[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fz1byD1OLaBitw9wB8aY7AfzUCwaH1T9OSI20zZNAx1o":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":443,"kevVulnerabilities":502,"topProductsByCves":503,"seoMetadata":514,"meta":523},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":442},17959,"linuxfoundation",94,386,0,6112,"2026-03-26","l",[16,22,28,34,39,45,51,56,62,67,73,79,84,89,94,100,105,110,115,120,124,130,134,139,144,149,153,158,164,169,173,178,184,189,194,199,204,208,213,216,221,226,231,235,240,244,247,250,255,258,262,266,271,276,280,284,288,292,296,299,303,307,312,317,321,326,331,336,340,344,348,351,355,359,362,367,372,376,380,384,389,394,398,402,407,410,414,418,421,425,429,433,436,439],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},104245,"yocto",178,107,"2025-11-04",{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":11,"last_cve_update":27},104231,"pytorch",17,24,"2025-09-25",{"id":29,"product_name":30,"version_count":31,"cve_count":32,"kev_count":11,"last_cve_update":33},104194,"harbor",128,21,"2024-11-14",{"id":35,"product_name":36,"version_count":37,"cve_count":25,"kev_count":11,"last_cve_update":38},104209,"magma",26,"2025-01-21",{"id":40,"product_name":41,"version_count":42,"cve_count":43,"kev_count":11,"last_cve_update":44},104198,"iot-yocto",1,15,"2023-06-06",{"id":46,"product_name":47,"version_count":48,"cve_count":49,"kev_count":11,"last_cve_update":50},104176,"cups-filters",191,14,"2023-05-17",{"id":52,"product_name":53,"version_count":54,"cve_count":49,"kev_count":11,"last_cve_update":55},104172,"containerd",162,"2025-05-21",{"id":57,"product_name":58,"version_count":59,"cve_count":60,"kev_count":11,"last_cve_update":61},104183,"dragonfly",98,12,"2025-09-17",{"id":63,"product_name":64,"version_count":65,"cve_count":60,"kev_count":11,"last_cve_update":66},104234,"runc",29,"2024-01-31",{"id":68,"product_name":69,"version_count":70,"cve_count":71,"kev_count":11,"last_cve_update":72},104224,"open_network_operating_system",60,11,"2020-02-20",{"id":74,"product_name":75,"version_count":76,"cve_count":77,"kev_count":11,"last_cve_update":78},104169,"ceph",51,8,"2022-07-25",{"id":80,"product_name":81,"version_count":82,"cve_count":77,"kev_count":11,"last_cve_update":83},104202,"kubeedge",31,"2022-07-11",{"id":85,"product_name":86,"version_count":87,"cve_count":77,"kev_count":11,"last_cve_update":88},104160,"backstage",278,"2024-09-17",{"id":90,"product_name":91,"version_count":37,"cve_count":92,"kev_count":11,"last_cve_update":93},104175,"cubefs",6,"2024-01-03",{"id":95,"product_name":96,"version_count":97,"cve_count":98,"kev_count":11,"last_cve_update":99},104228,"osquery",108,5,"2020-12-16",{"id":101,"product_name":102,"version_count":103,"cve_count":98,"kev_count":11,"last_cve_update":104},104189,"foomatic-filters",18,"2019-11-19",{"id":106,"product_name":107,"version_count":108,"cve_count":98,"kev_count":11,"last_cve_update":109},104184,"edge_virtualization_engine",205,"2023-09-21",{"id":111,"product_name":112,"version_count":113,"cve_count":98,"kev_count":11,"last_cve_update":114},104217,"onnx",28,"2025-07-22",{"id":116,"product_name":117,"version_count":118,"cve_count":98,"kev_count":11,"last_cve_update":119},104236,"spinnaker",322,"2023-08-28",{"id":121,"product_name":122,"version_count":123,"cve_count":98,"kev_count":11,"last_cve_update":13},104185,"everest",43,{"id":125,"product_name":126,"version_count":127,"cve_count":128,"kev_count":11,"last_cve_update":129},104221,"opendaylight",10,4,"2022-11-27",{"id":131,"product_name":132,"version_count":82,"cve_count":128,"kev_count":11,"last_cve_update":133},104210,"materialx","2025-08-01",{"id":135,"product_name":136,"version_count":137,"cve_count":128,"kev_count":11,"last_cve_update":138},104239,"the_update_framework",20,"2021-10-19",{"id":140,"product_name":141,"version_count":142,"cve_count":128,"kev_count":11,"last_cve_update":143},104215,"nats-server",139,"2023-10-30",{"id":145,"product_name":146,"version_count":147,"cve_count":128,"kev_count":11,"last_cve_update":148},104179,"dex",70,"2024-01-25",{"id":150,"product_name":151,"version_count":123,"cve_count":128,"kev_count":11,"last_cve_update":152},104193,"grpc_swift","2022-03-25",{"id":154,"product_name":155,"version_count":156,"cve_count":128,"kev_count":11,"last_cve_update":157},104196,"indy-node",45,"2022-09-09",{"id":159,"product_name":160,"version_count":161,"cve_count":162,"kev_count":11,"last_cve_update":163},104168,"besu",74,3,"2022-09-24",{"id":165,"product_name":166,"version_count":167,"cve_count":162,"kev_count":11,"last_cve_update":168},104247,"zowe_api_mediation_layer",324,"2024-10-10",{"id":170,"product_name":171,"version_count":26,"cve_count":162,"kev_count":11,"last_cve_update":172},104174,"cortex","2022-12-19",{"id":174,"product_name":175,"version_count":176,"cve_count":162,"kev_count":11,"last_cve_update":177},104156,"argo-cd",211,"2024-01-19",{"id":179,"product_name":180,"version_count":181,"cve_count":182,"kev_count":11,"last_cve_update":183},104243,"vitess",208,2,"2023-05-11",{"id":185,"product_name":186,"version_count":187,"cve_count":182,"kev_count":11,"last_cve_update":188},104232,"rekor",41,"2023-05-26",{"id":190,"product_name":191,"version_count":192,"cve_count":182,"kev_count":11,"last_cve_update":193},104182,"dojox",132,"2020-03-10",{"id":195,"product_name":196,"version_count":197,"cve_count":182,"kev_count":11,"last_cve_update":198},104186,"fabric",39,"2021-11-18",{"id":200,"product_name":201,"version_count":202,"cve_count":182,"kev_count":11,"last_cve_update":203},104181,"dojo",144,"2021-12-17",{"id":205,"product_name":206,"version_count":103,"cve_count":182,"kev_count":11,"last_cve_update":207},104187,"fluid","2024-03-15",{"id":209,"product_name":210,"version_count":211,"cve_count":182,"kev_count":11,"last_cve_update":212},104235,"software_for_open_networking_in_the_cloud",9,"2024-03-12",{"id":214,"product_name":215,"version_count":11,"cve_count":182,"kev_count":11,"last_cve_update":203},104206,"longhorn",{"id":217,"product_name":218,"version_count":219,"cve_count":182,"kev_count":11,"last_cve_update":220},104241,"tremor-script",33,"2021-12-27",{"id":222,"product_name":223,"version_count":224,"cve_count":42,"kev_count":11,"last_cve_update":225},104212,"modular_open_smart_network",34,"2023-02-17",{"id":227,"product_name":228,"version_count":229,"cve_count":42,"kev_count":11,"last_cve_update":230},104158,"auth_backend",49,"2021-11-26",{"id":232,"product_name":233,"version_count":42,"cve_count":42,"kev_count":11,"last_cve_update":234},104159,"automotive_grade_linux","2023-02-26",{"id":236,"product_name":237,"version_count":238,"cve_count":42,"kev_count":11,"last_cve_update":239},104161,"backstage_backend-common",117,"2024-02-23",{"id":241,"product_name":242,"version_count":182,"cve_count":42,"kev_count":11,"last_cve_update":243},104162,"backstage_catalog-model","2023-02-14",{"id":245,"product_name":246,"version_count":182,"cve_count":42,"kev_count":11,"last_cve_update":243},104163,"backstage_core-components",{"id":248,"product_name":249,"version_count":182,"cve_count":42,"kev_count":11,"last_cve_update":243},104164,"backstage_plugin-catalog-backend",{"id":251,"product_name":252,"version_count":253,"cve_count":42,"kev_count":11,"last_cve_update":254},104165,"\\@backstage\\\u002Fplugin-techdocs",27,"2021-06-03",{"id":256,"product_name":257,"version_count":32,"cve_count":42,"kev_count":11,"last_cve_update":254},104166,"\\@backstage\\\u002Ftechdocs-common",{"id":259,"product_name":260,"version_count":98,"cve_count":42,"kev_count":11,"last_cve_update":261},104167,"baremetal_operator","2023-04-26",{"id":263,"product_name":264,"version_count":103,"cve_count":42,"kev_count":11,"last_cve_update":265},104171,"cni_network_plugins","2020-06-03",{"id":267,"product_name":268,"version_count":269,"cve_count":42,"kev_count":11,"last_cve_update":270},104173,"container_network_interface",16,"2021-03-26",{"id":272,"product_name":273,"version_count":274,"cve_count":42,"kev_count":11,"last_cve_update":275},104177,"dapr",75,"2023-07-21",{"id":277,"product_name":278,"version_count":60,"cve_count":42,"kev_count":11,"last_cve_update":279},104178,"dapr_dashboard","2022-10-03",{"id":281,"product_name":282,"version_count":11,"cve_count":42,"kev_count":11,"last_cve_update":283},104180,"docarray","2025-05-25",{"id":285,"product_name":286,"version_count":182,"cve_count":42,"kev_count":11,"last_cve_update":287},104188,"foomatic","2011-07-29",{"id":289,"product_name":290,"version_count":11,"cve_count":42,"kev_count":11,"last_cve_update":291},104190,"fossology","2023-01-04",{"id":293,"product_name":294,"version_count":82,"cve_count":42,"kev_count":11,"last_cve_update":295},104191,"free_range_routing","2020-05-13",{"id":297,"product_name":298,"version_count":71,"cve_count":42,"kev_count":11,"last_cve_update":152},104195,"imgcrypt",{"id":300,"product_name":301,"version_count":224,"cve_count":42,"kev_count":11,"last_cve_update":302},104199,"jaeger","2020-06-19",{"id":304,"product_name":305,"version_count":76,"cve_count":42,"kev_count":11,"last_cve_update":306},104200,"knative_func","2022-11-19",{"id":308,"product_name":309,"version_count":310,"cve_count":42,"kev_count":11,"last_cve_update":311},104201,"kuadrant",22,"2025-03-21",{"id":313,"product_name":314,"version_count":315,"cve_count":42,"kev_count":11,"last_cve_update":316},104203,"kubevela",93,"2022-11-16",{"id":318,"product_name":319,"version_count":11,"cve_count":42,"kev_count":11,"last_cve_update":320},104204,"kubewarden-controller","2023-04-19",{"id":322,"product_name":323,"version_count":324,"cve_count":42,"kev_count":11,"last_cve_update":325},104205,"lima",38,"2023-05-30",{"id":327,"product_name":328,"version_count":329,"cve_count":42,"kev_count":11,"last_cve_update":330},104207,"loopback-connector-postgresql",68,"2022-08-12",{"id":332,"product_name":333,"version_count":334,"cve_count":42,"kev_count":11,"last_cve_update":335},104211,"mirage_firewall",13,"2022-12-07",{"id":337,"product_name":338,"version_count":137,"cve_count":42,"kev_count":11,"last_cve_update":339},104154,"acrn","2020-08-31",{"id":341,"product_name":342,"version_count":25,"cve_count":42,"kev_count":11,"last_cve_update":343},104213,"nats.deno","2020-09-30",{"id":345,"product_name":346,"version_count":347,"cve_count":42,"kev_count":11,"last_cve_update":343},104214,"nats.js",80,{"id":349,"product_name":350,"version_count":42,"cve_count":42,"kev_count":11,"last_cve_update":343},104216,"nats.ws",{"id":352,"product_name":353,"version_count":11,"cve_count":42,"kev_count":11,"last_cve_update":354},104218,"open_cluster_management","2023-04-24",{"id":356,"product_name":357,"version_count":182,"cve_count":42,"kev_count":11,"last_cve_update":358},104219,"open_container_initiative_distribution_specification","2021-11-17",{"id":360,"product_name":361,"version_count":77,"cve_count":42,"kev_count":11,"last_cve_update":358},104220,"open_container_initiative_image_format_specification",{"id":363,"product_name":364,"version_count":365,"cve_count":42,"kev_count":11,"last_cve_update":366},104223,"openfeature",46,"2023-04-14",{"id":368,"product_name":369,"version_count":370,"cve_count":42,"kev_count":11,"last_cve_update":371},104226,"opentelemetry-go_contrib",23,"2023-02-08",{"id":373,"product_name":374,"version_count":274,"cve_count":42,"kev_count":11,"last_cve_update":375},104227,"opentelemetry_instrumentation_for_java","2023-08-08",{"id":377,"product_name":378,"version_count":379,"cve_count":42,"kev_count":11,"last_cve_update":311},104229,"pipecd",155,{"id":381,"product_name":382,"version_count":11,"cve_count":42,"kev_count":11,"last_cve_update":383},104233,"rocket_chip_generator","2022-07-18",{"id":385,"product_name":386,"version_count":387,"cve_count":42,"kev_count":11,"last_cve_update":388},104238,"tekton_pipelines",126,"2023-07-07",{"id":390,"product_name":391,"version_count":392,"cve_count":42,"kev_count":11,"last_cve_update":393},104240,"tremor",40,"2021-09-17",{"id":395,"product_name":396,"version_count":49,"cve_count":42,"kev_count":11,"last_cve_update":397},104242,"umoci","2021-04-06",{"id":399,"product_name":400,"version_count":118,"cve_count":42,"kev_count":11,"last_cve_update":401},104246,"zowe","2023-03-01",{"id":403,"product_name":404,"version_count":405,"cve_count":11,"kev_count":11,"last_cve_update":406},104237,"strimzi",76,null,{"id":408,"product_name":409,"version_count":365,"cve_count":11,"kev_count":11,"last_cve_update":406},104244,"wasmedge",{"id":411,"product_name":412,"version_count":413,"cve_count":11,"kev_count":11,"last_cve_update":406},104197,"inspektor_gadget",72,{"id":415,"product_name":416,"version_count":417,"cve_count":11,"kev_count":11,"last_cve_update":406},104157,"argo_continuous_delivery",230,{"id":419,"product_name":420,"version_count":123,"cve_count":11,"kev_count":11,"last_cve_update":406},104192,"fulcio",{"id":422,"product_name":423,"version_count":424,"cve_count":11,"kev_count":11,"last_cve_update":406},104155,"antrea",106,{"id":426,"product_name":427,"version_count":428,"cve_count":11,"kev_count":11,"last_cve_update":406},104230,"podman_desktop",78,{"id":430,"product_name":431,"version_count":432,"cve_count":11,"kev_count":11,"last_cve_update":406},104170,"cert-manager",152,{"id":434,"product_name":435,"version_count":11,"cve_count":11,"kev_count":11,"last_cve_update":406},104225,"opentelemetry-go",{"id":437,"product_name":438,"version_count":11,"cve_count":11,"kev_count":11,"last_cve_update":406},104222,"opendaylight_l2switch",{"id":440,"product_name":441,"version_count":32,"cve_count":11,"kev_count":11,"last_cve_update":406},104208,"loxilb","Linuxfoundation is a technology vendor with 94 tracked products and 386 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[444,453,460,464,470,474,481,485,491,497],{"cveId":445,"description":446,"publishedDate":447,"cvssScore":448,"cvssVersion":449,"severity":450,"isKev":451,"epssScore":452},"CVE-2019-5736","runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to \u002Fproc\u002Fself\u002Fexe.","2019-02-11",8.6,"v3.1","High",false,0.98452,{"cveId":454,"description":455,"publishedDate":456,"cvssScore":457,"cvssVersion":449,"severity":458,"isKev":451,"epssScore":459},"CVE-2023-27584","Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation (CNCF) as an Incubating Level Project. Dragonfly uses JWT to verify user. However, the secret key for JWT, \"Secret Key\", is hard coded, which leads to authentication bypass. An attacker can perform any action as a user with admin privileges. This issue has been addressed in release version 2.0.9. All users are advised to upgrade. There are no known workarounds for this vulnerability.","2024-09-19",9.8,"Critical",0.33874,{"cveId":461,"description":462,"publishedDate":203,"cvssScore":457,"cvssVersion":449,"severity":458,"isKev":451,"epssScore":463},"CVE-2021-23450","All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.",0.30367,{"cveId":465,"description":466,"publishedDate":467,"cvssScore":468,"cvssVersion":449,"severity":450,"isKev":451,"epssScore":469},"CVE-2022-23648","containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12 where containers launched through containerd’s CRI implementation on Linux with a specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host. This may bypass any policy-based enforcement on container setup (including a Kubernetes Pod Security Policy) and expose potentially sensitive information. Kubernetes and crictl can both be configured to use containerd’s CRI implementation. This bug has been fixed in containerd 1.6.1, 1.5.10, and 1.4.12. Users should update to these versions to resolve the issue.","2022-03-03",7.5,0.27392,{"cveId":471,"description":472,"publishedDate":335,"cvssScore":468,"cvssVersion":449,"severity":450,"isKev":451,"epssScore":473},"CVE-2022-46770","qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumption and loss of forwarding) via a crafted multicast UDP packet (IP address range of 224.0.0.0 through 239.255.255.255).",0.22433,{"cveId":475,"description":476,"publishedDate":477,"cvssScore":478,"cvssVersion":449,"severity":479,"isKev":451,"epssScore":480},"CVE-2019-16097","core\u002Fapi\u002Fuser.go in Harbor 1.7.0 through 1.8.2 allows non-admin users to create admin accounts via the POST \u002Fapi\u002Fusers API, when Harbor is setup with DB as authentication backend and allow user to do self-registration. Fixed version: v1.7.6 v1.8.3. v.1.9.0. Workaround without applying the fix: configure Harbor to use non-DB authentication backend such as LDAP.","2019-09-08",6.5,"Medium",0.22273,{"cveId":482,"description":483,"publishedDate":66,"cvssScore":448,"cvssVersion":449,"severity":450,"isKev":451,"epssScore":484},"CVE-2024-21626","runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a working directory in the host filesystem namespace, allowing for a container escape by giving access to the host filesystem (\"attack 2\"). The same attack could be used by a malicious image to allow a container process to gain access to the host filesystem through runc run (\"attack 1\"). Variants of attacks 1 and 2 could be also be used to overwrite semi-arbitrary host binaries, allowing for complete container escapes (\"attack 3a\" and \"attack 3b\"). runc 1.1.12 includes patches for this issue.",0.18923,{"cveId":486,"description":487,"publishedDate":488,"cvssScore":468,"cvssVersion":489,"severity":450,"isKev":451,"epssScore":490},"CVE-2015-8327","Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.","2015-12-17","v2",0.10575,{"cveId":492,"description":493,"publishedDate":494,"cvssScore":495,"cvssVersion":449,"severity":450,"isKev":451,"epssScore":496},"CVE-2021-30465","runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.","2021-05-27",8.5,0.10245,{"cveId":498,"description":499,"publishedDate":500,"cvssScore":468,"cvssVersion":489,"severity":450,"isKev":451,"epssScore":501},"CVE-2015-3258","Heap-based buffer overflow in the WriteProlog function in filter\u002Ftexttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a small line size in a print job.","2015-07-14",0.08295,[],[504,505,506,507,508,509,510,511,512,513],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":11,"last_cve_update":27},{"id":29,"product_name":30,"version_count":31,"cve_count":32,"kev_count":11,"last_cve_update":33},{"id":35,"product_name":36,"version_count":37,"cve_count":25,"kev_count":11,"last_cve_update":38},{"id":40,"product_name":41,"version_count":42,"cve_count":43,"kev_count":11,"last_cve_update":44},{"id":46,"product_name":47,"version_count":48,"cve_count":49,"kev_count":11,"last_cve_update":50},{"id":52,"product_name":53,"version_count":54,"cve_count":49,"kev_count":11,"last_cve_update":55},{"id":57,"product_name":58,"version_count":59,"cve_count":60,"kev_count":11,"last_cve_update":61},{"id":63,"product_name":64,"version_count":65,"cve_count":60,"kev_count":11,"last_cve_update":66},{"id":68,"product_name":69,"version_count":70,"cve_count":71,"kev_count":11,"last_cve_update":72},{"title":515,"metaDescription":516,"keywords":517,"structuredData":518},"Linuxfoundation - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Linuxfoundation covering 94 products with 386 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Linuxfoundation vulnerabilities, Linuxfoundation security, Linuxfoundation CVE, Linuxfoundation threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":519,"@type":520,"name":521,"description":516,"url":522},"https:\u002F\u002Fschema.org","Organization","Linuxfoundation","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Flinuxfoundation",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":524,"apiVersion":525},"2026-10-19T16:30:40.513Z","3.0"]