart page →

69,659
kimai2robjuz5.0.171 of 2See more

kimai2 robjuz 5.0.17

1 of the 2 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
kimai/kimai2:2.70.17ccc9597309b
linux@6.1.190-1
no fix listed

Open the chart page →

19,267
rocketadminrocketadminOfficialVerified publisher1.0.431 of 1See more

rocketadmin rocketadmin 1.0.43

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.23.70bd1abb0bfd1
linux@6.1.187-1
no fix listed

Open the chart page →

26,323
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
linux@6.1.158-1
no fix listed

Open the chart page →

56,052
rstudio-pmrstudioVerified publisher0.20.71 of 1See more

rstudio-pm rstudio 0.20.7

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
posit/package-manager:2026.10.0-ubuntu-24.04574ed7ec955f
linux@6.8.0-147.147
no fix listed

Open the chart page →

24,768
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
linux@6.1.119-1
no fix listed
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
linux@6.1.119-1
no fix listed

Open the chart page →

154,512
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
linux@6.1.177-1
no fix listed

Open the chart page →

53,689
smarter-demosmarterOfficialVerified publisher0.1.53 of 7See more

smarter-demo smarter 0.1.5

3 of the 7 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
linux@5.4.0-131.147
no fix listed
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
linux@5.4.0-131.147
no fix listed
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
linux@5.4.0-131.147
no fix listed

Open the chart page →

249,349
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
linux@5.4.0-74.83
no fix listed

Open the chart page →

103,259
supabasesupabse0.8.01 of 11See more

supabase supabse 0.8.0

1 of the 11 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
linux@6.1.177-1
no fix listed

Open the chart page →

55,054
u-storeunifieVerified publisher1.2.01 of 1See more

u-store unifie 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
linux@6.1.90-1
no fix listed

Open the chart page →

86,409
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
linux@6.1.123-1
no fix listed

Open the chart page →

71,997
varnish-cachevarnishVerified publisher1.1.11 of 1See more

varnish-cache varnish 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
library/varnish:7.5.04d0bb287d87b
linux@6.1.129-1
no fix listed

Open the chart page →

60,661
spark-operatorwikimedia2.2.91 of 1See more

spark-operator wikimedia 2.2.9

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
linux@5.4.0-214.234
no fix listed

Open the chart page →

55,792
acos-prometheus-exporter-helm-charta10-prometheus-exporter0.1.01 of 1See more

acos-prometheus-exporter-helm-chart a10-prometheus-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
a10networks/acos-prometheus-exporter:latest8dc58d434d71
linux@4.15.0-101.102
no fix listed

Open the chart page →

76,483
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
linux@5.4.0-67.75
no fix listed

Open the chart page →

103,487
akto-ai-guardrails-v2akto0.3.01 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

1 of the 6 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
linux@7.0.0-28.28
no fix listed

Open the chart page →

53,168
akto-regional-setupakto1.4.121 of 9See more

akto-regional-setup akto 1.4.12

1 of the 9 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.6.6dc4b05df83f7
linux@7.0.0-38.38
no fix listed

Open the chart page →

35,020
akto-testing-db-layerakto1.42.171 of 2See more

akto-testing-db-layer akto 1.42.17

1 of the 2 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.74.4_local1ed844ecab29
linux@6.8.0-139.139
no fix listed

Open the chart page →

41,753
data-ingestion-serviceakto0.1.61 of 1See more

data-ingestion-service akto 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-servicedigest-pinned213aded7adc5
linux@6.8.0-94.96
no fix listed

Open the chart page →

64,008
alibaba-rsocket-brokeralibaba-rsocket-brokerVerified publisher0.1.31 of 1See more

alibaba-rsocket-broker alibaba-rsocket-broker 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
linuxchina/alibaba-rsocket-broker:1.1.3-k8sf758e2e567ee
linux@4.15.0-171.180
no fix listed

Open the chart page →

92,599
anchore-admission-controlleranchore-charts0.9.31 of 2See more

anchore-admission-controller anchore-charts 0.9.3

1 of the 2 container images this version deploys carry CVE-2026-98436.

