| CRITICAL | | 9.8 | 0.013 | CVE-2024-45492 | libexpat | 2.6.2-r0 | 2.6.3-r0 | libexpat: integer overflow |
| CRITICAL | | 9.8 | 0.011 | CVE-2024-45491 | libexpat | 2.6.2-r0 | 2.6.3-r0 | libexpat: Integer Overflow or Wraparound |
| HIGH | | 9.8 | 0.747 | CVE-2025-15467 | libcrypto3 | 3.0.12-r4 | 3.0.19-r0 | openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing |
| HIGH | | 9.8 | 0.747 | CVE-2025-15467 | libssl3 | 3.0.12-r4 | 3.0.19-r0 | openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing |
| HIGH | | 7.5 | 0.665 | CVE-2024-6119 | libcrypto3 | 3.0.12-r4 | 3.0.15-r0 | openssl: Possible denial of service in X.509 name checks |
| HIGH | | 7.5 | 0.665 | CVE-2024-6119 | libssl3 | 3.0.12-r4 | 3.0.15-r0 | openssl: Possible denial of service in X.509 name checks |
| HIGH | | 7.5 | 0.042 | CVE-2024-6197 | curl | 8.5.0-r0 | 8.9.0-r0 | curl: freeing stack buffer in utf8asn1str |
| HIGH | | 7.5 | 0.042 | CVE-2024-6197 | libcurl | 8.5.0-r0 | 8.9.0-r0 | curl: freeing stack buffer in utf8asn1str |
| HIGH | | 7.5 | 0.016 | CVE-2024-45490 | libexpat | 2.6.2-r0 | 2.6.3-r0 | libexpat: Negative Length Parsing Vulnerability in libexpat |
| HIGH | | 7.5 | 0.009 | CVE-2025-69421 | libcrypto3 | 3.0.12-r4 | 3.0.19-r0 | openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing |
| HIGH | | 7.5 | 0.009 | CVE-2025-69421 | libssl3 | 3.0.12-r4 | 3.0.19-r0 | openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing |
| HIGH | | 7 | 0.003 | CVE-2025-26519 | musl-utils | 1.2.3-r5 | 1.2.3-r6 | musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ... |
| HIGH | | 7 | 0.003 | CVE-2025-26519 | musl | 1.2.3-r5 | 1.2.3-r6 | musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ... |
| MEDIUM | | 8.6 | 0.36 | CVE-2024-2398 | curl | 8.5.0-r0 | 8.7.1-r0 | curl: HTTP/2 push headers memory-leak |
| MEDIUM | | 8.6 | 0.36 | CVE-2024-2398 | libcurl | 8.5.0-r0 | 8.7.1-r0 | curl: HTTP/2 push headers memory-leak |
| MEDIUM | | 7.5 | 0.015 | CVE-2025-9230 | libcrypto3 | 3.0.12-r4 | 3.0.19-r0 | openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap |
| MEDIUM | | 7.5 | 0.015 | CVE-2025-9230 | libssl3 | 3.0.12-r4 | 3.0.19-r0 | openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap |
| MEDIUM | | 6.5 | 0.014 | CVE-2024-2466 | curl | 8.5.0-r0 | 8.7.1-r0 | curl: TLS certificate check bypass with mbedTLS |
| MEDIUM | | 6.5 | 0.014 | CVE-2024-2466 | libcurl | 8.5.0-r0 | 8.7.1-r0 | curl: TLS certificate check bypass with mbedTLS |
| MEDIUM | | 5.9 | 0.011 | CVE-2024-50602 | libexpat | 2.6.2-r0 | 2.6.4-r0 | libexpat: expat: DoS via XML_ResumeParser |
| MEDIUM | | 5.3 | 0.011 | CVE-2024-0853 | curl | 8.5.0-r0 | 8.6.0-r0 | curl: OCSP verification bypass with TLS session reuse |
| MEDIUM | | 5.3 | 0.011 | CVE-2024-0853 | libcurl | 8.5.0-r0 | 8.6.0-r0 | curl: OCSP verification bypass with TLS session reuse |
