{
  "vulnerabilities": [
    {
      "id": "SNYK-DEBIAN13-ACL-17677866",
      "cpes": [],
      "title": "Link Following",
      "CVSSv3": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "*"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.1,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-54369",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-54369"
        },
        {
          "url": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5",
          "title": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5"
        },
        {
          "url": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1",
          "title": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1"
        },
        {
          "url": "https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions",
          "title": "https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:34351",
          "title": "https://access.redhat.com/errata/RHSA-2026:34351"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:42736",
          "title": "https://access.redhat.com/errata/RHSA-2026:42736"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:42739",
          "title": "https://access.redhat.com/errata/RHSA-2026:42739"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:43420",
          "title": "https://access.redhat.com/errata/RHSA-2026:43420"
        },
        {
          "url": "https://access.redhat.com/security/cve/CVE-2026-54369",
          "title": "https://access.redhat.com/security/cve/CVE-2026-54369"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490277",
          "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2490277"
        },
        {
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json",
          "title": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:44481",
          "title": "https://access.redhat.com/errata/RHSA-2026:44481"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:46836",
          "title": "https://access.redhat.com/errata/RHSA-2026:46836"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:50205",
          "title": "https://access.redhat.com/errata/RHSA-2026:50205"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:53371",
          "title": "https://access.redhat.com/errata/RHSA-2026:53371"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:54769",
          "title": "https://access.redhat.com/errata/RHSA-2026:54769"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:58981",
          "title": "https://access.redhat.com/errata/RHSA-2026:58981"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:64805",
          "title": "https://access.redhat.com/errata/RHSA-2026:64805"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "cvssV3BaseScore": 7.1,
          "modificationTime": "2026-06-30T01:28:55.003046Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "cvssV3BaseScore": 7.1,
          "modificationTime": "2026-06-30T07:07:59.950283Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.1,
          "cvssVersion": "3.1",
          "modificationTime": "2026-06-30T01:28:55.003046Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "assigner": "Red Hat",
          "severity": "high",
          "baseScore": 7.1,
          "cvssVersion": "3.1",
          "modificationTime": "2026-06-30T07:07:59.950283Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `acl` package and not the `acl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nacl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.\n## Remediation\nThere is no fixed version for `Debian:13` `acl`.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-54369](https://security-tracker.debian.org/tracker/CVE-2026-54369)\n- [https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5](https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5)\n- [https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1](https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1)\n- [https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions](https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions)\n- [https://access.redhat.com/errata/RHSA-2026:34351](https://access.redhat.com/errata/RHSA-2026:34351)\n- [https://access.redhat.com/errata/RHSA-2026:42736](https://access.redhat.com/errata/RHSA-2026:42736)\n- [https://access.redhat.com/errata/RHSA-2026:42739](https://access.redhat.com/errata/RHSA-2026:42739)\n- [https://access.redhat.com/errata/RHSA-2026:43420](https://access.redhat.com/errata/RHSA-2026:43420)\n- [https://access.redhat.com/security/cve/CVE-2026-54369](https://access.redhat.com/security/cve/CVE-2026-54369)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2490277](https://bugzilla.redhat.com/show_bug.cgi?id=2490277)\n- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json)\n- [https://access.redhat.com/errata/RHSA-2026:44481](https://access.redhat.com/errata/RHSA-2026:44481)\n- [https://access.redhat.com/errata/RHSA-2026:46836](https://access.redhat.com/errata/RHSA-2026:46836)\n- [https://access.redhat.com/errata/RHSA-2026:50205](https://access.redhat.com/errata/RHSA-2026:50205)\n- [https://access.redhat.com/errata/RHSA-2026:53371](https://access.redhat.com/errata/RHSA-2026:53371)\n- [https://access.redhat.com/errata/RHSA-2026:54769](https://access.redhat.com/errata/RHSA-2026:54769)\n- [https://access.redhat.com/errata/RHSA-2026:58981](https://access.redhat.com/errata/RHSA-2026:58981)\n- [https://access.redhat.com/errata/RHSA-2026:64805](https://access.redhat.com/errata/RHSA-2026:64805)\n",
      "epssDetails": {
        "percentile": "0.04935",
        "probability": "0.00153",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-54369"
        ],
        "CWE": [
          "CWE-59"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "acl",
      "creationTime": "2026-06-30T00:27:10.988309Z",
      "disclosureTime": "2026-06-29T14:16:57.487000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-06-30T00:27:10.995039Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-09-09T18:15:42.459660Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "acl/libacl1@2.3.2-2+b1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "acl/libacl1",
      "version": "2.3.2-2+b1"
    },
    {
      "id": "SNYK-DEBIAN13-ACL-17677866",
      "cpes": [],
      "title": "Link Following",
      "CVSSv3": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "*"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.1,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-54369",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-54369"
        },
        {
          "url": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5",
          "title": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5"
        },
        {
          "url": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1",
          "title": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1"
        },
        {
          "url": "https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions",
          "title": "https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:34351",
          "title": "https://access.redhat.com/errata/RHSA-2026:34351"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:42736",
          "title": "https://access.redhat.com/errata/RHSA-2026:42736"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:42739",
          "title": "https://access.redhat.com/errata/RHSA-2026:42739"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:43420",
          "title": "https://access.redhat.com/errata/RHSA-2026:43420"
        },
        {
          "url": "https://access.redhat.com/security/cve/CVE-2026-54369",
          "title": "https://access.redhat.com/security/cve/CVE-2026-54369"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490277",
          "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2490277"
        },
        {
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json",
          "title": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:44481",
          "title": "https://access.redhat.com/errata/RHSA-2026:44481"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:46836",
          "title": "https://access.redhat.com/errata/RHSA-2026:46836"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:50205",
          "title": "https://access.redhat.com/errata/RHSA-2026:50205"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:53371",
          "title": "https://access.redhat.com/errata/RHSA-2026:53371"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:54769",
          "title": "https://access.redhat.com/errata/RHSA-2026:54769"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:58981",
          "title": "https://access.redhat.com/errata/RHSA-2026:58981"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:64805",
          "title": "https://access.redhat.com/errata/RHSA-2026:64805"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "cvssV3BaseScore": 7.1,
          "modificationTime": "2026-06-30T01:28:55.003046Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "cvssV3BaseScore": 7.1,
          "modificationTime": "2026-06-30T07:07:59.950283Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.1,
          "cvssVersion": "3.1",
          "modificationTime": "2026-06-30T01:28:55.003046Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "assigner": "Red Hat",
          "severity": "high",
          "baseScore": 7.1,
          "cvssVersion": "3.1",
          "modificationTime": "2026-06-30T07:07:59.950283Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `acl` package and not the `acl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nacl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.\n## Remediation\nThere is no fixed version for `Debian:13` `acl`.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-54369](https://security-tracker.debian.org/tracker/CVE-2026-54369)\n- [https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5](https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5)\n- [https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1](https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1)\n- [https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions](https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions)\n- [https://access.redhat.com/errata/RHSA-2026:34351](https://access.redhat.com/errata/RHSA-2026:34351)\n- [https://access.redhat.com/errata/RHSA-2026:42736](https://access.redhat.com/errata/RHSA-2026:42736)\n- [https://access.redhat.com/errata/RHSA-2026:42739](https://access.redhat.com/errata/RHSA-2026:42739)\n- [https://access.redhat.com/errata/RHSA-2026:43420](https://access.redhat.com/errata/RHSA-2026:43420)\n- [https://access.redhat.com/security/cve/CVE-2026-54369](https://access.redhat.com/security/cve/CVE-2026-54369)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2490277](https://bugzilla.redhat.com/show_bug.cgi?id=2490277)\n- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json)\n- [https://access.redhat.com/errata/RHSA-2026:44481](https://access.redhat.com/errata/RHSA-2026:44481)\n- [https://access.redhat.com/errata/RHSA-2026:46836](https://access.redhat.com/errata/RHSA-2026:46836)\n- [https://access.redhat.com/errata/RHSA-2026:50205](https://access.redhat.com/errata/RHSA-2026:50205)\n- [https://access.redhat.com/errata/RHSA-2026:53371](https://access.redhat.com/errata/RHSA-2026:53371)\n- [https://access.redhat.com/errata/RHSA-2026:54769](https://access.redhat.com/errata/RHSA-2026:54769)\n- [https://access.redhat.com/errata/RHSA-2026:58981](https://access.redhat.com/errata/RHSA-2026:58981)\n- [https://access.redhat.com/errata/RHSA-2026:64805](https://access.redhat.com/errata/RHSA-2026:64805)\n",
      "epssDetails": {
        "percentile": "0.04935",
        "probability": "0.00153",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-54369"
        ],
        "CWE": [
          "CWE-59"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "acl",
      "creationTime": "2026-06-30T00:27:10.988309Z",
      "disclosureTime": "2026-06-29T14:16:57.487000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-06-30T00:27:10.995039Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-09-09T18:15:42.459660Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "coreutils@9.7-3",
        "acl/libacl1@2.3.2-2+b1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "acl/libacl1",
      "version": "2.3.2-2+b1"
    },
    {
      "id": "SNYK-DEBIAN13-ACL-17677866",
      "cpes": [],
      "title": "Link Following",
      "CVSSv3": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "*"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.1,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-54369",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-54369"
        },
        {
          "url": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5",
          "title": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5"
        },
        {
          "url": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1",
          "title": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1"
        },
        {
          "url": "https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions",
          "title": "https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:34351",
          "title": "https://access.redhat.com/errata/RHSA-2026:34351"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:42736",
          "title": "https://access.redhat.com/errata/RHSA-2026:42736"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:42739",
          "title": "https://access.redhat.com/errata/RHSA-2026:42739"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:43420",
          "title": "https://access.redhat.com/errata/RHSA-2026:43420"
        },
        {
          "url": "https://access.redhat.com/security/cve/CVE-2026-54369",
          "title": "https://access.redhat.com/security/cve/CVE-2026-54369"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490277",
          "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2490277"
        },
        {
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json",
          "title": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:44481",
          "title": "https://access.redhat.com/errata/RHSA-2026:44481"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:46836",
          "title": "https://access.redhat.com/errata/RHSA-2026:46836"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:50205",
          "title": "https://access.redhat.com/errata/RHSA-2026:50205"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:53371",
          "title": "https://access.redhat.com/errata/RHSA-2026:53371"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:54769",
          "title": "https://access.redhat.com/errata/RHSA-2026:54769"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:58981",
          "title": "https://access.redhat.com/errata/RHSA-2026:58981"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:64805",
          "title": "https://access.redhat.com/errata/RHSA-2026:64805"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "cvssV3BaseScore": 7.1,
          "modificationTime": "2026-06-30T01:28:55.003046Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "cvssV3BaseScore": 7.1,
          "modificationTime": "2026-06-30T07:07:59.950283Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.1,
          "cvssVersion": "3.1",
          "modificationTime": "2026-06-30T01:28:55.003046Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "assigner": "Red Hat",
          "severity": "high",
          "baseScore": 7.1,
          "cvssVersion": "3.1",
          "modificationTime": "2026-06-30T07:07:59.950283Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `acl` package and not the `acl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nacl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.\n## Remediation\nThere is no fixed version for `Debian:13` `acl`.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-54369](https://security-tracker.debian.org/tracker/CVE-2026-54369)\n- [https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5](https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5)\n- [https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1](https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1)\n- [https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions](https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions)\n- [https://access.redhat.com/errata/RHSA-2026:34351](https://access.redhat.com/errata/RHSA-2026:34351)\n- [https://access.redhat.com/errata/RHSA-2026:42736](https://access.redhat.com/errata/RHSA-2026:42736)\n- [https://access.redhat.com/errata/RHSA-2026:42739](https://access.redhat.com/errata/RHSA-2026:42739)\n- [https://access.redhat.com/errata/RHSA-2026:43420](https://access.redhat.com/errata/RHSA-2026:43420)\n- [https://access.redhat.com/security/cve/CVE-2026-54369](https://access.redhat.com/security/cve/CVE-2026-54369)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2490277](https://bugzilla.redhat.com/show_bug.cgi?id=2490277)\n- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json)\n- [https://access.redhat.com/errata/RHSA-2026:44481](https://access.redhat.com/errata/RHSA-2026:44481)\n- [https://access.redhat.com/errata/RHSA-2026:46836](https://access.redhat.com/errata/RHSA-2026:46836)\n- [https://access.redhat.com/errata/RHSA-2026:50205](https://access.redhat.com/errata/RHSA-2026:50205)\n- [https://access.redhat.com/errata/RHSA-2026:53371](https://access.redhat.com/errata/RHSA-2026:53371)\n- [https://access.redhat.com/errata/RHSA-2026:54769](https://access.redhat.com/errata/RHSA-2026:54769)\n- [https://access.redhat.com/errata/RHSA-2026:58981](https://access.redhat.com/errata/RHSA-2026:58981)\n- [https://access.redhat.com/errata/RHSA-2026:64805](https://access.redhat.com/errata/RHSA-2026:64805)\n",
      "epssDetails": {
        "percentile": "0.04935",
        "probability": "0.00153",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-54369"
        ],
        "CWE": [
          "CWE-59"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "acl",
      "creationTime": "2026-06-30T00:27:10.988309Z",
      "disclosureTime": "2026-06-29T14:16:57.487000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-06-30T00:27:10.995039Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-09-09T18:15:42.459660Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "sed@4.9-2",
        "acl/libacl1@2.3.2-2+b1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "acl/libacl1",
      "version": "2.3.2-2+b1"
    },
    {
      "id": "SNYK-DEBIAN13-ACL-17677866",
      "cpes": [],
      "title": "Link Following",
      "CVSSv3": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "*"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.1,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-54369",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-54369"
        },
        {
          "url": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5",
          "title": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5"
        },
        {
          "url": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1",
          "title": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1"
        },
        {
          "url": "https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions",
          "title": "https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:34351",
          "title": "https://access.redhat.com/errata/RHSA-2026:34351"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:42736",
          "title": "https://access.redhat.com/errata/RHSA-2026:42736"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:42739",
          "title": "https://access.redhat.com/errata/RHSA-2026:42739"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:43420",
          "title": "https://access.redhat.com/errata/RHSA-2026:43420"
        },
        {
          "url": "https://access.redhat.com/security/cve/CVE-2026-54369",
          "title": "https://access.redhat.com/security/cve/CVE-2026-54369"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490277",
          "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2490277"
        },
        {
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json",
          "title": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:44481",
          "title": "https://access.redhat.com/errata/RHSA-2026:44481"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:46836",
          "title": "https://access.redhat.com/errata/RHSA-2026:46836"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:50205",
          "title": "https://access.redhat.com/errata/RHSA-2026:50205"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:53371",
          "title": "https://access.redhat.com/errata/RHSA-2026:53371"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:54769",
          "title": "https://access.redhat.com/errata/RHSA-2026:54769"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:58981",
          "title": "https://access.redhat.com/errata/RHSA-2026:58981"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:64805",
          "title": "https://access.redhat.com/errata/RHSA-2026:64805"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "cvssV3BaseScore": 7.1,
          "modificationTime": "2026-06-30T01:28:55.003046Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "cvssV3BaseScore": 7.1,
          "modificationTime": "2026-06-30T07:07:59.950283Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.1,
          "cvssVersion": "3.1",
          "modificationTime": "2026-06-30T01:28:55.003046Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "assigner": "Red Hat",
          "severity": "high",
          "baseScore": 7.1,
          "cvssVersion": "3.1",