Container imageDigestPackageFixed in
cfssl/cfssl:v1.6.5c9018c2ddf0b
linux@6.1.69-1
no fix listed

Open the chart page →

83,603

Container images carrying it

368 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
opendatacube/restcube:latest91870111837c
linux@4.15.0-50.54
no fix listed
1
opendatacube/wms:latest1b90cdf68831
linux@4.15.0-50.54
no fix listed
1
openelevation/open-elevation:latest82fb21612e86
linux@5.4.0-80.90
no fix listed
1
openproject/hocuspocus:release-338001b288dc1359dfb5
linux@6.1.147-1
no fix listed
1
opensign/opensign0ebc230eed21
linux@6.1.129-1
no fix listed
1
openthread/otbr:latest08a8f8bfb5c5
linux@4.15.0-213.224
no fix listed
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
linux@4.15.0-122.124
no fix listed
1
oznu/homebridge:2021-12-19-ubuntu2e12d0e2dcce
linux@4.15.0-163.171
no fix listed
1
phan2410/dummy-service:0.0.89c6ed6de26ca
linux@6.1.129-1
no fix listed
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
linux@6.1.129-1
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
linux@7.0.0-22.22
no fix listed
1
photoprism/photoprism:260728958642220223
linux@7.0.0-28.28
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
linux@6.8.0-38.38
no fix listed
1
posit/package-manager:2026.10.0-ubuntu-24.04574ed7ec955f
linux@6.8.0-147.147
no fix listed
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
linux@6.1.99-1
no fix listed
1
prowlercloud/prowler-api:5.31.14f252d579be2
linux@6.1.174-1
no fix listed
1
qonstrukt/php:8.4-v8-apache089af7925aa1
linux@6.8.0-136.136
no fix listed
1
redash/redash:25.8.000d813437db5
linux@6.1.140-1
no fix listed
1
redash/redash:26.3.0c5c9148f5c38
linux@6.1.162-1
no fix listed
1
resouer/redis-slave:v2e2f198b49ba7
linux@3.13.0-46.77
no fix listed
1
rezachalak/bzen-mongo:1.0.034f694325191
linux@5.4.0-156.173
no fix listed
1
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
linux@6.1.164-1
no fix listed
1
rocketadmin/rocketadmin:1.23.70bd1abb0bfd1
linux@6.1.187-1
no fix listed
1
santisbon/evwatcher:latestc4e994ca4540
linux@6.1.38-4
no fix listed
1
santisbon/evworker:lateste807283f8d69
linux@6.1.38-4
no fix listed
1
santisbon/speedtest:latest8ee3a1697227
linux@6.1.38-4
no fix listed
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
linux@6.1.106-3
no fix listed
1
schmitzis/monorepo:seafile-13.0-latestc583f1be2af2
linux@6.8.0-139.139
no fix listed
1
scrapinghub/splash:3.4.1a5f89bc84606
linux@4.15.0-74.84
no fix listed
1
seafileltd/seafile-mc:9.0.106693911bcc40
linux@5.4.0-135.152
no fix listed
1
seafileltd/seafile-mc:10.0.170628f29c663
linux@5.4.0-152.169
no fix listed
1
seafileltd/seafile-mc:9.0.97ac833196f60
linux@5.4.0-125.141
no fix listed
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
linux@5.4.0-80.90
no fix listed
1
seldonio/locust-core:0.81d0da98a2d76
linux@4.4.0-148.174
no fix listed
1
shaowenchen/ops-controller-manager:latest35575d4f2bfe
linux@5.15.0-191.201
no fix listed
1
shaowenchen/ops-server:latest6bac5cebd125
linux@5.15.0-153.163
no fix listed
1
signalen/backend:2.50.1826bb090bc4e4
linux@6.1.187-1
no fix listed
1
sissbruecker/linkding:1.35.00c5dddf0b37c
linux@6.1.106-3
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
linux@6.1.140-1
no fix listed
1
snipe/snipe-it:v8.3.1141ebf2386fe
linux@6.8.0-79.79
no fix listed
1
snipe/snipe-it:v6.0.1455fb7636a98c
linux@5.4.0-131.147
no fix listed
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
linux@5.4.0-163.180
no fix listed
1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
linux@4.15.0-210.221
no fix listed
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
linux@6.1.52-1
no fix listed
1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
linux@4.15.0-210.221
no fix listed
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
linux@6.1.38-4
no fix listed
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
linux@6.1.38-4
no fix listed
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
linux@6.1.38-4
no fix listed
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
linux@5.4.0-117.132
no fix listed
1
stackstorm/st2actionrunner:3.888235ba70cad
linux@5.4.0-169.187
no fix listed
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.