| MEDIUM | | 5.3 | 0.007 | CVE-2024-6874 | curl | 8.5.0-r0 | 8.9.0-r0 | curl: macidn punycode buffer overread |
| MEDIUM | | 5.3 | 0.007 | CVE-2024-6874 | libcurl | 8.5.0-r0 | 8.9.0-r0 | curl: macidn punycode buffer overread |
| MEDIUM | | 7.4 | 0.006 | CVE-2025-69419 | libcrypto3 | 3.0.12-r4 | 3.0.19-r0 | openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing |
| MEDIUM | | 7.4 | 0.006 | CVE-2025-69419 | libssl3 | 3.0.12-r4 | 3.0.19-r0 | openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing |
| MEDIUM | | 7.8 | 0.004 | CVE-2023-42364 | busybox-binsh | 1.35.0-r29 | 1.35.0-r31 | busybox: use-after-free |
| MEDIUM | | 7.8 | 0.004 | CVE-2023-42364 | busybox | 1.35.0-r29 | 1.35.0-r31 | busybox: use-after-free |
| MEDIUM | | 7.8 | 0.004 | CVE-2023-42364 | ssl_client | 1.35.0-r29 | 1.35.0-r31 | busybox: use-after-free |
| MEDIUM | | 7.8 | 0.004 | CVE-2023-42363 | busybox-binsh | 1.35.0-r29 | 1.35.0-r31 | busybox: use-after-free in awk |
| MEDIUM | | 7.8 | 0.004 | CVE-2023-42363 | busybox | 1.35.0-r29 | 1.35.0-r31 | busybox: use-after-free in awk |
| MEDIUM | | 7.8 | 0.004 | CVE-2023-42363 | ssl_client | 1.35.0-r29 | 1.35.0-r31 | busybox: use-after-free in awk |
| MEDIUM | | 7.1 | 0.004 | CVE-2023-42366 | busybox-binsh | 1.35.0-r29 | 1.35.0-r30 | busybox: A heap-buffer-overflow |
| MEDIUM | | 7.1 | 0.004 | CVE-2023-42366 | busybox | 1.35.0-r29 | 1.35.0-r30 | busybox: A heap-buffer-overflow |
| MEDIUM | | 7.1 | 0.004 | CVE-2023-42366 | ssl_client | 1.35.0-r29 | 1.35.0-r30 | busybox: A heap-buffer-overflow |
| MEDIUM | | 7.8 | 0.003 | CVE-2023-42365 | busybox-binsh | 1.35.0-r29 | 1.35.0-r31 | busybox: use-after-free |
| MEDIUM | | 7.8 | 0.003 | CVE-2023-42365 | busybox | 1.35.0-r29 | 1.35.0-r31 | busybox: use-after-free |
| MEDIUM | | 7.8 | 0.003 | CVE-2023-42365 | ssl_client | 1.35.0-r29 | 1.35.0-r31 | busybox: use-after-free |
| LOW | | 5.9 | 0.524 | CVE-2024-2511 | libcrypto3 | 3.0.12-r4 | 3.0.12-r5 | openssl: Unbounded memory growth with session handling in TLSv1.3 |
| LOW | | 5.9 | 0.524 | CVE-2024-2511 | libssl3 | 3.0.12-r4 | 3.0.12-r5 | openssl: Unbounded memory growth with session handling in TLSv1.3 |
| LOW | | 4.3 | 0.058 | CVE-2024-9143 | libcrypto3 | 3.0.12-r4 | 3.0.15-r1 | openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access |
| LOW | | 4.3 | 0.058 | CVE-2024-9143 | libssl3 | 3.0.12-r4 | 3.0.15-r1 | openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access |
| LOW | | 9.1 | 0.055 | CVE-2024-5535 | libcrypto3 | 3.0.12-r4 | 3.0.14-r0 | openssl: SSL_select_next_proto buffer overread |
| LOW | | 9.1 | 0.055 | CVE-2024-5535 | libssl3 | 3.0.12-r4 | 3.0.14-r0 | openssl: SSL_select_next_proto buffer overread |
| LOW | | 7.5 | 0.029 | CVE-2024-4741 | libcrypto3 | 3.0.12-r4 | 3.0.14-r0 | openssl: Use After Free with SSL_free_buffers |