          "modificationTime": "2026-06-30T07:07:59.950283Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `acl` package and not the `acl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nacl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.\n## Remediation\nThere is no fixed version for `Debian:13` `acl`.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-54369](https://security-tracker.debian.org/tracker/CVE-2026-54369)\n- [https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5](https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5)\n- [https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1](https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1)\n- [https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions](https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions)\n- [https://access.redhat.com/errata/RHSA-2026:34351](https://access.redhat.com/errata/RHSA-2026:34351)\n- [https://access.redhat.com/errata/RHSA-2026:42736](https://access.redhat.com/errata/RHSA-2026:42736)\n- [https://access.redhat.com/errata/RHSA-2026:42739](https://access.redhat.com/errata/RHSA-2026:42739)\n- [https://access.redhat.com/errata/RHSA-2026:43420](https://access.redhat.com/errata/RHSA-2026:43420)\n- [https://access.redhat.com/security/cve/CVE-2026-54369](https://access.redhat.com/security/cve/CVE-2026-54369)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2490277](https://bugzilla.redhat.com/show_bug.cgi?id=2490277)\n- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json)\n- [https://access.redhat.com/errata/RHSA-2026:44481](https://access.redhat.com/errata/RHSA-2026:44481)\n- [https://access.redhat.com/errata/RHSA-2026:46836](https://access.redhat.com/errata/RHSA-2026:46836)\n- [https://access.redhat.com/errata/RHSA-2026:50205](https://access.redhat.com/errata/RHSA-2026:50205)\n- [https://access.redhat.com/errata/RHSA-2026:53371](https://access.redhat.com/errata/RHSA-2026:53371)\n- [https://access.redhat.com/errata/RHSA-2026:54769](https://access.redhat.com/errata/RHSA-2026:54769)\n- [https://access.redhat.com/errata/RHSA-2026:58981](https://access.redhat.com/errata/RHSA-2026:58981)\n- [https://access.redhat.com/errata/RHSA-2026:64805](https://access.redhat.com/errata/RHSA-2026:64805)\n",
      "epssDetails": {
        "percentile": "0.04935",
        "probability": "0.00153",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-54369"
        ],
        "CWE": [
          "CWE-59"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "acl",
      "creationTime": "2026-06-30T00:27:10.988309Z",
      "disclosureTime": "2026-06-29T14:16:57.487000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-06-30T00:27:10.995039Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-09-09T18:15:42.459660Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "shadow/passwd@1:4.17.4-2",
        "acl/libacl1@2.3.2-2+b1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "acl/libacl1",
      "version": "2.3.2-2+b1"
    },
    {
      "id": "SNYK-DEBIAN13-ACL-17677866",
      "cpes": [],
      "title": "Link Following",
      "CVSSv3": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "*"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.1,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-54369",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-54369"
        },
        {
          "url": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5",
          "title": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5"
        },
        {
          "url": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1",
          "title": "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1"
        },
        {
          "url": "https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions",
          "title": "https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:34351",
          "title": "https://access.redhat.com/errata/RHSA-2026:34351"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:42736",
          "title": "https://access.redhat.com/errata/RHSA-2026:42736"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:42739",
          "title": "https://access.redhat.com/errata/RHSA-2026:42739"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:43420",
          "title": "https://access.redhat.com/errata/RHSA-2026:43420"
        },
        {
          "url": "https://access.redhat.com/security/cve/CVE-2026-54369",
          "title": "https://access.redhat.com/security/cve/CVE-2026-54369"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490277",
          "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2490277"
        },
        {
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json",
          "title": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:44481",
          "title": "https://access.redhat.com/errata/RHSA-2026:44481"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:46836",
          "title": "https://access.redhat.com/errata/RHSA-2026:46836"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:50205",
          "title": "https://access.redhat.com/errata/RHSA-2026:50205"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:53371",
          "title": "https://access.redhat.com/errata/RHSA-2026:53371"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:54769",
          "title": "https://access.redhat.com/errata/RHSA-2026:54769"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:58981",
          "title": "https://access.redhat.com/errata/RHSA-2026:58981"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:64805",
          "title": "https://access.redhat.com/errata/RHSA-2026:64805"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "cvssV3BaseScore": 7.1,
          "modificationTime": "2026-06-30T01:28:55.003046Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "cvssV3BaseScore": 7.1,
          "modificationTime": "2026-06-30T07:07:59.950283Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.1,
          "cvssVersion": "3.1",
          "modificationTime": "2026-06-30T01:28:55.003046Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "assigner": "Red Hat",
          "severity": "high",
          "baseScore": 7.1,
          "cvssVersion": "3.1",
          "modificationTime": "2026-06-30T07:07:59.950283Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `acl` package and not the `acl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nacl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.\n## Remediation\nThere is no fixed version for `Debian:13` `acl`.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-54369](https://security-tracker.debian.org/tracker/CVE-2026-54369)\n- [https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5](https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5)\n- [https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1](https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1)\n- [https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions](https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions)\n- [https://access.redhat.com/errata/RHSA-2026:34351](https://access.redhat.com/errata/RHSA-2026:34351)\n- [https://access.redhat.com/errata/RHSA-2026:42736](https://access.redhat.com/errata/RHSA-2026:42736)\n- [https://access.redhat.com/errata/RHSA-2026:42739](https://access.redhat.com/errata/RHSA-2026:42739)\n- [https://access.redhat.com/errata/RHSA-2026:43420](https://access.redhat.com/errata/RHSA-2026:43420)\n- [https://access.redhat.com/security/cve/CVE-2026-54369](https://access.redhat.com/security/cve/CVE-2026-54369)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2490277](https://bugzilla.redhat.com/show_bug.cgi?id=2490277)\n- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json)\n- [https://access.redhat.com/errata/RHSA-2026:44481](https://access.redhat.com/errata/RHSA-2026:44481)\n- [https://access.redhat.com/errata/RHSA-2026:46836](https://access.redhat.com/errata/RHSA-2026:46836)\n- [https://access.redhat.com/errata/RHSA-2026:50205](https://access.redhat.com/errata/RHSA-2026:50205)\n- [https://access.redhat.com/errata/RHSA-2026:53371](https://access.redhat.com/errata/RHSA-2026:53371)\n- [https://access.redhat.com/errata/RHSA-2026:54769](https://access.redhat.com/errata/RHSA-2026:54769)\n- [https://access.redhat.com/errata/RHSA-2026:58981](https://access.redhat.com/errata/RHSA-2026:58981)\n- [https://access.redhat.com/errata/RHSA-2026:64805](https://access.redhat.com/errata/RHSA-2026:64805)\n",
      "epssDetails": {
        "percentile": "0.04935",
        "probability": "0.00153",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-54369"
        ],
        "CWE": [
          "CWE-59"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "acl",
      "creationTime": "2026-06-30T00:27:10.988309Z",
      "disclosureTime": "2026-06-29T14:16:57.487000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-06-30T00:27:10.995039Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-09-09T18:15:42.459660Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "dpkg@1.22.22",
        "tar@1.35+dfsg-3.1",
        "acl/libacl1@2.3.2-2+b1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "acl/libacl1",
      "version": "2.3.2-2+b1"
    },
    {
      "id": "SNYK-DEBIAN13-ATTR-17678182",
      "cpes": [],
      "title": "Link Following",
      "CVSSv3": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "*"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.1,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-54371",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-54371"
        },
        {
          "url": "https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=49f79e947270f06940b9100fa638f85dddc4aa7f",
          "title": "https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=49f79e947270f06940b9100fa638f85dddc4aa7f"
        },
        {
          "url": "https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=c440855d6b33446edf4b5eb1a2d892281f15a99b",
          "title": "https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=c440855d6b33446edf4b5eb1a2d892281f15a99b"
        },
        {
          "url": "https://www.vulncheck.com/advisories/attr-symlink-traversal-privilege-escalation-via-getfattr-setfattr",
          "title": "https://www.vulncheck.com/advisories/attr-symlink-traversal-privilege-escalation-via-getfattr-setfattr"
        },
        {
          "url": "https://access.redhat.com/security/cve/CVE-2026-54371",
          "title": "https://access.redhat.com/security/cve/CVE-2026-54371"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490283",
          "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2490283"
        },
        {
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54371.json",
          "title": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54371.json"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:34889",
          "title": "https://access.redhat.com/errata/RHSA-2026:34889"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:56133",
          "title": "https://access.redhat.com/errata/RHSA-2026:56133"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:59380",
          "title": "https://access.redhat.com/errata/RHSA-2026:59380"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:60226",
          "title": "https://access.redhat.com/errata/RHSA-2026:60226"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:61783",
          "title": "https://access.redhat.com/errata/RHSA-2026:61783"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:63135",
          "title": "https://access.redhat.com/errata/RHSA-2026:63135"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:63138",
          "title": "https://access.redhat.com/errata/RHSA-2026:63138"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "cvssV3BaseScore": 7.1,
          "modificationTime": "2026-06-30T01:28:53.584255Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "cvssV3BaseScore": 6.3,
          "modificationTime": "2026-07-03T06:26:07.726913Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.1,
          "cvssVersion": "3.1",
          "modificationTime": "2026-06-30T01:28:53.584255Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 6.3,
          "cvssVersion": "3.1",
          "modificationTime": "2026-07-03T06:26:07.726913Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `attr` package and not the `attr` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nattr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component can redirect getfattr and setfattr operations to arbitrary files by substituting a symlink, leading to local privilege escalation when getfattr or setfattr is invoked by a privileged process over an attacker-controlled path.\n## Remediation\nThere is no fixed version for `Debian:13` `attr`.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-54371](https://security-tracker.debian.org/tracker/CVE-2026-54371)\n- [https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=49f79e947270f06940b9100fa638f85dddc4aa7f](https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=49f79e947270f06940b9100fa638f85dddc4aa7f)\n- [https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=c440855d6b33446edf4b5eb1a2d892281f15a99b](https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=c440855d6b33446edf4b5eb1a2d892281f15a99b)\n- [https://www.vulncheck.com/advisories/attr-symlink-traversal-privilege-escalation-via-getfattr-setfattr](https://www.vulncheck.com/advisories/attr-symlink-traversal-privilege-escalation-via-getfattr-setfattr)\n- [https://access.redhat.com/security/cve/CVE-2026-54371](https://access.redhat.com/security/cve/CVE-2026-54371)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2490283](https://bugzilla.redhat.com/show_bug.cgi?id=2490283)\n- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54371.json](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54371.json)\n- [https://access.redhat.com/errata/RHSA-2026:34889](https://access.redhat.com/errata/RHSA-2026:34889)\n- [https://access.redhat.com/errata/RHSA-2026:56133](https://access.redhat.com/errata/RHSA-2026:56133)\n- [https://access.redhat.com/errata/RHSA-2026:59380](https://access.redhat.com/errata/RHSA-2026:59380)\n- [https://access.redhat.com/errata/RHSA-2026:60226](https://access.redhat.com/errata/RHSA-2026:60226)\n- [https://access.redhat.com/errata/RHSA-2026:61783](https://access.redhat.com/errata/RHSA-2026:61783)\n- [https://access.redhat.com/errata/RHSA-2026:63135](https://access.redhat.com/errata/RHSA-2026:63135)\n- [https://access.redhat.com/errata/RHSA-2026:63138](https://access.redhat.com/errata/RHSA-2026:63138)\n",
      "epssDetails": {
        "percentile": "0.04150",
        "probability": "0.00146",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-54371"
        ],
        "CWE": [
          "CWE-59"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "attr",
      "creationTime": "2026-06-30T00:33:09.679328Z",
      "disclosureTime": "2026-06-29T14:16:57.823000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-06-30T00:33:09.682988Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-09-10T14:05:51.552428Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "attr/libattr1@1:2.5.2-3"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "attr/libattr1",
      "version": "1:2.5.2-3"
    },
    {
      "id": "SNYK-DEBIAN13-ATTR-17678182",
      "cpes": [],
      "title": "Link Following",
      "CVSSv3": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "*"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.1,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-54371",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-54371"
        },
        {
          "url": "https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=49f79e947270f06940b9100fa638f85dddc4aa7f",
          "title": "https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=49f79e947270f06940b9100fa638f85dddc4aa7f"
        },
        {
          "url": "https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=c440855d6b33446edf4b5eb1a2d892281f15a99b",
          "title": "https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=c440855d6b33446edf4b5eb1a2d892281f15a99b"
        },
        {
          "url": "https://www.vulncheck.com/advisories/attr-symlink-traversal-privilege-escalation-via-getfattr-setfattr",
          "title": "https://www.vulncheck.com/advisories/attr-symlink-traversal-privilege-escalation-via-getfattr-setfattr"
        },
        {
          "url": "https://access.redhat.com/security/cve/CVE-2026-54371",
          "title": "https://access.redhat.com/security/cve/CVE-2026-54371"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490283",
          "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2490283"
        },
        {
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54371.json",
          "title": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54371.json"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:34889",
          "title": "https://access.redhat.com/errata/RHSA-2026:34889"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:56133",
          "title": "https://access.redhat.com/errata/RHSA-2026:56133"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:59380",
          "title": "https://access.redhat.com/errata/RHSA-2026:59380"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:60226",
          "title": "https://access.redhat.com/errata/RHSA-2026:60226"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:61783",
          "title": "https://access.redhat.com/errata/RHSA-2026:61783"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:63135",
          "title": "https://access.redhat.com/errata/RHSA-2026:63135"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:63138",
          "title": "https://access.redhat.com/errata/RHSA-2026:63138"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "cvssV3BaseScore": 7.1,
          "modificationTime": "2026-06-30T01:28:53.584255Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "cvssV3BaseScore": 6.3,
          "modificationTime": "2026-07-03T06:26:07.726913Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.1,
          "cvssVersion": "3.1",
          "modificationTime": "2026-06-30T01:28:53.584255Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 6.3,
          "cvssVersion": "3.1",
          "modificationTime": "2026-07-03T06:26:07.726913Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `attr` package and not the `attr` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nattr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component can redirect getfattr and setfattr operations to arbitrary files by substituting a symlink, leading to local privilege escalation when getfattr or setfattr is invoked by a privileged process over an attacker-controlled path.\n## Remediation\nThere is no fixed version for `Debian:13` `attr`.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-54371](https://security-tracker.debian.org/tracker/CVE-2026-54371)\n- [https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=49f79e947270f06940b9100fa638f85dddc4aa7f](https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=49f79e947270f06940b9100fa638f85dddc4aa7f)\n- [https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=c440855d6b33446edf4b5eb1a2d892281f15a99b](https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=c440855d6b33446edf4b5eb1a2d892281f15a99b)\n- [https://www.vulncheck.com/advisories/attr-symlink-traversal-privilege-escalation-via-getfattr-setfattr](https://www.vulncheck.com/advisories/attr-symlink-traversal-privilege-escalation-via-getfattr-setfattr)\n- [https://access.redhat.com/security/cve/CVE-2026-54371](https://access.redhat.com/security/cve/CVE-2026-54371)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2490283](https://bugzilla.redhat.com/show_bug.cgi?id=2490283)\n- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54371.json](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54371.json)\n- [https://access.redhat.com/errata/RHSA-2026:34889](https://access.redhat.com/errata/RHSA-2026:34889)\n- [https://access.redhat.com/errata/RHSA-2026:56133](https://access.redhat.com/errata/RHSA-2026:56133)\n- [https://access.redhat.com/errata/RHSA-2026:59380](https://access.redhat.com/errata/RHSA-2026:59380)\n- [https://access.redhat.com/errata/RHSA-2026:60226](https://access.redhat.com/errata/RHSA-2026:60226)\n- [https://access.redhat.com/errata/RHSA-2026:61783](https://access.redhat.com/errata/RHSA-2026:61783)\n- [https://access.redhat.com/errata/RHSA-2026:63135](https://access.redhat.com/errata/RHSA-2026:63135)\n- [https://access.redhat.com/errata/RHSA-2026:63138](https://access.redhat.com/errata/RHSA-2026:63138)\n",
      "epssDetails": {
        "percentile": "0.04150",
        "probability": "0.00146",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-54371"
        ],
        "CWE": [
          "CWE-59"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "attr",
      "creationTime": "2026-06-30T00:33:09.679328Z",
      "disclosureTime": "2026-06-29T14:16:57.823000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-06-30T00:33:09.682988Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-09-10T14:05:51.552428Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "coreutils@9.7-3",
        "attr/libattr1@1:2.5.2-3"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "attr/libattr1",
      "version": "1:2.5.2-3"
    },
    {
      "id": "SNYK-DEBIAN13-ATTR-17678182",
      "cpes": [],
      "title": "Link Following",
      "CVSSv3": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "*"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.1,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-54371",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-54371"
        },
        {
          "url": "https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=49f79e947270f06940b9100fa638f85dddc4aa7f",
          "title": "https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=49f79e947270f06940b9100fa638f85dddc4aa7f"
        },
        {
          "url": "https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=c440855d6b33446edf4b5eb1a2d892281f15a99b",
          "title": "https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=c440855d6b33446edf4b5eb1a2d892281f15a99b"
        },
        {
          "url": "https://www.vulncheck.com/advisories/attr-symlink-traversal-privilege-escalation-via-getfattr-setfattr",
          "title": "https://www.vulncheck.com/advisories/attr-symlink-traversal-privilege-escalation-via-getfattr-setfattr"
        },
        {
          "url": "https://access.redhat.com/security/cve/CVE-2026-54371",
          "title": "https://access.redhat.com/security/cve/CVE-2026-54371"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490283",
          "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2490283"
        },
        {
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54371.json",
          "title": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54371.json"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:34889",
          "title": "https://access.redhat.com/errata/RHSA-2026:34889"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:56133",
          "title": "https://access.redhat.com/errata/RHSA-2026:56133"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:59380",
          "title": "https://access.redhat.com/errata/RHSA-2026:59380"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:60226",
          "title": "https://access.redhat.com/errata/RHSA-2026:60226"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:61783",
          "title": "https://access.redhat.com/errata/RHSA-2026:61783"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:63135",
          "title": "https://access.redhat.com/errata/RHSA-2026:63135"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:63138",
          "title": "https://access.redhat.com/errata/RHSA-2026:63138"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "cvssV3BaseScore": 7.1,
          "modificationTime": "2026-06-30T01:28:53.584255Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "cvssV3BaseScore": 6.3,
          "modificationTime": "2026-07-03T06:26:07.726913Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.1,
          "cvssVersion": "3.1",
          "modificationTime": "2026-06-30T01:28:53.584255Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 6.3,
          "cvssVersion": "3.1",
          "modificationTime": "2026-07-03T06:26:07.726913Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `attr` package and not the `attr` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nattr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component can redirect getfattr and setfattr operations to arbitrary files by substituting a symlink, leading to local privilege escalation when getfattr or setfattr is invoked by a privileged process over an attacker-controlled path.\n## Remediation\nThere is no fixed version for `Debian:13` `attr`.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-54371](https://security-tracker.debian.org/tracker/CVE-2026-54371)\n- [https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=49f79e947270f06940b9100fa638f85dddc4aa7f](https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=49f79e947270f06940b9100fa638f85dddc4aa7f)\n- [https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=c440855d6b33446edf4b5eb1a2d892281f15a99b](https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=c440855d6b33446edf4b5eb1a2d892281f15a99b)\n- [https://www.vulncheck.com/advisories/attr-symlink-traversal-privilege-escalation-via-getfattr-setfattr](https://www.vulncheck.com/advisories/attr-symlink-traversal-privilege-escalation-via-getfattr-setfattr)\n- [https://access.redhat.com/security/cve/CVE-2026-54371](https://access.redhat.com/security/cve/CVE-2026-54371)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2490283](https://bugzilla.redhat.com/show_bug.cgi?id=2490283)\n- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54371.json](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54371.json)\n- [https://access.redhat.com/errata/RHSA-2026:34889](https://access.redhat.com/errata/RHSA-2026:34889)\n- [https://access.redhat.com/errata/RHSA-2026:56133](https://access.redhat.com/errata/RHSA-2026:56133)\n- [https://access.redhat.com/errata/RHSA-2026:59380](https://access.redhat.com/errata/RHSA-2026:59380)\n- [https://access.redhat.com/errata/RHSA-2026:60226](https://access.redhat.com/errata/RHSA-2026:60226)\n- [https://access.redhat.com/errata/RHSA-2026:61783](https://access.redhat.com/errata/RHSA-2026:61783)\n- [https://access.redhat.com/errata/RHSA-2026:63135](https://access.redhat.com/errata/RHSA-2026:63135)\n- [https://access.redhat.com/errata/RHSA-2026:63138](https://access.redhat.com/errata/RHSA-2026:63138)\n",
      "epssDetails": {
        "percentile": "0.04150",
        "probability": "0.00146",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-54371"
        ],
        "CWE": [
          "CWE-59"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "attr",
      "creationTime": "2026-06-30T00:33:09.679328Z",
      "disclosureTime": "2026-06-29T14:16:57.823000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-06-30T00:33:09.682988Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-09-10T14:05:51.552428Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "shadow/passwd@1:4.17.4-2",
        "attr/libattr1@1:2.5.2-3"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "attr/libattr1",
      "version": "1:2.5.2-3"
    },
    {
      "id": "SNYK-DEBIAN13-LIBCAP2-15960217",
      "cpes": [],
      "title": "Time-of-check Time-of-use (TOCTOU)",
      "CVSSv3": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<1:2.75-10+deb13u1"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "1:2.75-10+deb13u1"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-4878",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-4878"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554",
          "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/07/14",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/07/14"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/07/4",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/07/4"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/08/9",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/08/9"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/09/5",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/09/5"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/09/6",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/09/6"
        },
        {
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json",
          "title": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:12423",
          "title": "https://access.redhat.com/errata/RHSA-2026:12423"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:12441",
          "title": "https://access.redhat.com/errata/RHSA-2026:12441"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:13285",
          "title": "https://access.redhat.com/errata/RHSA-2026:13285"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:14162",
          "title": "https://access.redhat.com/errata/RHSA-2026:14162"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:14937",
          "title": "https://access.redhat.com/errata/RHSA-2026:14937"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:19130",
          "title": "https://access.redhat.com/errata/RHSA-2026:19130"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:19346",
          "title": "https://access.redhat.com/errata/RHSA-2026:19346"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:19456",
          "title": "https://access.redhat.com/errata/RHSA-2026:19456"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:19458",
          "title": "https://access.redhat.com/errata/RHSA-2026:19458"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:20595",
          "title": "https://access.redhat.com/errata/RHSA-2026:20595"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:21254",
          "title": "https://access.redhat.com/errata/RHSA-2026:21254"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:21275",
          "title": "https://access.redhat.com/errata/RHSA-2026:21275"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:22634",
          "title": "https://access.redhat.com/errata/RHSA-2026:22634"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:22957",
          "title": "https://access.redhat.com/errata/RHSA-2026:22957"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:23233",
          "title": "https://access.redhat.com/errata/RHSA-2026:23233"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:23245",
          "title": "https://access.redhat.com/errata/RHSA-2026:23245"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:24346",
          "title": "https://access.redhat.com/errata/RHSA-2026:24346"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:25044",
          "title": "https://access.redhat.com/errata/RHSA-2026:25044"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:25096",
          "title": "https://access.redhat.com/errata/RHSA-2026:25096"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:25181",
          "title": "https://access.redhat.com/errata/RHSA-2026:25181"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:26542",
          "title": "https://access.redhat.com/errata/RHSA-2026:26542"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:27998",
          "title": "https://access.redhat.com/errata/RHSA-2026:27998"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:28887",
          "title": "https://access.redhat.com/errata/RHSA-2026:28887"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:29197",
          "title": "https://access.redhat.com/errata/RHSA-2026:29197"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:30078",
          "title": "https://access.redhat.com/errata/RHSA-2026:30078"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:30087",
          "title": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:30088",
          "title": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:30089",
          "title": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:34098",
          "title": "https://access.redhat.com/errata/RHSA-2026:34098"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:39981",
          "title": "https://access.redhat.com/errata/RHSA-2026:39981"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:58981",
          "title": "https://access.redhat.com/errata/RHSA-2026:58981"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:59831",
          "title": "https://access.redhat.com/errata/RHSA-2026:59831"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:7473",
          "title": "https://access.redhat.com/errata/RHSA-2026:7473"
        },
        {
          "url": "https://access.redhat.com/security/cve/CVE-2026-4878",
          "title": "https://access.redhat.com/security/cve/CVE-2026-4878"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451615",
          "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2451615"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 7,
          "modificationTime": "2026-04-28T01:15:22.493791Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 6.7,
          "modificationTime": "2026-04-12T16:39:23.746048Z"
        },
        {
          "assigner": "SUSE",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 7,
          "modificationTime": "2026-04-18T11:02:14.005177Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-28T01:15:22.493791Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 6.7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T16:39:23.746048Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "assigner": "SUSE",
          "severity": "high",
          "baseScore": 7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-18T11:02:14.005177Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `libcap2` package and not the `libcap2` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nA flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.\n## Remediation\nUpgrade `Debian:13` `libcap2` to version 1:2.75-10+deb13u1 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-4878](https://security-tracker.debian.org/tracker/CVE-2026-4878)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2447554](https://bugzilla.redhat.com/show_bug.cgi?id=2447554)\n- [http://www.openwall.com/lists/oss-security/2026/04/07/14](http://www.openwall.com/lists/oss-security/2026/04/07/14)\n- [http://www.openwall.com/lists/oss-security/2026/04/07/4](http://www.openwall.com/lists/oss-security/2026/04/07/4)\n- [http://www.openwall.com/lists/oss-security/2026/04/08/9](http://www.openwall.com/lists/oss-security/2026/04/08/9)\n- [http://www.openwall.com/lists/oss-security/2026/04/09/5](http://www.openwall.com/lists/oss-security/2026/04/09/5)\n- [http://www.openwall.com/lists/oss-security/2026/04/09/6](http://www.openwall.com/lists/oss-security/2026/04/09/6)\n- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json)\n- [https://access.redhat.com/errata/RHSA-2026:12423](https://access.redhat.com/errata/RHSA-2026:12423)\n- [https://access.redhat.com/errata/RHSA-2026:12441](https://access.redhat.com/errata/RHSA-2026:12441)\n- [https://access.redhat.com/errata/RHSA-2026:13285](https://access.redhat.com/errata/RHSA-2026:13285)\n- [https://access.redhat.com/errata/RHSA-2026:14162](https://access.redhat.com/errata/RHSA-2026:14162)\n- [https://access.redhat.com/errata/RHSA-2026:14937](https://access.redhat.com/errata/RHSA-2026:14937)\n- [https://access.redhat.com/errata/RHSA-2026:19130](https://access.redhat.com/errata/RHSA-2026:19130)\n- [https://access.redhat.com/errata/RHSA-2026:19346](https://access.redhat.com/errata/RHSA-2026:19346)\n- [https://access.redhat.com/errata/RHSA-2026:19456](https://access.redhat.com/errata/RHSA-2026:19456)\n- [https://access.redhat.com/errata/RHSA-2026:19458](https://access.redhat.com/errata/RHSA-2026:19458)\n- [https://access.redhat.com/errata/RHSA-2026:20595](https://access.redhat.com/errata/RHSA-2026:20595)\n- [https://access.redhat.com/errata/RHSA-2026:21254](https://access.redhat.com/errata/RHSA-2026:21254)\n- [https://access.redhat.com/errata/RHSA-2026:21275](https://access.redhat.com/errata/RHSA-2026:21275)\n- [https://access.redhat.com/errata/RHSA-2026:22634](https://access.redhat.com/errata/RHSA-2026:22634)\n- [https://access.redhat.com/errata/RHSA-2026:22957](https://access.redhat.com/errata/RHSA-2026:22957)\n- [https://access.redhat.com/errata/RHSA-2026:23233](https://access.redhat.com/errata/RHSA-2026:23233)\n- [https://access.redhat.com/errata/RHSA-2026:23245](https://access.redhat.com/errata/RHSA-2026:23245)\n- [https://access.redhat.com/errata/RHSA-2026:24346](https://access.redhat.com/errata/RHSA-2026:24346)\n- [https://access.redhat.com/errata/RHSA-2026:25044](https://access.redhat.com/errata/RHSA-2026:25044)\n- [https://access.redhat.com/errata/RHSA-2026:25096](https://access.redhat.com/errata/RHSA-2026:25096)\n- [https://access.redhat.com/errata/RHSA-2026:25181](https://access.redhat.com/errata/RHSA-2026:25181)\n- [https://access.redhat.com/errata/RHSA-2026:26542](https://access.redhat.com/errata/RHSA-2026:26542)\n- [https://access.redhat.com/errata/RHSA-2026:27998](https://access.redhat.com/errata/RHSA-2026:27998)\n- [https://access.redhat.com/errata/RHSA-2026:28887](https://access.redhat.com/errata/RHSA-2026:28887)\n- [https://access.redhat.com/errata/RHSA-2026:29197](https://access.redhat.com/errata/RHSA-2026:29197)\n- [https://access.redhat.com/errata/RHSA-2026:30078](https://access.redhat.com/errata/RHSA-2026:30078)\n- [https://access.redhat.com/errata/RHSA-2026:30087](https://access.redhat.com/errata/RHSA-2026:30087)\n- [https://access.redhat.com/errata/RHSA-2026:30088](https://access.redhat.com/errata/RHSA-2026:30088)\n- [https://access.redhat.com/errata/RHSA-2026:30089](https://access.redhat.com/errata/RHSA-2026:30089)\n- [https://access.redhat.com/errata/RHSA-2026:34098](https://access.redhat.com/errata/RHSA-2026:34098)\n- [https://access.redhat.com/errata/RHSA-2026:39981](https://access.redhat.com/errata/RHSA-2026:39981)\n- [https://access.redhat.com/errata/RHSA-2026:58981](https://access.redhat.com/errata/RHSA-2026:58981)\n- [https://access.redhat.com/errata/RHSA-2026:59831](https://access.redhat.com/errata/RHSA-2026:59831)\n- [https://access.redhat.com/errata/RHSA-2026:7473](https://access.redhat.com/errata/RHSA-2026:7473)\n- [https://access.redhat.com/security/cve/CVE-2026-4878](https://access.redhat.com/security/cve/CVE-2026-4878)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2451615](https://bugzilla.redhat.com/show_bug.cgi?id=2451615)\n",
      "epssDetails": {
        "percentile": "0.10773",
        "probability": "0.00206",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-4878"
        ],
        "CWE": [
          "CWE-367"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "libcap2",
      "creationTime": "2026-04-10T02:48:53.969488Z",
      "disclosureTime": "2026-04-09T16:16:31.987000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T02:48:53.978462Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-09-05T01:29:55.005720Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "libcap2/libcap2@1:2.75-10+b8"
      ],
      "upgradePath": [
        false,
        "libcap2/libcap2@1:2.75-10+deb13u1"
      ],
      "isUpgradable": true,
      "isPatchable": false,
      "name": "libcap2/libcap2",
      "version": "1:2.75-10+b8",
      "nearestFixedInVersion": "1:2.75-10+deb13u1"
    },
    {
      "id": "SNYK-DEBIAN13-LIBCAP2-15960217",
      "cpes": [],
      "title": "Time-of-check Time-of-use (TOCTOU)",
      "CVSSv3": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<1:2.75-10+deb13u1"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "1:2.75-10+deb13u1"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-4878",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-4878"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554",
          "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/07/14",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/07/14"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/07/4",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/07/4"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/08/9",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/08/9"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/09/5",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/09/5"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/09/6",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/09/6"
        },
        {
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json",
          "title": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:12423",
          "title": "https://access.redhat.com/errata/RHSA-2026:12423"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:12441",
          "title": "https://access.redhat.com/errata/RHSA-2026:12441"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:13285",
          "title": "https://access.redhat.com/errata/RHSA-2026:13285"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:14162",
          "title": "https://access.redhat.com/errata/RHSA-2026:14162"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:14937",
          "title": "https://access.redhat.com/errata/RHSA-2026:14937"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:19130",
          "title": "https://access.redhat.com/errata/RHSA-2026:19130"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:19346",
          "title": "https://access.redhat.com/errata/RHSA-2026:19346"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:19456",
          "title": "https://access.redhat.com/errata/RHSA-2026:19456"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:19458",
          "title": "https://access.redhat.com/errata/RHSA-2026:19458"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:20595",
          "title": "https://access.redhat.com/errata/RHSA-2026:20595"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:21254",
          "title": "https://access.redhat.com/errata/RHSA-2026:21254"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:21275",
          "title": "https://access.redhat.com/errata/RHSA-2026:21275"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:22634",
          "title": "https://access.redhat.com/errata/RHSA-2026:22634"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:22957",
          "title": "https://access.redhat.com/errata/RHSA-2026:22957"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:23233",
          "title": "https://access.redhat.com/errata/RHSA-2026:23233"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:23245",
          "title": "https://access.redhat.com/errata/RHSA-2026:23245"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:24346",
          "title": "https://access.redhat.com/errata/RHSA-2026:24346"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:25044",
          "title": "https://access.redhat.com/errata/RHSA-2026:25044"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:25096",
          "title": "https://access.redhat.com/errata/RHSA-2026:25096"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:25181",
          "title": "https://access.redhat.com/errata/RHSA-2026:25181"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:26542",
          "title": "https://access.redhat.com/errata/RHSA-2026:26542"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:27998",
          "title": "https://access.redhat.com/errata/RHSA-2026:27998"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:28887",
          "title": "https://access.redhat.com/errata/RHSA-2026:28887"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:29197",
          "title": "https://access.redhat.com/errata/RHSA-2026:29197"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:30078",
          "title": "https://access.redhat.com/errata/RHSA-2026:30078"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:30087",
          "title": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:30088",
          "title": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:30089",
          "title": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:34098",
          "title": "https://access.redhat.com/errata/RHSA-2026:34098"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:39981",
          "title": "https://access.redhat.com/errata/RHSA-2026:39981"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:58981",
          "title": "https://access.redhat.com/errata/RHSA-2026:58981"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:59831",
          "title": "https://access.redhat.com/errata/RHSA-2026:59831"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:7473",
          "title": "https://access.redhat.com/errata/RHSA-2026:7473"
        },
        {
          "url": "https://access.redhat.com/security/cve/CVE-2026-4878",
          "title": "https://access.redhat.com/security/cve/CVE-2026-4878"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451615",
          "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2451615"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 7,
          "modificationTime": "2026-04-28T01:15:22.493791Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 6.7,
          "modificationTime": "2026-04-12T16:39:23.746048Z"
        },
        {
          "assigner": "SUSE",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 7,
          "modificationTime": "2026-04-18T11:02:14.005177Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-28T01:15:22.493791Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 6.7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T16:39:23.746048Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "assigner": "SUSE",
          "severity": "high",
          "baseScore": 7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-18T11:02:14.005177Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `libcap2` package and not the `libcap2` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nA flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.\n## Remediation\nUpgrade `Debian:13` `libcap2` to version 1:2.75-10+deb13u1 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-4878](https://security-tracker.debian.org/tracker/CVE-2026-4878)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2447554](https://bugzilla.redhat.com/show_bug.cgi?id=2447554)\n- [http://www.openwall.com/lists/oss-security/2026/04/07/14](http://www.openwall.com/lists/oss-security/2026/04/07/14)\n- [http://www.openwall.com/lists/oss-security/2026/04/07/4](http://www.openwall.com/lists/oss-security/2026/04/07/4)\n- [http://www.openwall.com/lists/oss-security/2026/04/08/9](http://www.openwall.com/lists/oss-security/2026/04/08/9)\n- [http://www.openwall.com/lists/oss-security/2026/04/09/5](http://www.openwall.com/lists/oss-security/2026/04/09/5)\n- [http://www.openwall.com/lists/oss-security/2026/04/09/6](http://www.openwall.com/lists/oss-security/2026/04/09/6)\n- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json)\n- [https://access.redhat.com/errata/RHSA-2026:12423](https://access.redhat.com/errata/RHSA-2026:12423)\n- [https://access.redhat.com/errata/RHSA-2026:12441](https://access.redhat.com/errata/RHSA-2026:12441)\n- [https://access.redhat.com/errata/RHSA-2026:13285](https://access.redhat.com/errata/RHSA-2026:13285)\n- [https://access.redhat.com/errata/RHSA-2026:14162](https://access.redhat.com/errata/RHSA-2026:14162)\n- [https://access.redhat.com/errata/RHSA-2026:14937](https://access.redhat.com/errata/RHSA-2026:14937)\n- [https://access.redhat.com/errata/RHSA-2026:19130](https://access.redhat.com/errata/RHSA-2026:19130)\n- [https://access.redhat.com/errata/RHSA-2026:19346](https://access.redhat.com/errata/RHSA-2026:19346)\n- [https://access.redhat.com/errata/RHSA-2026:19456](https://access.redhat.com/errata/RHSA-2026:19456)\n- [https://access.redhat.com/errata/RHSA-2026:19458](https://access.redhat.com/errata/RHSA-2026:19458)\n- [https://access.redhat.com/errata/RHSA-2026:20595](https://access.redhat.com/errata/RHSA-2026:20595)\n- [https://access.redhat.com/errata/RHSA-2026:21254](https://access.redhat.com/errata/RHSA-2026:21254)\n- [https://access.redhat.com/errata/RHSA-2026:21275](https://access.redhat.com/errata/RHSA-2026:21275)\n- [https://access.redhat.com/errata/RHSA-2026:22634](https://access.redhat.com/errata/RHSA-2026:22634)\n- [https://access.redhat.com/errata/RHSA-2026:22957](https://access.redhat.com/errata/RHSA-2026:22957)\n- [https://access.redhat.com/errata/RHSA-2026:23233](https://access.redhat.com/errata/RHSA-2026:23233)\n- [https://access.redhat.com/errata/RHSA-2026:23245](https://access.redhat.com/errata/RHSA-2026:23245)\n- [https://access.redhat.com/errata/RHSA-2026:24346](https://access.redhat.com/errata/RHSA-2026:24346)\n- [https://access.redhat.com/errata/RHSA-2026:25044](https://access.redhat.com/errata/RHSA-2026:25044)\n- [https://access.redhat.com/errata/RHSA-2026:25096](https://access.redhat.com/errata/RHSA-2026:25096)\n- [https://access.redhat.com/errata/RHSA-2026:25181](https://access.redhat.com/errata/RHSA-2026:25181)\n- [https://access.redhat.com/errata/RHSA-2026:26542](https://access.redhat.com/errata/RHSA-2026:26542)\n- [https://access.redhat.com/errata/RHSA-2026:27998](https://access.redhat.com/errata/RHSA-2026:27998)\n- [https://access.redhat.com/errata/RHSA-2026:28887](https://access.redhat.com/errata/RHSA-2026:28887)\n- [https://access.redhat.com/errata/RHSA-2026:29197](https://access.redhat.com/errata/RHSA-2026:29197)\n- [https://access.redhat.com/errata/RHSA-2026:30078](https://access.redhat.com/errata/RHSA-2026:30078)\n- [https://access.redhat.com/errata/RHSA-2026:30087](https://access.redhat.com/errata/RHSA-2026:30087)\n- [https://access.redhat.com/errata/RHSA-2026:30088](https://access.redhat.com/errata/RHSA-2026:30088)\n- [https://access.redhat.com/errata/RHSA-2026:30089](https://access.redhat.com/errata/RHSA-2026:30089)\n- [https://access.redhat.com/errata/RHSA-2026:34098](https://access.redhat.com/errata/RHSA-2026:34098)\n- [https://access.redhat.com/errata/RHSA-2026:39981](https://access.redhat.com/errata/RHSA-2026:39981)\n- [https://access.redhat.com/errata/RHSA-2026:58981](https://access.redhat.com/errata/RHSA-2026:58981)\n- [https://access.redhat.com/errata/RHSA-2026:59831](https://access.redhat.com/errata/RHSA-2026:59831)\n- [https://access.redhat.com/errata/RHSA-2026:7473](https://access.redhat.com/errata/RHSA-2026:7473)\n- [https://access.redhat.com/security/cve/CVE-2026-4878](https://access.redhat.com/security/cve/CVE-2026-4878)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2451615](https://bugzilla.redhat.com/show_bug.cgi?id=2451615)\n",
      "epssDetails": {
        "percentile": "0.10773",
        "probability": "0.00206",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-4878"
        ],
        "CWE": [
          "CWE-367"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "libcap2",
      "creationTime": "2026-04-10T02:48:53.969488Z",
      "disclosureTime": "2026-04-09T16:16:31.987000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T02:48:53.978462Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-09-05T01:29:55.005720Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "coreutils@9.7-3",
        "libcap2/libcap2@1:2.75-10+b8"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "libcap2/libcap2",
      "version": "1:2.75-10+b8",
      "nearestFixedInVersion": "1:2.75-10+deb13u1"
    },
    {
      "id": "SNYK-DEBIAN13-LIBCAP2-15960217",
      "cpes": [],
      "title": "Time-of-check Time-of-use (TOCTOU)",
      "CVSSv3": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<1:2.75-10+deb13u1"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "1:2.75-10+deb13u1"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-4878",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-4878"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554",
          "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/07/14",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/07/14"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/07/4",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/07/4"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/08/9",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/08/9"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/09/5",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/09/5"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/09/6",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/09/6"
        },
        {
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json",
          "title": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:12423",
          "title": "https://access.redhat.com/errata/RHSA-2026:12423"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:12441",
          "title": "https://access.redhat.com/errata/RHSA-2026:12441"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:13285",
          "title": "https://access.redhat.com/errata/RHSA-2026:13285"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:14162",
          "title": "https://access.redhat.com/errata/RHSA-2026:14162"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:14937",
          "title": "https://access.redhat.com/errata/RHSA-2026:14937"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:19130",
          "title": "https://access.redhat.com/errata/RHSA-2026:19130"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:19346",
          "title": "https://access.redhat.com/errata/RHSA-2026:19346"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:19456",
          "title": "https://access.redhat.com/errata/RHSA-2026:19456"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:19458",
          "title": "https://access.redhat.com/errata/RHSA-2026:19458"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:20595",
          "title": "https://access.redhat.com/errata/RHSA-2026:20595"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:21254",
          "title": "https://access.redhat.com/errata/RHSA-2026:21254"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:21275",
          "title": "https://access.redhat.com/errata/RHSA-2026:21275"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:22634",
          "title": "https://access.redhat.com/errata/RHSA-2026:22634"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:22957",
          "title": "https://access.redhat.com/errata/RHSA-2026:22957"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:23233",
          "title": "https://access.redhat.com/errata/RHSA-2026:23233"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:23245",
          "title": "https://access.redhat.com/errata/RHSA-2026:23245"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:24346",
          "title": "https://access.redhat.com/errata/RHSA-2026:24346"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:25044",
          "title": "https://access.redhat.com/errata/RHSA-2026:25044"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:25096",
          "title": "https://access.redhat.com/errata/RHSA-2026:25096"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:25181",
          "title": "https://access.redhat.com/errata/RHSA-2026:25181"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:26542",
          "title": "https://access.redhat.com/errata/RHSA-2026:26542"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:27998",
          "title": "https://access.redhat.com/errata/RHSA-2026:27998"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:28887",
          "title": "https://access.redhat.com/errata/RHSA-2026:28887"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:29197",
          "title": "https://access.redhat.com/errata/RHSA-2026:29197"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:30078",
          "title": "https://access.redhat.com/errata/RHSA-2026:30078"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:30087",
          "title": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:30088",
          "title": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:30089",
          "title": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:34098",
          "title": "https://access.redhat.com/errata/RHSA-2026:34098"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:39981",
          "title": "https://access.redhat.com/errata/RHSA-2026:39981"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:58981",
          "title": "https://access.redhat.com/errata/RHSA-2026:58981"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:59831",
          "title": "https://access.redhat.com/errata/RHSA-2026:59831"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:7473",
          "title": "https://access.redhat.com/errata/RHSA-2026:7473"
        },
        {
          "url": "https://access.redhat.com/security/cve/CVE-2026-4878",
          "title": "https://access.redhat.com/security/cve/CVE-2026-4878"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451615",
          "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2451615"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 7,
          "modificationTime": "2026-04-28T01:15:22.493791Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 6.7,
          "modificationTime": "2026-04-12T16:39:23.746048Z"
        },
        {
          "assigner": "SUSE",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 7,
          "modificationTime": "2026-04-18T11:02:14.005177Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-28T01:15:22.493791Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 6.7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T16:39:23.746048Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "assigner": "SUSE",
          "severity": "high",
          "baseScore": 7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-18T11:02:14.005177Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `libcap2` package and not the `libcap2` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nA flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.\n## Remediation\nUpgrade `Debian:13` `libcap2` to version 1:2.75-10+deb13u1 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-4878](https://security-tracker.debian.org/tracker/CVE-2026-4878)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2447554](https://bugzilla.redhat.com/show_bug.cgi?id=2447554)\n- [http://www.openwall.com/lists/oss-security/2026/04/07/14](http://www.openwall.com/lists/oss-security/2026/04/07/14)\n- [http://www.openwall.com/lists/oss-security/2026/04/07/4](http://www.openwall.com/lists/oss-security/2026/04/07/4)\n- [http://www.openwall.com/lists/oss-security/2026/04/08/9](http://www.openwall.com/lists/oss-security/2026/04/08/9)\n- [http://www.openwall.com/lists/oss-security/2026/04/09/5](http://www.openwall.com/lists/oss-security/2026/04/09/5)\n- [http://www.openwall.com/lists/oss-security/2026/04/09/6](http://www.openwall.com/lists/oss-security/2026/04/09/6)\n- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json)\n- [https://access.redhat.com/errata/RHSA-2026:12423](https://access.redhat.com/errata/RHSA-2026:12423)\n- [https://access.redhat.com/errata/RHSA-2026:12441](https://access.redhat.com/errata/RHSA-2026:12441)\n- [https://access.redhat.com/errata/RHSA-2026:13285](https://access.redhat.com/errata/RHSA-2026:13285)\n- [https://access.redhat.com/errata/RHSA-2026:14162](https://access.redhat.com/errata/RHSA-2026:14162)\n- [https://access.redhat.com/errata/RHSA-2026:14937](https://access.redhat.com/errata/RHSA-2026:14937)\n- [https://access.redhat.com/errata/RHSA-2026:19130](https://access.redhat.com/errata/RHSA-2026:19130)\n- [https://access.redhat.com/errata/RHSA-2026:19346](https://access.redhat.com/errata/RHSA-2026:19346)\n- [https://access.redhat.com/errata/RHSA-2026:19456](https://access.redhat.com/errata/RHSA-2026:19456)\n- [https://access.redhat.com/errata/RHSA-2026:19458](https://access.redhat.com/errata/RHSA-2026:19458)\n- [https://access.redhat.com/errata/RHSA-2026:20595](https://access.redhat.com/errata/RHSA-2026:20595)\n- [https://access.redhat.com/errata/RHSA-2026:21254](https://access.redhat.com/errata/RHSA-2026:21254)\n- [https://access.redhat.com/errata/RHSA-2026:21275](https://access.redhat.com/errata/RHSA-2026:21275)\n- [https://access.redhat.com/errata/RHSA-2026:22634](https://access.redhat.com/errata/RHSA-2026:22634)\n- [https://access.redhat.com/errata/RHSA-2026:22957](https://access.redhat.com/errata/RHSA-2026:22957)\n- [https://access.redhat.com/errata/RHSA-2026:23233](https://access.redhat.com/errata/RHSA-2026:23233)\n- [https://access.redhat.com/errata/RHSA-2026:23245](https://access.redhat.com/errata/RHSA-2026:23245)\n- [https://access.redhat.com/errata/RHSA-2026:24346](https://access.redhat.com/errata/RHSA-2026:24346)\n- [https://access.redhat.com/errata/RHSA-2026:25044](https://access.redhat.com/errata/RHSA-2026:25044)\n- [https://access.redhat.com/errata/RHSA-2026:25096](https://access.redhat.com/errata/RHSA-2026:25096)\n- [https://access.redhat.com/errata/RHSA-2026:25181](https://access.redhat.com/errata/RHSA-2026:25181)\n- [https://access.redhat.com/errata/RHSA-2026:26542](https://access.redhat.com/errata/RHSA-2026:26542)\n- [https://access.redhat.com/errata/RHSA-2026:27998](https://access.redhat.com/errata/RHSA-2026:27998)\n- [https://access.redhat.com/errata/RHSA-2026:28887](https://access.redhat.com/errata/RHSA-2026:28887)\n- [https://access.redhat.com/errata/RHSA-2026:29197](https://access.redhat.com/errata/RHSA-2026:29197)\n- [https://access.redhat.com/errata/RHSA-2026:30078](https://access.redhat.com/errata/RHSA-2026:30078)\n- [https://access.redhat.com/errata/RHSA-2026:30087](https://access.redhat.com/errata/RHSA-2026:30087)\n- [https://access.redhat.com/errata/RHSA-2026:30088](https://access.redhat.com/errata/RHSA-2026:30088)\n- [https://access.redhat.com/errata/RHSA-2026:30089](https://access.redhat.com/errata/RHSA-2026:30089)\n- [https://access.redhat.com/errata/RHSA-2026:34098](https://access.redhat.com/errata/RHSA-2026:34098)\n- [https://access.redhat.com/errata/RHSA-2026:39981](https://access.redhat.com/errata/RHSA-2026:39981)\n- [https://access.redhat.com/errata/RHSA-2026:58981](https://access.redhat.com/errata/RHSA-2026:58981)\n- [https://access.redhat.com/errata/RHSA-2026:59831](https://access.redhat.com/errata/RHSA-2026:59831)\n- [https://access.redhat.com/errata/RHSA-2026:7473](https://access.redhat.com/errata/RHSA-2026:7473)\n- [https://access.redhat.com/security/cve/CVE-2026-4878](https://access.redhat.com/security/cve/CVE-2026-4878)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2451615](https://bugzilla.redhat.com/show_bug.cgi?id=2451615)\n",
      "epssDetails": {
        "percentile": "0.10773",
        "probability": "0.00206",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-4878"
        ],
        "CWE": [
          "CWE-367"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "libcap2",
      "creationTime": "2026-04-10T02:48:53.969488Z",
      "disclosureTime": "2026-04-09T16:16:31.987000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T02:48:53.978462Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-09-05T01:29:55.005720Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "apt@3.0.3",
        "apt/libapt-pkg7.0@3.0.3",
        "systemd/libsystemd0@257.9-1~deb13u1",
        "libcap2/libcap2@1:2.75-10+b8"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "libcap2/libcap2",
      "version": "1:2.75-10+b8",
      "nearestFixedInVersion": "1:2.75-10+deb13u1"
    },
    {
      "id": "SNYK-DEBIAN13-LIBCAP2-15960217",
      "cpes": [],
      "title": "Time-of-check Time-of-use (TOCTOU)",
      "CVSSv3": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<1:2.75-10+deb13u1"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "1:2.75-10+deb13u1"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-4878",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-4878"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554",
          "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/07/14",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/07/14"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/07/4",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/07/4"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/08/9",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/08/9"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/09/5",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/09/5"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2026/04/09/6",
          "title": "http://www.openwall.com/lists/oss-security/2026/04/09/6"
        },
        {
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json",
          "title": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:12423",
          "title": "https://access.redhat.com/errata/RHSA-2026:12423"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:12441",
          "title": "https://access.redhat.com/errata/RHSA-2026:12441"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:13285",
          "title": "https://access.redhat.com/errata/RHSA-2026:13285"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:14162",
          "title": "https://access.redhat.com/errata/RHSA-2026:14162"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:14937",
          "title": "https://access.redhat.com/errata/RHSA-2026:14937"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:19130",
          "title": "https://access.redhat.com/errata/RHSA-2026:19130"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:19346",
          "title": "https://access.redhat.com/errata/RHSA-2026:19346"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:19456",
          "title": "https://access.redhat.com/errata/RHSA-2026:19456"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:19458",
          "title": "https://access.redhat.com/errata/RHSA-2026:19458"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:20595",
          "title": "https://access.redhat.com/errata/RHSA-2026:20595"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:21254",
          "title": "https://access.redhat.com/errata/RHSA-2026:21254"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:21275",
          "title": "https://access.redhat.com/errata/RHSA-2026:21275"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:22634",
          "title": "https://access.redhat.com/errata/RHSA-2026:22634"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:22957",
          "title": "https://access.redhat.com/errata/RHSA-2026:22957"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:23233",
          "title": "https://access.redhat.com/errata/RHSA-2026:23233"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:23245",
          "title": "https://access.redhat.com/errata/RHSA-2026:23245"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:24346",
          "title": "https://access.redhat.com/errata/RHSA-2026:24346"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:25044",
          "title": "https://access.redhat.com/errata/RHSA-2026:25044"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:25096",
          "title": "https://access.redhat.com/errata/RHSA-2026:25096"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:25181",
          "title": "https://access.redhat.com/errata/RHSA-2026:25181"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:26542",
          "title": "https://access.redhat.com/errata/RHSA-2026:26542"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:27998",
          "title": "https://access.redhat.com/errata/RHSA-2026:27998"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:28887",
          "title": "https://access.redhat.com/errata/RHSA-2026:28887"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:29197",
          "title": "https://access.redhat.com/errata/RHSA-2026:29197"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:30078",
          "title": "https://access.redhat.com/errata/RHSA-2026:30078"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:30087",
          "title": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:30088",
          "title": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:30089",
          "title": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:34098",
          "title": "https://access.redhat.com/errata/RHSA-2026:34098"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:39981",
          "title": "https://access.redhat.com/errata/RHSA-2026:39981"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:58981",
          "title": "https://access.redhat.com/errata/RHSA-2026:58981"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:59831",
          "title": "https://access.redhat.com/errata/RHSA-2026:59831"
        },
        {
          "url": "https://access.redhat.com/errata/RHSA-2026:7473",
          "title": "https://access.redhat.com/errata/RHSA-2026:7473"
        },
        {
          "url": "https://access.redhat.com/security/cve/CVE-2026-4878",
          "title": "https://access.redhat.com/security/cve/CVE-2026-4878"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451615",
          "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2451615"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 7,
          "modificationTime": "2026-04-28T01:15:22.493791Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 6.7,
          "modificationTime": "2026-04-12T16:39:23.746048Z"
        },
        {
          "assigner": "SUSE",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 7,
          "modificationTime": "2026-04-18T11:02:14.005177Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-28T01:15:22.493791Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 6.7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T16:39:23.746048Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "assigner": "SUSE",
          "severity": "high",
          "baseScore": 7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-18T11:02:14.005177Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `libcap2` package and not the `libcap2` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nA flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.\n## Remediation\nUpgrade `Debian:13` `libcap2` to version 1:2.75-10+deb13u1 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-4878](https://security-tracker.debian.org/tracker/CVE-2026-4878)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2447554](https://bugzilla.redhat.com/show_bug.cgi?id=2447554)\n- [http://www.openwall.com/lists/oss-security/2026/04/07/14](http://www.openwall.com/lists/oss-security/2026/04/07/14)\n- [http://www.openwall.com/lists/oss-security/2026/04/07/4](http://www.openwall.com/lists/oss-security/2026/04/07/4)\n- [http://www.openwall.com/lists/oss-security/2026/04/08/9](http://www.openwall.com/lists/oss-security/2026/04/08/9)\n- [http://www.openwall.com/lists/oss-security/2026/04/09/5](http://www.openwall.com/lists/oss-security/2026/04/09/5)\n- [http://www.openwall.com/lists/oss-security/2026/04/09/6](http://www.openwall.com/lists/oss-security/2026/04/09/6)\n- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json)\n- [https://access.redhat.com/errata/RHSA-2026:12423](https://access.redhat.com/errata/RHSA-2026:12423)\n- [https://access.redhat.com/errata/RHSA-2026:12441](https://access.redhat.com/errata/RHSA-2026:12441)\n- [https://access.redhat.com/errata/RHSA-2026:13285](https://access.redhat.com/errata/RHSA-2026:13285)\n- [https://access.redhat.com/errata/RHSA-2026:14162](https://access.redhat.com/errata/RHSA-2026:14162)\n- [https://access.redhat.com/errata/RHSA-2026:14937](https://access.redhat.com/errata/RHSA-2026:14937)\n- [https://access.redhat.com/errata/RHSA-2026:19130](https://access.redhat.com/errata/RHSA-2026:19130)\n- [https://access.redhat.com/errata/RHSA-2026:19346](https://access.redhat.com/errata/RHSA-2026:19346)\n- [https://access.redhat.com/errata/RHSA-2026:19456](https://access.redhat.com/errata/RHSA-2026:19456)\n- [https://access.redhat.com/errata/RHSA-2026:19458](https://access.redhat.com/errata/RHSA-2026:19458)\n- [https://access.redhat.com/errata/RHSA-2026:20595](https://access.redhat.com/errata/RHSA-2026:20595)\n- [https://access.redhat.com/errata/RHSA-2026:21254](https://access.redhat.com/errata/RHSA-2026:21254)\n- [https://access.redhat.com/errata/RHSA-2026:21275](https://access.redhat.com/errata/RHSA-2026:21275)\n- [https://access.redhat.com/errata/RHSA-2026:22634](https://access.redhat.com/errata/RHSA-2026:22634)\n- [https://access.redhat.com/errata/RHSA-2026:22957](https://access.redhat.com/errata/RHSA-2026:22957)\n- [https://access.redhat.com/errata/RHSA-2026:23233](https://access.redhat.com/errata/RHSA-2026:23233)\n- [https://access.redhat.com/errata/RHSA-2026:23245](https://access.redhat.com/errata/RHSA-2026:23245)\n- [https://access.redhat.com/errata/RHSA-2026:24346](https://access.redhat.com/errata/RHSA-2026:24346)\n- [https://access.redhat.com/errata/RHSA-2026:25044](https://access.redhat.com/errata/RHSA-2026:25044)\n- [https://access.redhat.com/errata/RHSA-2026:25096](https://access.redhat.com/errata/RHSA-2026:25096)\n- [https://access.redhat.com/errata/RHSA-2026:25181](https://access.redhat.com/errata/RHSA-2026:25181)\n- [https://access.redhat.com/errata/RHSA-2026:26542](https://access.redhat.com/errata/RHSA-2026:26542)\n- [https://access.redhat.com/errata/RHSA-2026:27998](https://access.redhat.com/errata/RHSA-2026:27998)\n- [https://access.redhat.com/errata/RHSA-2026:28887](https://access.redhat.com/errata/RHSA-2026:28887)\n- [https://access.redhat.com/errata/RHSA-2026:29197](https://access.redhat.com/errata/RHSA-2026:29197)\n- [https://access.redhat.com/errata/RHSA-2026:30078](https://access.redhat.com/errata/RHSA-2026:30078)\n- [https://access.redhat.com/errata/RHSA-2026:30087](https://access.redhat.com/errata/RHSA-2026:30087)\n- [https://access.redhat.com/errata/RHSA-2026:30088](https://access.redhat.com/errata/RHSA-2026:30088)\n- [https://access.redhat.com/errata/RHSA-2026:30089](https://access.redhat.com/errata/RHSA-2026:30089)\n- [https://access.redhat.com/errata/RHSA-2026:34098](https://access.redhat.com/errata/RHSA-2026:34098)\n- [https://access.redhat.com/errata/RHSA-2026:39981](https://access.redhat.com/errata/RHSA-2026:39981)\n- [https://access.redhat.com/errata/RHSA-2026:58981](https://access.redhat.com/errata/RHSA-2026:58981)\n- [https://access.redhat.com/errata/RHSA-2026:59831](https://access.redhat.com/errata/RHSA-2026:59831)\n- [https://access.redhat.com/errata/RHSA-2026:7473](https://access.redhat.com/errata/RHSA-2026:7473)\n- [https://access.redhat.com/security/cve/CVE-2026-4878](https://access.redhat.com/security/cve/CVE-2026-4878)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2451615](https://bugzilla.redhat.com/show_bug.cgi?id=2451615)\n",
      "epssDetails": {
        "percentile": "0.10773",
        "probability": "0.00206",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-4878"
        ],
        "CWE": [
          "CWE-367"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "libcap2",
      "creationTime": "2026-04-10T02:48:53.969488Z",
      "disclosureTime": "2026-04-09T16:16:31.987000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T02:48:53.978462Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-09-05T01:29:55.005720Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "apt@3.0.3",
        "apt/libapt-pkg7.0@3.0.3",
        "systemd/libudev1@257.9-1~deb13u1",
        "libcap2/libcap2@1:2.75-10+b8"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "libcap2/libcap2",
      "version": "1:2.75-10+b8",
      "nearestFixedInVersion": "1:2.75-10+deb13u1"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969301",
      "cpes": [],
      "title": "CVE-2026-31789",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "critical",
      "cvssScore": 9.8,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-31789",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-31789"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde",
          "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf",
          "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49",
          "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9",
          "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521",
          "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "critical",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 9.8,
          "modificationTime": "2026-04-24T02:21:53.322162Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H",
          "cvssV3BaseScore": 5.8,
          "modificationTime": "2026-04-15T00:23:01.358492Z"
        },
        {
          "assigner": "SUSE",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "cvssV3BaseScore": 7.3,
          "modificationTime": "2026-04-12T03:29:54.650024Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "assigner": "NVD",
          "severity": "critical",
          "baseScore": 9.8,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:53.322162Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 5.8,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-15T00:23:01.358492Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "assigner": "SUSE",
          "severity": "high",
          "baseScore": 7.3,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T03:29:54.650024Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-31789](https://security-tracker.debian.org/tracker/CVE-2026-31789)\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n",
      "epssDetails": {
        "percentile": "0.15604",
        "probability": "0.00243",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-31789"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "critical",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:36:30.839966Z",
      "disclosureTime": "2026-04-07T22:16:21.617000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:36:30.845028Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-07-24T14:04:38.595776Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "critical",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "apt@3.0.3",
        "openssl/libssl3t64@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/libssl3t64",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969306",
      "cpes": [],
      "title": "CVE-2026-28389",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28389",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28389"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5",
          "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616",
          "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f",
          "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a",
          "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686",
          "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-24T02:21:52.297059Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-04-13T00:46:46.745668Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "cvssV3BaseScore": 5.3,
          "modificationTime": "2026-04-12T03:29:29.756813Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:52.297059Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-13T00:46:46.745668Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 5.3,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T03:29:29.756813Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28389](https://security-tracker.debian.org/tracker/CVE-2026-28389)\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.53918",
        "probability": "0.00805",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28389"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:37:02.377588Z",
      "disclosureTime": "2026-04-07T22:16:21.030000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:37:02.380861Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:48.791509Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "apt@3.0.3",
        "openssl/libssl3t64@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/libssl3t64",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969307",
      "cpes": [],
      "title": "CVE-2026-28387",
      "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 8.1,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28387",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28387"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b",
          "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe",
          "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3",
          "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7",
          "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177",
          "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 8.1,
          "modificationTime": "2026-04-24T02:21:53.574331Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "low",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "cvssV3BaseScore": 3.7,
          "modificationTime": "2026-04-13T00:46:44.895108Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
          "cvssV3BaseScore": 6.5,
          "modificationTime": "2026-04-12T03:29:17.808435Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 8.1,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:53.574331Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "assigner": "Red Hat",
          "severity": "low",
          "baseScore": 3.7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-13T00:46:44.895108Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 6.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T03:29:17.808435Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as &#39;unusable&#39; any TLSA records that have the PKIX\ncertificate usages.  These SMTP (or other similar) clients are not vulnerable\nto this issue.  Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28387](https://security-tracker.debian.org/tracker/CVE-2026-28387)\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.49234",
        "probability": "0.00671",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28387"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:37:05.297314Z",
      "disclosureTime": "2026-04-07T22:16:20.700000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:37:05.300581Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:48.154618Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "apt@3.0.3",
        "openssl/libssl3t64@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/libssl3t64",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969309",
      "cpes": [],
      "title": "CVE-2026-28390",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28390",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28390"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc",
          "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6",
          "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4",
          "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788",
          "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75",
          "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-24T02:21:53.199622Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-11T04:37:15.181387Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-04-17T11:12:03.567644Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:53.199622Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "Red Hat",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-11T04:37:15.181387Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-17T11:12:03.567644Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28390](https://security-tracker.debian.org/tracker/CVE-2026-28390)\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.53918",
        "probability": "0.00805",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28390"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:39:39.127754Z",
      "disclosureTime": "2026-04-07T22:16:21.190000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:39:39.131552Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:48.855673Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "apt@3.0.3",
        "openssl/libssl3t64@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/libssl3t64",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969320",
      "cpes": [],
      "title": "CVE-2026-28388",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28388",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28388"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e",
          "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139",
          "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3",
          "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8",
          "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726",
          "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-24T02:21:52.097816Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-04-13T00:47:01.842319Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-07-05T23:07:34.759996Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:52.097816Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-13T00:47:01.842319Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-07-05T23:07:34.759996Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28388](https://security-tracker.debian.org/tracker/CVE-2026-28388)\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.56424",
        "probability": "0.00885",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28388"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:43:37.142636Z",
      "disclosureTime": "2026-04-07T22:16:20.863000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:43:37.145994Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:49.575709Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "apt@3.0.3",
        "openssl/libssl3t64@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/libssl3t64",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969301",
      "cpes": [],
      "title": "CVE-2026-31789",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "critical",
      "cvssScore": 9.8,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-31789",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-31789"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde",
          "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf",
          "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49",
          "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9",
          "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521",
          "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "critical",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 9.8,
          "modificationTime": "2026-04-24T02:21:53.322162Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H",
          "cvssV3BaseScore": 5.8,
          "modificationTime": "2026-04-15T00:23:01.358492Z"
        },
        {
          "assigner": "SUSE",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "cvssV3BaseScore": 7.3,
          "modificationTime": "2026-04-12T03:29:54.650024Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "assigner": "NVD",
          "severity": "critical",
          "baseScore": 9.8,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:53.322162Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 5.8,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-15T00:23:01.358492Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "assigner": "SUSE",
          "severity": "high",
          "baseScore": 7.3,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T03:29:54.650024Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-31789](https://security-tracker.debian.org/tracker/CVE-2026-31789)\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n",
      "epssDetails": {
        "percentile": "0.15604",
        "probability": "0.00243",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-31789"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "critical",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:36:30.839966Z",
      "disclosureTime": "2026-04-07T22:16:21.617000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:36:30.845028Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-07-24T14:04:38.595776Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "critical",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "coreutils@9.7-3",
        "openssl/libssl3t64@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/libssl3t64",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969306",
      "cpes": [],
      "title": "CVE-2026-28389",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28389",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28389"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5",
          "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616",
          "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f",
          "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a",
          "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686",
          "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-24T02:21:52.297059Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-04-13T00:46:46.745668Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "cvssV3BaseScore": 5.3,
          "modificationTime": "2026-04-12T03:29:29.756813Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:52.297059Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-13T00:46:46.745668Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 5.3,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T03:29:29.756813Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28389](https://security-tracker.debian.org/tracker/CVE-2026-28389)\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.53918",
        "probability": "0.00805",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28389"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:37:02.377588Z",
      "disclosureTime": "2026-04-07T22:16:21.030000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:37:02.380861Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:48.791509Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "coreutils@9.7-3",
        "openssl/libssl3t64@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/libssl3t64",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969307",
      "cpes": [],
      "title": "CVE-2026-28387",
      "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 8.1,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28387",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28387"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b",
          "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe",
          "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3",
          "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7",
          "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177",
          "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 8.1,
          "modificationTime": "2026-04-24T02:21:53.574331Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "low",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "cvssV3BaseScore": 3.7,
          "modificationTime": "2026-04-13T00:46:44.895108Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
          "cvssV3BaseScore": 6.5,
          "modificationTime": "2026-04-12T03:29:17.808435Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 8.1,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:53.574331Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "assigner": "Red Hat",
          "severity": "low",
          "baseScore": 3.7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-13T00:46:44.895108Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 6.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T03:29:17.808435Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as &#39;unusable&#39; any TLSA records that have the PKIX\ncertificate usages.  These SMTP (or other similar) clients are not vulnerable\nto this issue.  Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28387](https://security-tracker.debian.org/tracker/CVE-2026-28387)\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.49234",
        "probability": "0.00671",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28387"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:37:05.297314Z",
      "disclosureTime": "2026-04-07T22:16:20.700000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:37:05.300581Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:48.154618Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "coreutils@9.7-3",
        "openssl/libssl3t64@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/libssl3t64",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969309",
      "cpes": [],
      "title": "CVE-2026-28390",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28390",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28390"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc",
          "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6",
          "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4",
          "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788",
          "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75",
          "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-24T02:21:53.199622Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-11T04:37:15.181387Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-04-17T11:12:03.567644Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:53.199622Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "Red Hat",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-11T04:37:15.181387Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-17T11:12:03.567644Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28390](https://security-tracker.debian.org/tracker/CVE-2026-28390)\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.53918",
        "probability": "0.00805",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28390"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:39:39.127754Z",
      "disclosureTime": "2026-04-07T22:16:21.190000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:39:39.131552Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:48.855673Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "coreutils@9.7-3",
        "openssl/libssl3t64@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/libssl3t64",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969320",
      "cpes": [],
      "title": "CVE-2026-28388",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28388",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28388"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e",
          "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139",
          "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3",
          "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8",
          "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726",
          "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-24T02:21:52.097816Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-04-13T00:47:01.842319Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-07-05T23:07:34.759996Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:52.097816Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-13T00:47:01.842319Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-07-05T23:07:34.759996Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28388](https://security-tracker.debian.org/tracker/CVE-2026-28388)\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.56424",
        "probability": "0.00885",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28388"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:43:37.142636Z",
      "disclosureTime": "2026-04-07T22:16:20.863000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:43:37.145994Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:49.575709Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "coreutils@9.7-3",
        "openssl/libssl3t64@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/libssl3t64",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969301",
      "cpes": [],
      "title": "CVE-2026-31789",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "critical",
      "cvssScore": 9.8,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-31789",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-31789"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde",
          "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf",
          "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49",
          "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9",
          "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521",
          "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "critical",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 9.8,
          "modificationTime": "2026-04-24T02:21:53.322162Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H",
          "cvssV3BaseScore": 5.8,
          "modificationTime": "2026-04-15T00:23:01.358492Z"
        },
        {
          "assigner": "SUSE",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "cvssV3BaseScore": 7.3,
          "modificationTime": "2026-04-12T03:29:54.650024Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "assigner": "NVD",
          "severity": "critical",
          "baseScore": 9.8,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:53.322162Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 5.8,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-15T00:23:01.358492Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "assigner": "SUSE",
          "severity": "high",
          "baseScore": 7.3,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T03:29:54.650024Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-31789](https://security-tracker.debian.org/tracker/CVE-2026-31789)\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n",
      "epssDetails": {
        "percentile": "0.15604",
        "probability": "0.00243",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-31789"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "critical",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:36:30.839966Z",
      "disclosureTime": "2026-04-07T22:16:21.617000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:36:30.845028Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-07-24T14:04:38.595776Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "critical",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "apt@3.0.3",
        "apt/libapt-pkg7.0@3.0.3",
        "openssl/libssl3t64@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/libssl3t64",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969306",
      "cpes": [],
      "title": "CVE-2026-28389",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28389",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28389"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5",
          "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616",
          "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f",
          "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a",
          "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686",
          "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-24T02:21:52.297059Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-04-13T00:46:46.745668Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "cvssV3BaseScore": 5.3,
          "modificationTime": "2026-04-12T03:29:29.756813Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:52.297059Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-13T00:46:46.745668Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 5.3,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T03:29:29.756813Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28389](https://security-tracker.debian.org/tracker/CVE-2026-28389)\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.53918",
        "probability": "0.00805",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28389"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:37:02.377588Z",
      "disclosureTime": "2026-04-07T22:16:21.030000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:37:02.380861Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:48.791509Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "apt@3.0.3",
        "apt/libapt-pkg7.0@3.0.3",
        "openssl/libssl3t64@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/libssl3t64",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969307",
      "cpes": [],
      "title": "CVE-2026-28387",
      "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 8.1,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28387",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28387"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b",
          "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe",
          "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3",
          "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7",
          "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177",
          "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 8.1,
          "modificationTime": "2026-04-24T02:21:53.574331Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "low",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "cvssV3BaseScore": 3.7,
          "modificationTime": "2026-04-13T00:46:44.895108Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
          "cvssV3BaseScore": 6.5,
          "modificationTime": "2026-04-12T03:29:17.808435Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 8.1,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:53.574331Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "assigner": "Red Hat",
          "severity": "low",
          "baseScore": 3.7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-13T00:46:44.895108Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 6.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T03:29:17.808435Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as &#39;unusable&#39; any TLSA records that have the PKIX\ncertificate usages.  These SMTP (or other similar) clients are not vulnerable\nto this issue.  Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28387](https://security-tracker.debian.org/tracker/CVE-2026-28387)\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.49234",
        "probability": "0.00671",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28387"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:37:05.297314Z",
      "disclosureTime": "2026-04-07T22:16:20.700000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:37:05.300581Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:48.154618Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "apt@3.0.3",
        "apt/libapt-pkg7.0@3.0.3",
        "openssl/libssl3t64@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/libssl3t64",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969309",
      "cpes": [],
      "title": "CVE-2026-28390",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28390",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28390"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc",
          "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6",
          "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4",
          "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788",
          "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75",
          "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-24T02:21:53.199622Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-11T04:37:15.181387Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-04-17T11:12:03.567644Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:53.199622Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "Red Hat",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-11T04:37:15.181387Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-17T11:12:03.567644Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28390](https://security-tracker.debian.org/tracker/CVE-2026-28390)\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.53918",
        "probability": "0.00805",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28390"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:39:39.127754Z",
      "disclosureTime": "2026-04-07T22:16:21.190000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:39:39.131552Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:48.855673Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "apt@3.0.3",
        "apt/libapt-pkg7.0@3.0.3",
        "openssl/libssl3t64@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/libssl3t64",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969320",
      "cpes": [],
      "title": "CVE-2026-28388",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28388",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28388"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e",
          "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139",
          "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3",
          "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8",
          "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726",
          "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-24T02:21:52.097816Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-04-13T00:47:01.842319Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-07-05T23:07:34.759996Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:52.097816Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-13T00:47:01.842319Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-07-05T23:07:34.759996Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28388](https://security-tracker.debian.org/tracker/CVE-2026-28388)\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.56424",
        "probability": "0.00885",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28388"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:43:37.142636Z",
      "disclosureTime": "2026-04-07T22:16:20.863000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:43:37.145994Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:49.575709Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "apt@3.0.3",
        "apt/libapt-pkg7.0@3.0.3",
        "openssl/libssl3t64@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/libssl3t64",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969301",
      "cpes": [],
      "title": "CVE-2026-31789",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "critical",
      "cvssScore": 9.8,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-31789",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-31789"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde",
          "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf",
          "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49",
          "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9",
          "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521",
          "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "critical",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 9.8,
          "modificationTime": "2026-04-24T02:21:53.322162Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H",
          "cvssV3BaseScore": 5.8,
          "modificationTime": "2026-04-15T00:23:01.358492Z"
        },
        {
          "assigner": "SUSE",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "cvssV3BaseScore": 7.3,
          "modificationTime": "2026-04-12T03:29:54.650024Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "assigner": "NVD",
          "severity": "critical",
          "baseScore": 9.8,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:53.322162Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 5.8,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-15T00:23:01.358492Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "assigner": "SUSE",
          "severity": "high",
          "baseScore": 7.3,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T03:29:54.650024Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-31789](https://security-tracker.debian.org/tracker/CVE-2026-31789)\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n",
      "epssDetails": {
        "percentile": "0.15604",
        "probability": "0.00243",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-31789"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "critical",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:36:30.839966Z",
      "disclosureTime": "2026-04-07T22:16:21.617000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:36:30.845028Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-07-24T14:04:38.595776Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "critical",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "ca-certificates@20250419",
        "openssl@3.5.5-1~deb13u1",
        "openssl/libssl3t64@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/libssl3t64",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969306",
      "cpes": [],
      "title": "CVE-2026-28389",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28389",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28389"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5",
          "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616",
          "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f",
          "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a",
          "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686",
          "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-24T02:21:52.297059Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-04-13T00:46:46.745668Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "cvssV3BaseScore": 5.3,
          "modificationTime": "2026-04-12T03:29:29.756813Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:52.297059Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-13T00:46:46.745668Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 5.3,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T03:29:29.756813Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28389](https://security-tracker.debian.org/tracker/CVE-2026-28389)\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.53918",
        "probability": "0.00805",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28389"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:37:02.377588Z",
      "disclosureTime": "2026-04-07T22:16:21.030000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:37:02.380861Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:48.791509Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "ca-certificates@20250419",
        "openssl@3.5.5-1~deb13u1",
        "openssl/libssl3t64@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/libssl3t64",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969307",
      "cpes": [],
      "title": "CVE-2026-28387",
      "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 8.1,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28387",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28387"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b",
          "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe",
          "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3",
          "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7",
          "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177",
          "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 8.1,
          "modificationTime": "2026-04-24T02:21:53.574331Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "low",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "cvssV3BaseScore": 3.7,
          "modificationTime": "2026-04-13T00:46:44.895108Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
          "cvssV3BaseScore": 6.5,
          "modificationTime": "2026-04-12T03:29:17.808435Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 8.1,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:53.574331Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "assigner": "Red Hat",
          "severity": "low",
          "baseScore": 3.7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-13T00:46:44.895108Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 6.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T03:29:17.808435Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as &#39;unusable&#39; any TLSA records that have the PKIX\ncertificate usages.  These SMTP (or other similar) clients are not vulnerable\nto this issue.  Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28387](https://security-tracker.debian.org/tracker/CVE-2026-28387)\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.49234",
        "probability": "0.00671",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28387"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:37:05.297314Z",
      "disclosureTime": "2026-04-07T22:16:20.700000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:37:05.300581Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:48.154618Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "ca-certificates@20250419",
        "openssl@3.5.5-1~deb13u1",
        "openssl/libssl3t64@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/libssl3t64",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969309",
      "cpes": [],
      "title": "CVE-2026-28390",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28390",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28390"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc",
          "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6",
          "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4",
          "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788",
          "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75",
          "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-24T02:21:53.199622Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-11T04:37:15.181387Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-04-17T11:12:03.567644Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:53.199622Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "Red Hat",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-11T04:37:15.181387Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-17T11:12:03.567644Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28390](https://security-tracker.debian.org/tracker/CVE-2026-28390)\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.53918",
        "probability": "0.00805",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28390"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:39:39.127754Z",
      "disclosureTime": "2026-04-07T22:16:21.190000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:39:39.131552Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:48.855673Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "ca-certificates@20250419",
        "openssl@3.5.5-1~deb13u1",
        "openssl/libssl3t64@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/libssl3t64",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969320",
      "cpes": [],
      "title": "CVE-2026-28388",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28388",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28388"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e",
          "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139",
          "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3",
          "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8",
          "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726",
          "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-24T02:21:52.097816Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-04-13T00:47:01.842319Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-07-05T23:07:34.759996Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:52.097816Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-13T00:47:01.842319Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-07-05T23:07:34.759996Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28388](https://security-tracker.debian.org/tracker/CVE-2026-28388)\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.56424",
        "probability": "0.00885",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28388"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:43:37.142636Z",
      "disclosureTime": "2026-04-07T22:16:20.863000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:43:37.145994Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:49.575709Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "ca-certificates@20250419",
        "openssl@3.5.5-1~deb13u1",
        "openssl/libssl3t64@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/libssl3t64",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969301",
      "cpes": [],
      "title": "CVE-2026-31789",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "critical",
      "cvssScore": 9.8,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-31789",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-31789"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde",
          "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf",
          "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49",
          "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9",
          "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521",
          "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "critical",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 9.8,
          "modificationTime": "2026-04-24T02:21:53.322162Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H",
          "cvssV3BaseScore": 5.8,
          "modificationTime": "2026-04-15T00:23:01.358492Z"
        },
        {
          "assigner": "SUSE",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "cvssV3BaseScore": 7.3,
          "modificationTime": "2026-04-12T03:29:54.650024Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "assigner": "NVD",
          "severity": "critical",
          "baseScore": 9.8,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:53.322162Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 5.8,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-15T00:23:01.358492Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "assigner": "SUSE",
          "severity": "high",
          "baseScore": 7.3,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T03:29:54.650024Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-31789](https://security-tracker.debian.org/tracker/CVE-2026-31789)\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n",
      "epssDetails": {
        "percentile": "0.15604",
        "probability": "0.00243",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-31789"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "critical",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:36:30.839966Z",
      "disclosureTime": "2026-04-07T22:16:21.617000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:36:30.845028Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-07-24T14:04:38.595776Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "critical",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "ca-certificates@20250419",
        "openssl@3.5.5-1~deb13u1",
        "openssl/libssl3t64@3.5.5-1~deb13u1",
        "openssl/openssl-provider-legacy@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/openssl-provider-legacy",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969306",
      "cpes": [],
      "title": "CVE-2026-28389",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28389",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28389"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5",
          "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616",
          "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f",
          "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a",
          "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686",
          "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-24T02:21:52.297059Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-04-13T00:46:46.745668Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "cvssV3BaseScore": 5.3,
          "modificationTime": "2026-04-12T03:29:29.756813Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:52.297059Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-13T00:46:46.745668Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 5.3,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T03:29:29.756813Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28389](https://security-tracker.debian.org/tracker/CVE-2026-28389)\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.53918",
        "probability": "0.00805",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28389"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:37:02.377588Z",
      "disclosureTime": "2026-04-07T22:16:21.030000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:37:02.380861Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:48.791509Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "ca-certificates@20250419",
        "openssl@3.5.5-1~deb13u1",
        "openssl/libssl3t64@3.5.5-1~deb13u1",
        "openssl/openssl-provider-legacy@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/openssl-provider-legacy",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969307",
      "cpes": [],
      "title": "CVE-2026-28387",
      "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 8.1,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28387",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28387"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b",
          "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe",
          "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3",
          "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7",
          "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177",
          "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 8.1,
          "modificationTime": "2026-04-24T02:21:53.574331Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "low",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "cvssV3BaseScore": 3.7,
          "modificationTime": "2026-04-13T00:46:44.895108Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
          "cvssV3BaseScore": 6.5,
          "modificationTime": "2026-04-12T03:29:17.808435Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 8.1,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:53.574331Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "assigner": "Red Hat",
          "severity": "low",
          "baseScore": 3.7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-13T00:46:44.895108Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 6.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T03:29:17.808435Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as &#39;unusable&#39; any TLSA records that have the PKIX\ncertificate usages.  These SMTP (or other similar) clients are not vulnerable\nto this issue.  Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28387](https://security-tracker.debian.org/tracker/CVE-2026-28387)\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.49234",
        "probability": "0.00671",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28387"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:37:05.297314Z",
      "disclosureTime": "2026-04-07T22:16:20.700000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:37:05.300581Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:48.154618Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "ca-certificates@20250419",
        "openssl@3.5.5-1~deb13u1",
        "openssl/libssl3t64@3.5.5-1~deb13u1",
        "openssl/openssl-provider-legacy@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/openssl-provider-legacy",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969309",
      "cpes": [],
      "title": "CVE-2026-28390",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28390",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28390"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc",
          "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6",
          "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4",
          "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788",
          "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75",
          "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-24T02:21:53.199622Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-11T04:37:15.181387Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-04-17T11:12:03.567644Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:53.199622Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "Red Hat",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-11T04:37:15.181387Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-17T11:12:03.567644Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28390](https://security-tracker.debian.org/tracker/CVE-2026-28390)\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.53918",
        "probability": "0.00805",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28390"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:39:39.127754Z",
      "disclosureTime": "2026-04-07T22:16:21.190000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:39:39.131552Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:48.855673Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "ca-certificates@20250419",
        "openssl@3.5.5-1~deb13u1",
        "openssl/libssl3t64@3.5.5-1~deb13u1",
        "openssl/openssl-provider-legacy@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/openssl-provider-legacy",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969320",
      "cpes": [],
      "title": "CVE-2026-28388",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28388",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28388"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e",
          "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139",
          "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3",
          "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8",
          "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726",
          "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-24T02:21:52.097816Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-04-13T00:47:01.842319Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-07-05T23:07:34.759996Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:52.097816Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-13T00:47:01.842319Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-07-05T23:07:34.759996Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28388](https://security-tracker.debian.org/tracker/CVE-2026-28388)\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.56424",
        "probability": "0.00885",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28388"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:43:37.142636Z",
      "disclosureTime": "2026-04-07T22:16:20.863000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:43:37.145994Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:49.575709Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "ca-certificates@20250419",
        "openssl@3.5.5-1~deb13u1",
        "openssl/libssl3t64@3.5.5-1~deb13u1",
        "openssl/openssl-provider-legacy@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl/openssl-provider-legacy",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969301",
      "cpes": [],
      "title": "CVE-2026-31789",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "critical",
      "cvssScore": 9.8,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-31789",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-31789"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde",
          "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf",
          "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49",
          "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9",
          "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521",
          "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "critical",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 9.8,
          "modificationTime": "2026-04-24T02:21:53.322162Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H",
          "cvssV3BaseScore": 5.8,
          "modificationTime": "2026-04-15T00:23:01.358492Z"
        },
        {
          "assigner": "SUSE",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "cvssV3BaseScore": 7.3,
          "modificationTime": "2026-04-12T03:29:54.650024Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "assigner": "NVD",
          "severity": "critical",
          "baseScore": 9.8,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:53.322162Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 5.8,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-15T00:23:01.358492Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "assigner": "SUSE",
          "severity": "high",
          "baseScore": 7.3,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T03:29:54.650024Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-31789](https://security-tracker.debian.org/tracker/CVE-2026-31789)\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n",
      "epssDetails": {
        "percentile": "0.15604",
        "probability": "0.00243",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-31789"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "critical",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:36:30.839966Z",
      "disclosureTime": "2026-04-07T22:16:21.617000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:36:30.845028Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-07-24T14:04:38.595776Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "critical",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "ca-certificates@20250419",
        "openssl@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969306",
      "cpes": [],
      "title": "CVE-2026-28389",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28389",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28389"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5",
          "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616",
          "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f",
          "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a",
          "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686",
          "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-24T02:21:52.297059Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-04-13T00:46:46.745668Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "cvssV3BaseScore": 5.3,
          "modificationTime": "2026-04-12T03:29:29.756813Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:52.297059Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-13T00:46:46.745668Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 5.3,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T03:29:29.756813Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28389](https://security-tracker.debian.org/tracker/CVE-2026-28389)\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.53918",
        "probability": "0.00805",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28389"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:37:02.377588Z",
      "disclosureTime": "2026-04-07T22:16:21.030000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:37:02.380861Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:48.791509Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "ca-certificates@20250419",
        "openssl@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969307",
      "cpes": [],
      "title": "CVE-2026-28387",
      "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 8.1,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28387",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28387"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b",
          "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe",
          "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3",
          "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7",
          "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177",
          "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "cvssV3BaseScore": 8.1,
          "modificationTime": "2026-04-24T02:21:53.574331Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "low",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "cvssV3BaseScore": 3.7,
          "modificationTime": "2026-04-13T00:46:44.895108Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
          "cvssV3BaseScore": 6.5,
          "modificationTime": "2026-04-12T03:29:17.808435Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 8.1,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:53.574331Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "assigner": "Red Hat",
          "severity": "low",
          "baseScore": 3.7,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-13T00:46:44.895108Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 6.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-12T03:29:17.808435Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as &#39;unusable&#39; any TLSA records that have the PKIX\ncertificate usages.  These SMTP (or other similar) clients are not vulnerable\nto this issue.  Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28387](https://security-tracker.debian.org/tracker/CVE-2026-28387)\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.49234",
        "probability": "0.00671",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28387"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:37:05.297314Z",
      "disclosureTime": "2026-04-07T22:16:20.700000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:37:05.300581Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:48.154618Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "ca-certificates@20250419",
        "openssl@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969309",
      "cpes": [],
      "title": "CVE-2026-28390",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28390",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28390"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc",
          "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6",
          "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4",
          "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788",
          "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75",
          "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-24T02:21:53.199622Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-11T04:37:15.181387Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-04-17T11:12:03.567644Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:53.199622Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "Red Hat",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-11T04:37:15.181387Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-17T11:12:03.567644Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28390](https://security-tracker.debian.org/tracker/CVE-2026-28390)\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.53918",
        "probability": "0.00805",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28390"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:39:39.127754Z",
      "disclosureTime": "2026-04-07T22:16:21.190000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:39:39.131552Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:48.855673Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "ca-certificates@20250419",
        "openssl@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-OPENSSL-15969320",
      "cpes": [],
      "title": "CVE-2026-28388",
      "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "<3.5.5-1~deb13u2"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [
        "3.5.5-1~deb13u2"
      ],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.5,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-28388",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-28388"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e",
          "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139",
          "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3",
          "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8",
          "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8"
        },
        {
          "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726",
          "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260407.txt",
          "title": "https://openssl-library.org/news/secadv/20260407.txt"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
          "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 7.5,
          "modificationTime": "2026-04-24T02:21:52.097816Z"
        },
        {
          "assigner": "Red Hat",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-04-13T00:47:01.842319Z"
        },
        {
          "assigner": "SUSE",
          "severity": "medium",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "cvssV3BaseScore": 5.9,
          "modificationTime": "2026-07-05T23:07:34.759996Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.5,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-24T02:21:52.097816Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "Red Hat",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-04-13T00:47:01.842319Z"
        },
        {
          "type": "secondary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "assigner": "SUSE",
          "severity": "medium",
          "baseScore": 5.9,
          "cvssVersion": "3.1",
          "modificationTime": "2026-07-05T23:07:34.759996Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Debian:13` `openssl` to version 3.5.5-1~deb13u2 or higher.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-28388](https://security-tracker.debian.org/tracker/CVE-2026-28388)\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n",
      "epssDetails": {
        "percentile": "0.56424",
        "probability": "0.00885",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-28388"
        ],
        "CWE": [],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "openssl",
      "creationTime": "2026-04-10T21:43:37.142636Z",
      "disclosureTime": "2026-04-07T22:16:20.863000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-04-10T21:43:37.145994Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-08-19T14:04:49.575709Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "ca-certificates@20250419",
        "openssl@3.5.5-1~deb13u1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "openssl",
      "version": "3.5.5-1~deb13u1",
      "nearestFixedInVersion": "3.5.5-1~deb13u2",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-ZLIB-19520500",
      "cpes": [],
      "title": "Out-of-bounds Write",
      "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "*"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.4,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-85091",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-85091"
        },
        {
          "url": "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490",
          "title": "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490"
        },
        {
          "url": "https://github.com/madler/zlib",
          "title": "https://github.com/madler/zlib"
        },
        {
          "url": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c%23L393",
          "title": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c%23L393"
        },
        {
          "url": "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate",
          "title": "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "cvssV3BaseScore": 7.4,
          "modificationTime": "2026-09-04T01:29:18.339972Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.4,
          "cvssVersion": "3.1",
          "modificationTime": "2026-09-04T01:29:18.339972Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `zlib` package and not the `zlib` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nzlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.\n## Remediation\nThere is no fixed version for `Debian:13` `zlib`.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-85091](https://security-tracker.debian.org/tracker/CVE-2026-85091)\n- [https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490](https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490)\n- [https://github.com/madler/zlib](https://github.com/madler/zlib)\n- [https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393](https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393)\n- [https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate](https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate)\n",
      "epssDetails": {
        "percentile": "0.36988",
        "probability": "0.00442",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-85091"
        ],
        "CWE": [
          "CWE-787"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "zlib",
      "creationTime": "2026-09-04T04:43:41.644434Z",
      "disclosureTime": "2026-09-03T13:06:20.573000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-09-04T04:43:41.651764Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-09-04T04:43:41.734714Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "dpkg@1.22.22",
        "zlib/zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "zlib/zlib1g",
      "version": "1:1.3.dfsg+really1.3.1-1+b1",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-ZLIB-19520500",
      "cpes": [],
      "title": "Out-of-bounds Write",
      "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "*"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.4,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-85091",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-85091"
        },
        {
          "url": "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490",
          "title": "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490"
        },
        {
          "url": "https://github.com/madler/zlib",
          "title": "https://github.com/madler/zlib"
        },
        {
          "url": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c%23L393",
          "title": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c%23L393"
        },
        {
          "url": "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate",
          "title": "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "cvssV3BaseScore": 7.4,
          "modificationTime": "2026-09-04T01:29:18.339972Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.4,
          "cvssVersion": "3.1",
          "modificationTime": "2026-09-04T01:29:18.339972Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `zlib` package and not the `zlib` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nzlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.\n## Remediation\nThere is no fixed version for `Debian:13` `zlib`.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-85091](https://security-tracker.debian.org/tracker/CVE-2026-85091)\n- [https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490](https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490)\n- [https://github.com/madler/zlib](https://github.com/madler/zlib)\n- [https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393](https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393)\n- [https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate](https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate)\n",
      "epssDetails": {
        "percentile": "0.36988",
        "probability": "0.00442",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-85091"
        ],
        "CWE": [
          "CWE-787"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "zlib",
      "creationTime": "2026-09-04T04:43:41.644434Z",
      "disclosureTime": "2026-09-03T13:06:20.573000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-09-04T04:43:41.651764Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-09-04T04:43:41.734714Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "apt@3.0.3",
        "apt/libapt-pkg7.0@3.0.3",
        "zlib/zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "zlib/zlib1g",
      "version": "1:1.3.dfsg+really1.3.1-1+b1",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    },
    {
      "id": "SNYK-DEBIAN13-ZLIB-19520500",
      "cpes": [],
      "title": "Out-of-bounds Write",
      "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
      "credit": [
        ""
      ],
      "semver": {
        "vulnerable": [
          "*"
        ]
      },
      "exploit": "Not Defined",
      "fixedIn": [],
      "patches": [],
      "insights": {
        "triageAdvice": null
      },
      "language": "linux",
      "severity": "high",
      "cvssScore": 7.4,
      "malicious": false,
      "isDisputed": false,
      "references": [
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2026-85091",
          "title": "https://security-tracker.debian.org/tracker/CVE-2026-85091"
        },
        {
          "url": "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490",
          "title": "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490"
        },
        {
          "url": "https://github.com/madler/zlib",
          "title": "https://github.com/madler/zlib"
        },
        {
          "url": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c%23L393",
          "title": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c%23L393"
        },
        {
          "url": "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate",
          "title": "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"
        }
      ],
      "cvssDetails": [
        {
          "assigner": "NVD",
          "severity": "high",
          "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "cvssV3BaseScore": 7.4,
          "modificationTime": "2026-09-04T01:29:18.339972Z"
        }
      ],
      "cvssSources": [
        {
          "type": "primary",
          "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "assigner": "NVD",
          "severity": "high",
          "baseScore": 7.4,
          "cvssVersion": "3.1",
          "modificationTime": "2026-09-04T01:29:18.339972Z"
        }
      ],
      "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `zlib` package and not the `zlib` package as distributed by `Debian`._\n_See `How to fix?` for `Debian:13` relevant fixed versions and status._\n\nzlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.\n## Remediation\nThere is no fixed version for `Debian:13` `zlib`.\n## References\n- [https://security-tracker.debian.org/tracker/CVE-2026-85091](https://security-tracker.debian.org/tracker/CVE-2026-85091)\n- [https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490](https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490)\n- [https://github.com/madler/zlib](https://github.com/madler/zlib)\n- [https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393](https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393)\n- [https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate](https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate)\n",
      "epssDetails": {
        "percentile": "0.36988",
        "probability": "0.00442",
        "modelVersion": "v2026.06.15"
      },
      "identifiers": {
        "CVE": [
          "CVE-2026-85091"
        ],
        "CWE": [
          "CWE-787"
        ],
        "ALTERNATIVE": []
      },
      "nvdSeverity": "high",
      "packageName": "zlib",
      "creationTime": "2026-09-04T04:43:41.644434Z",
      "disclosureTime": "2026-09-03T13:06:20.573000Z",
      "exploitDetails": {
        "sources": [],
        "maturityLevels": [
          {
            "type": "secondary",
            "level": "Not Defined",
            "format": "CVSSv3"
          },
          {
            "type": "primary",
            "level": "Not Defined",
            "format": "CVSSv4"
          }
        ]
      },
      "packageManager": "debian:13",
      "publicationTime": "2026-09-04T04:43:41.651764Z",
      "severityBasedOn": "CVSS",
      "modificationTime": "2026-09-04T04:43:41.734714Z",
      "socialTrendAlert": false,
      "relativeImportance": "not yet assigned",
      "severityWithCritical": "high",
      "from": [
        "docker-image|docker.io/qdrant/qdrant@v1.17.1",
        "ca-certificates@20250419",
        "openssl@3.5.5-1~deb13u1",
        "openssl/libssl3t64@3.5.5-1~deb13u1",
        "zlib/zlib1g@1:1.3.dfsg+really1.3.1-1+b1"
      ],
      "upgradePath": [],
      "isUpgradable": false,
      "isPatchable": false,
      "name": "zlib/zlib1g",
      "version": "1:1.3.dfsg+really1.3.1-1+b1",
      "dockerfileInstruction": "apt-get install -y --no-install-recommends ca-certificates tzdata libunwind8 $PACKAGES"
    }
  ],
  "ok": false,
  "dependencyCount": 81,
  "org": "sean.graham",
  "policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\nignore: {}\npatch: {}\n",
  "isPrivate": true,
  "licensesPolicy": {
    "severities": {},
    "orgLicenseRules": {
      "AGPL-1.0": {
        "licenseType": "AGPL-1.0",
        "severity": "high",
        "instructions": ""
      },
      "AGPL-3.0": {
        "licenseType": "AGPL-3.0",
        "severity": "high",
        "instructions": ""
      },
      "Artistic-1.0": {
        "licenseType": "Artistic-1.0",
        "severity": "medium",
        "instructions": ""
      },
      "Artistic-2.0": {
        "licenseType": "Artistic-2.0",
        "severity": "medium",
        "instructions": ""
      },
      "CDDL-1.0": {
        "licenseType": "CDDL-1.0",
        "severity": "medium",
        "instructions": ""
      },
      "CPOL-1.02": {
        "licenseType": "CPOL-1.02",
        "severity": "high",
        "instructions": ""
      },
      "EPL-1.0": {
        "licenseType": "EPL-1.0",
        "severity": "medium",
        "instructions": ""
      },
      "GPL-2.0": {
        "licenseType": "GPL-2.0",
        "severity": "high",
        "instructions": ""
      },
      "GPL-3.0": {
        "licenseType": "GPL-3.0",
        "severity": "high",
        "instructions": ""
      },
      "LGPL-2.0": {
        "licenseType": "LGPL-2.0",
        "severity": "medium",
        "instructions": ""
      },
      "LGPL-2.1": {
        "licenseType": "LGPL-2.1",
        "severity": "medium",
        "instructions": ""
      },
      "LGPL-3.0": {
        "licenseType": "LGPL-3.0",
        "severity": "medium",
        "instructions": ""
      },
      "MPL-1.1": {
        "licenseType": "MPL-1.1",
        "severity": "medium",
        "instructions": ""
      },
      "MPL-2.0": {
        "licenseType": "MPL-2.0",
        "severity": "medium",
        "instructions": ""
      },
      "MS-RL": {
        "licenseType": "MS-RL",
        "severity": "medium",
        "instructions": ""
      },
      "SimPL-2.0": {
        "licenseType": "SimPL-2.0",
        "severity": "high",
        "instructions": ""
      }
    }
  },
  "packageManager": "deb",
  "ignoreSettings": {
    "adminOnly": false,
    "reasonRequired": false,
    "disregardFilesystemIgnores": false,
    "autoApproveIgnores": false,
    "approvalWorkflowEnabled": false
  },
  "docker": {
    "os": {
      "prettyName": "Debian GNU/Linux 13 (trixie)"
    }
  },
  "summary": "45 high or critical severity vulnerable dependency paths",
  "severityThreshold": "high",
  "filesystemPolicy": false,
  "filtered": {
    "ignore": [],
    "patch": []
  },
  "uniqueCount": 9,
  "projectName": "docker-image|docker.io/qdrant/qdrant",
  "platform": "linux/amd64",
  "hasUnknownVersions": false,
  "path": "docker.io/qdrant/qdrant:v1.17.1/qdrant/qdrant"
}