| LOW | | 7.5 | 0.029 | CVE-2024-4741 | libssl3 | 3.0.12-r4 | 3.0.14-r0 | openssl: Use After Free with SSL_free_buffers |
| LOW | | 5.9 | 0.02 | CVE-2025-9232 | libcrypto3 | 3.0.12-r4 | 3.0.19-r0 | openssl: Out-of-bounds read in HTTP client no_proxy handling |
| LOW | | 5.9 | 0.02 | CVE-2025-9232 | libssl3 | 3.0.12-r4 | 3.0.19-r0 | openssl: Out-of-bounds read in HTTP client no_proxy handling |
| LOW | | 6.3 | 0.018 | CVE-2024-2379 | curl | 8.5.0-r0 | 8.7.1-r0 | curl: QUIC certificate check bypass with wolfSSL |
| LOW | | 6.3 | 0.018 | CVE-2024-2379 | libcurl | 8.5.0-r0 | 8.7.1-r0 | curl: QUIC certificate check bypass with wolfSSL |
| LOW | | 5.3 | 0.016 | CVE-2024-2004 | curl | 8.5.0-r0 | 8.7.1-r0 | curl: Usage of disabled protocol |
| LOW | | 5.3 | 0.016 | CVE-2024-2004 | libcurl | 8.5.0-r0 | 8.7.1-r0 | curl: Usage of disabled protocol |
| LOW | | 5.3 | 0.011 | CVE-2024-4603 | libcrypto3 | 3.0.12-r4 | 3.0.13-r0 | openssl: Excessive time spent checking DSA keys and parameters |
| LOW | | 5.3 | 0.011 | CVE-2024-4603 | libssl3 | 3.0.12-r4 | 3.0.13-r0 | openssl: Excessive time spent checking DSA keys and parameters |
| LOW | | 7.5 | 0.009 | CVE-2025-69420 | libcrypto3 | 3.0.12-r4 | 3.0.19-r0 | openssl: OpenSSL: Denial of Service via malformed TimeStamp Response |
| LOW | | 7.5 | 0.009 | CVE-2025-69420 | libssl3 | 3.0.12-r4 | 3.0.19-r0 | openssl: OpenSSL: Denial of Service via malformed TimeStamp Response |
| LOW | | 4.7 | 0.006 | CVE-2024-13176 | libcrypto3 | 3.0.12-r4 | 3.0.19-r0 | openssl: Timing side-channel in ECDSA signature computation |
| LOW | | 4.7 | 0.006 | CVE-2024-13176 | libssl3 | 3.0.12-r4 | 3.0.19-r0 | openssl: Timing side-channel in ECDSA signature computation |
| LOW | | 5.9 | 0.005 | CVE-2026-22796 | libcrypto3 | 3.0.12-r4 | 3.0.19-r0 | openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification |
| LOW | | 5.9 | 0.005 | CVE-2026-22796 | libssl3 | 3.0.12-r4 | 3.0.19-r0 | openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification |
| LOW | | 4.7 | 0.001 | CVE-2025-68160 | libcrypto3 | 3.0.12-r4 | 3.0.19-r0 | openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter |
| LOW | | 4.7 | 0.001 | CVE-2025-68160 | libssl3 | 3.0.12-r4 | 3.0.19-r0 | openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter |
| LOW | | 5.5 | 0.001 | CVE-2026-22795 | libcrypto3 | 3.0.12-r4 | 3.0.19-r0 | openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing |
| LOW | | 5.5 | 0.001 | CVE-2026-22795 | libssl3 | 3.0.12-r4 | 3.0.19-r0 | openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing |
| LOW | | 4 | 0.001 | CVE-2025-69418 | libcrypto3 | 3.0.12-r4 | 3.0.19-r0 | openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls |
| LOW | | 4 | 0.001 | CVE-2025-69418 | libssl3 | 3.0.12-r4 | 3.0.19-r0 | openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls |