From 23d7603d1a86c8f665604d1d596cad6439dc39c4 Mon Sep 17 00:00:00 2001 From: chen21019 <19357113+chen21019@users.noreply.github.com> Date: Fri, 23 Oct 2026 22:09:51 +0800 Subject: [PATCH 1/6] Fix full-severity runtime findings and enforce exact release policy --- .github/runtime-unfixed.json | 4 + ...ce-runtime-vulnerabilities.cpython-310.pyc | Bin 0 -> 2321 bytes .../enforce-runtime-vulnerabilities.py | 58 +++++++++++++ .../test_runtime_vulnerability_policy.py | 77 ++++++++++++++++++ .github/workflows/release.yml | 6 +- .github/workflows/security-release-gate.yml | 15 +++- README.md | 9 ++ package/Dockerfile | 40 ++++++++- scripts/validate | 8 +- scripts/version | 2 +- 10 files changed, 208 insertions(+), 11 deletions(-) create mode 100644 .github/runtime-unfixed.json create mode 100644 .github/scripts/__pycache__/enforce-runtime-vulnerabilities.cpython-310.pyc create mode 100644 .github/scripts/enforce-runtime-vulnerabilities.py create mode 100644 .github/scripts/test_runtime_vulnerability_policy.py diff --git a/.github/runtime-unfixed.json b/.github/runtime-unfixed.json new file mode 100644 index 0000000..964820a --- /dev/null +++ b/.github/runtime-unfixed.json @@ -0,0 +1,4 @@ +{ + "repository": "PastureStack/kubernetes-agent", + "unfixed": [] +} diff --git a/.github/scripts/__pycache__/enforce-runtime-vulnerabilities.cpython-310.pyc b/.github/scripts/__pycache__/enforce-runtime-vulnerabilities.cpython-310.pyc new file mode 100644 index 0000000000000000000000000000000000000000..ac8888fb2225557024407152bc2e5c739a0a1f1b GIT binary patch literal 2321 zcmZ8i%WoUU8K2n~mn-UF#gS##PPVb#lxgLM+yiYXekiEf>?8g)QHR7 z)y%AHGD{$ca>*e;{(v0FV-Lx(ho0JhV{+`thg@5r2fN=4DZvSe{dT_B%=h?xv+3eu zfZ(@$_~YT;0z&`R%9Lkq|dt zKta%U6)Wd)Bo8{aX6HXBB+_Ml0FSt5AtX_OBtEhDdVwZTvMCg?Z;N#;2i~4yY0tF8 zzKFzS=@3V!QXtJgM1S2F+hA*(J#Ok1c)8%^o><}zSbN%k4IsFVXyKO7Z4HO2Thr>dEnlJ%xB!1_MCX+!W8qFWc_S) zaf-zRcDgj%sc;MD9y*G8Xk0q2S@wNT*Jd!bO+9`EzW*pnlM=bC0cK=Zra1ejvDzQ| zg%9z(Mc$rTiaA?izp|qoaQv z{ZNz|sQTWvT5NO<=pfpoT(C5G0f<7Xv_nN6OEG$Pz=QxWhbaei#sGAHZ1{w;<6$T| zQ39|whRS;q@g9|2o?kD&RCr1(PWs zj;=&8j7-dgghNlIA;dR`WamJY=5wViMpP+_I{m0eRq1$^mU6P3#|n)ukvxl8Cz5(z z=My+()~-MLOnINy9&YV^syrbhnG3a?r0ulZWgQm9ZJ1)Ua>~_?8KFss zj{E~DGjaFkP33X84bnuFp}d_wCHLj%DoZ-)Ad4xSe(D(}=>}{SLNI0r?n47cYr@p# z>@I;|2N6qnNq5I@%;Qw0-R)1dAAPp{^WqM-9;(vges4P(P_?p^K=g4;$-KjA5mZ}n zmSkN0(x4K4`FTYEm&|2QM}Nk=_F}Ft7R21Kna`! zB~T7w9jR}=`xf@7A(k%Vazx}Ty8WF0SI z>y-zOZ&mOm?8E;Zc&sn1mrJ&f9lU}=BV7W^6=P?;^euSo0JN((fd4A4fX>I~vGX#p z*I>PlJ$xDauVA15It%;{x-fpbt-;i8^Y?(|zXLL=Y(UnhQ}qPCJW%ALoN-D<*LUV0 zw%1dE4^;|tGz_~DgGSvA6b_ni@6_tG`;A(AZ@0c(+qwUjt@_rJ{r2NW^{of{?MI(f z-&Cb`o1~p~TlsKbWDys%=^W}YfsvI5F?-7O1#}i?0uTn{rTe^>51`zSwFg(8@#Lx! z5z>Z@j7|kcs(GOtL)|!yh%jlYGRz}sOZr@zjAyv=b@(|nTLq1wkaSRc&H%QDDNB@_ zaR%_x=y{FY0ap3<1}Vv7`e!`^;u;VK>5f&fZ~Il>^kT{MVGTR49834b`Op6W&wIm# literal 0 HcmV?d00001 diff --git a/.github/scripts/enforce-runtime-vulnerabilities.py b/.github/scripts/enforce-runtime-vulnerabilities.py new file mode 100644 index 0000000..383356b --- /dev/null +++ b/.github/scripts/enforce-runtime-vulnerabilities.py @@ -0,0 +1,58 @@ +"""Enforce release findings; only exact, reviewed unfixed low/medium entries may pass.""" +import argparse +import json +from pathlib import Path + + +def violations(report, ledger, repository): + if (not isinstance(report, dict) or report.get("SchemaVersion") != 2 + or not isinstance(report.get("Results"), list) or not report["Results"]): + raise ValueError("missing or malformed Trivy scan results") + for result in report["Results"]: + if not isinstance(result, dict) or not isinstance(result.get("Target"), str): + raise ValueError("malformed Trivy result") + for key in ("Vulnerabilities", "Secrets"): + if key in result and result[key] is not None and not isinstance(result[key], list): + raise ValueError("malformed Trivy findings") + if ledger.get("repository") != repository: + raise ValueError("allowlist repository mismatch") + reviewed = {} + for entry in ledger.get("unfixed", []): + key = (entry["id"], entry["package"], entry["version"], entry.get("purl", "")) + if key in reviewed: + raise ValueError("duplicate reviewed finding") + if (entry.get("severity") not in ("LOW", "MEDIUM") + or entry.get("status") != "no_official_fix" + or not entry.get("officialEvidence", "").startswith("https://") + or not entry.get("reason") or not entry.get("checkedAt")): + raise ValueError("incomplete official no-fix evidence") + reviewed[key] = entry + errors = [] + for result in report.get("Results") or []: + if result.get("Secrets"): + errors.append("secret findings remain") + for finding in result.get("Vulnerabilities") or []: + severity = finding.get("Severity", "UNKNOWN") + key = (finding.get("VulnerabilityID"), finding.get("PkgName"), + finding.get("InstalledVersion"), + (finding.get("PkgIdentifier") or {}).get("PURL", "")) + entry = reviewed.get(key) + fixed = str(finding.get("FixedVersion") or "").strip() + if (severity not in ("LOW", "MEDIUM") or fixed + or entry is None or entry["severity"] != severity): + errors.append("%s %s@%s severity=%s fixed=%s" % ( + key[0], key[1], key[2], severity, fixed or "none")) + return errors + + +if __name__ == "__main__": + parser = argparse.ArgumentParser() + parser.add_argument("report") + parser.add_argument("ledger") + parser.add_argument("--repository", required=True) + args = parser.parse_args() + failures = violations(json.loads(Path(args.report).read_text()), + json.loads(Path(args.ledger).read_text()), args.repository) + if failures: + raise SystemExit("Release vulnerability policy failed:\n" + "\n".join(failures)) + print("RELEASE_VULNERABILITY_POLICY_OK") diff --git a/.github/scripts/test_runtime_vulnerability_policy.py b/.github/scripts/test_runtime_vulnerability_policy.py new file mode 100644 index 0000000..f1683fc --- /dev/null +++ b/.github/scripts/test_runtime_vulnerability_policy.py @@ -0,0 +1,77 @@ +import copy +import importlib.util +import pathlib +import unittest + +PATH = pathlib.Path(__file__).with_name('enforce-runtime-vulnerabilities.py') +SPEC = importlib.util.spec_from_file_location('gate', PATH) +GATE = importlib.util.module_from_spec(SPEC) +SPEC.loader.exec_module(GATE) +REPO = 'PastureStack/network-policy-manager' + + +class RuntimePolicy(unittest.TestCase): + def setUp(self): + self.finding = {'VulnerabilityID': 'TEST-1', 'PkgName': 'lib', 'InstalledVersion': '1', + 'Severity': 'MEDIUM', 'FixedVersion': '', + 'PkgIdentifier': {'PURL': 'pkg:test/lib@1'}} + self.report = {'SchemaVersion': 2, 'Results': [{'Target': 'fixture', 'Vulnerabilities': [self.finding]}]} + self.ledger = {'repository': REPO, 'unfixed': [{'id': 'TEST-1', 'package': 'lib', + 'version': '1', 'severity': 'MEDIUM', 'purl': 'pkg:test/lib@1', + 'status': 'no_official_fix', 'officialEvidence': 'https://fixture.invalid/advisory', + 'reason': 'Test fixture only', 'checkedAt': '2026-10-23'}]} + + def test_exact_reviewed_unfixed_medium_passes(self): + self.assertEqual(GATE.violations(self.report, self.ledger, REPO), []) + + def test_clean_scan_passes(self): + self.assertEqual(GATE.violations({'SchemaVersion': 2, 'Results': [{'Target': 'fixture'}]}, + {'repository': REPO, 'unfixed': []}, REPO), []) + + def test_missing_or_malformed_scan_fails_closed(self): + for report in ({}, {'Results': []}, {'SchemaVersion': 2, 'Results': []}, + {'SchemaVersion': 2, 'Results': [{}]}, + {'SchemaVersion': 2, 'Results': [{'Target': 'fixture', 'Vulnerabilities': {}}]}): + with self.assertRaises(ValueError): + GATE.violations(report, self.ledger, REPO) + + def test_unregistered_medium_blocks(self): + self.ledger['unfixed'] = [] + self.assertTrue(GATE.violations(self.report, self.ledger, REPO)) + + def test_fixed_medium_blocks(self): + self.finding['FixedVersion'] = '2' + self.assertTrue(GATE.violations(self.report, self.ledger, REPO)) + + def test_fixed_low_blocks(self): + self.finding['Severity'] = 'LOW' + self.ledger['unfixed'][0]['severity'] = 'LOW' + self.finding['FixedVersion'] = '2' + self.assertTrue(GATE.violations(self.report, self.ledger, REPO)) + + def test_high_critical_and_unknown_always_block(self): + for severity in ('HIGH', 'CRITICAL', 'UNKNOWN'): + self.finding['Severity'] = severity + self.assertTrue(GATE.violations(self.report, self.ledger, REPO)) + + def test_version_or_purl_drift_blocks(self): + for key in ('version', 'purl'): + ledger = copy.deepcopy(self.ledger) + ledger['unfixed'][0][key] = 'different' + self.assertTrue(GATE.violations(self.report, ledger, REPO)) + + def test_secrets_always_block(self): + self.report['Results'][0]['Secrets'] = [{'RuleID': 'test'}] + self.assertTrue(GATE.violations(self.report, self.ledger, REPO)) + + def test_repository_drift_fails_closed(self): + with self.assertRaises(ValueError): + GATE.violations(self.report, self.ledger, 'another/repo') + + def test_incomplete_evidence_fails_closed(self): + del self.ledger['unfixed'][0]['checkedAt'] + with self.assertRaises(ValueError): + GATE.violations(self.report, self.ledger, REPO) + +if __name__ == '__main__': + unittest.main() diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 24d858f..08e7238 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -17,11 +17,11 @@ jobs: env: GH_TOKEN: ${{ github.token }} PRODUCER_RUN: ${{ inputs.producer_run }} - RELEASE_TAG: v0.7.3 + RELEASE_TAG: v0.7.4 steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: - ref: v0.7.3 + ref: v0.7.4 fetch-depth: 0 persist-credentials: false - name: Verify immutable tag and successful producer @@ -47,7 +47,7 @@ jobs: gzip -dc dist/security-runtime/images.tar.gz | docker load printf '%s' "$GH_TOKEN" | docker login ghcr.io -u "$GITHUB_ACTOR" --password-stdin trap 'docker logout ghcr.io >/dev/null 2>&1 || true' EXIT - source_image='pasturestack/kubernetes-agent:v0.7.3' + source_image='pasturestack/kubernetes-agent:v0.7.4' remote_image="ghcr.io/pasturestack/kubernetes-agent:$RELEASE_TAG" if docker manifest inspect "$remote_image" >/dev/null 2>"$RUNNER_TEMP/manifest-error"; then echo "Refusing to replace an existing immutable image tag: $remote_image" >&2; exit 1 diff --git a/.github/workflows/security-release-gate.yml b/.github/workflows/security-release-gate.yml index 6fe7548..8ce0796 100644 --- a/.github/workflows/security-release-gate.yml +++ b/.github/workflows/security-release-gate.yml @@ -19,9 +19,9 @@ jobs: runs-on: ubuntu-24.04 timeout-minutes: 120 env: - CANDIDATE_VERSION: 0.7.3 - CANDIDATE_TAG: v0.7.3 - IMAGE: pasturestack/kubernetes-agent:v0.7.3 + CANDIDATE_VERSION: 0.7.4 + CANDIDATE_TAG: v0.7.4 + IMAGE: pasturestack/kubernetes-agent:v0.7.4 DAPPER_IMAGE: pasturestack-kubernetes-agent-dapper:security-gate KUBERNETES_SERVER_VERSION: v1.36.4 KUBE_APISERVER_SHA256: 90939ee07af61ac3701c665647f9ce27f2f988f5c7fff406aa5794fd3e6328a6 @@ -242,7 +242,7 @@ jobs: "$TRIVY_IMAGE" image --cache-dir /root/.cache/trivy \ --skip-db-update --offline-scan "$@" } - run_image_scan --scanners vuln,secret \ + run_image_scan --scanners vuln,secret --list-all-pkgs \ --format json --output /evidence/runtime-scan.json "$IMAGE" run_image_scan --scanners vuln,secret \ --format json --output /evidence/dapper-scan.json "$DAPPER_IMAGE" @@ -276,6 +276,13 @@ jobs: '{source:{critical:$source_critical,high:$source_high,secrets:$source_secrets},runtime:{critical:$runtime_critical,high:$runtime_high,secrets:$runtime_secrets},build_environment:{raw:{critical:$dapper_critical,high:$dapper_high},applicable:{critical:$dapper_applicable_critical,high:$dapper_applicable_high},vex:"security/dapper.openvex.json"}}' \ > dist/security-counts.json + - name: Enforce full runtime vulnerability policy + run: | + python3 .github/scripts/test_runtime_vulnerability_policy.py + python3 .github/scripts/enforce-runtime-vulnerabilities.py \ + dist/runtime-scan.json .github/runtime-unfixed.json \ + --repository PastureStack/kubernetes-agent + - name: Record evidence checksums if: always() shell: bash diff --git a/README.md b/README.md index 74d824b..d901325 100644 --- a/README.md +++ b/README.md @@ -51,3 +51,12 @@ The inherited project remains licensed under [Apache License 2.0](LICENSE). Copy ## October 2026 security maintenance Maintained Go builds select the patched Go 1.27.3 compiler without raising the existing Go language requirement. Ubuntu build/runtime stages apply the checksum-pinned `ca-certificates 20260816ubuntu0.26.04.1` security package after their frozen APT baseline; the final trust store and installed version are verified. Release artifacts must pass the repository's existing checks before publication. + +## Full-severity security rebuild candidate + +The next compatible release candidate is **v0.7.4**, not yet published. It retains the existing Go binary/API contract and shell-free, non-root runtime, and overlays the official Debian 12 tzdata 2026c-0+deb12u1 and ca-certificates 20250419~deb12u2 payloads. Package metadata is updated from the same verified packages; revoked roots are removed rather than merged back. + +The full-severity runtime gate rejects every finding with an official fix, +including LOW, MEDIUM and UNKNOWN. Only exact reviewed LOW/MEDIUM no-fix entries +may pass. Existing v0.7.3 remains published for provenance, but is not the fully +patched candidate. diff --git a/package/Dockerfile b/package/Dockerfile index de3f5e0..b5e9382 100644 --- a/package/Dockerfile +++ b/package/Dockerfile @@ -1,4 +1,42 @@ -FROM gcr.io/distroless/static-debian12@sha256:4b2a093ef4649bccd586625090a3c668b254cfe180dee54f4c94f3e9bd7e381e +# syntax=docker/dockerfile:1.7 +FROM gcr.io/distroless/static-debian12@sha256:4b2a093ef4649bccd586625090a3c668b254cfe180dee54f4c94f3e9bd7e381e AS original-runtime +FROM ubuntu:26.04@sha256:2260313b31c8c011cd2eebe728008efac1b3982be73eb71348ea2648d2c0e09b AS security-rootfs +COPY --from=original-runtime / /rootfs/ +ADD --checksum=sha256:c6bdac9aa03e89a112c8d900cb60321889cfec535e0397b74383bd10c8b3cb44 https://security.debian.org/debian-security/pool/updates/main/t/tzdata/tzdata_2026c-0+deb12u1_all.deb /tmp/tzdata.deb +ADD --checksum=sha256:b9f76b5271a7ac373fd5e7e1b5b826a71ddd702b42a0d104955ecb1acfffc94b https://security.debian.org/debian-security/pool/updates/main/c/ca-certificates/ca-certificates_20250419~deb12u2_all.deb /tmp/ca-certificates.deb +# Update actual package payloads and their installed metadata together. +# Only this build-owned rootfs is changed; no shell/package manager enters the runtime. +RUN set -eu; \ + test "$(dpkg-deb -f /tmp/tzdata.deb Version)" = '2026c-0+deb12u1'; \ + test "$(dpkg-deb -f /tmp/ca-certificates.deb Version)" = '20250419~deb12u2'; \ + rm -rf /rootfs/etc/ssl/certs /rootfs/usr/share/ca-certificates; \ + for package in tzdata ca-certificates; do \ + test "$(dpkg-deb -f "/tmp/$package.deb" Package)" = "$package"; \ + status_file=$(grep -l "^Package: $package$" /rootfs/var/lib/dpkg/status.d/*); \ + test "$(printf '%s\n' "$status_file" | wc -l)" -eq 1; \ + test -f "$status_file"; \ + dpkg-deb --extract "/tmp/$package.deb" /rootfs; \ + { dpkg-deb --field "/tmp/$package.deb"; printf 'Status: install ok installed\n'; } > "$status_file"; \ + done; \ + mkdir -p /rootfs/etc/ssl/certs; \ + find /rootfs/usr/share/ca-certificates -type f -name '*.crt' | LC_ALL=C sort | \ + while IFS= read -r certificate; do \ + sed -e '$a\' "$certificate"; \ + name=$(basename "$certificate" .crt); \ + ln -s "${certificate#/rootfs}" "/rootfs/etc/ssl/certs/$name.pem"; \ + done > /rootfs/etc/ssl/certs/ca-certificates.crt; \ + test -s /rootfs/etc/ssl/certs/ca-certificates.crt; \ + test ! -e /rootfs/usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_G3.crt; \ + test ! -e /rootfs/usr/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt; \ + test ! -e /rootfs/bin/sh; \ + test ! -e /rootfs/usr/bin/apt-get + +FROM scratch +COPY --from=security-rootfs /rootfs/ / +# Preserve original-runtime configuration (verified from its immutable config). +ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin \ + SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt +WORKDIR / ARG IMAGE_VERSION=dev ARG SOURCE_REVISION=unknown diff --git a/scripts/validate b/scripts/validate index 890d8ff..d28c637 100755 --- a/scripts/validate +++ b/scripts/validate @@ -79,11 +79,15 @@ if grep -R --exclude=validate -E 'GO_TEST_RACE=false|go test .*\$\{test_flags\[@ echo "KUBERNETES_AGENT_RACE_GATE_CAN_BE_DISABLED" >&2 exit 1 fi -if grep -Eq '^FROM (ubuntu|alpine|debian):' package/Dockerfile || \ - grep -Eq 'apt-get|apk add|yum install|ENTRYPOINT \["/.*sh"' package/Dockerfile; then +# Build-only extraction stages may use packaging tools; the final runtime may not. +final_stage=$(awk '/^FROM / { stage=$0; body="" } { body=body $0 "\n" } END { print body }' package/Dockerfile) +if ! printf '%s\n' "$final_stage" | grep -Fxq 'FROM scratch' || \ + printf '%s\n' "$final_stage" | grep -Eq '^FROM (ubuntu|alpine|debian):|^RUN |ENTRYPOINT \["/.*sh"'; then echo "KUBERNETES_AGENT_RUNTIME_PACKAGE_MANAGER_OR_SHELL_PRESENT" >&2 exit 1 fi +grep -Fq 'COPY --from=security-rootfs /rootfs/ /' package/Dockerfile + if grep -R -E 'ghcr\.io/[^/]+/[^:[:space:]]+@sha256:' README.md SECURITY.md COMPATIBILITY.md package scripts; then echo "KUBERNETES_AGENT_USER_VISIBLE_IMAGE_DIGEST_PRESENT" >&2 exit 1 diff --git a/scripts/version b/scripts/version index 36c223a..0acf59e 100755 --- a/scripts/version +++ b/scripts/version @@ -10,7 +10,7 @@ if [ -z "${candidate}" ]; then candidate=0.0.0 fi if ! [[ "${candidate}" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then - echo "VERSION_OVERRIDE must be a numeric semantic version such as 0.7.3" >&2 + echo "VERSION_OVERRIDE must be a numeric semantic version such as 0.7.4" >&2 return 1 2>/dev/null || exit 1 fi VERSION=${candidate} From 1c657dfdde6b913ebf829ec8493647f9903754fc Mon Sep 17 00:00:00 2001 From: chen21019 <19357113+chen21019@users.noreply.github.com> Date: Fri, 23 Oct 2026 22:10:12 +0800 Subject: [PATCH 2/6] Exclude generated Python bytecode from release source --- ...force-runtime-vulnerabilities.cpython-310.pyc | Bin 2321 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 .github/scripts/__pycache__/enforce-runtime-vulnerabilities.cpython-310.pyc diff --git a/.github/scripts/__pycache__/enforce-runtime-vulnerabilities.cpython-310.pyc b/.github/scripts/__pycache__/enforce-runtime-vulnerabilities.cpython-310.pyc deleted file mode 100644 index ac8888fb2225557024407152bc2e5c739a0a1f1b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 2321 zcmZ8i%WoUU8K2n~mn-UF#gS##PPVb#lxgLM+yiYXekiEf>?8g)QHR7 z)y%AHGD{$ca>*e;{(v0FV-Lx(ho0JhV{+`thg@5r2fN=4DZvSe{dT_B%=h?xv+3eu zfZ(@$_~YT;0z&`R%9Lkq|dt zKta%U6)Wd)Bo8{aX6HXBB+_Ml0FSt5AtX_OBtEhDdVwZTvMCg?Z;N#;2i~4yY0tF8 zzKFzS=@3V!QXtJgM1S2F+hA*(J#Ok1c)8%^o><}zSbN%k4IsFVXyKO7Z4HO2Thr>dEnlJ%xB!1_MCX+!W8qFWc_S) zaf-zRcDgj%sc;MD9y*G8Xk0q2S@wNT*Jd!bO+9`EzW*pnlM=bC0cK=Zra1ejvDzQ| zg%9z(Mc$rTiaA?izp|qoaQv z{ZNz|sQTWvT5NO<=pfpoT(C5G0f<7Xv_nN6OEG$Pz=QxWhbaei#sGAHZ1{w;<6$T| zQ39|whRS;q@g9|2o?kD&RCr1(PWs zj;=&8j7-dgghNlIA;dR`WamJY=5wViMpP+_I{m0eRq1$^mU6P3#|n)ukvxl8Cz5(z z=My+()~-MLOnINy9&YV^syrbhnG3a?r0ulZWgQm9ZJ1)Ua>~_?8KFss zj{E~DGjaFkP33X84bnuFp}d_wCHLj%DoZ-)Ad4xSe(D(}=>}{SLNI0r?n47cYr@p# z>@I;|2N6qnNq5I@%;Qw0-R)1dAAPp{^WqM-9;(vges4P(P_?p^K=g4;$-KjA5mZ}n zmSkN0(x4K4`FTYEm&|2QM}Nk=_F}Ft7R21Kna`! zB~T7w9jR}=`xf@7A(k%Vazx}Ty8WF0SI z>y-zOZ&mOm?8E;Zc&sn1mrJ&f9lU}=BV7W^6=P?;^euSo0JN((fd4A4fX>I~vGX#p z*I>PlJ$xDauVA15It%;{x-fpbt-;i8^Y?(|zXLL=Y(UnhQ}qPCJW%ALoN-D<*LUV0 zw%1dE4^;|tGz_~DgGSvA6b_ni@6_tG`;A(AZ@0c(+qwUjt@_rJ{r2NW^{of{?MI(f z-&Cb`o1~p~TlsKbWDys%=^W}YfsvI5F?-7O1#}i?0uTn{rTe^>51`zSwFg(8@#Lx! z5z>Z@j7|kcs(GOtL)|!yh%jlYGRz}sOZr@zjAyv=b@(|nTLq1wkaSRc&H%QDDNB@_ zaR%_x=y{FY0ap3<1}Vv7`e!`^;u;VK>5f&fZ~Il>^kT{MVGTR49834b`Op6W&wIm# From 5f24f716953de63a11b7ddc53fbcd1d7b339a6a5 Mon Sep 17 00:00:00 2001 From: chen21019 <19357113+chen21019@users.noreply.github.com> Date: Fri, 23 Oct 2026 22:22:53 +0800 Subject: [PATCH 3/6] Record official CA payload metadata in distroless rootfs --- package/Dockerfile | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/package/Dockerfile b/package/Dockerfile index b5e9382..32d2f62 100644 --- a/package/Dockerfile +++ b/package/Dockerfile @@ -6,13 +6,17 @@ ADD --checksum=sha256:c6bdac9aa03e89a112c8d900cb60321889cfec535e0397b74383bd10c8 ADD --checksum=sha256:b9f76b5271a7ac373fd5e7e1b5b826a71ddd702b42a0d104955ecb1acfffc94b https://security.debian.org/debian-security/pool/updates/main/c/ca-certificates/ca-certificates_20250419~deb12u2_all.deb /tmp/ca-certificates.deb # Update actual package payloads and their installed metadata together. # Only this build-owned rootfs is changed; no shell/package manager enters the runtime. -RUN set -eu; \ +RUN set -eux; \ test "$(dpkg-deb -f /tmp/tzdata.deb Version)" = '2026c-0+deb12u1'; \ test "$(dpkg-deb -f /tmp/ca-certificates.deb Version)" = '20250419~deb12u2'; \ rm -rf /rootfs/etc/ssl/certs /rootfs/usr/share/ca-certificates; \ for package in tzdata ca-certificates; do \ test "$(dpkg-deb -f "/tmp/$package.deb" Package)" = "$package"; \ - status_file=$(grep -l "^Package: $package$" /rootfs/var/lib/dpkg/status.d/*); \ + status_file=$(grep -l "^Package: $package$" /rootfs/var/lib/dpkg/status.d/* || true); \ + if [ "$package" = ca-certificates ] && [ -z "$status_file" ]; then \ + status_file=/rootfs/var/lib/dpkg/status.d/ca-certificates; \ + touch "$status_file"; \ + fi; \ test "$(printf '%s\n' "$status_file" | wc -l)" -eq 1; \ test -f "$status_file"; \ dpkg-deb --extract "/tmp/$package.deb" /rootfs; \ From c03b24bb79bd9506e039b1182bee8ccdfd256e0d Mon Sep 17 00:00:00 2001 From: chen21019 <19357113+chen21019@users.noreply.github.com> Date: Fri, 23 Oct 2026 22:31:44 +0800 Subject: [PATCH 4/6] Constrain policy input to stdin and repository-owned ledger --- .github/scripts/enforce-runtime-vulnerabilities.py | 7 +++---- .github/workflows/security-release-gate.yml | 4 +--- 2 files changed, 4 insertions(+), 7 deletions(-) diff --git a/.github/scripts/enforce-runtime-vulnerabilities.py b/.github/scripts/enforce-runtime-vulnerabilities.py index 383356b..b952eee 100644 --- a/.github/scripts/enforce-runtime-vulnerabilities.py +++ b/.github/scripts/enforce-runtime-vulnerabilities.py @@ -1,6 +1,7 @@ """Enforce release findings; only exact, reviewed unfixed low/medium entries may pass.""" import argparse import json +import sys from pathlib import Path @@ -47,12 +48,10 @@ def violations(report, ledger, repository): if __name__ == "__main__": parser = argparse.ArgumentParser() - parser.add_argument("report") - parser.add_argument("ledger") parser.add_argument("--repository", required=True) args = parser.parse_args() - failures = violations(json.loads(Path(args.report).read_text()), - json.loads(Path(args.ledger).read_text()), args.repository) + failures = violations(json.load(sys.stdin), + json.loads((Path(__file__).resolve().parents[1] / "runtime-unfixed.json").read_text(encoding="utf-8")), args.repository) if failures: raise SystemExit("Release vulnerability policy failed:\n" + "\n".join(failures)) print("RELEASE_VULNERABILITY_POLICY_OK") diff --git a/.github/workflows/security-release-gate.yml b/.github/workflows/security-release-gate.yml index 8ce0796..dd8707b 100644 --- a/.github/workflows/security-release-gate.yml +++ b/.github/workflows/security-release-gate.yml @@ -279,9 +279,7 @@ jobs: - name: Enforce full runtime vulnerability policy run: | python3 .github/scripts/test_runtime_vulnerability_policy.py - python3 .github/scripts/enforce-runtime-vulnerabilities.py \ - dist/runtime-scan.json .github/runtime-unfixed.json \ - --repository PastureStack/kubernetes-agent + python3 .github/scripts/enforce-runtime-vulnerabilities.py --repository PastureStack/kubernetes-agent < dist/runtime-scan.json - name: Record evidence checksums if: always() From aff784b23a004adefbbe1773d40cf7a04f17db76 Mon Sep 17 00:00:00 2001 From: chen21019 <19357113+chen21019@users.noreply.github.com> Date: Fri, 23 Oct 2026 22:49:35 +0800 Subject: [PATCH 5/6] Enforce complete builder vulnerability policy --- .github/dapper-headers.json | 3162 +++++++++++++++++ .github/dapper-unfixed.json | 709 ++++ .../scripts/check-builder-header-boundary.sh | 28 + .../enforce-runtime-vulnerabilities.py | 106 +- .../test_builder_vulnerability_policy.py | 70 + .github/workflows/security-release-gate.yml | 5 +- README.md | 3 + 7 files changed, 4080 insertions(+), 3 deletions(-) create mode 100644 .github/dapper-headers.json create mode 100644 .github/dapper-unfixed.json create mode 100644 .github/scripts/check-builder-header-boundary.sh create mode 100644 .github/scripts/test_builder_vulnerability_policy.py diff --git a/.github/dapper-headers.json b/.github/dapper-headers.json new file mode 100644 index 0000000..0f12998 --- /dev/null +++ b/.github/dapper-headers.json @@ -0,0 +1,3162 @@ +{ + "repository": "PastureStack/kubernetes-agent", + "package": "linux-libc-dev", + "version": "7.0.0-38.38", + "purl": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04", + "justification": "vulnerable_code_not_present", + "reason": "Exact user-space API headers only. The gate checks actual package payload paths and absence of kernel images/modules. Any fixed or new finding is rejected before this scope can apply.", + "checkedAt": "2026-10-23", + "ids": [ + "CVE-2013-7445", + "CVE-2015-7837", + "CVE-2016-8660", + "CVE-2017-0537", + "CVE-2017-13165", + "CVE-2017-13693", + "CVE-2018-1121", + "CVE-2018-12928", + "CVE-2018-12929", + "CVE-2018-12930", + "CVE-2018-12931", + "CVE-2018-17977", + "CVE-2019-14899", + "CVE-2019-15213", + "CVE-2019-15794", + "CVE-2019-19378", + "CVE-2019-19814", + "CVE-2019-20426", + "CVE-2020-14304", + "CVE-2020-35501", + "CVE-2021-26934", + "CVE-2021-3714", + "CVE-2021-3864", + "CVE-2022-0400", + "CVE-2022-0480", + "CVE-2022-1247", + "CVE-2022-25836", + "CVE-2022-2961", + "CVE-2022-3238", + "CVE-2022-41848", + "CVE-2022-44034", + "CVE-2022-4543", + "CVE-2022-45885", + "CVE-2022-48846", + "CVE-2022-48929", + "CVE-2022-49940", + "CVE-2022-50090", + "CVE-2022-50230", + "CVE-2022-50232", + "CVE-2022-50240", + "CVE-2022-50380", + "CVE-2022-50551", + "CVE-2023-0030", + "CVE-2023-0160", + "CVE-2023-1193", + "CVE-2023-26242", + "CVE-2023-31082", + "CVE-2023-33053", + "CVE-2023-52879", + "CVE-2023-53642", + "CVE-2023-54105", + "CVE-2023-54187", + "CVE-2023-54190", + "CVE-2023-6238", + "CVE-2024-0564", + "CVE-2024-35895", + "CVE-2024-35995", + "CVE-2024-53216", + "CVE-2024-56568", + "CVE-2025-40190", + "CVE-2026-100070", + "CVE-2026-100071", + "CVE-2026-100072", + "CVE-2026-100073", + "CVE-2026-100074", + "CVE-2026-100075", + "CVE-2026-100076", + "CVE-2026-100077", + "CVE-2026-100078", + "CVE-2026-100079", + "CVE-2026-46055", + "CVE-2026-64190", + "CVE-2026-68086", + "CVE-2026-68102", + "CVE-2026-68103", + "CVE-2026-68305", + "CVE-2026-68451", + "CVE-2026-68452", + "CVE-2026-68453", + "CVE-2026-72094", + "CVE-2026-72198", + "CVE-2026-72200", + "CVE-2026-72203", + "CVE-2026-72344", + "CVE-2026-72404", + "CVE-2026-72497", + "CVE-2026-74342", + "CVE-2026-74440", + "CVE-2026-74441", + "CVE-2026-74442", + "CVE-2026-74443", + "CVE-2026-74444", + "CVE-2026-74445", + "CVE-2026-74446", + "CVE-2026-74447", + "CVE-2026-74448", + "CVE-2026-74449", + "CVE-2026-74450", + "CVE-2026-74451", + "CVE-2026-74452", + "CVE-2026-74453", + "CVE-2026-74454", + "CVE-2026-74455", + "CVE-2026-74456", + "CVE-2026-74457", + "CVE-2026-74458", + "CVE-2026-74459", + "CVE-2026-74460", + "CVE-2026-74461", + "CVE-2026-74462", + "CVE-2026-74463", + "CVE-2026-74464", + "CVE-2026-74465", + "CVE-2026-74466", + "CVE-2026-74467", + "CVE-2026-74468", + "CVE-2026-74469", + "CVE-2026-74470", + "CVE-2026-74471", + "CVE-2026-74472", + "CVE-2026-74473", + "CVE-2026-74474", + "CVE-2026-74475", + "CVE-2026-74476", + "CVE-2026-74477", + "CVE-2026-74478", + "CVE-2026-74479", + "CVE-2026-74480", + "CVE-2026-74481", + "CVE-2026-74482", + "CVE-2026-74483", + "CVE-2026-74484", + "CVE-2026-74485", + "CVE-2026-74486", + "CVE-2026-74487", + "CVE-2026-74488", + "CVE-2026-74490", + "CVE-2026-74491", + "CVE-2026-74492", + "CVE-2026-74493", + "CVE-2026-74494", + "CVE-2026-74495", + "CVE-2026-74496", + "CVE-2026-74497", + "CVE-2026-74498", + "CVE-2026-74499", + "CVE-2026-74500", + "CVE-2026-74501", + "CVE-2026-74502", + "CVE-2026-74503", + "CVE-2026-74504", + "CVE-2026-74505", + "CVE-2026-74506", + "CVE-2026-74507", + "CVE-2026-74508", + "CVE-2026-74509", + "CVE-2026-74510", + "CVE-2026-74512", + "CVE-2026-74513", + "CVE-2026-74514", + "CVE-2026-74515", + "CVE-2026-74516", + "CVE-2026-74517", + "CVE-2026-74518", + "CVE-2026-74519", + "CVE-2026-74520", + "CVE-2026-74521", + "CVE-2026-74522", + "CVE-2026-74523", + "CVE-2026-74524", + "CVE-2026-74525", + "CVE-2026-74526", + "CVE-2026-74527", + "CVE-2026-74528", + "CVE-2026-74529", + "CVE-2026-74530", + "CVE-2026-74531", + "CVE-2026-74532", + "CVE-2026-74533", + "CVE-2026-74534", + "CVE-2026-74535", + "CVE-2026-74536", + "CVE-2026-74537", + "CVE-2026-74538", + "CVE-2026-74539", + "CVE-2026-74540", + "CVE-2026-74541", + "CVE-2026-74542", + "CVE-2026-74543", + "CVE-2026-74544", + "CVE-2026-74545", + "CVE-2026-74546", + "CVE-2026-74547", + "CVE-2026-74548", + "CVE-2026-74549", + "CVE-2026-74550", + "CVE-2026-74551", + "CVE-2026-74552", + "CVE-2026-74553", + "CVE-2026-74554", + "CVE-2026-74555", + "CVE-2026-74556", + "CVE-2026-74557", + "CVE-2026-74558", + "CVE-2026-74559", + "CVE-2026-74560", + "CVE-2026-74561", + "CVE-2026-74562", + "CVE-2026-74563", + "CVE-2026-74564", + "CVE-2026-74565", + "CVE-2026-74566", + "CVE-2026-74567", + "CVE-2026-74568", + "CVE-2026-74569", + "CVE-2026-74571", + "CVE-2026-74572", + "CVE-2026-74573", + "CVE-2026-74574", + "CVE-2026-74575", + "CVE-2026-74576", + "CVE-2026-74577", + "CVE-2026-74578", + "CVE-2026-74579", + "CVE-2026-74580", + "CVE-2026-74581", + "CVE-2026-74582", + "CVE-2026-74583", + "CVE-2026-74585", + "CVE-2026-74586", + "CVE-2026-74587", + "CVE-2026-74588", + "CVE-2026-74589", + "CVE-2026-74590", + "CVE-2026-74591", + "CVE-2026-74592", + "CVE-2026-74593", + "CVE-2026-74594", + "CVE-2026-74595", + "CVE-2026-74596", + "CVE-2026-74597", + "CVE-2026-74598", + "CVE-2026-74599", + "CVE-2026-74600", + "CVE-2026-74601", + "CVE-2026-74602", + "CVE-2026-74603", + "CVE-2026-74604", + "CVE-2026-74605", + "CVE-2026-74606", + "CVE-2026-74607", + "CVE-2026-74608", + "CVE-2026-74609", + "CVE-2026-74610", + "CVE-2026-74611", + "CVE-2026-74612", + "CVE-2026-74613", + "CVE-2026-74614", + "CVE-2026-74615", + "CVE-2026-74616", + "CVE-2026-74617", + "CVE-2026-74618", + "CVE-2026-74619", + "CVE-2026-74620", + "CVE-2026-74621", + "CVE-2026-74622", + "CVE-2026-74623", + "CVE-2026-74624", + "CVE-2026-74625", + "CVE-2026-74626", + "CVE-2026-74627", + "CVE-2026-74628", + "CVE-2026-74629", + "CVE-2026-74630", + "CVE-2026-74631", + "CVE-2026-74632", + "CVE-2026-74633", + "CVE-2026-74634", + "CVE-2026-74635", + "CVE-2026-74636", + "CVE-2026-74637", + "CVE-2026-74638", + "CVE-2026-74639", + "CVE-2026-74640", + "CVE-2026-74641", + "CVE-2026-74643", + "CVE-2026-74644", + "CVE-2026-74645", + "CVE-2026-74646", + "CVE-2026-74647", + "CVE-2026-74648", + "CVE-2026-74649", + "CVE-2026-74650", + "CVE-2026-74651", + "CVE-2026-74652", + "CVE-2026-74653", + "CVE-2026-74654", + "CVE-2026-74655", + "CVE-2026-74656", + "CVE-2026-74657", + "CVE-2026-74658", + "CVE-2026-74659", + "CVE-2026-74660", + "CVE-2026-74661", + "CVE-2026-74662", + "CVE-2026-74663", + "CVE-2026-74664", + "CVE-2026-74665", + "CVE-2026-74666", + "CVE-2026-74667", + "CVE-2026-74668", + "CVE-2026-74669", + "CVE-2026-74670", + "CVE-2026-74671", + "CVE-2026-74672", + "CVE-2026-74673", + "CVE-2026-74674", + "CVE-2026-74675", + "CVE-2026-74676", + "CVE-2026-74677", + "CVE-2026-74678", + "CVE-2026-74679", + "CVE-2026-74680", + "CVE-2026-74681", + "CVE-2026-74682", + "CVE-2026-74683", + "CVE-2026-74684", + "CVE-2026-74685", + "CVE-2026-74686", + "CVE-2026-74687", + "CVE-2026-74688", + "CVE-2026-74689", + "CVE-2026-74690", + "CVE-2026-74691", + "CVE-2026-74692", + "CVE-2026-74693", + "CVE-2026-74694", + "CVE-2026-74695", + "CVE-2026-74696", + "CVE-2026-74697", + "CVE-2026-74698", + "CVE-2026-74699", + "CVE-2026-74700", + "CVE-2026-74701", + "CVE-2026-74702", + "CVE-2026-74703", + "CVE-2026-74704", + "CVE-2026-74705", + "CVE-2026-74706", + "CVE-2026-74707", + "CVE-2026-74708", + "CVE-2026-74709", + "CVE-2026-74710", + "CVE-2026-74711", + "CVE-2026-74712", + "CVE-2026-74713", + "CVE-2026-74714", + "CVE-2026-74715", + "CVE-2026-74716", + "CVE-2026-74717", + "CVE-2026-74718", + "CVE-2026-74719", + "CVE-2026-74720", + "CVE-2026-74721", + "CVE-2026-74722", + "CVE-2026-74723", + "CVE-2026-74724", + "CVE-2026-74725", + "CVE-2026-74726", + "CVE-2026-74727", + "CVE-2026-74728", + "CVE-2026-74729", + "CVE-2026-74730", + "CVE-2026-74733", + "CVE-2026-74734", + "CVE-2026-74735", + "CVE-2026-74736", + "CVE-2026-74737", + "CVE-2026-74738", + "CVE-2026-74739", + "CVE-2026-74740", + "CVE-2026-74741", + "CVE-2026-74742", + "CVE-2026-74743", + "CVE-2026-74744", + "CVE-2026-74745", + "CVE-2026-74746", + "CVE-2026-74747", + "CVE-2026-74748", + "CVE-2026-74750", + "CVE-2026-74752", + "CVE-2026-74753", + "CVE-2026-74754", + "CVE-2026-80519", + "CVE-2026-80520", + "CVE-2026-80521", + "CVE-2026-80522", + "CVE-2026-80523", + "CVE-2026-80524", + "CVE-2026-80525", + "CVE-2026-80526", + "CVE-2026-80527", + "CVE-2026-80528", + "CVE-2026-80529", + "CVE-2026-80530", + "CVE-2026-80531", + "CVE-2026-80532", + "CVE-2026-80533", + "CVE-2026-80534", + "CVE-2026-80535", + "CVE-2026-80536", + "CVE-2026-80537", + "CVE-2026-80538", + "CVE-2026-80539", + "CVE-2026-80540", + "CVE-2026-80541", + "CVE-2026-80542", + "CVE-2026-80547", + "CVE-2026-80548", + "CVE-2026-80549", + "CVE-2026-80550", + "CVE-2026-80551", + "CVE-2026-80552", + "CVE-2026-80553", + "CVE-2026-80554", + "CVE-2026-80555", + "CVE-2026-80556", + "CVE-2026-80557", + "CVE-2026-80558", + "CVE-2026-80559", + "CVE-2026-80560", + "CVE-2026-80561", + "CVE-2026-80562", + "CVE-2026-80563", + "CVE-2026-80564", + "CVE-2026-80565", + "CVE-2026-80566", + "CVE-2026-80567", + "CVE-2026-80568", + "CVE-2026-80569", + "CVE-2026-80570", + "CVE-2026-80571", + "CVE-2026-80572", + "CVE-2026-80573", + "CVE-2026-80574", + "CVE-2026-80575", + "CVE-2026-80576", + "CVE-2026-80577", + "CVE-2026-80578", + "CVE-2026-80579", + "CVE-2026-80580", + "CVE-2026-80581", + "CVE-2026-80582", + "CVE-2026-80583", + "CVE-2026-80584", + "CVE-2026-80585", + "CVE-2026-80586", + "CVE-2026-80587", + "CVE-2026-80588", + "CVE-2026-80589", + "CVE-2026-80590", + "CVE-2026-80608", + "CVE-2026-80678", + "CVE-2026-80679", + "CVE-2026-80680", + "CVE-2026-80681", + "CVE-2026-80683", + "CVE-2026-80684", + "CVE-2026-80685", + "CVE-2026-80686", + "CVE-2026-80687", + "CVE-2026-80688", + "CVE-2026-80689", + "CVE-2026-80690", + "CVE-2026-80691", + "CVE-2026-80692", + "CVE-2026-80693", + "CVE-2026-80694", + "CVE-2026-80695", + "CVE-2026-80696", + "CVE-2026-80697", + "CVE-2026-80698", + "CVE-2026-80699", + "CVE-2026-80700", + "CVE-2026-80701", + "CVE-2026-80702", + "CVE-2026-80703", + "CVE-2026-80704", + "CVE-2026-80705", + "CVE-2026-80706", + "CVE-2026-80707", + "CVE-2026-80708", + "CVE-2026-80709", + "CVE-2026-80710", + "CVE-2026-80711", + "CVE-2026-80712", + "CVE-2026-80713", + "CVE-2026-80714", + "CVE-2026-80715", + "CVE-2026-80716", + "CVE-2026-80717", + "CVE-2026-80718", + "CVE-2026-80720", + "CVE-2026-80721", + "CVE-2026-80722", + "CVE-2026-80723", + "CVE-2026-80724", + "CVE-2026-80727", + "CVE-2026-80729", + "CVE-2026-80730", + "CVE-2026-80731", + "CVE-2026-80732", + "CVE-2026-80733", + "CVE-2026-80734", + "CVE-2026-80735", + "CVE-2026-80736", + "CVE-2026-80737", + "CVE-2026-80738", + "CVE-2026-80739", + "CVE-2026-80740", + "CVE-2026-80741", + "CVE-2026-80742", + "CVE-2026-80743", + "CVE-2026-80744", + "CVE-2026-80745", + "CVE-2026-80747", + "CVE-2026-80748", + "CVE-2026-80749", + "CVE-2026-80750", + "CVE-2026-80751", + "CVE-2026-80752", + "CVE-2026-80753", + "CVE-2026-80754", + "CVE-2026-80755", + "CVE-2026-80756", + "CVE-2026-80757", + "CVE-2026-80758", + "CVE-2026-80759", + "CVE-2026-80760", + "CVE-2026-80761", + "CVE-2026-80762", + "CVE-2026-80763", + "CVE-2026-80764", + "CVE-2026-80765", + "CVE-2026-80766", + "CVE-2026-80767", + "CVE-2026-80768", + "CVE-2026-80769", + "CVE-2026-80770", + "CVE-2026-80771", + "CVE-2026-80772", + "CVE-2026-80774", + "CVE-2026-80775", + "CVE-2026-80776", + "CVE-2026-80777", + "CVE-2026-80778", + "CVE-2026-80779", + "CVE-2026-80780", + "CVE-2026-80781", + "CVE-2026-80782", + "CVE-2026-80783", + "CVE-2026-80784", + "CVE-2026-80785", + "CVE-2026-80786", + "CVE-2026-80787", + "CVE-2026-80788", + "CVE-2026-80789", + "CVE-2026-80790", + "CVE-2026-80791", + "CVE-2026-80792", + "CVE-2026-80793", + "CVE-2026-80794", + "CVE-2026-80795", + "CVE-2026-80796", + "CVE-2026-80797", + "CVE-2026-80798", + "CVE-2026-80799", + "CVE-2026-80800", + "CVE-2026-80801", + "CVE-2026-80802", + "CVE-2026-80803", + "CVE-2026-80804", + "CVE-2026-80805", + "CVE-2026-80806", + "CVE-2026-80807", + "CVE-2026-80808", + "CVE-2026-80809", + "CVE-2026-80810", + "CVE-2026-80811", + "CVE-2026-80812", + "CVE-2026-80813", + "CVE-2026-80814", + "CVE-2026-80815", + "CVE-2026-80816", + "CVE-2026-80817", + "CVE-2026-80818", + "CVE-2026-80819", + "CVE-2026-80820", + "CVE-2026-80821", + "CVE-2026-80822", + "CVE-2026-80823", + "CVE-2026-80824", + "CVE-2026-80825", + "CVE-2026-80826", + "CVE-2026-80827", + "CVE-2026-80828", + "CVE-2026-80829", + "CVE-2026-80830", + "CVE-2026-80831", + "CVE-2026-80832", + "CVE-2026-80833", + "CVE-2026-80834", + "CVE-2026-80835", + "CVE-2026-80836", + "CVE-2026-80837", + "CVE-2026-80838", + "CVE-2026-80839", + "CVE-2026-80840", + "CVE-2026-80841", + "CVE-2026-80842", + "CVE-2026-80843", + "CVE-2026-80844", + "CVE-2026-80845", + "CVE-2026-80846", + "CVE-2026-80847", + "CVE-2026-80848", + "CVE-2026-80849", + "CVE-2026-80850", + "CVE-2026-80851", + "CVE-2026-80852", + "CVE-2026-80854", + "CVE-2026-80855", + "CVE-2026-80856", + "CVE-2026-80857", + "CVE-2026-80858", + "CVE-2026-80859", + "CVE-2026-80860", + "CVE-2026-80861", + "CVE-2026-80862", + "CVE-2026-80863", + "CVE-2026-80864", + "CVE-2026-80887", + "CVE-2026-80888", + "CVE-2026-80889", + "CVE-2026-80890", + "CVE-2026-80891", + "CVE-2026-80892", + "CVE-2026-80893", + "CVE-2026-80894", + "CVE-2026-80895", + "CVE-2026-80896", + "CVE-2026-80897", + "CVE-2026-80898", + "CVE-2026-80899", + "CVE-2026-80900", + "CVE-2026-80901", + "CVE-2026-80902", + "CVE-2026-80903", + "CVE-2026-80904", + "CVE-2026-80905", + "CVE-2026-80906", + "CVE-2026-80907", + "CVE-2026-80908", + "CVE-2026-80909", + "CVE-2026-80910", + "CVE-2026-80911", + "CVE-2026-80912", + "CVE-2026-80913", + "CVE-2026-80914", + "CVE-2026-80915", + "CVE-2026-80916", + "CVE-2026-80917", + "CVE-2026-80918", + "CVE-2026-80920", + "CVE-2026-80921", + "CVE-2026-80922", + "CVE-2026-80923", + "CVE-2026-80924", + "CVE-2026-80925", + "CVE-2026-80926", + "CVE-2026-80927", + "CVE-2026-80928", + "CVE-2026-80929", + "CVE-2026-80930", + "CVE-2026-80931", + "CVE-2026-80932", + "CVE-2026-80933", + "CVE-2026-80934", + "CVE-2026-80935", + "CVE-2026-80936", + "CVE-2026-80937", + "CVE-2026-80938", + "CVE-2026-80939", + "CVE-2026-80940", + "CVE-2026-80941", + "CVE-2026-80942", + "CVE-2026-80943", + "CVE-2026-80944", + "CVE-2026-80945", + "CVE-2026-80946", + "CVE-2026-80947", + "CVE-2026-80948", + "CVE-2026-80949", + "CVE-2026-80950", + "CVE-2026-80951", + "CVE-2026-80952", + "CVE-2026-80953", + "CVE-2026-80954", + "CVE-2026-80955", + "CVE-2026-80956", + "CVE-2026-80957", + "CVE-2026-80958", + "CVE-2026-80959", + "CVE-2026-80960", + "CVE-2026-80961", + "CVE-2026-80962", + "CVE-2026-80963", + "CVE-2026-80964", + "CVE-2026-80965", + "CVE-2026-80966", + "CVE-2026-80967", + "CVE-2026-80968", + "CVE-2026-80969", + "CVE-2026-80970", + "CVE-2026-80971", + "CVE-2026-80972", + "CVE-2026-80973", + "CVE-2026-80974", + "CVE-2026-80975", + "CVE-2026-80976", + "CVE-2026-80977", + "CVE-2026-80978", + "CVE-2026-80979", + "CVE-2026-80980", + "CVE-2026-80981", + "CVE-2026-80982", + "CVE-2026-80983", + "CVE-2026-80984", + "CVE-2026-80985", + "CVE-2026-80986", + "CVE-2026-80987", + "CVE-2026-80988", + "CVE-2026-80989", + "CVE-2026-80990", + "CVE-2026-80991", + "CVE-2026-80992", + "CVE-2026-80993", + "CVE-2026-80994", + "CVE-2026-80996", + "CVE-2026-80997", + "CVE-2026-80999", + "CVE-2026-81000", + "CVE-2026-81001", + "CVE-2026-81002", + "CVE-2026-81003", + "CVE-2026-81004", + "CVE-2026-81005", + "CVE-2026-81006", + "CVE-2026-81007", + "CVE-2026-81008", + "CVE-2026-81009", + "CVE-2026-81010", + "CVE-2026-81011", + "CVE-2026-81012", + "CVE-2026-81013", + "CVE-2026-81014", + "CVE-2026-81015", + "CVE-2026-81016", + "CVE-2026-81017", + "CVE-2026-81018", + "CVE-2026-89437", + "CVE-2026-89438", + "CVE-2026-89439", + "CVE-2026-89440", + "CVE-2026-89441", + "CVE-2026-89442", + "CVE-2026-89443", + "CVE-2026-89444", + "CVE-2026-89445", + "CVE-2026-89446", + "CVE-2026-89447", + "CVE-2026-89448", + "CVE-2026-89449", + "CVE-2026-89450", + "CVE-2026-89451", + "CVE-2026-89452", + "CVE-2026-89453", + "CVE-2026-89454", + "CVE-2026-89455", + "CVE-2026-89456", + "CVE-2026-89457", + "CVE-2026-89458", + "CVE-2026-89460", + "CVE-2026-89461", + "CVE-2026-89462", + "CVE-2026-89463", + "CVE-2026-89464", + "CVE-2026-89465", + "CVE-2026-89466", + "CVE-2026-89467", + "CVE-2026-89468", + "CVE-2026-89469", + "CVE-2026-89470", + "CVE-2026-89471", + "CVE-2026-89472", + "CVE-2026-89473", + "CVE-2026-89474", + "CVE-2026-89475", + "CVE-2026-89476", + "CVE-2026-89477", + "CVE-2026-89478", + "CVE-2026-89479", + "CVE-2026-89480", + "CVE-2026-89481", + "CVE-2026-89482", + "CVE-2026-89483", + "CVE-2026-89484", + "CVE-2026-89485", + "CVE-2026-89486", + "CVE-2026-89487", + "CVE-2026-89488", + "CVE-2026-89489", + "CVE-2026-89490", + "CVE-2026-89491", + "CVE-2026-89492", + "CVE-2026-89493", + "CVE-2026-89494", + "CVE-2026-89495", + "CVE-2026-89496", + "CVE-2026-89497", + "CVE-2026-89498", + "CVE-2026-89500", + "CVE-2026-89501", + "CVE-2026-89502", + "CVE-2026-89503", + "CVE-2026-89504", + "CVE-2026-89506", + "CVE-2026-89507", + "CVE-2026-89508", + "CVE-2026-89509", + "CVE-2026-89510", + "CVE-2026-89511", + "CVE-2026-89512", + "CVE-2026-89513", + "CVE-2026-89514", + "CVE-2026-89515", + "CVE-2026-89517", + "CVE-2026-89518", + "CVE-2026-89519", + "CVE-2026-89520", + "CVE-2026-89521", + "CVE-2026-89522", + "CVE-2026-89523", + "CVE-2026-89524", + "CVE-2026-89525", + "CVE-2026-89526", + "CVE-2026-89527", + "CVE-2026-89528", + "CVE-2026-89529", + "CVE-2026-89530", + "CVE-2026-89531", + "CVE-2026-89532", + "CVE-2026-89533", + "CVE-2026-89534", + "CVE-2026-89535", + "CVE-2026-89536", + "CVE-2026-89537", + "CVE-2026-89538", + "CVE-2026-89539", + "CVE-2026-89540", + "CVE-2026-89541", + "CVE-2026-89542", + "CVE-2026-89543", + "CVE-2026-89544", + "CVE-2026-89545", + "CVE-2026-89546", + "CVE-2026-89547", + "CVE-2026-89548", + "CVE-2026-89549", + "CVE-2026-89550", + "CVE-2026-89551", + "CVE-2026-89552", + "CVE-2026-89553", + "CVE-2026-89554", + "CVE-2026-89555", + "CVE-2026-89556", + "CVE-2026-89557", + "CVE-2026-89558", + "CVE-2026-89559", + "CVE-2026-89560", + "CVE-2026-89561", + "CVE-2026-89562", + "CVE-2026-89563", + "CVE-2026-89564", + "CVE-2026-89565", + "CVE-2026-89566", + "CVE-2026-89567", + "CVE-2026-89568", + "CVE-2026-89569", + "CVE-2026-89570", + "CVE-2026-89571", + "CVE-2026-89572", + "CVE-2026-89573", + "CVE-2026-89574", + "CVE-2026-89575", + "CVE-2026-89576", + "CVE-2026-89577", + "CVE-2026-89578", + "CVE-2026-89579", + "CVE-2026-89580", + "CVE-2026-89581", + "CVE-2026-89582", + "CVE-2026-89583", + "CVE-2026-89584", + "CVE-2026-89585", + "CVE-2026-89586", + "CVE-2026-89587", + "CVE-2026-89588", + "CVE-2026-89589", + "CVE-2026-89590", + "CVE-2026-89591", + "CVE-2026-89592", + "CVE-2026-89593", + "CVE-2026-89594", + "CVE-2026-89595", + "CVE-2026-89596", + "CVE-2026-89597", + "CVE-2026-89598", + "CVE-2026-89599", + "CVE-2026-89600", + "CVE-2026-89601", + "CVE-2026-89602", + "CVE-2026-89604", + "CVE-2026-89605", + "CVE-2026-89606", + "CVE-2026-89607", + "CVE-2026-89608", + "CVE-2026-89609", + "CVE-2026-89615", + "CVE-2026-89616", + "CVE-2026-89617", + "CVE-2026-89618", + "CVE-2026-89619", + "CVE-2026-89620", + "CVE-2026-89621", + "CVE-2026-89622", + "CVE-2026-89623", + "CVE-2026-89624", + "CVE-2026-89625", + "CVE-2026-89626", + "CVE-2026-89627", + "CVE-2026-89628", + "CVE-2026-89629", + "CVE-2026-89630", + "CVE-2026-89631", + "CVE-2026-89632", + "CVE-2026-89633", + "CVE-2026-89634", + "CVE-2026-89636", + "CVE-2026-89637", + "CVE-2026-89638", + "CVE-2026-89640", + "CVE-2026-89641", + "CVE-2026-89642", + "CVE-2026-89643", + "CVE-2026-89644", + "CVE-2026-89645", + "CVE-2026-89646", + "CVE-2026-89647", + "CVE-2026-89648", + "CVE-2026-89649", + "CVE-2026-89650", + "CVE-2026-89651", + "CVE-2026-89652", + "CVE-2026-89653", + "CVE-2026-89654", + "CVE-2026-89655", + "CVE-2026-89656", + "CVE-2026-89657", + "CVE-2026-89658", + "CVE-2026-89659", + "CVE-2026-89660", + "CVE-2026-89661", + "CVE-2026-89662", + "CVE-2026-89663", + "CVE-2026-89664", + "CVE-2026-89665", + "CVE-2026-89666", + "CVE-2026-89667", + "CVE-2026-89668", + "CVE-2026-89669", + "CVE-2026-89670", + "CVE-2026-89671", + "CVE-2026-89672", + "CVE-2026-89673", + "CVE-2026-89674", + "CVE-2026-89675", + "CVE-2026-89676", + "CVE-2026-89677", + "CVE-2026-89678", + "CVE-2026-89679", + "CVE-2026-89680", + "CVE-2026-89682", + "CVE-2026-89683", + "CVE-2026-89684", + "CVE-2026-89685", + "CVE-2026-89686", + "CVE-2026-89687", + "CVE-2026-89688", + "CVE-2026-89689", + "CVE-2026-89690", + "CVE-2026-89691", + "CVE-2026-89692", + "CVE-2026-89693", + "CVE-2026-89694", + "CVE-2026-89695", + "CVE-2026-89696", + "CVE-2026-89697", + "CVE-2026-89698", + "CVE-2026-89699", + "CVE-2026-89700", + "CVE-2026-89701", + "CVE-2026-89702", + "CVE-2026-89703", + "CVE-2026-89704", + "CVE-2026-89705", + "CVE-2026-89706", + "CVE-2026-89707", + "CVE-2026-89708", + "CVE-2026-89709", + "CVE-2026-89710", + "CVE-2026-89711", + "CVE-2026-89712", + "CVE-2026-89713", + "CVE-2026-89714", + "CVE-2026-89715", + "CVE-2026-89716", + "CVE-2026-89717", + "CVE-2026-89718", + "CVE-2026-89719", + "CVE-2026-89720", + "CVE-2026-89721", + "CVE-2026-89722", + "CVE-2026-89723", + "CVE-2026-89724", + "CVE-2026-89725", + "CVE-2026-89726", + "CVE-2026-89727", + "CVE-2026-89728", + "CVE-2026-89729", + "CVE-2026-89730", + "CVE-2026-89731", + "CVE-2026-89732", + "CVE-2026-89733", + "CVE-2026-89734", + "CVE-2026-89735", + "CVE-2026-89736", + "CVE-2026-89737", + "CVE-2026-89738", + "CVE-2026-89739", + "CVE-2026-89740", + "CVE-2026-89741", + "CVE-2026-89742", + "CVE-2026-89743", + "CVE-2026-89744", + "CVE-2026-89745", + "CVE-2026-89746", + "CVE-2026-89747", + "CVE-2026-89749", + "CVE-2026-89750", + "CVE-2026-89751", + "CVE-2026-89752", + "CVE-2026-89753", + "CVE-2026-89754", + "CVE-2026-89755", + "CVE-2026-89756", + "CVE-2026-89757", + "CVE-2026-89758", + "CVE-2026-89759", + "CVE-2026-89761", + "CVE-2026-89762", + "CVE-2026-89763", + "CVE-2026-89764", + "CVE-2026-89765", + "CVE-2026-89766", + "CVE-2026-89767", + "CVE-2026-89768", + "CVE-2026-89769", + "CVE-2026-89771", + "CVE-2026-89772", + "CVE-2026-89775", + "CVE-2026-89776", + "CVE-2026-89777", + "CVE-2026-89778", + "CVE-2026-89779", + "CVE-2026-89780", + "CVE-2026-89781", + "CVE-2026-89782", + "CVE-2026-89783", + "CVE-2026-89784", + "CVE-2026-89785", + "CVE-2026-89786", + "CVE-2026-89787", + "CVE-2026-89788", + "CVE-2026-89789", + "CVE-2026-89790", + "CVE-2026-89791", + "CVE-2026-89792", + "CVE-2026-89793", + "CVE-2026-89794", + "CVE-2026-89795", + "CVE-2026-89796", + "CVE-2026-89797", + "CVE-2026-89798", + "CVE-2026-89799", + "CVE-2026-89800", + "CVE-2026-89801", + "CVE-2026-89802", + "CVE-2026-89803", + "CVE-2026-89804", + "CVE-2026-89805", + "CVE-2026-89806", + "CVE-2026-89807", + "CVE-2026-89808", + "CVE-2026-89809", + "CVE-2026-89810", + "CVE-2026-89811", + "CVE-2026-89812", + "CVE-2026-89813", + "CVE-2026-89814", + "CVE-2026-89815", + "CVE-2026-89816", + "CVE-2026-89817", + "CVE-2026-89818", + "CVE-2026-89819", + "CVE-2026-89820", + "CVE-2026-89821", + "CVE-2026-89822", + "CVE-2026-89823", + "CVE-2026-89824", + "CVE-2026-89825", + "CVE-2026-89826", + "CVE-2026-89827", + "CVE-2026-89828", + "CVE-2026-89829", + "CVE-2026-89830", + "CVE-2026-89831", + "CVE-2026-89832", + "CVE-2026-89833", + "CVE-2026-89834", + "CVE-2026-89835", + "CVE-2026-89836", + "CVE-2026-89837", + "CVE-2026-89838", + "CVE-2026-89839", + "CVE-2026-89840", + "CVE-2026-89841", + "CVE-2026-89842", + "CVE-2026-89843", + "CVE-2026-89844", + "CVE-2026-89845", + "CVE-2026-89846", + "CVE-2026-89847", + "CVE-2026-89848", + "CVE-2026-89849", + "CVE-2026-89850", + "CVE-2026-89851", + "CVE-2026-89852", + "CVE-2026-89853", + "CVE-2026-89854", + "CVE-2026-89855", + "CVE-2026-89856", + "CVE-2026-89857", + "CVE-2026-89858", + "CVE-2026-89859", + "CVE-2026-89860", + "CVE-2026-89861", + "CVE-2026-89862", + "CVE-2026-89863", + "CVE-2026-89864", + "CVE-2026-89865", + "CVE-2026-89866", + "CVE-2026-89867", + "CVE-2026-89868", + "CVE-2026-89869", + "CVE-2026-89870", + "CVE-2026-89871", + "CVE-2026-89872", + "CVE-2026-89873", + "CVE-2026-89874", + "CVE-2026-89875", + "CVE-2026-89876", + "CVE-2026-89877", + "CVE-2026-89878", + "CVE-2026-89879", + "CVE-2026-89880", + "CVE-2026-89881", + "CVE-2026-89882", + "CVE-2026-89883", + "CVE-2026-89884", + "CVE-2026-89885", + "CVE-2026-89886", + "CVE-2026-89887", + "CVE-2026-89888", + "CVE-2026-89889", + "CVE-2026-89890", + "CVE-2026-89891", + "CVE-2026-89892", + "CVE-2026-89893", + "CVE-2026-89894", + "CVE-2026-89895", + "CVE-2026-89896", + "CVE-2026-89897", + "CVE-2026-89898", + "CVE-2026-89899", + "CVE-2026-89901", + "CVE-2026-89902", + "CVE-2026-89903", + "CVE-2026-89904", + "CVE-2026-89905", + "CVE-2026-89906", + "CVE-2026-89907", + "CVE-2026-89908", + "CVE-2026-89909", + "CVE-2026-89911", + "CVE-2026-89912", + "CVE-2026-89913", + "CVE-2026-89914", + "CVE-2026-89915", + "CVE-2026-89916", + "CVE-2026-89917", + "CVE-2026-89918", + "CVE-2026-89919", + "CVE-2026-89920", + "CVE-2026-89921", + "CVE-2026-89922", + "CVE-2026-89923", + "CVE-2026-89924", + "CVE-2026-89925", + "CVE-2026-89926", + "CVE-2026-89927", + "CVE-2026-89928", + "CVE-2026-89929", + "CVE-2026-89930", + "CVE-2026-89931", + "CVE-2026-89932", + "CVE-2026-89933", + "CVE-2026-89934", + "CVE-2026-89935", + "CVE-2026-89936", + "CVE-2026-89937", + "CVE-2026-89938", + "CVE-2026-89939", + "CVE-2026-89940", + "CVE-2026-89941", + "CVE-2026-89942", + "CVE-2026-89944", + "CVE-2026-89945", + "CVE-2026-89946", + "CVE-2026-89947", + "CVE-2026-89948", + "CVE-2026-89949", + "CVE-2026-89950", + "CVE-2026-89951", + "CVE-2026-89952", + "CVE-2026-89953", + "CVE-2026-89954", + "CVE-2026-89955", + "CVE-2026-89956", + "CVE-2026-89957", + "CVE-2026-89958", + "CVE-2026-89959", + "CVE-2026-89960", + "CVE-2026-89961", + "CVE-2026-89962", + "CVE-2026-89963", + "CVE-2026-89964", + "CVE-2026-89965", + "CVE-2026-89966", + "CVE-2026-89967", + "CVE-2026-89968", + "CVE-2026-89969", + "CVE-2026-89970", + "CVE-2026-89971", + "CVE-2026-89972", + "CVE-2026-89973", + "CVE-2026-89974", + "CVE-2026-89975", + "CVE-2026-89976", + "CVE-2026-89977", + "CVE-2026-89978", + "CVE-2026-89979", + "CVE-2026-89981", + "CVE-2026-89982", + "CVE-2026-89983", + "CVE-2026-89984", + "CVE-2026-89986", + "CVE-2026-89987", + "CVE-2026-89988", + "CVE-2026-89989", + "CVE-2026-89990", + "CVE-2026-89991", + "CVE-2026-89992", + "CVE-2026-89993", + "CVE-2026-89994", + "CVE-2026-89995", + "CVE-2026-89996", + "CVE-2026-89997", + "CVE-2026-89998", + "CVE-2026-89999", + "CVE-2026-90000", + "CVE-2026-90001", + "CVE-2026-90002", + "CVE-2026-90003", + "CVE-2026-90005", + "CVE-2026-90006", + "CVE-2026-90007", + "CVE-2026-90008", + "CVE-2026-90011", + "CVE-2026-90012", + "CVE-2026-90013", + "CVE-2026-90014", + "CVE-2026-90015", + "CVE-2026-90016", + "CVE-2026-90017", + "CVE-2026-90018", + "CVE-2026-90019", + "CVE-2026-90020", + "CVE-2026-90021", + "CVE-2026-90022", + "CVE-2026-90023", + "CVE-2026-90024", + "CVE-2026-90025", + "CVE-2026-90026", + "CVE-2026-90027", + "CVE-2026-90028", + "CVE-2026-90029", + "CVE-2026-90030", + "CVE-2026-90031", + "CVE-2026-90032", + "CVE-2026-90033", + "CVE-2026-90034", + "CVE-2026-90035", + "CVE-2026-90036", + "CVE-2026-90037", + "CVE-2026-90039", + "CVE-2026-90040", + "CVE-2026-90041", + "CVE-2026-90042", + "CVE-2026-90043", + "CVE-2026-90044", + "CVE-2026-90045", + "CVE-2026-90046", + "CVE-2026-90047", + "CVE-2026-90048", + "CVE-2026-90049", + "CVE-2026-90051", + "CVE-2026-90053", + "CVE-2026-90054", + "CVE-2026-90055", + "CVE-2026-90056", + "CVE-2026-90057", + "CVE-2026-90058", + "CVE-2026-90059", + "CVE-2026-90060", + "CVE-2026-90061", + "CVE-2026-90062", + "CVE-2026-90063", + "CVE-2026-90065", + "CVE-2026-90066", + "CVE-2026-90067", + "CVE-2026-90068", + "CVE-2026-90069", + "CVE-2026-90070", + "CVE-2026-90071", + "CVE-2026-90072", + "CVE-2026-90073", + "CVE-2026-90074", + "CVE-2026-90075", + "CVE-2026-90076", + "CVE-2026-90077", + "CVE-2026-90078", + "CVE-2026-90079", + "CVE-2026-90080", + "CVE-2026-90081", + "CVE-2026-90082", + "CVE-2026-90083", + "CVE-2026-90084", + "CVE-2026-90085", + "CVE-2026-90086", + "CVE-2026-90087", + "CVE-2026-90088", + "CVE-2026-90089", + "CVE-2026-90090", + "CVE-2026-90091", + "CVE-2026-90092", + "CVE-2026-90093", + "CVE-2026-90094", + "CVE-2026-90095", + "CVE-2026-90097", + "CVE-2026-90098", + "CVE-2026-90099", + "CVE-2026-90100", + "CVE-2026-90101", + "CVE-2026-90102", + "CVE-2026-90103", + "CVE-2026-90104", + "CVE-2026-90105", + "CVE-2026-90106", + "CVE-2026-90107", + "CVE-2026-90108", + "CVE-2026-90109", + "CVE-2026-90110", + "CVE-2026-90111", + "CVE-2026-90112", + "CVE-2026-90113", + "CVE-2026-90114", + "CVE-2026-90115", + "CVE-2026-90116", + "CVE-2026-90119", + "CVE-2026-90120", + "CVE-2026-90121", + "CVE-2026-90122", + "CVE-2026-90124", + "CVE-2026-90125", + "CVE-2026-90126", + "CVE-2026-90127", + "CVE-2026-90128", + "CVE-2026-90129", + "CVE-2026-90130", + "CVE-2026-90135", + "CVE-2026-90136", + "CVE-2026-90137", + "CVE-2026-90138", + "CVE-2026-90139", + "CVE-2026-90140", + "CVE-2026-90141", + "CVE-2026-90142", + "CVE-2026-90143", + "CVE-2026-90144", + "CVE-2026-90145", + "CVE-2026-90146", + "CVE-2026-90147", + "CVE-2026-90148", + "CVE-2026-90149", + "CVE-2026-90150", + "CVE-2026-90151", + "CVE-2026-90152", + "CVE-2026-90153", + "CVE-2026-90154", + "CVE-2026-90155", + "CVE-2026-90156", + "CVE-2026-90157", + "CVE-2026-90158", + "CVE-2026-90159", + "CVE-2026-90160", + "CVE-2026-90161", + "CVE-2026-90162", + "CVE-2026-90163", + "CVE-2026-90164", + "CVE-2026-90165", + "CVE-2026-90166", + "CVE-2026-90167", + "CVE-2026-90169", + "CVE-2026-90170", + "CVE-2026-90174", + "CVE-2026-90175", + "CVE-2026-90176", + "CVE-2026-90177", + "CVE-2026-90178", + "CVE-2026-90179", + "CVE-2026-90180", + "CVE-2026-90182", + "CVE-2026-90183", + "CVE-2026-90184", + "CVE-2026-90185", + "CVE-2026-90186", + "CVE-2026-90187", + "CVE-2026-90188", + "CVE-2026-90189", + "CVE-2026-90190", + "CVE-2026-90191", + "CVE-2026-90192", + "CVE-2026-90193", + "CVE-2026-90194", + "CVE-2026-90195", + "CVE-2026-90196", + "CVE-2026-90197", + "CVE-2026-90198", + "CVE-2026-90199", + "CVE-2026-90200", + "CVE-2026-90201", + "CVE-2026-90202", + "CVE-2026-90203", + "CVE-2026-90204", + "CVE-2026-90205", + "CVE-2026-90206", + "CVE-2026-90207", + "CVE-2026-90208", + "CVE-2026-90209", + "CVE-2026-90211", + "CVE-2026-90212", + "CVE-2026-90213", + "CVE-2026-90214", + "CVE-2026-90215", + "CVE-2026-90216", + "CVE-2026-90217", + "CVE-2026-90218", + "CVE-2026-90219", + "CVE-2026-90220", + "CVE-2026-90221", + "CVE-2026-90222", + "CVE-2026-90223", + "CVE-2026-90224", + "CVE-2026-90225", + "CVE-2026-90226", + "CVE-2026-90227", + "CVE-2026-90228", + "CVE-2026-90229", + "CVE-2026-90230", + "CVE-2026-90231", + "CVE-2026-90232", + "CVE-2026-90233", + "CVE-2026-90234", + "CVE-2026-90235", + "CVE-2026-90237", + "CVE-2026-90240", + "CVE-2026-90241", + "CVE-2026-90242", + "CVE-2026-90243", + "CVE-2026-90244", + "CVE-2026-90245", + "CVE-2026-90246", + "CVE-2026-90247", + "CVE-2026-90248", + "CVE-2026-90249", + "CVE-2026-90250", + "CVE-2026-90251", + "CVE-2026-90252", + "CVE-2026-90253", + "CVE-2026-90254", + "CVE-2026-90255", + "CVE-2026-90256", + "CVE-2026-90257", + "CVE-2026-90258", + "CVE-2026-90259", + "CVE-2026-90260", + "CVE-2026-90261", + "CVE-2026-90262", + "CVE-2026-90263", + "CVE-2026-90264", + "CVE-2026-90265", + "CVE-2026-90267", + "CVE-2026-90269", + "CVE-2026-90270", + "CVE-2026-90271", + "CVE-2026-90272", + "CVE-2026-90273", + "CVE-2026-90274", + "CVE-2026-90275", + "CVE-2026-90276", + "CVE-2026-90277", + "CVE-2026-90278", + "CVE-2026-90279", + "CVE-2026-90280", + "CVE-2026-90281", + "CVE-2026-90282", + "CVE-2026-90283", + "CVE-2026-90284", + "CVE-2026-90285", + "CVE-2026-90286", + "CVE-2026-90287", + "CVE-2026-90288", + "CVE-2026-90289", + "CVE-2026-90290", + "CVE-2026-90291", + "CVE-2026-90292", + "CVE-2026-90293", + "CVE-2026-90294", + "CVE-2026-90295", + "CVE-2026-90296", + "CVE-2026-90297", + "CVE-2026-90298", + "CVE-2026-90300", + "CVE-2026-90301", + "CVE-2026-90302", + "CVE-2026-90303", + "CVE-2026-90306", + "CVE-2026-90307", + "CVE-2026-90308", + "CVE-2026-90309", + "CVE-2026-90311", + "CVE-2026-90312", + "CVE-2026-90313", + "CVE-2026-90314", + "CVE-2026-90315", + "CVE-2026-90316", + "CVE-2026-90317", + "CVE-2026-90318", + "CVE-2026-90319", + "CVE-2026-90320", + "CVE-2026-90321", + "CVE-2026-90322", + "CVE-2026-90323", + "CVE-2026-90324", + "CVE-2026-90325", + "CVE-2026-90326", + "CVE-2026-90327", + "CVE-2026-90328", + "CVE-2026-90329", + "CVE-2026-90330", + "CVE-2026-90331", + "CVE-2026-90332", + "CVE-2026-90333", + "CVE-2026-90334", + "CVE-2026-90335", + "CVE-2026-90336", + "CVE-2026-90337", + "CVE-2026-90338", + "CVE-2026-90341", + "CVE-2026-90342", + "CVE-2026-90343", + "CVE-2026-90344", + "CVE-2026-90345", + "CVE-2026-90346", + "CVE-2026-90347", + "CVE-2026-90348", + "CVE-2026-90349", + "CVE-2026-90350", + "CVE-2026-90351", + "CVE-2026-90352", + "CVE-2026-90353", + "CVE-2026-90354", + "CVE-2026-90355", + "CVE-2026-90356", + "CVE-2026-90357", + "CVE-2026-90358", + "CVE-2026-90359", + "CVE-2026-90360", + "CVE-2026-90361", + "CVE-2026-90362", + "CVE-2026-90363", + "CVE-2026-90364", + "CVE-2026-90365", + "CVE-2026-90366", + "CVE-2026-90367", + "CVE-2026-90368", + "CVE-2026-90369", + "CVE-2026-90370", + "CVE-2026-90371", + "CVE-2026-90372", + "CVE-2026-90373", + "CVE-2026-90374", + "CVE-2026-90375", + "CVE-2026-90376", + "CVE-2026-90377", + "CVE-2026-90378", + "CVE-2026-90379", + "CVE-2026-90380", + "CVE-2026-90381", + "CVE-2026-90382", + "CVE-2026-90383", + "CVE-2026-90384", + "CVE-2026-90385", + "CVE-2026-90386", + "CVE-2026-90387", + "CVE-2026-90388", + "CVE-2026-90389", + "CVE-2026-90390", + "CVE-2026-90391", + "CVE-2026-90392", + "CVE-2026-90393", + "CVE-2026-90394", + "CVE-2026-90395", + "CVE-2026-90396", + "CVE-2026-90397", + "CVE-2026-90398", + "CVE-2026-90399", + "CVE-2026-90400", + "CVE-2026-90401", + "CVE-2026-90402", + "CVE-2026-90403", + "CVE-2026-90404", + "CVE-2026-90406", + "CVE-2026-90407", + "CVE-2026-90408", + "CVE-2026-90409", + "CVE-2026-90410", + "CVE-2026-90411", + "CVE-2026-90412", + "CVE-2026-90413", + "CVE-2026-90414", + "CVE-2026-90415", + "CVE-2026-90416", + "CVE-2026-90417", + "CVE-2026-90418", + "CVE-2026-90419", + "CVE-2026-90420", + "CVE-2026-90421", + "CVE-2026-90422", + "CVE-2026-90423", + "CVE-2026-90424", + "CVE-2026-90425", + "CVE-2026-90426", + "CVE-2026-90427", + "CVE-2026-90428", + "CVE-2026-90429", + "CVE-2026-90430", + "CVE-2026-90431", + "CVE-2026-90433", + "CVE-2026-90434", + "CVE-2026-90435", + "CVE-2026-92476", + "CVE-2026-92477", + "CVE-2026-92479", + "CVE-2026-92480", + "CVE-2026-92481", + "CVE-2026-92482", + "CVE-2026-92483", + "CVE-2026-92484", + "CVE-2026-92485", + "CVE-2026-92486", + "CVE-2026-92488", + "CVE-2026-92489", + "CVE-2026-92490", + "CVE-2026-92491", + "CVE-2026-92493", + "CVE-2026-92494", + "CVE-2026-92495", + "CVE-2026-92496", + "CVE-2026-92497", + "CVE-2026-92498", + "CVE-2026-92499", + "CVE-2026-92500", + "CVE-2026-92501", + "CVE-2026-92503", + "CVE-2026-92504", + "CVE-2026-92505", + "CVE-2026-92506", + "CVE-2026-92507", + "CVE-2026-92508", + "CVE-2026-92509", + "CVE-2026-92510", + "CVE-2026-92511", + "CVE-2026-92512", + "CVE-2026-92513", + "CVE-2026-92514", + "CVE-2026-92515", + "CVE-2026-92516", + "CVE-2026-92517", + "CVE-2026-92518", + "CVE-2026-92519", + "CVE-2026-92520", + "CVE-2026-92521", + "CVE-2026-92522", + "CVE-2026-92523", + "CVE-2026-92524", + "CVE-2026-92525", + "CVE-2026-93037", + "CVE-2026-93039", + "CVE-2026-93040", + "CVE-2026-93041", + "CVE-2026-93042", + "CVE-2026-93043", + "CVE-2026-93044", + "CVE-2026-93045", + "CVE-2026-93046", + "CVE-2026-93047", + "CVE-2026-93048", + "CVE-2026-93049", + "CVE-2026-93050", + "CVE-2026-93051", + "CVE-2026-93052", + "CVE-2026-93053", + "CVE-2026-93054", + "CVE-2026-93055", + "CVE-2026-93056", + "CVE-2026-93058", + "CVE-2026-93059", + "CVE-2026-93061", + "CVE-2026-93062", + "CVE-2026-93063", + "CVE-2026-93064", + "CVE-2026-93065", + "CVE-2026-93066", + "CVE-2026-93067", + "CVE-2026-93068", + "CVE-2026-93069", + "CVE-2026-93070", + "CVE-2026-93071", + "CVE-2026-93072", + "CVE-2026-93073", + "CVE-2026-93077", + "CVE-2026-93078", + "CVE-2026-93079", + "CVE-2026-93080", + "CVE-2026-93081", + "CVE-2026-93082", + "CVE-2026-93083", + "CVE-2026-93084", + "CVE-2026-93085", + "CVE-2026-93086", + "CVE-2026-93089", + "CVE-2026-93090", + "CVE-2026-93091", + "CVE-2026-93092", + "CVE-2026-93093", + "CVE-2026-93094", + "CVE-2026-93095", + "CVE-2026-93096", + "CVE-2026-93097", + "CVE-2026-93098", + "CVE-2026-93099", + "CVE-2026-93100", + "CVE-2026-93101", + "CVE-2026-93102", + "CVE-2026-93103", + "CVE-2026-93104", + "CVE-2026-93105", + "CVE-2026-93106", + "CVE-2026-93107", + "CVE-2026-93108", + "CVE-2026-93109", + "CVE-2026-93110", + "CVE-2026-93112", + "CVE-2026-93113", + "CVE-2026-93114", + "CVE-2026-93115", + "CVE-2026-93116", + "CVE-2026-93117", + "CVE-2026-93118", + "CVE-2026-93119", + "CVE-2026-93120", + "CVE-2026-93121", + "CVE-2026-93122", + "CVE-2026-93123", + "CVE-2026-93125", + "CVE-2026-93126", + "CVE-2026-93127", + "CVE-2026-93128", + "CVE-2026-93129", + "CVE-2026-93130", + "CVE-2026-93131", + "CVE-2026-93132", + "CVE-2026-93133", + "CVE-2026-93134", + "CVE-2026-93135", + "CVE-2026-93136", + "CVE-2026-93137", + "CVE-2026-93138", + "CVE-2026-93140", + "CVE-2026-93141", + "CVE-2026-93142", + "CVE-2026-93143", + "CVE-2026-93144", + "CVE-2026-93145", + "CVE-2026-93146", + "CVE-2026-93148", + "CVE-2026-93149", + "CVE-2026-93150", + "CVE-2026-93151", + "CVE-2026-93152", + "CVE-2026-93153", + "CVE-2026-93154", + "CVE-2026-93155", + "CVE-2026-93156", + "CVE-2026-93157", + "CVE-2026-93158", + "CVE-2026-93159", + "CVE-2026-93160", + "CVE-2026-93161", + "CVE-2026-93162", + "CVE-2026-93163", + "CVE-2026-93164", + "CVE-2026-93165", + "CVE-2026-93167", + "CVE-2026-93168", + "CVE-2026-93169", + "CVE-2026-93170", + "CVE-2026-93172", + "CVE-2026-93173", + "CVE-2026-93174", + "CVE-2026-93175", + "CVE-2026-93176", + "CVE-2026-93177", + "CVE-2026-93178", + "CVE-2026-93179", + "CVE-2026-93180", + "CVE-2026-93181", + "CVE-2026-93182", + "CVE-2026-93183", + "CVE-2026-93184", + "CVE-2026-93185", + "CVE-2026-93186", + "CVE-2026-93188", + "CVE-2026-93189", + "CVE-2026-93190", + "CVE-2026-93191", + "CVE-2026-93192", + "CVE-2026-93193", + "CVE-2026-93194", + "CVE-2026-93195", + "CVE-2026-93196", + "CVE-2026-93198", + "CVE-2026-93199", + "CVE-2026-93200", + "CVE-2026-93201", + "CVE-2026-93202", + "CVE-2026-93203", + "CVE-2026-93204", + "CVE-2026-93205", + "CVE-2026-93206", + "CVE-2026-93207", + "CVE-2026-93208", + "CVE-2026-93209", + "CVE-2026-93210", + "CVE-2026-93211", + "CVE-2026-93212", + "CVE-2026-93213", + "CVE-2026-93214", + "CVE-2026-93215", + "CVE-2026-93216", + "CVE-2026-93217", + "CVE-2026-93218", + "CVE-2026-93219", + "CVE-2026-93220", + "CVE-2026-93221", + "CVE-2026-93222", + "CVE-2026-93223", + "CVE-2026-93224", + "CVE-2026-93225", + "CVE-2026-93226", + "CVE-2026-93227", + "CVE-2026-93228", + "CVE-2026-93229", + "CVE-2026-93230", + "CVE-2026-93231", + "CVE-2026-93233", + "CVE-2026-93234", + "CVE-2026-93235", + "CVE-2026-93236", + "CVE-2026-93237", + "CVE-2026-93238", + "CVE-2026-93239", + "CVE-2026-93240", + "CVE-2026-93241", + "CVE-2026-93242", + "CVE-2026-93243", + "CVE-2026-93244", + "CVE-2026-93245", + "CVE-2026-93247", + "CVE-2026-93248", + "CVE-2026-93249", + "CVE-2026-93250", + "CVE-2026-93251", + "CVE-2026-93252", + "CVE-2026-93253", + "CVE-2026-93255", + "CVE-2026-93256", + "CVE-2026-93258", + "CVE-2026-93259", + "CVE-2026-93260", + "CVE-2026-93261", + "CVE-2026-93262", + "CVE-2026-93264", + "CVE-2026-93265", + "CVE-2026-93266", + "CVE-2026-93267", + "CVE-2026-93268", + "CVE-2026-93269", + "CVE-2026-93270", + "CVE-2026-93271", + "CVE-2026-93272", + "CVE-2026-93273", + "CVE-2026-93274", + "CVE-2026-93275", + "CVE-2026-93276", + "CVE-2026-93278", + "CVE-2026-93279", + "CVE-2026-93280", + "CVE-2026-93281", + "CVE-2026-93282", + "CVE-2026-93283", + "CVE-2026-93284", + "CVE-2026-93285", + "CVE-2026-93286", + "CVE-2026-93287", + "CVE-2026-93288", + "CVE-2026-93781", + "CVE-2026-93782", + "CVE-2026-93783", + "CVE-2026-93784", + "CVE-2026-93785", + "CVE-2026-93786", + "CVE-2026-93787", + "CVE-2026-93788", + "CVE-2026-93789", + "CVE-2026-93790", + "CVE-2026-93791", + "CVE-2026-93792", + "CVE-2026-93793", + "CVE-2026-93794", + "CVE-2026-93795", + "CVE-2026-93796", + "CVE-2026-93797", + "CVE-2026-93798", + "CVE-2026-93799", + "CVE-2026-93800", + "CVE-2026-93801", + "CVE-2026-93802", + "CVE-2026-93803", + "CVE-2026-93804", + "CVE-2026-93805", + "CVE-2026-93806", + "CVE-2026-93807", + "CVE-2026-93808", + "CVE-2026-93809", + "CVE-2026-93810", + "CVE-2026-93811", + "CVE-2026-93812", + "CVE-2026-93813", + "CVE-2026-93814", + "CVE-2026-93815", + "CVE-2026-93816", + "CVE-2026-93817", + "CVE-2026-93818", + "CVE-2026-93819", + "CVE-2026-93820", + "CVE-2026-93821", + "CVE-2026-93822", + "CVE-2026-93823", + "CVE-2026-93824", + "CVE-2026-93825", + "CVE-2026-93826", + "CVE-2026-93827", + "CVE-2026-93828", + "CVE-2026-93829", + "CVE-2026-93830", + "CVE-2026-97407", + "CVE-2026-97408", + "CVE-2026-97409", + "CVE-2026-97410", + "CVE-2026-97411", + "CVE-2026-97412", + "CVE-2026-97413", + "CVE-2026-97414", + "CVE-2026-97415", + "CVE-2026-97416", + "CVE-2026-97417", + "CVE-2026-97418", + "CVE-2026-97419", + "CVE-2026-97420", + "CVE-2026-97421", + "CVE-2026-97422", + "CVE-2026-97423", + "CVE-2026-97424", + "CVE-2026-97425", + "CVE-2026-97426", + "CVE-2026-97427", + "CVE-2026-97428", + "CVE-2026-97429", + "CVE-2026-97430", + "CVE-2026-97431", + "CVE-2026-97432", + "CVE-2026-97433", + "CVE-2026-97434", + "CVE-2026-97435", + "CVE-2026-97436", + "CVE-2026-97437", + "CVE-2026-97438", + "CVE-2026-97439", + "CVE-2026-97440", + "CVE-2026-97441", + "CVE-2026-97442", + "CVE-2026-97443", + "CVE-2026-97444", + "CVE-2026-97445", + "CVE-2026-97446", + "CVE-2026-97447", + "CVE-2026-97448", + "CVE-2026-97449", + "CVE-2026-97450", + "CVE-2026-97451", + "CVE-2026-97452", + "CVE-2026-97453", + "CVE-2026-97454", + "CVE-2026-97455", + "CVE-2026-97456", + "CVE-2026-97472", + "CVE-2026-97473", + "CVE-2026-97474", + "CVE-2026-97475", + "CVE-2026-97476", + "CVE-2026-97477", + "CVE-2026-97478", + "CVE-2026-97479", + "CVE-2026-97480", + "CVE-2026-97481", + "CVE-2026-97482", + "CVE-2026-97483", + "CVE-2026-97484", + "CVE-2026-97485", + "CVE-2026-97486", + "CVE-2026-97487", + "CVE-2026-97488", + "CVE-2026-97489", + "CVE-2026-97490", + "CVE-2026-97491", + "CVE-2026-97492", + "CVE-2026-97493", + "CVE-2026-97494", + "CVE-2026-97495", + "CVE-2026-97496", + "CVE-2026-97497", + "CVE-2026-97498", + "CVE-2026-97499", + "CVE-2026-97500", + "CVE-2026-97501", + "CVE-2026-97502", + "CVE-2026-97503", + "CVE-2026-97505", + "CVE-2026-97506", + "CVE-2026-97507", + "CVE-2026-97508", + "CVE-2026-97509", + "CVE-2026-97510", + "CVE-2026-97511", + "CVE-2026-97512", + "CVE-2026-97513", + "CVE-2026-97514", + "CVE-2026-97515", + "CVE-2026-97516", + "CVE-2026-97517", + "CVE-2026-97518", + "CVE-2026-97519", + "CVE-2026-97520", + "CVE-2026-97521", + "CVE-2026-97522", + "CVE-2026-97523", + "CVE-2026-97524", + "CVE-2026-97525", + "CVE-2026-97526", + "CVE-2026-97527", + "CVE-2026-97528", + "CVE-2026-97529", + "CVE-2026-97530", + "CVE-2026-97531", + "CVE-2026-97532", + "CVE-2026-97533", + "CVE-2026-97534", + "CVE-2026-97535", + "CVE-2026-97536", + "CVE-2026-97537", + "CVE-2026-97538", + "CVE-2026-97539", + "CVE-2026-97540", + "CVE-2026-97541", + "CVE-2026-97542", + "CVE-2026-97543", + "CVE-2026-97544", + "CVE-2026-97545", + "CVE-2026-97546", + "CVE-2026-97547", + "CVE-2026-97548", + "CVE-2026-97549", + "CVE-2026-97550", + "CVE-2026-97551", + "CVE-2026-97552", + "CVE-2026-97553", + "CVE-2026-97554", + "CVE-2026-97555", + "CVE-2026-97556", + "CVE-2026-97557", + "CVE-2026-97558", + "CVE-2026-97559", + "CVE-2026-97560", + "CVE-2026-97561", + "CVE-2026-97562", + "CVE-2026-97563", + "CVE-2026-97564", + "CVE-2026-97565", + "CVE-2026-97566", + "CVE-2026-97567", + "CVE-2026-97568", + "CVE-2026-97571", + "CVE-2026-97572", + "CVE-2026-97573", + "CVE-2026-97574", + "CVE-2026-97575", + "CVE-2026-97576", + "CVE-2026-97577", + "CVE-2026-97578", + "CVE-2026-97579", + "CVE-2026-97580", + "CVE-2026-97581", + "CVE-2026-97582", + "CVE-2026-97583", + "CVE-2026-97584", + "CVE-2026-97585", + "CVE-2026-97586", + "CVE-2026-97587", + "CVE-2026-97588", + "CVE-2026-97589", + "CVE-2026-97590", + "CVE-2026-97591", + "CVE-2026-97592", + "CVE-2026-97593", + "CVE-2026-97594", + "CVE-2026-97595", + "CVE-2026-97596", + "CVE-2026-97597", + "CVE-2026-97598", + "CVE-2026-97599", + "CVE-2026-97600", + "CVE-2026-97601", + "CVE-2026-97602", + "CVE-2026-97603", + "CVE-2026-97604", + "CVE-2026-97605", + "CVE-2026-97606", + "CVE-2026-97607", + "CVE-2026-97608", + "CVE-2026-97609", + "CVE-2026-97610", + "CVE-2026-97611", + "CVE-2026-97612", + "CVE-2026-97613", + "CVE-2026-97614", + "CVE-2026-97615", + "CVE-2026-97616", + "CVE-2026-97617", + "CVE-2026-97618", + "CVE-2026-97619", + "CVE-2026-97620", + "CVE-2026-97621", + "CVE-2026-97899", + "CVE-2026-97900", + "CVE-2026-97901", + "CVE-2026-97902", + "CVE-2026-97903", + "CVE-2026-97904", + "CVE-2026-97905", + "CVE-2026-97906", + "CVE-2026-97907", + "CVE-2026-97908", + "CVE-2026-97909", + "CVE-2026-97910", + "CVE-2026-97912", + "CVE-2026-97913", + "CVE-2026-97914", + "CVE-2026-97915", + "CVE-2026-97916", + "CVE-2026-97917", + "CVE-2026-97918", + "CVE-2026-97919", + "CVE-2026-97920", + "CVE-2026-97921", + "CVE-2026-97922", + "CVE-2026-97923", + "CVE-2026-97924", + "CVE-2026-97925", + "CVE-2026-97926", + "CVE-2026-97927", + "CVE-2026-97928", + "CVE-2026-97929", + "CVE-2026-97930", + "CVE-2026-97931", + "CVE-2026-97932", + "CVE-2026-97933", + "CVE-2026-97934", + "CVE-2026-97935", + "CVE-2026-97936", + "CVE-2026-97938", + "CVE-2026-97939", + "CVE-2026-97940", + "CVE-2026-97942", + "CVE-2026-97943", + "CVE-2026-97944", + "CVE-2026-97945", + "CVE-2026-97946", + "CVE-2026-97947", + "CVE-2026-97948", + "CVE-2026-97949", + "CVE-2026-97950", + "CVE-2026-97951", + "CVE-2026-97952", + "CVE-2026-97953", + "CVE-2026-97954", + "CVE-2026-97955", + "CVE-2026-97956", + "CVE-2026-97957", + "CVE-2026-97958", + "CVE-2026-97959", + "CVE-2026-97960", + "CVE-2026-97961", + "CVE-2026-97962", + "CVE-2026-97963", + "CVE-2026-97964", + "CVE-2026-97965", + "CVE-2026-97966", + "CVE-2026-97967", + "CVE-2026-97968", + "CVE-2026-97969", + "CVE-2026-97970", + "CVE-2026-97971", + "CVE-2026-97972", + "CVE-2026-97973", + "CVE-2026-97974", + "CVE-2026-97975", + "CVE-2026-97976", + "CVE-2026-97977", + "CVE-2026-97978", + "CVE-2026-97979", + "CVE-2026-97981", + "CVE-2026-97982", + "CVE-2026-97983", + "CVE-2026-97984", + "CVE-2026-97985", + "CVE-2026-97986", + "CVE-2026-97987", + "CVE-2026-97988", + "CVE-2026-97989", + "CVE-2026-97990", + "CVE-2026-97991", + "CVE-2026-97992", + "CVE-2026-97993", + "CVE-2026-97994", + "CVE-2026-97995", + "CVE-2026-97996", + "CVE-2026-97997", + "CVE-2026-97998", + "CVE-2026-98000", + "CVE-2026-98001", + "CVE-2026-98002", + "CVE-2026-98003", + "CVE-2026-98004", + "CVE-2026-98005", + "CVE-2026-98006", + "CVE-2026-98007", + "CVE-2026-98008", + "CVE-2026-98009", + "CVE-2026-98010", + "CVE-2026-98011", + "CVE-2026-98012", + "CVE-2026-98013", + "CVE-2026-98014", + "CVE-2026-98015", + "CVE-2026-98016", + "CVE-2026-98017", + "CVE-2026-98018", + "CVE-2026-98019", + "CVE-2026-98020", + "CVE-2026-98021", + "CVE-2026-98022", + "CVE-2026-98023", + "CVE-2026-98024", + "CVE-2026-98025", + "CVE-2026-98026", + "CVE-2026-98027", + "CVE-2026-98028", + "CVE-2026-98029", + "CVE-2026-98030", + "CVE-2026-98031", + "CVE-2026-98032", + "CVE-2026-98033", + "CVE-2026-98034", + "CVE-2026-98037", + "CVE-2026-98038", + "CVE-2026-98039", + "CVE-2026-98041", + "CVE-2026-98043", + "CVE-2026-98044", + "CVE-2026-98045", + "CVE-2026-98046", + "CVE-2026-98047", + "CVE-2026-98048", + "CVE-2026-98049", + "CVE-2026-98050", + "CVE-2026-98051", + "CVE-2026-98052", + "CVE-2026-98053", + "CVE-2026-98054", + "CVE-2026-98055", + "CVE-2026-98056", + "CVE-2026-98057", + "CVE-2026-98058", + "CVE-2026-98059", + "CVE-2026-98060", + "CVE-2026-98061", + "CVE-2026-98062", + "CVE-2026-98063", + "CVE-2026-98064", + "CVE-2026-98065", + "CVE-2026-98066", + "CVE-2026-98067", + "CVE-2026-98068", + "CVE-2026-98069", + "CVE-2026-98070", + "CVE-2026-98071", + "CVE-2026-98072", + "CVE-2026-98073", + "CVE-2026-98074", + "CVE-2026-98075", + "CVE-2026-98076", + "CVE-2026-98077", + "CVE-2026-98078", + "CVE-2026-98079", + "CVE-2026-98080", + "CVE-2026-98081", + "CVE-2026-98082", + "CVE-2026-98083", + "CVE-2026-98084", + "CVE-2026-98085", + "CVE-2026-98086", + "CVE-2026-98087", + "CVE-2026-98088", + "CVE-2026-98089", + "CVE-2026-98090", + "CVE-2026-98091", + "CVE-2026-98092", + "CVE-2026-98093", + "CVE-2026-98094", + "CVE-2026-98095", + "CVE-2026-98096", + "CVE-2026-98097", + "CVE-2026-98098", + "CVE-2026-98099", + "CVE-2026-98101", + "CVE-2026-98102", + "CVE-2026-98103", + "CVE-2026-98104", + "CVE-2026-98105", + "CVE-2026-98106", + "CVE-2026-98107", + "CVE-2026-98108", + "CVE-2026-98109", + "CVE-2026-98110", + "CVE-2026-98111", + "CVE-2026-98112", + "CVE-2026-98113", + "CVE-2026-98114", + "CVE-2026-98115", + "CVE-2026-98116", + "CVE-2026-98117", + "CVE-2026-98118", + "CVE-2026-98119", + "CVE-2026-98120", + "CVE-2026-98121", + "CVE-2026-98122", + "CVE-2026-98123", + "CVE-2026-98124", + "CVE-2026-98125", + "CVE-2026-98126", + "CVE-2026-98127", + "CVE-2026-98128", + "CVE-2026-98129", + "CVE-2026-98130", + "CVE-2026-98131", + "CVE-2026-98134", + "CVE-2026-98142", + "CVE-2026-98143", + "CVE-2026-98144", + "CVE-2026-98146", + "CVE-2026-98147", + "CVE-2026-98148", + "CVE-2026-98149", + "CVE-2026-98150", + "CVE-2026-98151", + "CVE-2026-98152", + "CVE-2026-98153", + "CVE-2026-98154", + "CVE-2026-98155", + "CVE-2026-98156", + "CVE-2026-98157", + "CVE-2026-98158", + "CVE-2026-98159", + "CVE-2026-98160", + "CVE-2026-98161", + "CVE-2026-98162", + "CVE-2026-98163", + "CVE-2026-98164", + "CVE-2026-98166", + "CVE-2026-98167", + "CVE-2026-98168", + "CVE-2026-98169", + "CVE-2026-98170", + "CVE-2026-98171", + "CVE-2026-98172", + "CVE-2026-98173", + "CVE-2026-98174", + "CVE-2026-98175", + "CVE-2026-98176", + "CVE-2026-98177", + "CVE-2026-98179", + "CVE-2026-98180", + "CVE-2026-98181", + "CVE-2026-98182", + "CVE-2026-98184", + "CVE-2026-98185", + "CVE-2026-98186", + "CVE-2026-98187", + "CVE-2026-98188", + "CVE-2026-98189", + "CVE-2026-98190", + "CVE-2026-98191", + "CVE-2026-98192", + "CVE-2026-98193", + "CVE-2026-98194", + "CVE-2026-98195", + "CVE-2026-98196", + "CVE-2026-98197", + "CVE-2026-98198", + "CVE-2026-98199", + "CVE-2026-98200", + "CVE-2026-98201", + "CVE-2026-98202", + "CVE-2026-98203", + "CVE-2026-98204", + "CVE-2026-98205", + "CVE-2026-98206", + "CVE-2026-98207", + "CVE-2026-98208", + "CVE-2026-98209", + "CVE-2026-98210", + "CVE-2026-98211", + "CVE-2026-98212", + "CVE-2026-98213", + "CVE-2026-98214", + "CVE-2026-98215", + "CVE-2026-98216", + "CVE-2026-98217", + "CVE-2026-98218", + "CVE-2026-98221", + "CVE-2026-98222", + "CVE-2026-98223", + "CVE-2026-98224", + "CVE-2026-98226", + "CVE-2026-98227", + "CVE-2026-98228", + "CVE-2026-98229", + "CVE-2026-98230", + "CVE-2026-98231", + "CVE-2026-98232", + "CVE-2026-98233", + "CVE-2026-98234", + "CVE-2026-98235", + "CVE-2026-98236", + "CVE-2026-98237", + "CVE-2026-98238", + "CVE-2026-98239", + "CVE-2026-98240", + "CVE-2026-98241", + "CVE-2026-98242", + "CVE-2026-98244", + "CVE-2026-98245", + "CVE-2026-98246", + "CVE-2026-98247", + "CVE-2026-98248", + "CVE-2026-98249", + "CVE-2026-98251", + "CVE-2026-98252", + "CVE-2026-98253", + "CVE-2026-98254", + "CVE-2026-98255", + "CVE-2026-98256", + "CVE-2026-98257", + "CVE-2026-98258", + "CVE-2026-98259", + "CVE-2026-98260", + "CVE-2026-98261", + "CVE-2026-98262", + "CVE-2026-98263", + "CVE-2026-98264", + "CVE-2026-98265", + "CVE-2026-98266", + "CVE-2026-98267", + "CVE-2026-98268", + "CVE-2026-98269", + "CVE-2026-98270", + "CVE-2026-98271", + "CVE-2026-98272", + "CVE-2026-98273", + "CVE-2026-98274", + "CVE-2026-98275", + "CVE-2026-98276", + "CVE-2026-98277", + "CVE-2026-98278", + "CVE-2026-98279", + "CVE-2026-98280", + "CVE-2026-98281", + "CVE-2026-98282", + "CVE-2026-98283", + "CVE-2026-98284", + "CVE-2026-98285", + "CVE-2026-98286", + "CVE-2026-98287", + "CVE-2026-98288", + "CVE-2026-98289", + "CVE-2026-98290", + "CVE-2026-98291", + "CVE-2026-98292", + "CVE-2026-98293", + "CVE-2026-98294", + "CVE-2026-98295", + "CVE-2026-98296", + "CVE-2026-98297", + "CVE-2026-98298", + "CVE-2026-98299", + "CVE-2026-98300", + "CVE-2026-98301", + "CVE-2026-98302", + "CVE-2026-98303", + "CVE-2026-98304", + "CVE-2026-98306", + "CVE-2026-98307", + "CVE-2026-98308", + "CVE-2026-98309", + "CVE-2026-98311", + "CVE-2026-98312", + "CVE-2026-98314", + "CVE-2026-98316", + "CVE-2026-98317", + "CVE-2026-98318", + "CVE-2026-98319", + "CVE-2026-98320", + "CVE-2026-98321", + "CVE-2026-98322", + "CVE-2026-98323", + "CVE-2026-98324", + "CVE-2026-98325", + "CVE-2026-98326", + "CVE-2026-98327", + "CVE-2026-98328", + "CVE-2026-98329", + "CVE-2026-98330", + "CVE-2026-98331", + "CVE-2026-98332", + "CVE-2026-98333", + "CVE-2026-98334", + "CVE-2026-98335", + "CVE-2026-98336", + "CVE-2026-98337", + "CVE-2026-98338", + "CVE-2026-98339", + "CVE-2026-98340", + "CVE-2026-98341", + "CVE-2026-98342", + "CVE-2026-98343", + "CVE-2026-98344", + "CVE-2026-98345", + "CVE-2026-98346", + "CVE-2026-98347", + "CVE-2026-98348", + "CVE-2026-98349", + "CVE-2026-98350", + "CVE-2026-98351", + "CVE-2026-98352", + "CVE-2026-98354", + "CVE-2026-98355", + "CVE-2026-98356", + "CVE-2026-98357", + "CVE-2026-98358", + "CVE-2026-98359", + "CVE-2026-98360", + "CVE-2026-98361", + "CVE-2026-98362", + "CVE-2026-98363", + "CVE-2026-98364", + "CVE-2026-98365", + "CVE-2026-98366", + "CVE-2026-98367", + "CVE-2026-98368", + "CVE-2026-98369", + "CVE-2026-98370", + "CVE-2026-98371", + "CVE-2026-98372", + "CVE-2026-98373", + "CVE-2026-98374", + "CVE-2026-98375", + "CVE-2026-98376", + "CVE-2026-98377", + "CVE-2026-98378", + "CVE-2026-98379", + "CVE-2026-98380", + "CVE-2026-98381", + "CVE-2026-98382", + "CVE-2026-98383", + "CVE-2026-98384", + "CVE-2026-98386", + "CVE-2026-98387", + "CVE-2026-98388", + "CVE-2026-98389", + "CVE-2026-98390", + "CVE-2026-98391", + "CVE-2026-98392", + "CVE-2026-98393", + "CVE-2026-98394", + "CVE-2026-98398", + "CVE-2026-98399", + "CVE-2026-98400", + "CVE-2026-98401", + "CVE-2026-98402", + "CVE-2026-98403", + "CVE-2026-98404", + "CVE-2026-98406", + "CVE-2026-98407", + "CVE-2026-98408", + "CVE-2026-98409", + "CVE-2026-98410", + "CVE-2026-98411", + "CVE-2026-98412", + "CVE-2026-98413", + "CVE-2026-98414", + "CVE-2026-98415", + "CVE-2026-98416", + "CVE-2026-98417", + "CVE-2026-98419", + "CVE-2026-98420", + "CVE-2026-98421", + "CVE-2026-98422", + "CVE-2026-98423", + "CVE-2026-98424", + "CVE-2026-98425", + "CVE-2026-98426", + "CVE-2026-98427", + "CVE-2026-98428", + "CVE-2026-98429", + "CVE-2026-98430", + "CVE-2026-98431", + "CVE-2026-98432", + "CVE-2026-98433", + "CVE-2026-98434", + "CVE-2026-98435", + "CVE-2026-98436", + "CVE-2026-98437", + "CVE-2026-98439", + "CVE-2026-98440", + "CVE-2026-98441", + "CVE-2026-98442", + "CVE-2026-98443", + "CVE-2026-98444", + "CVE-2026-98445", + "CVE-2026-98446", + "CVE-2026-98447", + "CVE-2026-98448", + "CVE-2026-98449", + "CVE-2026-98450", + "CVE-2026-98451", + "CVE-2026-98452", + "CVE-2026-98453", + "CVE-2026-98454", + "CVE-2026-98455", + "CVE-2026-98456", + "CVE-2026-98457", + "CVE-2026-98458", + "CVE-2026-98459", + "CVE-2026-98460", + "CVE-2026-98461", + "CVE-2026-98462", + "CVE-2026-98463", + "CVE-2026-98464", + "CVE-2026-98465", + "CVE-2026-98466", + "CVE-2026-98467", + "CVE-2026-98468", + "CVE-2026-98469", + "CVE-2026-98470", + "CVE-2026-98471", + "CVE-2026-98472", + "CVE-2026-98473", + "CVE-2026-98474", + "CVE-2026-98475", + "CVE-2026-98476", + "CVE-2026-98477", + "CVE-2026-98478", + "CVE-2026-98479", + "CVE-2026-98480", + "CVE-2026-98481", + "CVE-2026-98482", + "CVE-2026-98483", + "CVE-2026-98484", + "CVE-2026-98485", + "CVE-2026-98486", + "CVE-2026-98487", + "CVE-2026-98488", + "CVE-2026-98489", + "CVE-2026-98490", + "CVE-2026-98491", + "CVE-2026-98492", + "CVE-2026-98493", + "CVE-2026-98494", + "CVE-2026-98495", + "CVE-2026-98496", + "CVE-2026-98497", + "CVE-2026-98498", + "CVE-2026-98499", + "CVE-2026-98501", + "CVE-2026-98502", + "CVE-2026-98503", + "CVE-2026-98504", + "CVE-2026-98505", + "CVE-2026-98506", + "CVE-2026-98507", + "CVE-2026-98508", + "CVE-2026-98509", + "CVE-2026-98510", + "CVE-2026-98511", + "CVE-2026-98512", + "CVE-2026-98513", + "CVE-2026-98514", + "CVE-2026-98515", + "CVE-2026-98516", + "CVE-2026-98517", + "CVE-2026-98518", + "CVE-2026-98519", + "CVE-2026-98521", + "CVE-2026-98522", + "CVE-2026-98523", + "CVE-2026-98524", + "CVE-2026-98525", + "CVE-2026-98526", + "CVE-2026-98527", + "CVE-2026-98528", + "CVE-2026-98529", + "CVE-2026-98530", + "CVE-2026-98531", + "CVE-2026-98532", + "CVE-2026-98533", + "CVE-2026-98534", + "CVE-2026-98535", + "CVE-2026-98536", + "CVE-2026-98537", + "CVE-2026-98538", + "CVE-2026-98539", + "CVE-2026-98541", + "CVE-2026-98542", + "CVE-2026-98543", + "CVE-2026-98544", + "CVE-2026-98545", + "CVE-2026-98546", + "CVE-2026-98547", + "CVE-2026-98548", + "CVE-2026-98549", + "CVE-2026-98550", + "CVE-2026-98551", + "CVE-2026-98552", + "CVE-2026-98553", + "CVE-2026-98554", + "CVE-2026-98555", + "CVE-2026-98556", + "CVE-2026-98558", + "CVE-2026-98559", + "CVE-2026-98560", + "CVE-2026-98561", + "CVE-2026-98562", + "CVE-2026-98563", + "CVE-2026-98564", + "CVE-2026-98565", + "CVE-2026-98566", + "CVE-2026-98567", + "CVE-2026-98568", + "CVE-2026-98569", + "CVE-2026-98570", + "CVE-2026-98571", + "CVE-2026-98572", + "CVE-2026-98573", + "CVE-2026-98574", + "CVE-2026-98575", + "CVE-2026-98576", + "CVE-2026-98577", + "CVE-2026-98578", + "CVE-2026-98579", + "CVE-2026-98580", + "CVE-2026-98581", + "CVE-2026-98582", + "CVE-2026-98583", + "CVE-2026-98584", + "CVE-2026-98585", + "CVE-2026-98586", + "CVE-2026-98588", + "CVE-2026-98589", + "CVE-2026-98590", + "CVE-2026-98591", + "CVE-2026-98592", + "CVE-2026-98593", + "CVE-2026-98594", + "CVE-2026-98595", + "CVE-2026-98596", + "CVE-2026-98597", + "CVE-2026-98598", + "CVE-2026-98599", + "CVE-2026-98601", + "CVE-2026-98602", + "CVE-2026-98603", + "CVE-2026-98604", + "CVE-2026-98605", + "CVE-2026-98606", + "CVE-2026-98607", + "CVE-2026-98608", + "CVE-2026-98609", + "CVE-2026-98610", + "CVE-2026-98611", + "CVE-2026-98612", + "CVE-2026-98613", + "CVE-2026-98614", + "CVE-2026-98615", + "CVE-2026-98616", + "CVE-2026-98617", + "CVE-2026-98618", + "CVE-2026-98620", + "CVE-2026-98621", + "CVE-2026-98622", + "CVE-2026-98623", + "CVE-2026-98624", + "CVE-2026-98625", + "CVE-2026-98626", + "CVE-2026-98628", + "CVE-2026-98629", + "CVE-2026-98630", + "CVE-2026-98631", + "CVE-2026-98632", + "CVE-2026-98633", + "CVE-2026-98634", + "CVE-2026-98635", + "CVE-2026-98636", + "CVE-2026-98637", + "CVE-2026-98638", + "CVE-2026-98639", + "CVE-2026-98640", + "CVE-2026-98641", + "CVE-2026-98642", + "CVE-2026-98643", + "CVE-2026-98644", + "CVE-2026-98646", + "CVE-2026-98647", + "CVE-2026-98648", + "CVE-2026-98649", + "CVE-2026-98650", + "CVE-2026-98651", + "CVE-2026-98652", + "CVE-2026-98653", + "CVE-2026-98655", + "CVE-2026-98656", + "CVE-2026-98657", + "CVE-2026-98658", + "CVE-2026-98659", + "CVE-2026-98660", + "CVE-2026-98661", + "CVE-2026-98662", + "CVE-2026-98663", + "CVE-2026-98664", + "CVE-2026-98665", + "CVE-2026-98666", + "CVE-2026-98667", + "CVE-2026-98668", + "CVE-2026-98669", + "CVE-2026-98670", + "CVE-2026-98671", + "CVE-2026-98672", + "CVE-2026-98673", + "CVE-2026-98674", + "CVE-2026-98675", + "CVE-2026-98676", + "CVE-2026-98677", + "CVE-2026-98678", + "CVE-2026-98679", + "CVE-2026-98680", + "CVE-2026-98681", + "CVE-2026-98682", + "CVE-2026-98683", + "CVE-2026-98684", + "CVE-2026-98685", + "CVE-2026-98686", + "CVE-2026-98687", + "CVE-2026-98689", + "CVE-2026-98690", + "CVE-2026-98691", + "CVE-2026-98692", + "CVE-2026-98693", + "CVE-2026-98694", + "CVE-2026-98695", + "CVE-2026-98696", + "CVE-2026-98697", + "CVE-2026-98698", + "CVE-2026-98699", + "CVE-2026-98700", + "CVE-2026-98701", + "CVE-2026-98702", + "CVE-2026-98703", + "CVE-2026-98704", + "CVE-2026-98705", + "CVE-2026-98706", + "CVE-2026-98707", + "CVE-2026-98708", + "CVE-2026-98709", + "CVE-2026-98710", + "CVE-2026-98711", + "CVE-2026-98712", + "CVE-2026-98713", + "CVE-2026-98714", + "CVE-2026-98715", + "CVE-2026-98716", + "CVE-2026-98717", + "CVE-2026-98718", + "CVE-2026-98719", + "CVE-2026-98720", + "CVE-2026-98721", + "CVE-2026-98722", + "CVE-2026-98723", + "CVE-2026-98724", + "CVE-2026-98725", + "CVE-2026-98726", + "CVE-2026-98727", + "CVE-2026-98728", + "CVE-2026-98729", + "CVE-2026-98730", + "CVE-2026-98731", + "CVE-2026-98732", + "CVE-2026-98733", + "CVE-2026-98734", + "CVE-2026-98735", + "CVE-2026-98736", + "CVE-2026-98737", + "CVE-2026-98738", + "CVE-2026-98739", + "CVE-2026-98740", + "CVE-2026-98741", + "CVE-2026-98742", + "CVE-2026-98743", + "CVE-2026-98744", + "CVE-2026-98745", + "CVE-2026-98746", + "CVE-2026-98747", + "CVE-2026-98748", + "CVE-2026-98749", + "CVE-2026-98750", + "CVE-2026-98751", + "CVE-2026-98752", + "CVE-2026-98753", + "CVE-2026-98754", + "CVE-2026-98755", + "CVE-2026-98756", + "CVE-2026-98757", + "CVE-2026-98758", + "CVE-2026-98759", + "CVE-2026-98760", + "CVE-2026-98761", + "CVE-2026-98762", + "CVE-2026-98763", + "CVE-2026-98764", + "CVE-2026-98765", + "CVE-2026-98766", + "CVE-2026-98767", + "CVE-2026-98768", + "CVE-2026-98769", + "CVE-2026-98770", + "CVE-2026-98771", + "CVE-2026-98772", + "CVE-2026-98773", + "CVE-2026-98774", + "CVE-2026-98775", + "CVE-2026-98776", + "CVE-2026-98777", + "CVE-2026-98778", + "CVE-2026-98779", + "CVE-2026-98780", + "CVE-2026-98781", + "CVE-2026-98782", + "CVE-2026-98783", + "CVE-2026-98784", + "CVE-2026-98785", + "CVE-2026-98786", + "CVE-2026-98788", + "CVE-2026-98789", + "CVE-2026-98790", + "CVE-2026-98791", + "CVE-2026-98792", + "CVE-2026-98793", + "CVE-2026-98794", + "CVE-2026-98795", + "CVE-2026-98796", + "CVE-2026-98797", + "CVE-2026-98798", + "CVE-2026-98799", + "CVE-2026-98800", + "CVE-2026-98801", + "CVE-2026-98802", + "CVE-2026-98803", + "CVE-2026-98804", + "CVE-2026-98805", + "CVE-2026-98806", + "CVE-2026-98807", + "CVE-2026-98808", + "CVE-2026-98809", + "CVE-2026-98810", + "CVE-2026-98811", + "CVE-2026-98812", + "CVE-2026-98813", + "CVE-2026-98814", + "CVE-2026-98815", + "CVE-2026-98816", + "CVE-2026-98817", + "CVE-2026-98818", + "CVE-2026-98819", + "CVE-2026-98820", + "CVE-2026-98821", + "CVE-2026-98822", + "CVE-2026-98823", + "CVE-2026-98824", + "CVE-2026-98825", + "CVE-2026-98826", + "CVE-2026-98827", + "CVE-2026-98828", + "CVE-2026-98829", + "CVE-2026-98830", + "CVE-2026-98831", + "CVE-2026-98833", + "CVE-2026-98834", + "CVE-2026-98835", + "CVE-2026-98836", + "CVE-2026-98837", + "CVE-2026-98838", + "CVE-2026-98839", + "CVE-2026-98840", + "CVE-2026-98841", + "CVE-2026-98842", + "CVE-2026-98843", + "CVE-2026-98844", + "CVE-2026-98845", + "CVE-2026-98846", + "CVE-2026-98847", + "CVE-2026-98848", + "CVE-2026-98849", + "CVE-2026-98850", + "CVE-2026-98851", + "CVE-2026-98852", + "CVE-2026-98853", + "CVE-2026-98854", + "CVE-2026-98855", + "CVE-2026-98856", + "CVE-2026-98857", + "CVE-2026-98858", + "CVE-2026-98859", + "CVE-2026-98860", + "CVE-2026-98861", + "CVE-2026-98862", + "CVE-2026-98863", + "CVE-2026-98867", + "CVE-2026-98868", + "CVE-2026-98869", + "CVE-2026-99999" + ] +} diff --git a/.github/dapper-unfixed.json b/.github/dapper-unfixed.json new file mode 100644 index 0000000..9e393d6 --- /dev/null +++ b/.github/dapper-unfixed.json @@ -0,0 +1,709 @@ +{ + "repository": "PastureStack/kubernetes-agent", + "unfixed": [ + { + "id": "CVE-2026-102473", + "package": "dash", + "version": "0.5.12-12ubuntu3", + "purl": "pkg:deb/ubuntu/dash@0.5.12-12ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-102473", + "reason": "Canonical Ubuntu 26.04 status: resolute_dash: deferred (2026-10-15). No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-102474", + "package": "dash", + "version": "0.5.12-12ubuntu3", + "purl": "pkg:deb/ubuntu/dash@0.5.12-12ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-102474", + "reason": "Canonical Ubuntu 26.04 status: resolute_dash: deferred (2026-10-15). No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2024-52005", + "package": "git", + "version": "1:2.53.0-1ubuntu1", + "purl": "pkg:deb/ubuntu/git@2.53.0-1ubuntu1?arch=amd64&distro=ubuntu-26.04&epoch=1", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2024-52005", + "reason": "Canonical Ubuntu 26.04 status: resolute_git: deferred. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2024-52005", + "package": "git-man", + "version": "1:2.53.0-1ubuntu1", + "purl": "pkg:deb/ubuntu/git-man@2.53.0-1ubuntu1?arch=all&distro=ubuntu-26.04&epoch=1", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2024-52005", + "reason": "Canonical Ubuntu 26.04 status: resolute_git: deferred. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-41256", + "package": "jq", + "version": "1.8.1-4ubuntu2", + "purl": "pkg:deb/ubuntu/jq@1.8.1-4ubuntu2?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-41256", + "reason": "Canonical Ubuntu 26.04 status: resolute_jq: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-41257", + "package": "jq", + "version": "1.8.1-4ubuntu2", + "purl": "pkg:deb/ubuntu/jq@1.8.1-4ubuntu2?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-41257", + "reason": "Canonical Ubuntu 26.04 status: resolute_jq: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-43895", + "package": "jq", + "version": "1.8.1-4ubuntu2", + "purl": "pkg:deb/ubuntu/jq@1.8.1-4ubuntu2?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-43895", + "reason": "Canonical Ubuntu 26.04 status: resolute_jq: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-43896", + "package": "jq", + "version": "1.8.1-4ubuntu2", + "purl": "pkg:deb/ubuntu/jq@1.8.1-4ubuntu2?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-43896", + "reason": "Canonical Ubuntu 26.04 status: resolute_jq: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-44777", + "package": "jq", + "version": "1.8.1-4ubuntu2", + "purl": "pkg:deb/ubuntu/jq@1.8.1-4ubuntu2?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-44777", + "reason": "Canonical Ubuntu 26.04 status: resolute_jq: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-18374", + "package": "libc-bin", + "version": "2.43-2ubuntu2.4", + "purl": "pkg:deb/ubuntu/libc-bin@2.43-2ubuntu2.4?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-18374", + "reason": "Canonical Ubuntu 26.04 status: resolute_glibc: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-89092", + "package": "libc-bin", + "version": "2.43-2ubuntu2.4", + "purl": "pkg:deb/ubuntu/libc-bin@2.43-2ubuntu2.4?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-89092", + "reason": "Canonical Ubuntu 26.04 status: resolute_glibc: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-18374", + "package": "libc-gconv-modules-extra", + "version": "2.43-2ubuntu2.4", + "purl": "pkg:deb/ubuntu/libc-gconv-modules-extra@2.43-2ubuntu2.4?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-18374", + "reason": "Canonical Ubuntu 26.04 status: resolute_glibc: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-89092", + "package": "libc-gconv-modules-extra", + "version": "2.43-2ubuntu2.4", + "purl": "pkg:deb/ubuntu/libc-gconv-modules-extra@2.43-2ubuntu2.4?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-89092", + "reason": "Canonical Ubuntu 26.04 status: resolute_glibc: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-18374", + "package": "libc6", + "version": "2.43-2ubuntu2.4", + "purl": "pkg:deb/ubuntu/libc6@2.43-2ubuntu2.4?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-18374", + "reason": "Canonical Ubuntu 26.04 status: resolute_glibc: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-89092", + "package": "libc6", + "version": "2.43-2ubuntu2.4", + "purl": "pkg:deb/ubuntu/libc6@2.43-2ubuntu2.4?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-89092", + "reason": "Canonical Ubuntu 26.04 status: resolute_glibc: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2025-66382", + "package": "libexpat1", + "version": "2.7.4-1ubuntu0.2", + "purl": "pkg:deb/ubuntu/libexpat1@2.7.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2025-66382", + "reason": "Canonical Ubuntu 26.04 status: resolute_expat: deferred (2026-09-28). No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-67693", + "package": "libgnutls30t64", + "version": "3.8.12-2ubuntu1.1", + "purl": "pkg:deb/ubuntu/libgnutls30t64@3.8.12-2ubuntu1.1?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-67693", + "reason": "Canonical Ubuntu 26.04 status: resolute_gnutls28: deferred (2026-10-15). No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-88647", + "package": "libgnutls30t64", + "version": "3.8.12-2ubuntu1.1", + "purl": "pkg:deb/ubuntu/libgnutls30t64@3.8.12-2ubuntu1.1?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-88647", + "reason": "Canonical Ubuntu 26.04 status: resolute_gnutls28: deferred (2026-10-15). No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-88648", + "package": "libgnutls30t64", + "version": "3.8.12-2ubuntu1.1", + "purl": "pkg:deb/ubuntu/libgnutls30t64@3.8.12-2ubuntu1.1?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-88648", + "reason": "Canonical Ubuntu 26.04 status: resolute_gnutls28: deferred (2026-10-15). No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-95184", + "package": "libgnutls30t64", + "version": "3.8.12-2ubuntu1.1", + "purl": "pkg:deb/ubuntu/libgnutls30t64@3.8.12-2ubuntu1.1?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-95184", + "reason": "Canonical Ubuntu 26.04 status: resolute_gnutls28: deferred (2026-10-15). No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-95209", + "package": "libgnutls30t64", + "version": "3.8.12-2ubuntu1.1", + "purl": "pkg:deb/ubuntu/libgnutls30t64@3.8.12-2ubuntu1.1?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-95209", + "reason": "Canonical Ubuntu 26.04 status: resolute_gnutls28: deferred (2026-10-15). No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-95210", + "package": "libgnutls30t64", + "version": "3.8.12-2ubuntu1.1", + "purl": "pkg:deb/ubuntu/libgnutls30t64@3.8.12-2ubuntu1.1?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-95210", + "reason": "Canonical Ubuntu 26.04 status: resolute_gnutls28: deferred (2026-10-15). No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-41256", + "package": "libjq1", + "version": "1.8.1-4ubuntu2", + "purl": "pkg:deb/ubuntu/libjq1@1.8.1-4ubuntu2?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-41256", + "reason": "Canonical Ubuntu 26.04 status: resolute_jq: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-41257", + "package": "libjq1", + "version": "1.8.1-4ubuntu2", + "purl": "pkg:deb/ubuntu/libjq1@1.8.1-4ubuntu2?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-41257", + "reason": "Canonical Ubuntu 26.04 status: resolute_jq: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-43895", + "package": "libjq1", + "version": "1.8.1-4ubuntu2", + "purl": "pkg:deb/ubuntu/libjq1@1.8.1-4ubuntu2?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-43895", + "reason": "Canonical Ubuntu 26.04 status: resolute_jq: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-43896", + "package": "libjq1", + "version": "1.8.1-4ubuntu2", + "purl": "pkg:deb/ubuntu/libjq1@1.8.1-4ubuntu2?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-43896", + "reason": "Canonical Ubuntu 26.04 status: resolute_jq: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-44777", + "package": "libjq1", + "version": "1.8.1-4ubuntu2", + "purl": "pkg:deb/ubuntu/libjq1@1.8.1-4ubuntu2?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-44777", + "reason": "Canonical Ubuntu 26.04 status: resolute_jq: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-13757", + "package": "libp11-kit0", + "version": "0.26.2-2", + "purl": "pkg:deb/ubuntu/libp11-kit0@0.26.2-2?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-13757", + "reason": "Canonical Ubuntu 26.04 status: resolute_p11-kit: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-103111", + "package": "libpcre2-8-0", + "version": "10.46-1build1", + "purl": "pkg:deb/ubuntu/libpcre2-8-0@10.46-1build1?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-103111", + "reason": "Canonical Ubuntu 26.04 status: resolute_pcre2: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-86145", + "package": "libpcre2-8-0", + "version": "10.46-1build1", + "purl": "pkg:deb/ubuntu/libpcre2-8-0@10.46-1build1?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-86145", + "reason": "Canonical Ubuntu 26.04 status: resolute_pcre2: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-89156", + "package": "libpcre2-8-0", + "version": "10.46-1build1", + "purl": "pkg:deb/ubuntu/libpcre2-8-0@10.46-1build1?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-89156", + "reason": "Canonical Ubuntu 26.04 status: resolute_pcre2: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-89157", + "package": "libpcre2-8-0", + "version": "10.46-1build1", + "purl": "pkg:deb/ubuntu/libpcre2-8-0@10.46-1build1?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-89157", + "reason": "Canonical Ubuntu 26.04 status: resolute_pcre2: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-89158", + "package": "libpcre2-8-0", + "version": "10.46-1build1", + "purl": "pkg:deb/ubuntu/libpcre2-8-0@10.46-1build1?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-89158", + "reason": "Canonical Ubuntu 26.04 status: resolute_pcre2: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-89160", + "package": "libpcre2-8-0", + "version": "10.46-1build1", + "purl": "pkg:deb/ubuntu/libpcre2-8-0@10.46-1build1?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-89160", + "reason": "Canonical Ubuntu 26.04 status: resolute_pcre2: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-89161", + "package": "libpcre2-8-0", + "version": "10.46-1build1", + "purl": "pkg:deb/ubuntu/libpcre2-8-0@10.46-1build1?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-89161", + "reason": "Canonical Ubuntu 26.04 status: resolute_pcre2: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-89162", + "package": "libpcre2-8-0", + "version": "10.46-1build1", + "purl": "pkg:deb/ubuntu/libpcre2-8-0@10.46-1build1?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-89162", + "reason": "Canonical Ubuntu 26.04 status: resolute_pcre2: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-107161", + "package": "libsasl2-2", + "version": "2.1.28+dfsg1-9ubuntu3", + "purl": "pkg:deb/ubuntu/libsasl2-2@2.1.28%2Bdfsg1-9ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-107161", + "reason": "Canonical Ubuntu 26.04 status: resolute_cyrus-sasl2: deferred (2026-10-14). No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-107161", + "package": "libsasl2-modules-db", + "version": "2.1.28+dfsg1-9ubuntu3", + "purl": "pkg:deb/ubuntu/libsasl2-modules-db@2.1.28%2Bdfsg1-9ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-107161", + "reason": "Canonical Ubuntu 26.04 status: resolute_cyrus-sasl2: deferred (2026-10-14). No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-40228", + "package": "libsystemd0", + "version": "259.5-0ubuntu3.4", + "purl": "pkg:deb/ubuntu/libsystemd0@259.5-0ubuntu3.4?arch=amd64&distro=ubuntu-26.04", + "severity": "LOW", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-40228", + "reason": "Canonical Ubuntu 26.04 status: resolute_systemd: deferred (2026-06-05). No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-40228", + "package": "libudev1", + "version": "259.5-0ubuntu3.4", + "purl": "pkg:deb/ubuntu/libudev1@259.5-0ubuntu3.4?arch=amd64&distro=ubuntu-26.04", + "severity": "LOW", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-40228", + "reason": "Canonical Ubuntu 26.04 status: resolute_systemd: deferred (2026-06-05). No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2024-56433", + "package": "login.defs", + "version": "1:4.17.4-2ubuntu3", + "purl": "pkg:deb/ubuntu/login.defs@4.17.4-2ubuntu3?arch=all&distro=ubuntu-26.04&epoch=1", + "severity": "LOW", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2024-56433", + "reason": "Canonical Ubuntu 26.04 status: resolute_shadow: deferred (2026-08-31). No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2024-56433", + "package": "passwd", + "version": "1:4.17.4-2ubuntu3", + "purl": "pkg:deb/ubuntu/passwd@4.17.4-2ubuntu3?arch=amd64&distro=ubuntu-26.04&epoch=1", + "severity": "LOW", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2024-56433", + "reason": "Canonical Ubuntu 26.04 status: resolute_shadow: deferred (2026-08-31). No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-35341", + "package": "rust-coreutils", + "version": "0.8.0-0ubuntu3", + "purl": "pkg:deb/ubuntu/rust-coreutils@0.8.0-0ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-35341", + "reason": "Canonical Ubuntu 26.04 status: resolute_rust-coreutils: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-35344", + "package": "rust-coreutils", + "version": "0.8.0-0ubuntu3", + "purl": "pkg:deb/ubuntu/rust-coreutils@0.8.0-0ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-35344", + "reason": "Canonical Ubuntu 26.04 status: resolute_rust-coreutils: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-35345", + "package": "rust-coreutils", + "version": "0.8.0-0ubuntu3", + "purl": "pkg:deb/ubuntu/rust-coreutils@0.8.0-0ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-35345", + "reason": "Canonical Ubuntu 26.04 status: resolute_rust-coreutils: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-35348", + "package": "rust-coreutils", + "version": "0.8.0-0ubuntu3", + "purl": "pkg:deb/ubuntu/rust-coreutils@0.8.0-0ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-35348", + "reason": "Canonical Ubuntu 26.04 status: resolute_rust-coreutils: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-35350", + "package": "rust-coreutils", + "version": "0.8.0-0ubuntu3", + "purl": "pkg:deb/ubuntu/rust-coreutils@0.8.0-0ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-35350", + "reason": "Canonical Ubuntu 26.04 status: resolute_rust-coreutils: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-35351", + "package": "rust-coreutils", + "version": "0.8.0-0ubuntu3", + "purl": "pkg:deb/ubuntu/rust-coreutils@0.8.0-0ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-35351", + "reason": "Canonical Ubuntu 26.04 status: resolute_rust-coreutils: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-35352", + "package": "rust-coreutils", + "version": "0.8.0-0ubuntu3", + "purl": "pkg:deb/ubuntu/rust-coreutils@0.8.0-0ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-35352", + "reason": "Canonical Ubuntu 26.04 status: resolute_rust-coreutils: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-35354", + "package": "rust-coreutils", + "version": "0.8.0-0ubuntu3", + "purl": "pkg:deb/ubuntu/rust-coreutils@0.8.0-0ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-35354", + "reason": "Canonical Ubuntu 26.04 status: resolute_rust-coreutils: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-35357", + "package": "rust-coreutils", + "version": "0.8.0-0ubuntu3", + "purl": "pkg:deb/ubuntu/rust-coreutils@0.8.0-0ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-35357", + "reason": "Canonical Ubuntu 26.04 status: resolute_rust-coreutils: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-35359", + "package": "rust-coreutils", + "version": "0.8.0-0ubuntu3", + "purl": "pkg:deb/ubuntu/rust-coreutils@0.8.0-0ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-35359", + "reason": "Canonical Ubuntu 26.04 status: resolute_rust-coreutils: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-35360", + "package": "rust-coreutils", + "version": "0.8.0-0ubuntu3", + "purl": "pkg:deb/ubuntu/rust-coreutils@0.8.0-0ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-35360", + "reason": "Canonical Ubuntu 26.04 status: resolute_rust-coreutils: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-35363", + "package": "rust-coreutils", + "version": "0.8.0-0ubuntu3", + "purl": "pkg:deb/ubuntu/rust-coreutils@0.8.0-0ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-35363", + "reason": "Canonical Ubuntu 26.04 status: resolute_rust-coreutils: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-35364", + "package": "rust-coreutils", + "version": "0.8.0-0ubuntu3", + "purl": "pkg:deb/ubuntu/rust-coreutils@0.8.0-0ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-35364", + "reason": "Canonical Ubuntu 26.04 status: resolute_rust-coreutils: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-35367", + "package": "rust-coreutils", + "version": "0.8.0-0ubuntu3", + "purl": "pkg:deb/ubuntu/rust-coreutils@0.8.0-0ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-35367", + "reason": "Canonical Ubuntu 26.04 status: resolute_rust-coreutils: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-35368", + "package": "rust-coreutils", + "version": "0.8.0-0ubuntu3", + "purl": "pkg:deb/ubuntu/rust-coreutils@0.8.0-0ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-35368", + "reason": "Canonical Ubuntu 26.04 status: resolute_rust-coreutils: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-35370", + "package": "rust-coreutils", + "version": "0.8.0-0ubuntu3", + "purl": "pkg:deb/ubuntu/rust-coreutils@0.8.0-0ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-35370", + "reason": "Canonical Ubuntu 26.04 status: resolute_rust-coreutils: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-35371", + "package": "rust-coreutils", + "version": "0.8.0-0ubuntu3", + "purl": "pkg:deb/ubuntu/rust-coreutils@0.8.0-0ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-35371", + "reason": "Canonical Ubuntu 26.04 status: resolute_rust-coreutils: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-35373", + "package": "rust-coreutils", + "version": "0.8.0-0ubuntu3", + "purl": "pkg:deb/ubuntu/rust-coreutils@0.8.0-0ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-35373", + "reason": "Canonical Ubuntu 26.04 status: resolute_rust-coreutils: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-35374", + "package": "rust-coreutils", + "version": "0.8.0-0ubuntu3", + "purl": "pkg:deb/ubuntu/rust-coreutils@0.8.0-0ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-35374", + "reason": "Canonical Ubuntu 26.04 status: resolute_rust-coreutils: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-35377", + "package": "rust-coreutils", + "version": "0.8.0-0ubuntu3", + "purl": "pkg:deb/ubuntu/rust-coreutils@0.8.0-0ubuntu3?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-35377", + "reason": "Canonical Ubuntu 26.04 status: resolute_rust-coreutils: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-18477", + "package": "tar", + "version": "1.35+dfsg-4ubuntu0.4", + "purl": "pkg:deb/ubuntu/tar@1.35%2Bdfsg-4ubuntu0.4?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-18477", + "reason": "Canonical Ubuntu 26.04 status: resolute_tar: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + }, + { + "id": "CVE-2026-18508", + "package": "tar", + "version": "1.35+dfsg-4ubuntu0.4", + "purl": "pkg:deb/ubuntu/tar@1.35%2Bdfsg-4ubuntu0.4?arch=amd64&distro=ubuntu-26.04", + "severity": "MEDIUM", + "status": "no_official_fix", + "officialEvidence": "https://git.launchpad.net/ubuntu-cve-tracker/plain/active/CVE-2026-18508", + "reason": "Canonical Ubuntu 26.04 status: resolute_tar: needed. No official resolute fixed package is available; keep tracking.", + "checkedAt": "2026-10-23" + } + ] +} diff --git a/.github/scripts/check-builder-header-boundary.sh b/.github/scripts/check-builder-header-boundary.sh new file mode 100644 index 0000000..bc0edf8 --- /dev/null +++ b/.github/scripts/check-builder-header-boundary.sh @@ -0,0 +1,28 @@ +#!/usr/bin/env bash +set -euo pipefail +test "$#" -eq 1 +if ! docker run --rm --entrypoint sh "$1" -ec 'dpkg-query -W -f="\${Status}" linux-libc-dev 2>/dev/null | grep -Fxq "install ok installed"'; then + printf '%s\n' '{"package":null}' + exit 0 +fi +docker run --rm --entrypoint sh "$1" -ec ' + test "$(dpkg-query -W -f="\${Version}" linux-libc-dev)" = 7.0.0-38.38 + if dpkg-query -W -f="\${db:Status-Abbrev} \${binary:Package}\\n" | + awk "\$1 == \"ii\" {print \$2}" | grep -Eq "^linux-(image|modules)([-:]|$)"; then + echo "Unexpected kernel runtime package" >&2; exit 1 + fi + for directory in /boot /lib/modules /usr/lib/modules; do + if test -d "$directory" && test -n "$(find "$directory" -type f -print -quit)"; then + echo "Unexpected kernel runtime file" >&2; exit 1 + fi + done + dpkg-query -L linux-libc-dev | while IFS= read -r path; do + if test -f "$path"; then + case "$path" in + /usr/include/*|/usr/share/doc/linux-libc-dev/*|/usr/share/lintian/overrides/linux-libc-dev) ;; + *) echo "Unexpected linux-libc-dev payload: $path" >&2; exit 1 ;; + esac + fi + done +' +printf '%s\n' '{"package":"linux-libc-dev","version":"7.0.0-38.38","kernel_images":false,"kernel_modules":false}' diff --git a/.github/scripts/enforce-runtime-vulnerabilities.py b/.github/scripts/enforce-runtime-vulnerabilities.py index b952eee..4eac3ef 100644 --- a/.github/scripts/enforce-runtime-vulnerabilities.py +++ b/.github/scripts/enforce-runtime-vulnerabilities.py @@ -46,12 +46,114 @@ def violations(report, ledger, repository): return errors + +def builder_violations(report, ledger, repository, header_boundary, header_ledger, + package_graphs=None, docker_proof=None): + # The complete raw scan is required; never infer safety from missing analysis. + if not isinstance(report, dict) or report.get("SchemaVersion") != 2: + raise ValueError("malformed complete builder report") + results = report.get("Results") + if not isinstance(results, list) or not results: + raise ValueError("missing builder analysis") + expected = ["usr/local/go/bin/go"] + if repository == "PastureStack/ecr-credential-sync": + expected += ["usr/bin/docker", "usr/libexec/docker/cli-plugins/docker-buildx"] + if repository == "PastureStack/kubernetes-authentication-bridge": + expected += ["usr/bin/docker", "usr/local/libexec/docker/cli-plugins/docker-buildx"] + binaries = {r.get("Target"): r for r in results if r.get("Type") == "gobinary"} + for target in expected: + if not binaries.get(target, {}).get("Packages"): + raise ValueError("missing nonempty binary analysis: " + target) + if any(not result.get("Packages") for result in binaries.values()): + raise ValueError("incomplete Go binary package analysis") + has_headers = any(f.get("PkgName") == "linux-libc-dev" for r in results for f in (r.get("Vulnerabilities") or [])) + if has_headers and header_boundary != {"package": "linux-libc-dev", "version": "7.0.0-38.38", + "kernel_images": False, "kernel_modules": False}: + raise ValueError("missing exact installed-header boundary proof") + if header_ledger.get("repository") != repository: + raise ValueError("header review repository mismatch") + if (header_ledger.get("package") != "linux-libc-dev" + or header_ledger.get("version") != "7.0.0-38.38" + or header_ledger.get("purl") != "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04"): + raise ValueError("changed header review boundary") + header_keys = {(identifier, header_ledger["package"], header_ledger["version"], header_ledger["purl"]) + for identifier in header_ledger.get("ids", [])} + expected_purl = "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + openpgp_absent = False + if package_graphs: + if repository not in ("PastureStack/kubernetes-authentication-bridge", "PastureStack/ecr-credential-sync"): + raise ValueError("unexpected OpenPGP proof consumer") + expected_roots = {"buildx": "github.com/docker/buildx/cmd/buildx"} + if repository == "PastureStack/ecr-credential-sync": + expected_roots["docker"] = "github.com/docker/cli/cmd/docker" + if set(package_graphs) != set(expected_roots): + raise ValueError("unexpected source package graph set") + for name, root in expected_roots.items(): + packages = set(package_graphs[name].splitlines()) + if root not in packages or any( + p == "golang.org/x/crypto/openpgp" or + p.startswith("golang.org/x/crypto/openpgp/") for p in packages): + raise ValueError("OpenPGP package boundary not proved") + openpgp_absent = True + retained = [] + for result in results: + copied = dict(result) + copied["Vulnerabilities"] = [] + for finding in result.get("Vulnerabilities") or []: + key = (finding.get("VulnerabilityID"), finding.get("PkgName"), + finding.get("InstalledVersion"), + (finding.get("PkgIdentifier") or {}).get("PURL", "")) + is_header = (key in header_keys and key[1] == "linux-libc-dev" + and key[2] == "7.0.0-38.38" and key[3] == expected_purl) + unfixed = not str(finding.get("FixedVersion") or "").strip() + if is_header and unfixed: + continue + if (unfixed and openpgp_absent and key == ( + "GO-2026-5932", "golang.org/x/crypto", "v0.57.0", + "pkg:golang/golang.org/x/crypto@v0.57.0")): + continue + if (unfixed and repository == "PastureStack/ecr-credential-sync" + and key == ("CVE-2026-85747", "github.com/docker/distribution", + "v2.8.3+incompatible", + "pkg:golang/github.com/docker/distribution@v2.8.3%2Bincompatible") + and docker_proof and len(docker_proof.get("cases", [])) == 7 + and all(c.get("passed") is True for c in docker_proof["cases"]) + and {c.get("case") for c in docker_proof["cases"]} == { + "valid_schema2", "forged_schema2", "valid_oci", "forged_oci", + "valid_list", "forged_list_parent", "forged_list_child"} + and docker_proof.get("sourceCommit") == "a7dcaa6fdb6ed04aacbfdc76357fdae01605609e" + and len(docker_proof.get("binarySha256", "")) == 64): + continue + copied["Vulnerabilities"].append(finding) + retained.append(copied) + return violations(dict(report, Results=retained), ledger, repository) + if __name__ == "__main__": parser = argparse.ArgumentParser() parser.add_argument("--repository", required=True) + parser.add_argument("--scope", choices=("runtime", "builder"), default="runtime") args = parser.parse_args() - failures = violations(json.load(sys.stdin), - json.loads((Path(__file__).resolve().parents[1] / "runtime-unfixed.json").read_text(encoding="utf-8")), args.repository) + repo_root = Path(__file__).resolve().parents[2] + report = json.load(sys.stdin) + ledger_name = "runtime-unfixed.json" if args.scope == "runtime" else "dapper-unfixed.json" + ledger = json.loads((repo_root / ".github" / ledger_name).read_text(encoding="utf-8")) + if args.scope == "runtime": + failures = violations(report, ledger, args.repository) + else: + evidence_dir = "dist" if args.repository in ( + "PastureStack/kubernetes-agent", + "PastureStack/kubernetes-authentication-bridge") else "evidence" + boundary = json.loads((repo_root / evidence_dir / "dapper-header-boundary.json").read_text(encoding="utf-8")) + headers = json.loads((repo_root / ".github" / "dapper-headers.json").read_text(encoding="utf-8")) + graphs = None + docker_proof = None + if args.repository in ("PastureStack/kubernetes-authentication-bridge", + "PastureStack/ecr-credential-sync"): + graphs = {"buildx": (repo_root / evidence_dir / "buildx-package-graph.txt").read_text(encoding="utf-8")} + if args.repository == "PastureStack/ecr-credential-sync": + graphs["docker"] = (repo_root / evidence_dir / "docker-package-graph.txt").read_text(encoding="utf-8") + docker_proof = json.loads((repo_root / evidence_dir / "docker-manifest-digest-proof.json").read_text(encoding="utf-8")) + failures = builder_violations(report, ledger, args.repository, boundary, headers, graphs, docker_proof) if failures: raise SystemExit("Release vulnerability policy failed:\n" + "\n".join(failures)) print("RELEASE_VULNERABILITY_POLICY_OK") diff --git a/.github/scripts/test_builder_vulnerability_policy.py b/.github/scripts/test_builder_vulnerability_policy.py new file mode 100644 index 0000000..e614ad8 --- /dev/null +++ b/.github/scripts/test_builder_vulnerability_policy.py @@ -0,0 +1,70 @@ +import copy +import importlib.util +from pathlib import Path +import unittest + +spec = importlib.util.spec_from_file_location("policy", Path(__file__).with_name("enforce-runtime-vulnerabilities.py")) +policy = importlib.util.module_from_spec(spec) +spec.loader.exec_module(policy) +REPO = "PastureStack/authentication-service" +PURL = "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + +class BuilderPolicy(unittest.TestCase): + def setUp(self): + self.report = {"SchemaVersion": 2, "Results": [ + {"Target": "usr/local/go/bin/go", "Type": "gobinary", "Packages": [{"Name": "stdlib", "Version": "v1.27.3"}]}, + {"Target": "os", "Vulnerabilities": []}]} + self.ledger = {"repository": REPO, "unfixed": []} + self.boundary = {"package": "linux-libc-dev", "version": "7.0.0-38.38", "kernel_images": False, "kernel_modules": False} + self.headers = {"repository": REPO, "package": "linux-libc-dev", "version": "7.0.0-38.38", "purl": PURL, "ids": ["HEADER-1"]} + def check(self): + return policy.builder_violations(self.report, self.ledger, REPO, self.boundary, self.headers) + def finding(self, severity="LOW", fixed=""): + item = {"VulnerabilityID": "HEADER-1", "PkgName": "linux-libc-dev", "InstalledVersion": "7.0.0-38.38", + "PkgIdentifier": {"PURL": PURL}, "Severity": severity, "FixedVersion": fixed} + self.report["Results"][1]["Vulnerabilities"] = [item] + return item + def test_complete_clean_scan(self): + self.assertEqual(self.check(), []) + def test_missing_expected_binary(self): + self.report["Results"] = self.report["Results"][1:] + with self.assertRaises(ValueError): self.check() + def test_empty_binary_packages(self): + self.report["Results"][0]["Packages"] = [] + with self.assertRaises(ValueError): self.check() + def test_other_binary_missing_analysis(self): + self.report["Results"].append({"Target":"other", "Type":"gobinary"}) + with self.assertRaises(ValueError): self.check() + def test_exact_nonexecuted_header(self): + self.finding("HIGH") + self.assertEqual(self.check(), []) + def test_fixed_header_is_never_exempt(self): + self.finding("LOW", "7.0.0-99") + self.assertTrue(self.check()) + def test_new_header_advisory_blocks(self): + self.finding()["VulnerabilityID"] = "HEADER-NEW" + self.assertTrue(self.check()) + def test_header_purl_drift_blocks(self): + self.finding()["PkgIdentifier"]["PURL"] += "-different" + self.assertTrue(self.check()) + def test_missing_header_boundary_blocks(self): + self.finding() + self.boundary = {} + with self.assertRaises(ValueError): self.check() + def test_unregistered_low_medium_unknown_block(self): + for severity in ("LOW", "MEDIUM", "HIGH", "CRITICAL", "UNKNOWN"): + self.finding(severity)["PkgName"] = "other" + self.assertTrue(self.check()) + def test_secrets_block(self): + self.report["Results"][1]["Secrets"] = [{"RuleID": "test"}] + self.assertTrue(self.check()) + def test_nofix_ledger_does_not_exempt_fixed_finding(self): + finding = self.finding("LOW", "2") + finding.update(PkgName="test", InstalledVersion="1", PkgIdentifier={"PURL":"pkg:test/test@1"}) + self.ledger["unfixed"] = [{"id":"HEADER-1", "package":"test", "version":"1", "purl":"pkg:test/test@1", + "severity":"LOW", "status":"no_official_fix", "officialEvidence":"https://fixture.invalid/test", + "reason":"test", "checkedAt":"2026-10-23"}] + self.assertTrue(self.check()) + +if __name__ == "__main__": + unittest.main() diff --git a/.github/workflows/security-release-gate.yml b/.github/workflows/security-release-gate.yml index dd8707b..117e0d6 100644 --- a/.github/workflows/security-release-gate.yml +++ b/.github/workflows/security-release-gate.yml @@ -244,7 +244,7 @@ jobs: } run_image_scan --scanners vuln,secret --list-all-pkgs \ --format json --output /evidence/runtime-scan.json "$IMAGE" - run_image_scan --scanners vuln,secret \ + run_image_scan --scanners vuln,secret --list-all-pkgs \ --format json --output /evidence/dapper-scan.json "$DAPPER_IMAGE" run_image_scan --scanners vuln \ --vex /source/security/dapper.openvex.json \ @@ -278,6 +278,9 @@ jobs: - name: Enforce full runtime vulnerability policy run: | + bash .github/scripts/check-builder-header-boundary.sh "$DAPPER_IMAGE" > dist/dapper-header-boundary.json + python3 .github/scripts/test_builder_vulnerability_policy.py + python3 .github/scripts/enforce-runtime-vulnerabilities.py --scope builder --repository PastureStack/kubernetes-agent < dist/dapper-scan.json python3 .github/scripts/test_runtime_vulnerability_policy.py python3 .github/scripts/enforce-runtime-vulnerabilities.py --repository PastureStack/kubernetes-agent < dist/runtime-scan.json diff --git a/README.md b/README.md index d901325..7241ed1 100644 --- a/README.md +++ b/README.md @@ -60,3 +60,6 @@ The full-severity runtime gate rejects every finding with an official fix, including LOW, MEDIUM and UNKNOWN. Only exact reviewed LOW/MEDIUM no-fix entries may pass. Existing v0.7.3 remains published for provenance, but is not the fully patched candidate. +### Complete build-environment gate + +The Dapper scan retains all severities and requires nonempty package analysis for the expected Go binaries. Any available fixed version fails, including Low, Medium and Unknown findings. Other Low/Medium findings require an exact package/version/PURL entry backed by the official vendor tracker. The pinned userspace kernel-header exception additionally requires the reviewed CVE set, actual header payload paths, and absence of kernel images/modules; it never permits an available fix. Unknown module findings require the separately verified exact source package graph, not a generic severity exemption. From 9dda1e0000be7856c1f078903a60d4a3017152fc Mon Sep 17 00:00:00 2001 From: chen21019 <19357113+chen21019@users.noreply.github.com> Date: Fri, 23 Oct 2026 22:50:00 +0800 Subject: [PATCH 6/6] Keep absent header exception set empty --- .github/dapper-headers.json | 3156 +---------------------------------- 1 file changed, 2 insertions(+), 3154 deletions(-) diff --git a/.github/dapper-headers.json b/.github/dapper-headers.json index 0f12998..90a12fb 100644 --- a/.github/dapper-headers.json +++ b/.github/dapper-headers.json @@ -4,3159 +4,7 @@ "version": "7.0.0-38.38", "purl": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04", "justification": "vulnerable_code_not_present", - "reason": "Exact user-space API headers only. The gate checks actual package payload paths and absence of kernel images/modules. Any fixed or new finding is rejected before this scope can apply.", + "reason": "No linux-libc-dev package or findings exist in the current Go-only Dapper image. No header CVE is permitted by this empty set.", "checkedAt": "2026-10-23", - "ids": [ - "CVE-2013-7445", - "CVE-2015-7837", - "CVE-2016-8660", - "CVE-2017-0537", - "CVE-2017-13165", - "CVE-2017-13693", - "CVE-2018-1121", - "CVE-2018-12928", - "CVE-2018-12929", - "CVE-2018-12930", - "CVE-2018-12931", - "CVE-2018-17977", - "CVE-2019-14899", - "CVE-2019-15213", - "CVE-2019-15794", - "CVE-2019-19378", - "CVE-2019-19814", - "CVE-2019-20426", - "CVE-2020-14304", - "CVE-2020-35501", - "CVE-2021-26934", - "CVE-2021-3714", - "CVE-2021-3864", - "CVE-2022-0400", - "CVE-2022-0480", - "CVE-2022-1247", - "CVE-2022-25836", - "CVE-2022-2961", - "CVE-2022-3238", - "CVE-2022-41848", - "CVE-2022-44034", - "CVE-2022-4543", - "CVE-2022-45885", - "CVE-2022-48846", - "CVE-2022-48929", - "CVE-2022-49940", - "CVE-2022-50090", - "CVE-2022-50230", - "CVE-2022-50232", - "CVE-2022-50240", - "CVE-2022-50380", - "CVE-2022-50551", - "CVE-2023-0030", - "CVE-2023-0160", - "CVE-2023-1193", - "CVE-2023-26242", - "CVE-2023-31082", - "CVE-2023-33053", - "CVE-2023-52879", - "CVE-2023-53642", - "CVE-2023-54105", - "CVE-2023-54187", - "CVE-2023-54190", - "CVE-2023-6238", - "CVE-2024-0564", - "CVE-2024-35895", - "CVE-2024-35995", - "CVE-2024-53216", - "CVE-2024-56568", - "CVE-2025-40190", - "CVE-2026-100070", - "CVE-2026-100071", - "CVE-2026-100072", - "CVE-2026-100073", - "CVE-2026-100074", - "CVE-2026-100075", - "CVE-2026-100076", - "CVE-2026-100077", - "CVE-2026-100078", - "CVE-2026-100079", - "CVE-2026-46055", - "CVE-2026-64190", - "CVE-2026-68086", - "CVE-2026-68102", - "CVE-2026-68103", - "CVE-2026-68305", - "CVE-2026-68451", - "CVE-2026-68452", - "CVE-2026-68453", - "CVE-2026-72094", - "CVE-2026-72198", - "CVE-2026-72200", - "CVE-2026-72203", - "CVE-2026-72344", - "CVE-2026-72404", - "CVE-2026-72497", - "CVE-2026-74342", - "CVE-2026-74440", - "CVE-2026-74441", - "CVE-2026-74442", - "CVE-2026-74443", - "CVE-2026-74444", - "CVE-2026-74445", - "CVE-2026-74446", - "CVE-2026-74447", - "CVE-2026-74448", - "CVE-2026-74449", - "CVE-2026-74450", - "CVE-2026-74451", - "CVE-2026-74452", - "CVE-2026-74453", - "CVE-2026-74454", - "CVE-2026-74455", - "CVE-2026-74456", - "CVE-2026-74457", - "CVE-2026-74458", - "CVE-2026-74459", - "CVE-2026-74460", - "CVE-2026-74461", - "CVE-2026-74462", - "CVE-2026-74463", - "CVE-2026-74464", - "CVE-2026-74465", - "CVE-2026-74466", - "CVE-2026-74467", - "CVE-2026-74468", - "CVE-2026-74469", - "CVE-2026-74470", - "CVE-2026-74471", - "CVE-2026-74472", - "CVE-2026-74473", - "CVE-2026-74474", - "CVE-2026-74475", - "CVE-2026-74476", - "CVE-2026-74477", - "CVE-2026-74478", - "CVE-2026-74479", - "CVE-2026-74480", - "CVE-2026-74481", - "CVE-2026-74482", - "CVE-2026-74483", - "CVE-2026-74484", - "CVE-2026-74485", - "CVE-2026-74486", - "CVE-2026-74487", - "CVE-2026-74488", - "CVE-2026-74490", - "CVE-2026-74491", - "CVE-2026-74492", - "CVE-2026-74493", - "CVE-2026-74494", - "CVE-2026-74495", - "CVE-2026-74496", - "CVE-2026-74497", - "CVE-2026-74498", - "CVE-2026-74499", - "CVE-2026-74500", - "CVE-2026-74501", - "CVE-2026-74502", - "CVE-2026-74503", - "CVE-2026-74504", - "CVE-2026-74505", - "CVE-2026-74506", - "CVE-2026-74507", - "CVE-2026-74508", - "CVE-2026-74509", - "CVE-2026-74510", - "CVE-2026-74512", - "CVE-2026-74513", - "CVE-2026-74514", - "CVE-2026-74515", - "CVE-2026-74516", - "CVE-2026-74517", - "CVE-2026-74518", - "CVE-2026-74519", - "CVE-2026-74520", - "CVE-2026-74521", - "CVE-2026-74522", - "CVE-2026-74523", - "CVE-2026-74524", - "CVE-2026-74525", - "CVE-2026-74526", - "CVE-2026-74527", - "CVE-2026-74528", - "CVE-2026-74529", - "CVE-2026-74530", - "CVE-2026-74531", - "CVE-2026-74532", - "CVE-2026-74533", - "CVE-2026-74534", - "CVE-2026-74535", - "CVE-2026-74536", - "CVE-2026-74537", - "CVE-2026-74538", - "CVE-2026-74539", - "CVE-2026-74540", - "CVE-2026-74541", - "CVE-2026-74542", - "CVE-2026-74543", - "CVE-2026-74544", - "CVE-2026-74545", - "CVE-2026-74546", - "CVE-2026-74547", - "CVE-2026-74548", - "CVE-2026-74549", - "CVE-2026-74550", - "CVE-2026-74551", - "CVE-2026-74552", - "CVE-2026-74553", - "CVE-2026-74554", - "CVE-2026-74555", - "CVE-2026-74556", - "CVE-2026-74557", - "CVE-2026-74558", - "CVE-2026-74559", - "CVE-2026-74560", - "CVE-2026-74561", - "CVE-2026-74562", - "CVE-2026-74563", - "CVE-2026-74564", - "CVE-2026-74565", - "CVE-2026-74566", - "CVE-2026-74567", - "CVE-2026-74568", - "CVE-2026-74569", - "CVE-2026-74571", - "CVE-2026-74572", - "CVE-2026-74573", - "CVE-2026-74574", - "CVE-2026-74575", - "CVE-2026-74576", - "CVE-2026-74577", - "CVE-2026-74578", - "CVE-2026-74579", - "CVE-2026-74580", - "CVE-2026-74581", - "CVE-2026-74582", - "CVE-2026-74583", - "CVE-2026-74585", - "CVE-2026-74586", - "CVE-2026-74587", - "CVE-2026-74588", - "CVE-2026-74589", - "CVE-2026-74590", - "CVE-2026-74591", - "CVE-2026-74592", - "CVE-2026-74593", - "CVE-2026-74594", - "CVE-2026-74595", - "CVE-2026-74596", - "CVE-2026-74597", - "CVE-2026-74598", - "CVE-2026-74599", - "CVE-2026-74600", - "CVE-2026-74601", - "CVE-2026-74602", - "CVE-2026-74603", - "CVE-2026-74604", - "CVE-2026-74605", - "CVE-2026-74606", - "CVE-2026-74607", - "CVE-2026-74608", - "CVE-2026-74609", - "CVE-2026-74610", - "CVE-2026-74611", - "CVE-2026-74612", - "CVE-2026-74613", - "CVE-2026-74614", - "CVE-2026-74615", - "CVE-2026-74616", - "CVE-2026-74617", - "CVE-2026-74618", - "CVE-2026-74619", - "CVE-2026-74620", - "CVE-2026-74621", - "CVE-2026-74622", - "CVE-2026-74623", - "CVE-2026-74624", - "CVE-2026-74625", - "CVE-2026-74626", - "CVE-2026-74627", - "CVE-2026-74628", - "CVE-2026-74629", - "CVE-2026-74630", - "CVE-2026-74631", - "CVE-2026-74632", - "CVE-2026-74633", - "CVE-2026-74634", - "CVE-2026-74635", - "CVE-2026-74636", - "CVE-2026-74637", - "CVE-2026-74638", - "CVE-2026-74639", - "CVE-2026-74640", - "CVE-2026-74641", - "CVE-2026-74643", - "CVE-2026-74644", - "CVE-2026-74645", - "CVE-2026-74646", - "CVE-2026-74647", - "CVE-2026-74648", - "CVE-2026-74649", - "CVE-2026-74650", - "CVE-2026-74651", - "CVE-2026-74652", - "CVE-2026-74653", - "CVE-2026-74654", - "CVE-2026-74655", - "CVE-2026-74656", - "CVE-2026-74657", - "CVE-2026-74658", - "CVE-2026-74659", - "CVE-2026-74660", - "CVE-2026-74661", - "CVE-2026-74662", - "CVE-2026-74663", - "CVE-2026-74664", - "CVE-2026-74665", - "CVE-2026-74666", - "CVE-2026-74667", - "CVE-2026-74668", - "CVE-2026-74669", - "CVE-2026-74670", - "CVE-2026-74671", - "CVE-2026-74672", - "CVE-2026-74673", - "CVE-2026-74674", - "CVE-2026-74675", - "CVE-2026-74676", - "CVE-2026-74677", - "CVE-2026-74678", - "CVE-2026-74679", - "CVE-2026-74680", - "CVE-2026-74681", - "CVE-2026-74682", - "CVE-2026-74683", - "CVE-2026-74684", - "CVE-2026-74685", - "CVE-2026-74686", - "CVE-2026-74687", - "CVE-2026-74688", - "CVE-2026-74689", - "CVE-2026-74690", - "CVE-2026-74691", - "CVE-2026-74692", - "CVE-2026-74693", - "CVE-2026-74694", - "CVE-2026-74695", - "CVE-2026-74696", - "CVE-2026-74697", - "CVE-2026-74698", - "CVE-2026-74699", - "CVE-2026-74700", - "CVE-2026-74701", - "CVE-2026-74702", - "CVE-2026-74703", - "CVE-2026-74704", - "CVE-2026-74705", - "CVE-2026-74706", - "CVE-2026-74707", - "CVE-2026-74708", - "CVE-2026-74709", - "CVE-2026-74710", - "CVE-2026-74711", - "CVE-2026-74712", - "CVE-2026-74713", - "CVE-2026-74714", - "CVE-2026-74715", - "CVE-2026-74716", - "CVE-2026-74717", - "CVE-2026-74718", - "CVE-2026-74719", - "CVE-2026-74720", - "CVE-2026-74721", - "CVE-2026-74722", - "CVE-2026-74723", - "CVE-2026-74724", - "CVE-2026-74725", - "CVE-2026-74726", - "CVE-2026-74727", - "CVE-2026-74728", - "CVE-2026-74729", - "CVE-2026-74730", - "CVE-2026-74733", - "CVE-2026-74734", - "CVE-2026-74735", - "CVE-2026-74736", - "CVE-2026-74737", - "CVE-2026-74738", - "CVE-2026-74739", - "CVE-2026-74740", - "CVE-2026-74741", - "CVE-2026-74742", - "CVE-2026-74743", - "CVE-2026-74744", - "CVE-2026-74745", - "CVE-2026-74746", - "CVE-2026-74747", - "CVE-2026-74748", - "CVE-2026-74750", - "CVE-2026-74752", - "CVE-2026-74753", - "CVE-2026-74754", - "CVE-2026-80519", - "CVE-2026-80520", - "CVE-2026-80521", - "CVE-2026-80522", - "CVE-2026-80523", - "CVE-2026-80524", - "CVE-2026-80525", - "CVE-2026-80526", - "CVE-2026-80527", - "CVE-2026-80528", - "CVE-2026-80529", - "CVE-2026-80530", - "CVE-2026-80531", - "CVE-2026-80532", - "CVE-2026-80533", - "CVE-2026-80534", - "CVE-2026-80535", - "CVE-2026-80536", - "CVE-2026-80537", - "CVE-2026-80538", - "CVE-2026-80539", - "CVE-2026-80540", - "CVE-2026-80541", - "CVE-2026-80542", - "CVE-2026-80547", - "CVE-2026-80548", - "CVE-2026-80549", - "CVE-2026-80550", - "CVE-2026-80551", - "CVE-2026-80552", - "CVE-2026-80553", - "CVE-2026-80554", - "CVE-2026-80555", - "CVE-2026-80556", - "CVE-2026-80557", - "CVE-2026-80558", - "CVE-2026-80559", - "CVE-2026-80560", - "CVE-2026-80561", - "CVE-2026-80562", - "CVE-2026-80563", - "CVE-2026-80564", - "CVE-2026-80565", - "CVE-2026-80566", - "CVE-2026-80567", - "CVE-2026-80568", - "CVE-2026-80569", - "CVE-2026-80570", - "CVE-2026-80571", - "CVE-2026-80572", - "CVE-2026-80573", - "CVE-2026-80574", - "CVE-2026-80575", - "CVE-2026-80576", - "CVE-2026-80577", - "CVE-2026-80578", - "CVE-2026-80579", - "CVE-2026-80580", - "CVE-2026-80581", - "CVE-2026-80582", - "CVE-2026-80583", - "CVE-2026-80584", - "CVE-2026-80585", - "CVE-2026-80586", - "CVE-2026-80587", - "CVE-2026-80588", - "CVE-2026-80589", - "CVE-2026-80590", - "CVE-2026-80608", - "CVE-2026-80678", - "CVE-2026-80679", - "CVE-2026-80680", - "CVE-2026-80681", - "CVE-2026-80683", - "CVE-2026-80684", - "CVE-2026-80685", - "CVE-2026-80686", - "CVE-2026-80687", - "CVE-2026-80688", - "CVE-2026-80689", - "CVE-2026-80690", - "CVE-2026-80691", - "CVE-2026-80692", - "CVE-2026-80693", - "CVE-2026-80694", - "CVE-2026-80695", - "CVE-2026-80696", - "CVE-2026-80697", - "CVE-2026-80698", - "CVE-2026-80699", - "CVE-2026-80700", - "CVE-2026-80701", - "CVE-2026-80702", - "CVE-2026-80703", - "CVE-2026-80704", - "CVE-2026-80705", - "CVE-2026-80706", - "CVE-2026-80707", - "CVE-2026-80708", - "CVE-2026-80709", - "CVE-2026-80710", - "CVE-2026-80711", - "CVE-2026-80712", - "CVE-2026-80713", - "CVE-2026-80714", - "CVE-2026-80715", - "CVE-2026-80716", - "CVE-2026-80717", - "CVE-2026-80718", - "CVE-2026-80720", - "CVE-2026-80721", - "CVE-2026-80722", - "CVE-2026-80723", - "CVE-2026-80724", - "CVE-2026-80727", - "CVE-2026-80729", - "CVE-2026-80730", - "CVE-2026-80731", - "CVE-2026-80732", - "CVE-2026-80733", - "CVE-2026-80734", - "CVE-2026-80735", - "CVE-2026-80736", - "CVE-2026-80737", - "CVE-2026-80738", - "CVE-2026-80739", - "CVE-2026-80740", - "CVE-2026-80741", - "CVE-2026-80742", - "CVE-2026-80743", - "CVE-2026-80744", - "CVE-2026-80745", - "CVE-2026-80747", - "CVE-2026-80748", - "CVE-2026-80749", - "CVE-2026-80750", - "CVE-2026-80751", - "CVE-2026-80752", - "CVE-2026-80753", - "CVE-2026-80754", - "CVE-2026-80755", - "CVE-2026-80756", - "CVE-2026-80757", - "CVE-2026-80758", - "CVE-2026-80759", - "CVE-2026-80760", - "CVE-2026-80761", - "CVE-2026-80762", - "CVE-2026-80763", - "CVE-2026-80764", - "CVE-2026-80765", - "CVE-2026-80766", - "CVE-2026-80767", - "CVE-2026-80768", - "CVE-2026-80769", - "CVE-2026-80770", - "CVE-2026-80771", - "CVE-2026-80772", - "CVE-2026-80774", - "CVE-2026-80775", - "CVE-2026-80776", - "CVE-2026-80777", - "CVE-2026-80778", - "CVE-2026-80779", - "CVE-2026-80780", - "CVE-2026-80781", - "CVE-2026-80782", - "CVE-2026-80783", - "CVE-2026-80784", - "CVE-2026-80785", - "CVE-2026-80786", - "CVE-2026-80787", - "CVE-2026-80788", - "CVE-2026-80789", - "CVE-2026-80790", - "CVE-2026-80791", - "CVE-2026-80792", - "CVE-2026-80793", - "CVE-2026-80794", - "CVE-2026-80795", - "CVE-2026-80796", - "CVE-2026-80797", - "CVE-2026-80798", - "CVE-2026-80799", - "CVE-2026-80800", - "CVE-2026-80801", - "CVE-2026-80802", - "CVE-2026-80803", - "CVE-2026-80804", - "CVE-2026-80805", - "CVE-2026-80806", - "CVE-2026-80807", - "CVE-2026-80808", - "CVE-2026-80809", - "CVE-2026-80810", - "CVE-2026-80811", - "CVE-2026-80812", - "CVE-2026-80813", - "CVE-2026-80814", - "CVE-2026-80815", - "CVE-2026-80816", - "CVE-2026-80817", - "CVE-2026-80818", - "CVE-2026-80819", - "CVE-2026-80820", - "CVE-2026-80821", - "CVE-2026-80822", - "CVE-2026-80823", - "CVE-2026-80824", - "CVE-2026-80825", - "CVE-2026-80826", - "CVE-2026-80827", - "CVE-2026-80828", - "CVE-2026-80829", - "CVE-2026-80830", - "CVE-2026-80831", - "CVE-2026-80832", - "CVE-2026-80833", - "CVE-2026-80834", - "CVE-2026-80835", - "CVE-2026-80836", - "CVE-2026-80837", - "CVE-2026-80838", - "CVE-2026-80839", - "CVE-2026-80840", - "CVE-2026-80841", - "CVE-2026-80842", - "CVE-2026-80843", - "CVE-2026-80844", - "CVE-2026-80845", - "CVE-2026-80846", - "CVE-2026-80847", - "CVE-2026-80848", - "CVE-2026-80849", - "CVE-2026-80850", - "CVE-2026-80851", - "CVE-2026-80852", - "CVE-2026-80854", - "CVE-2026-80855", - "CVE-2026-80856", - "CVE-2026-80857", - "CVE-2026-80858", - "CVE-2026-80859", - "CVE-2026-80860", - "CVE-2026-80861", - "CVE-2026-80862", - "CVE-2026-80863", - "CVE-2026-80864", - "CVE-2026-80887", - "CVE-2026-80888", - "CVE-2026-80889", - "CVE-2026-80890", - "CVE-2026-80891", - "CVE-2026-80892", - "CVE-2026-80893", - "CVE-2026-80894", - "CVE-2026-80895", - "CVE-2026-80896", - "CVE-2026-80897", - "CVE-2026-80898", - "CVE-2026-80899", - "CVE-2026-80900", - "CVE-2026-80901", - "CVE-2026-80902", - "CVE-2026-80903", - "CVE-2026-80904", - "CVE-2026-80905", - "CVE-2026-80906", - "CVE-2026-80907", - "CVE-2026-80908", - "CVE-2026-80909", - "CVE-2026-80910", - "CVE-2026-80911", - "CVE-2026-80912", - "CVE-2026-80913", - "CVE-2026-80914", - "CVE-2026-80915", - "CVE-2026-80916", - "CVE-2026-80917", - "CVE-2026-80918", - "CVE-2026-80920", - "CVE-2026-80921", - "CVE-2026-80922", - "CVE-2026-80923", - "CVE-2026-80924", - "CVE-2026-80925", - "CVE-2026-80926", - "CVE-2026-80927", - "CVE-2026-80928", - "CVE-2026-80929", - "CVE-2026-80930", - "CVE-2026-80931", - "CVE-2026-80932", - "CVE-2026-80933", - "CVE-2026-80934", - "CVE-2026-80935", - "CVE-2026-80936", - "CVE-2026-80937", - "CVE-2026-80938", - "CVE-2026-80939", - "CVE-2026-80940", - "CVE-2026-80941", - "CVE-2026-80942", - "CVE-2026-80943", - "CVE-2026-80944", - "CVE-2026-80945", - "CVE-2026-80946", - "CVE-2026-80947", - "CVE-2026-80948", - "CVE-2026-80949", - "CVE-2026-80950", - "CVE-2026-80951", - "CVE-2026-80952", - "CVE-2026-80953", - "CVE-2026-80954", - "CVE-2026-80955", - "CVE-2026-80956", - "CVE-2026-80957", - "CVE-2026-80958", - "CVE-2026-80959", - "CVE-2026-80960", - "CVE-2026-80961", - "CVE-2026-80962", - "CVE-2026-80963", - "CVE-2026-80964", - "CVE-2026-80965", - "CVE-2026-80966", - "CVE-2026-80967", - "CVE-2026-80968", - "CVE-2026-80969", - "CVE-2026-80970", - "CVE-2026-80971", - "CVE-2026-80972", - "CVE-2026-80973", - "CVE-2026-80974", - "CVE-2026-80975", - "CVE-2026-80976", - "CVE-2026-80977", - "CVE-2026-80978", - "CVE-2026-80979", - "CVE-2026-80980", - "CVE-2026-80981", - "CVE-2026-80982", - "CVE-2026-80983", - "CVE-2026-80984", - "CVE-2026-80985", - "CVE-2026-80986", - "CVE-2026-80987", - "CVE-2026-80988", - "CVE-2026-80989", - "CVE-2026-80990", - "CVE-2026-80991", - "CVE-2026-80992", - "CVE-2026-80993", - "CVE-2026-80994", - "CVE-2026-80996", - "CVE-2026-80997", - "CVE-2026-80999", - "CVE-2026-81000", - "CVE-2026-81001", - "CVE-2026-81002", - "CVE-2026-81003", - "CVE-2026-81004", - "CVE-2026-81005", - "CVE-2026-81006", - "CVE-2026-81007", - "CVE-2026-81008", - "CVE-2026-81009", - "CVE-2026-81010", - "CVE-2026-81011", - "CVE-2026-81012", - "CVE-2026-81013", - "CVE-2026-81014", - "CVE-2026-81015", - "CVE-2026-81016", - "CVE-2026-81017", - "CVE-2026-81018", - "CVE-2026-89437", - "CVE-2026-89438", - "CVE-2026-89439", - "CVE-2026-89440", - "CVE-2026-89441", - "CVE-2026-89442", - "CVE-2026-89443", - "CVE-2026-89444", - "CVE-2026-89445", - "CVE-2026-89446", - "CVE-2026-89447", - "CVE-2026-89448", - "CVE-2026-89449", - "CVE-2026-89450", - "CVE-2026-89451", - "CVE-2026-89452", - "CVE-2026-89453", - "CVE-2026-89454", - "CVE-2026-89455", - "CVE-2026-89456", - "CVE-2026-89457", - "CVE-2026-89458", - "CVE-2026-89460", - "CVE-2026-89461", - "CVE-2026-89462", - "CVE-2026-89463", - "CVE-2026-89464", - "CVE-2026-89465", - "CVE-2026-89466", - "CVE-2026-89467", - "CVE-2026-89468", - "CVE-2026-89469", - "CVE-2026-89470", - "CVE-2026-89471", - "CVE-2026-89472", - "CVE-2026-89473", - "CVE-2026-89474", - "CVE-2026-89475", - "CVE-2026-89476", - "CVE-2026-89477", - "CVE-2026-89478", - "CVE-2026-89479", - "CVE-2026-89480", - "CVE-2026-89481", - "CVE-2026-89482", - "CVE-2026-89483", - "CVE-2026-89484", - "CVE-2026-89485", - "CVE-2026-89486", - "CVE-2026-89487", - "CVE-2026-89488", - "CVE-2026-89489", - "CVE-2026-89490", - "CVE-2026-89491", - "CVE-2026-89492", - "CVE-2026-89493", - "CVE-2026-89494", - "CVE-2026-89495", - "CVE-2026-89496", - "CVE-2026-89497", - "CVE-2026-89498", - "CVE-2026-89500", - "CVE-2026-89501", - "CVE-2026-89502", - "CVE-2026-89503", - "CVE-2026-89504", - "CVE-2026-89506", - "CVE-2026-89507", - "CVE-2026-89508", - "CVE-2026-89509", - "CVE-2026-89510", - "CVE-2026-89511", - "CVE-2026-89512", - "CVE-2026-89513", - "CVE-2026-89514", - "CVE-2026-89515", - "CVE-2026-89517", - "CVE-2026-89518", - "CVE-2026-89519", - "CVE-2026-89520", - "CVE-2026-89521", - "CVE-2026-89522", - "CVE-2026-89523", - "CVE-2026-89524", - "CVE-2026-89525", - "CVE-2026-89526", - "CVE-2026-89527", - "CVE-2026-89528", - "CVE-2026-89529", - "CVE-2026-89530", - "CVE-2026-89531", - "CVE-2026-89532", - "CVE-2026-89533", - "CVE-2026-89534", - "CVE-2026-89535", - "CVE-2026-89536", - "CVE-2026-89537", - "CVE-2026-89538", - "CVE-2026-89539", - "CVE-2026-89540", - "CVE-2026-89541", - "CVE-2026-89542", - "CVE-2026-89543", - "CVE-2026-89544", - "CVE-2026-89545", - "CVE-2026-89546", - "CVE-2026-89547", - "CVE-2026-89548", - "CVE-2026-89549", - "CVE-2026-89550", - "CVE-2026-89551", - "CVE-2026-89552", - "CVE-2026-89553", - "CVE-2026-89554", - "CVE-2026-89555", - "CVE-2026-89556", - "CVE-2026-89557", - "CVE-2026-89558", - "CVE-2026-89559", - "CVE-2026-89560", - "CVE-2026-89561", - "CVE-2026-89562", - "CVE-2026-89563", - "CVE-2026-89564", - "CVE-2026-89565", - "CVE-2026-89566", - "CVE-2026-89567", - "CVE-2026-89568", - "CVE-2026-89569", - "CVE-2026-89570", - "CVE-2026-89571", - "CVE-2026-89572", - "CVE-2026-89573", - "CVE-2026-89574", - "CVE-2026-89575", - "CVE-2026-89576", - "CVE-2026-89577", - "CVE-2026-89578", - "CVE-2026-89579", - "CVE-2026-89580", - "CVE-2026-89581", - "CVE-2026-89582", - "CVE-2026-89583", - "CVE-2026-89584", - "CVE-2026-89585", - "CVE-2026-89586", - "CVE-2026-89587", - "CVE-2026-89588", - "CVE-2026-89589", - "CVE-2026-89590", - "CVE-2026-89591", - "CVE-2026-89592", - "CVE-2026-89593", - "CVE-2026-89594", - "CVE-2026-89595", - "CVE-2026-89596", - "CVE-2026-89597", - "CVE-2026-89598", - "CVE-2026-89599", - "CVE-2026-89600", - "CVE-2026-89601", - "CVE-2026-89602", - "CVE-2026-89604", - "CVE-2026-89605", - "CVE-2026-89606", - "CVE-2026-89607", - "CVE-2026-89608", - "CVE-2026-89609", - "CVE-2026-89615", - "CVE-2026-89616", - "CVE-2026-89617", - "CVE-2026-89618", - "CVE-2026-89619", - "CVE-2026-89620", - "CVE-2026-89621", - "CVE-2026-89622", - "CVE-2026-89623", - "CVE-2026-89624", - "CVE-2026-89625", - "CVE-2026-89626", - "CVE-2026-89627", - "CVE-2026-89628", - "CVE-2026-89629", - "CVE-2026-89630", - "CVE-2026-89631", - "CVE-2026-89632", - "CVE-2026-89633", - "CVE-2026-89634", - "CVE-2026-89636", - "CVE-2026-89637", - "CVE-2026-89638", - "CVE-2026-89640", - "CVE-2026-89641", - "CVE-2026-89642", - "CVE-2026-89643", - "CVE-2026-89644", - "CVE-2026-89645", - "CVE-2026-89646", - "CVE-2026-89647", - "CVE-2026-89648", - "CVE-2026-89649", - "CVE-2026-89650", - "CVE-2026-89651", - "CVE-2026-89652", - "CVE-2026-89653", - "CVE-2026-89654", - "CVE-2026-89655", - "CVE-2026-89656", - "CVE-2026-89657", - "CVE-2026-89658", - "CVE-2026-89659", - "CVE-2026-89660", - "CVE-2026-89661", - "CVE-2026-89662", - "CVE-2026-89663", - "CVE-2026-89664", - "CVE-2026-89665", - "CVE-2026-89666", - "CVE-2026-89667", - "CVE-2026-89668", - "CVE-2026-89669", - "CVE-2026-89670", - "CVE-2026-89671", - "CVE-2026-89672", - "CVE-2026-89673", - "CVE-2026-89674", - "CVE-2026-89675", - "CVE-2026-89676", - "CVE-2026-89677", - "CVE-2026-89678", - "CVE-2026-89679", - "CVE-2026-89680", - "CVE-2026-89682", - "CVE-2026-89683", - "CVE-2026-89684", - "CVE-2026-89685", - "CVE-2026-89686", - "CVE-2026-89687", - "CVE-2026-89688", - "CVE-2026-89689", - "CVE-2026-89690", - "CVE-2026-89691", - "CVE-2026-89692", - "CVE-2026-89693", - "CVE-2026-89694", - "CVE-2026-89695", - "CVE-2026-89696", - "CVE-2026-89697", - "CVE-2026-89698", - "CVE-2026-89699", - "CVE-2026-89700", - "CVE-2026-89701", - "CVE-2026-89702", - "CVE-2026-89703", - "CVE-2026-89704", - "CVE-2026-89705", - "CVE-2026-89706", - "CVE-2026-89707", - "CVE-2026-89708", - "CVE-2026-89709", - "CVE-2026-89710", - "CVE-2026-89711", - "CVE-2026-89712", - "CVE-2026-89713", - "CVE-2026-89714", - "CVE-2026-89715", - "CVE-2026-89716", - "CVE-2026-89717", - "CVE-2026-89718", - "CVE-2026-89719", - "CVE-2026-89720", - "CVE-2026-89721", - "CVE-2026-89722", - "CVE-2026-89723", - "CVE-2026-89724", - "CVE-2026-89725", - "CVE-2026-89726", - "CVE-2026-89727", - "CVE-2026-89728", - "CVE-2026-89729", - "CVE-2026-89730", - "CVE-2026-89731", - "CVE-2026-89732", - "CVE-2026-89733", - "CVE-2026-89734", - "CVE-2026-89735", - "CVE-2026-89736", - "CVE-2026-89737", - "CVE-2026-89738", - "CVE-2026-89739", - "CVE-2026-89740", - "CVE-2026-89741", - "CVE-2026-89742", - "CVE-2026-89743", - "CVE-2026-89744", - "CVE-2026-89745", - "CVE-2026-89746", - "CVE-2026-89747", - "CVE-2026-89749", - "CVE-2026-89750", - "CVE-2026-89751", - "CVE-2026-89752", - "CVE-2026-89753", - "CVE-2026-89754", - "CVE-2026-89755", - "CVE-2026-89756", - "CVE-2026-89757", - "CVE-2026-89758", - "CVE-2026-89759", - "CVE-2026-89761", - "CVE-2026-89762", - "CVE-2026-89763", - "CVE-2026-89764", - "CVE-2026-89765", - "CVE-2026-89766", - "CVE-2026-89767", - "CVE-2026-89768", - "CVE-2026-89769", - "CVE-2026-89771", - "CVE-2026-89772", - "CVE-2026-89775", - "CVE-2026-89776", - "CVE-2026-89777", - "CVE-2026-89778", - "CVE-2026-89779", - "CVE-2026-89780", - "CVE-2026-89781", - "CVE-2026-89782", - "CVE-2026-89783", - "CVE-2026-89784", - "CVE-2026-89785", - "CVE-2026-89786", - "CVE-2026-89787", - "CVE-2026-89788", - "CVE-2026-89789", - "CVE-2026-89790", - "CVE-2026-89791", - "CVE-2026-89792", - "CVE-2026-89793", - "CVE-2026-89794", - "CVE-2026-89795", - "CVE-2026-89796", - "CVE-2026-89797", - "CVE-2026-89798", - "CVE-2026-89799", - "CVE-2026-89800", - "CVE-2026-89801", - "CVE-2026-89802", - "CVE-2026-89803", - "CVE-2026-89804", - "CVE-2026-89805", - "CVE-2026-89806", - "CVE-2026-89807", - "CVE-2026-89808", - "CVE-2026-89809", - "CVE-2026-89810", - "CVE-2026-89811", - "CVE-2026-89812", - "CVE-2026-89813", - "CVE-2026-89814", - "CVE-2026-89815", - "CVE-2026-89816", - "CVE-2026-89817", - "CVE-2026-89818", - "CVE-2026-89819", - "CVE-2026-89820", - "CVE-2026-89821", - "CVE-2026-89822", - "CVE-2026-89823", - "CVE-2026-89824", - "CVE-2026-89825", - "CVE-2026-89826", - "CVE-2026-89827", - "CVE-2026-89828", - "CVE-2026-89829", - "CVE-2026-89830", - "CVE-2026-89831", - "CVE-2026-89832", - "CVE-2026-89833", - "CVE-2026-89834", - "CVE-2026-89835", - "CVE-2026-89836", - "CVE-2026-89837", - "CVE-2026-89838", - "CVE-2026-89839", - "CVE-2026-89840", - "CVE-2026-89841", - "CVE-2026-89842", - "CVE-2026-89843", - "CVE-2026-89844", - "CVE-2026-89845", - "CVE-2026-89846", - "CVE-2026-89847", - "CVE-2026-89848", - "CVE-2026-89849", - "CVE-2026-89850", - "CVE-2026-89851", - "CVE-2026-89852", - "CVE-2026-89853", - "CVE-2026-89854", - "CVE-2026-89855", - "CVE-2026-89856", - "CVE-2026-89857", - "CVE-2026-89858", - "CVE-2026-89859", - "CVE-2026-89860", - "CVE-2026-89861", - "CVE-2026-89862", - "CVE-2026-89863", - "CVE-2026-89864", - "CVE-2026-89865", - "CVE-2026-89866", - "CVE-2026-89867", - "CVE-2026-89868", - "CVE-2026-89869", - "CVE-2026-89870", - "CVE-2026-89871", - "CVE-2026-89872", - "CVE-2026-89873", - "CVE-2026-89874", - "CVE-2026-89875", - "CVE-2026-89876", - "CVE-2026-89877", - "CVE-2026-89878", - "CVE-2026-89879", - "CVE-2026-89880", - "CVE-2026-89881", - "CVE-2026-89882", - "CVE-2026-89883", - "CVE-2026-89884", - "CVE-2026-89885", - "CVE-2026-89886", - "CVE-2026-89887", - "CVE-2026-89888", - "CVE-2026-89889", - "CVE-2026-89890", - "CVE-2026-89891", - "CVE-2026-89892", - "CVE-2026-89893", - "CVE-2026-89894", - "CVE-2026-89895", - "CVE-2026-89896", - "CVE-2026-89897", - "CVE-2026-89898", - "CVE-2026-89899", - "CVE-2026-89901", - "CVE-2026-89902", - "CVE-2026-89903", - "CVE-2026-89904", - "CVE-2026-89905", - "CVE-2026-89906", - "CVE-2026-89907", - "CVE-2026-89908", - "CVE-2026-89909", - "CVE-2026-89911", - "CVE-2026-89912", - "CVE-2026-89913", - "CVE-2026-89914", - "CVE-2026-89915", - "CVE-2026-89916", - "CVE-2026-89917", - "CVE-2026-89918", - "CVE-2026-89919", - "CVE-2026-89920", - "CVE-2026-89921", - "CVE-2026-89922", - "CVE-2026-89923", - "CVE-2026-89924", - "CVE-2026-89925", - "CVE-2026-89926", - "CVE-2026-89927", - "CVE-2026-89928", - "CVE-2026-89929", - "CVE-2026-89930", - "CVE-2026-89931", - "CVE-2026-89932", - "CVE-2026-89933", - "CVE-2026-89934", - "CVE-2026-89935", - "CVE-2026-89936", - "CVE-2026-89937", - "CVE-2026-89938", - "CVE-2026-89939", - "CVE-2026-89940", - "CVE-2026-89941", - "CVE-2026-89942", - "CVE-2026-89944", - "CVE-2026-89945", - "CVE-2026-89946", - "CVE-2026-89947", - "CVE-2026-89948", - "CVE-2026-89949", - "CVE-2026-89950", - "CVE-2026-89951", - "CVE-2026-89952", - "CVE-2026-89953", - "CVE-2026-89954", - "CVE-2026-89955", - "CVE-2026-89956", - "CVE-2026-89957", - "CVE-2026-89958", - "CVE-2026-89959", - "CVE-2026-89960", - "CVE-2026-89961", - "CVE-2026-89962", - "CVE-2026-89963", - "CVE-2026-89964", - "CVE-2026-89965", - "CVE-2026-89966", - "CVE-2026-89967", - "CVE-2026-89968", - "CVE-2026-89969", - "CVE-2026-89970", - "CVE-2026-89971", - "CVE-2026-89972", - "CVE-2026-89973", - "CVE-2026-89974", - "CVE-2026-89975", - "CVE-2026-89976", - "CVE-2026-89977", - "CVE-2026-89978", - "CVE-2026-89979", - "CVE-2026-89981", - "CVE-2026-89982", - "CVE-2026-89983", - "CVE-2026-89984", - "CVE-2026-89986", - "CVE-2026-89987", - "CVE-2026-89988", - "CVE-2026-89989", - "CVE-2026-89990", - "CVE-2026-89991", - "CVE-2026-89992", - "CVE-2026-89993", - "CVE-2026-89994", - "CVE-2026-89995", - "CVE-2026-89996", - "CVE-2026-89997", - "CVE-2026-89998", - "CVE-2026-89999", - "CVE-2026-90000", - "CVE-2026-90001", - "CVE-2026-90002", - "CVE-2026-90003", - "CVE-2026-90005", - "CVE-2026-90006", - "CVE-2026-90007", - "CVE-2026-90008", - "CVE-2026-90011", - "CVE-2026-90012", - "CVE-2026-90013", - "CVE-2026-90014", - "CVE-2026-90015", - "CVE-2026-90016", - "CVE-2026-90017", - "CVE-2026-90018", - "CVE-2026-90019", - "CVE-2026-90020", - "CVE-2026-90021", - "CVE-2026-90022", - "CVE-2026-90023", - "CVE-2026-90024", - "CVE-2026-90025", - "CVE-2026-90026", - "CVE-2026-90027", - "CVE-2026-90028", - "CVE-2026-90029", - "CVE-2026-90030", - "CVE-2026-90031", - "CVE-2026-90032", - "CVE-2026-90033", - "CVE-2026-90034", - "CVE-2026-90035", - "CVE-2026-90036", - "CVE-2026-90037", - "CVE-2026-90039", - "CVE-2026-90040", - "CVE-2026-90041", - "CVE-2026-90042", - "CVE-2026-90043", - "CVE-2026-90044", - "CVE-2026-90045", - "CVE-2026-90046", - "CVE-2026-90047", - "CVE-2026-90048", - "CVE-2026-90049", - "CVE-2026-90051", - "CVE-2026-90053", - "CVE-2026-90054", - "CVE-2026-90055", - "CVE-2026-90056", - "CVE-2026-90057", - "CVE-2026-90058", - "CVE-2026-90059", - "CVE-2026-90060", - "CVE-2026-90061", - "CVE-2026-90062", - "CVE-2026-90063", - "CVE-2026-90065", - "CVE-2026-90066", - "CVE-2026-90067", - "CVE-2026-90068", - "CVE-2026-90069", - "CVE-2026-90070", - "CVE-2026-90071", - "CVE-2026-90072", - "CVE-2026-90073", - "CVE-2026-90074", - "CVE-2026-90075", - "CVE-2026-90076", - "CVE-2026-90077", - "CVE-2026-90078", - "CVE-2026-90079", - "CVE-2026-90080", - "CVE-2026-90081", - "CVE-2026-90082", - "CVE-2026-90083", - "CVE-2026-90084", - "CVE-2026-90085", - "CVE-2026-90086", - "CVE-2026-90087", - "CVE-2026-90088", - "CVE-2026-90089", - "CVE-2026-90090", - "CVE-2026-90091", - "CVE-2026-90092", - "CVE-2026-90093", - "CVE-2026-90094", - "CVE-2026-90095", - "CVE-2026-90097", - "CVE-2026-90098", - "CVE-2026-90099", - "CVE-2026-90100", - "CVE-2026-90101", - "CVE-2026-90102", - "CVE-2026-90103", - "CVE-2026-90104", - "CVE-2026-90105", - "CVE-2026-90106", - "CVE-2026-90107", - "CVE-2026-90108", - "CVE-2026-90109", - "CVE-2026-90110", - "CVE-2026-90111", - "CVE-2026-90112", - "CVE-2026-90113", - "CVE-2026-90114", - "CVE-2026-90115", - "CVE-2026-90116", - "CVE-2026-90119", - "CVE-2026-90120", - "CVE-2026-90121", - "CVE-2026-90122", - "CVE-2026-90124", - "CVE-2026-90125", - "CVE-2026-90126", - "CVE-2026-90127", - "CVE-2026-90128", - "CVE-2026-90129", - "CVE-2026-90130", - "CVE-2026-90135", - "CVE-2026-90136", - "CVE-2026-90137", - "CVE-2026-90138", - "CVE-2026-90139", - "CVE-2026-90140", - "CVE-2026-90141", - "CVE-2026-90142", - "CVE-2026-90143", - "CVE-2026-90144", - "CVE-2026-90145", - "CVE-2026-90146", - "CVE-2026-90147", - "CVE-2026-90148", - "CVE-2026-90149", - "CVE-2026-90150", - "CVE-2026-90151", - "CVE-2026-90152", - "CVE-2026-90153", - "CVE-2026-90154", - "CVE-2026-90155", - "CVE-2026-90156", - "CVE-2026-90157", - "CVE-2026-90158", - "CVE-2026-90159", - "CVE-2026-90160", - "CVE-2026-90161", - "CVE-2026-90162", - "CVE-2026-90163", - "CVE-2026-90164", - "CVE-2026-90165", - "CVE-2026-90166", - "CVE-2026-90167", - "CVE-2026-90169", - "CVE-2026-90170", - "CVE-2026-90174", - "CVE-2026-90175", - "CVE-2026-90176", - "CVE-2026-90177", - "CVE-2026-90178", - "CVE-2026-90179", - "CVE-2026-90180", - "CVE-2026-90182", - "CVE-2026-90183", - "CVE-2026-90184", - "CVE-2026-90185", - "CVE-2026-90186", - "CVE-2026-90187", - "CVE-2026-90188", - "CVE-2026-90189", - "CVE-2026-90190", - "CVE-2026-90191", - "CVE-2026-90192", - "CVE-2026-90193", - "CVE-2026-90194", - "CVE-2026-90195", - "CVE-2026-90196", - "CVE-2026-90197", - "CVE-2026-90198", - "CVE-2026-90199", - "CVE-2026-90200", - "CVE-2026-90201", - "CVE-2026-90202", - "CVE-2026-90203", - "CVE-2026-90204", - "CVE-2026-90205", - "CVE-2026-90206", - "CVE-2026-90207", - "CVE-2026-90208", - "CVE-2026-90209", - "CVE-2026-90211", - "CVE-2026-90212", - "CVE-2026-90213", - "CVE-2026-90214", - "CVE-2026-90215", - "CVE-2026-90216", - "CVE-2026-90217", - "CVE-2026-90218", - "CVE-2026-90219", - "CVE-2026-90220", - "CVE-2026-90221", - "CVE-2026-90222", - "CVE-2026-90223", - "CVE-2026-90224", - "CVE-2026-90225", - "CVE-2026-90226", - "CVE-2026-90227", - "CVE-2026-90228", - "CVE-2026-90229", - "CVE-2026-90230", - "CVE-2026-90231", - "CVE-2026-90232", - "CVE-2026-90233", - "CVE-2026-90234", - "CVE-2026-90235", - "CVE-2026-90237", - "CVE-2026-90240", - "CVE-2026-90241", - "CVE-2026-90242", - "CVE-2026-90243", - "CVE-2026-90244", - "CVE-2026-90245", - "CVE-2026-90246", - "CVE-2026-90247", - "CVE-2026-90248", - "CVE-2026-90249", - "CVE-2026-90250", - "CVE-2026-90251", - "CVE-2026-90252", - "CVE-2026-90253", - "CVE-2026-90254", - "CVE-2026-90255", - "CVE-2026-90256", - "CVE-2026-90257", - "CVE-2026-90258", - "CVE-2026-90259", - "CVE-2026-90260", - "CVE-2026-90261", - "CVE-2026-90262", - "CVE-2026-90263", - "CVE-2026-90264", - "CVE-2026-90265", - "CVE-2026-90267", - "CVE-2026-90269", - "CVE-2026-90270", - "CVE-2026-90271", - "CVE-2026-90272", - "CVE-2026-90273", - "CVE-2026-90274", - "CVE-2026-90275", - "CVE-2026-90276", - "CVE-2026-90277", - "CVE-2026-90278", - "CVE-2026-90279", - "CVE-2026-90280", - "CVE-2026-90281", - "CVE-2026-90282", - "CVE-2026-90283", - "CVE-2026-90284", - "CVE-2026-90285", - "CVE-2026-90286", - "CVE-2026-90287", - "CVE-2026-90288", - "CVE-2026-90289", - "CVE-2026-90290", - "CVE-2026-90291", - "CVE-2026-90292", - "CVE-2026-90293", - "CVE-2026-90294", - "CVE-2026-90295", - "CVE-2026-90296", - "CVE-2026-90297", - "CVE-2026-90298", - "CVE-2026-90300", - "CVE-2026-90301", - "CVE-2026-90302", - "CVE-2026-90303", - "CVE-2026-90306", - "CVE-2026-90307", - "CVE-2026-90308", - "CVE-2026-90309", - "CVE-2026-90311", - "CVE-2026-90312", - "CVE-2026-90313", - "CVE-2026-90314", - "CVE-2026-90315", - "CVE-2026-90316", - "CVE-2026-90317", - "CVE-2026-90318", - "CVE-2026-90319", - "CVE-2026-90320", - "CVE-2026-90321", - "CVE-2026-90322", - "CVE-2026-90323", - "CVE-2026-90324", - "CVE-2026-90325", - "CVE-2026-90326", - "CVE-2026-90327", - "CVE-2026-90328", - "CVE-2026-90329", - "CVE-2026-90330", - "CVE-2026-90331", - "CVE-2026-90332", - "CVE-2026-90333", - "CVE-2026-90334", - "CVE-2026-90335", - "CVE-2026-90336", - "CVE-2026-90337", - "CVE-2026-90338", - "CVE-2026-90341", - "CVE-2026-90342", - "CVE-2026-90343", - "CVE-2026-90344", - "CVE-2026-90345", - "CVE-2026-90346", - "CVE-2026-90347", - "CVE-2026-90348", - "CVE-2026-90349", - "CVE-2026-90350", - "CVE-2026-90351", - "CVE-2026-90352", - "CVE-2026-90353", - "CVE-2026-90354", - "CVE-2026-90355", - "CVE-2026-90356", - "CVE-2026-90357", - "CVE-2026-90358", - "CVE-2026-90359", - "CVE-2026-90360", - "CVE-2026-90361", - "CVE-2026-90362", - "CVE-2026-90363", - "CVE-2026-90364", - "CVE-2026-90365", - "CVE-2026-90366", - "CVE-2026-90367", - "CVE-2026-90368", - "CVE-2026-90369", - "CVE-2026-90370", - "CVE-2026-90371", - "CVE-2026-90372", - "CVE-2026-90373", - "CVE-2026-90374", - "CVE-2026-90375", - "CVE-2026-90376", - "CVE-2026-90377", - "CVE-2026-90378", - "CVE-2026-90379", - "CVE-2026-90380", - "CVE-2026-90381", - "CVE-2026-90382", - "CVE-2026-90383", - "CVE-2026-90384", - "CVE-2026-90385", - "CVE-2026-90386", - "CVE-2026-90387", - "CVE-2026-90388", - "CVE-2026-90389", - "CVE-2026-90390", - "CVE-2026-90391", - "CVE-2026-90392", - "CVE-2026-90393", - "CVE-2026-90394", - "CVE-2026-90395", - "CVE-2026-90396", - "CVE-2026-90397", - "CVE-2026-90398", - "CVE-2026-90399", - "CVE-2026-90400", - "CVE-2026-90401", - "CVE-2026-90402", - "CVE-2026-90403", - "CVE-2026-90404", - "CVE-2026-90406", - "CVE-2026-90407", - "CVE-2026-90408", - "CVE-2026-90409", - "CVE-2026-90410", - "CVE-2026-90411", - "CVE-2026-90412", - "CVE-2026-90413", - "CVE-2026-90414", - "CVE-2026-90415", - "CVE-2026-90416", - "CVE-2026-90417", - "CVE-2026-90418", - "CVE-2026-90419", - "CVE-2026-90420", - "CVE-2026-90421", - "CVE-2026-90422", - "CVE-2026-90423", - "CVE-2026-90424", - "CVE-2026-90425", - "CVE-2026-90426", - "CVE-2026-90427", - "CVE-2026-90428", - "CVE-2026-90429", - "CVE-2026-90430", - "CVE-2026-90431", - "CVE-2026-90433", - "CVE-2026-90434", - "CVE-2026-90435", - "CVE-2026-92476", - "CVE-2026-92477", - "CVE-2026-92479", - "CVE-2026-92480", - "CVE-2026-92481", - "CVE-2026-92482", - "CVE-2026-92483", - "CVE-2026-92484", - "CVE-2026-92485", - "CVE-2026-92486", - "CVE-2026-92488", - "CVE-2026-92489", - "CVE-2026-92490", - "CVE-2026-92491", - "CVE-2026-92493", - "CVE-2026-92494", - "CVE-2026-92495", - "CVE-2026-92496", - "CVE-2026-92497", - "CVE-2026-92498", - "CVE-2026-92499", - "CVE-2026-92500", - "CVE-2026-92501", - "CVE-2026-92503", - "CVE-2026-92504", - "CVE-2026-92505", - "CVE-2026-92506", - "CVE-2026-92507", - "CVE-2026-92508", - "CVE-2026-92509", - "CVE-2026-92510", - "CVE-2026-92511", - "CVE-2026-92512", - "CVE-2026-92513", - "CVE-2026-92514", - "CVE-2026-92515", - "CVE-2026-92516", - "CVE-2026-92517", - "CVE-2026-92518", - "CVE-2026-92519", - "CVE-2026-92520", - "CVE-2026-92521", - "CVE-2026-92522", - "CVE-2026-92523", - "CVE-2026-92524", - "CVE-2026-92525", - "CVE-2026-93037", - "CVE-2026-93039", - "CVE-2026-93040", - "CVE-2026-93041", - "CVE-2026-93042", - "CVE-2026-93043", - "CVE-2026-93044", - "CVE-2026-93045", - "CVE-2026-93046", - "CVE-2026-93047", - "CVE-2026-93048", - "CVE-2026-93049", - "CVE-2026-93050", - "CVE-2026-93051", - "CVE-2026-93052", - "CVE-2026-93053", - "CVE-2026-93054", - "CVE-2026-93055", - "CVE-2026-93056", - "CVE-2026-93058", - "CVE-2026-93059", - "CVE-2026-93061", - "CVE-2026-93062", - "CVE-2026-93063", - "CVE-2026-93064", - "CVE-2026-93065", - "CVE-2026-93066", - "CVE-2026-93067", - "CVE-2026-93068", - "CVE-2026-93069", - "CVE-2026-93070", - "CVE-2026-93071", - "CVE-2026-93072", - "CVE-2026-93073", - "CVE-2026-93077", - "CVE-2026-93078", - "CVE-2026-93079", - "CVE-2026-93080", - "CVE-2026-93081", - "CVE-2026-93082", - "CVE-2026-93083", - "CVE-2026-93084", - "CVE-2026-93085", - "CVE-2026-93086", - "CVE-2026-93089", - "CVE-2026-93090", - "CVE-2026-93091", - "CVE-2026-93092", - "CVE-2026-93093", - "CVE-2026-93094", - "CVE-2026-93095", - "CVE-2026-93096", - "CVE-2026-93097", - "CVE-2026-93098", - "CVE-2026-93099", - "CVE-2026-93100", - "CVE-2026-93101", - "CVE-2026-93102", - "CVE-2026-93103", - "CVE-2026-93104", - "CVE-2026-93105", - "CVE-2026-93106", - "CVE-2026-93107", - "CVE-2026-93108", - "CVE-2026-93109", - "CVE-2026-93110", - "CVE-2026-93112", - "CVE-2026-93113", - "CVE-2026-93114", - "CVE-2026-93115", - "CVE-2026-93116", - "CVE-2026-93117", - "CVE-2026-93118", - "CVE-2026-93119", - "CVE-2026-93120", - "CVE-2026-93121", - "CVE-2026-93122", - "CVE-2026-93123", - "CVE-2026-93125", - "CVE-2026-93126", - "CVE-2026-93127", - "CVE-2026-93128", - "CVE-2026-93129", - "CVE-2026-93130", - "CVE-2026-93131", - "CVE-2026-93132", - "CVE-2026-93133", - "CVE-2026-93134", - "CVE-2026-93135", - "CVE-2026-93136", - "CVE-2026-93137", - "CVE-2026-93138", - "CVE-2026-93140", - "CVE-2026-93141", - "CVE-2026-93142", - "CVE-2026-93143", - "CVE-2026-93144", - "CVE-2026-93145", - "CVE-2026-93146", - "CVE-2026-93148", - "CVE-2026-93149", - "CVE-2026-93150", - "CVE-2026-93151", - "CVE-2026-93152", - "CVE-2026-93153", - "CVE-2026-93154", - "CVE-2026-93155", - "CVE-2026-93156", - "CVE-2026-93157", - "CVE-2026-93158", - "CVE-2026-93159", - "CVE-2026-93160", - "CVE-2026-93161", - "CVE-2026-93162", - "CVE-2026-93163", - "CVE-2026-93164", - "CVE-2026-93165", - "CVE-2026-93167", - "CVE-2026-93168", - "CVE-2026-93169", - "CVE-2026-93170", - "CVE-2026-93172", - "CVE-2026-93173", - "CVE-2026-93174", - "CVE-2026-93175", - "CVE-2026-93176", - "CVE-2026-93177", - "CVE-2026-93178", - "CVE-2026-93179", - "CVE-2026-93180", - "CVE-2026-93181", - "CVE-2026-93182", - "CVE-2026-93183", - "CVE-2026-93184", - "CVE-2026-93185", - "CVE-2026-93186", - "CVE-2026-93188", - "CVE-2026-93189", - "CVE-2026-93190", - "CVE-2026-93191", - "CVE-2026-93192", - "CVE-2026-93193", - "CVE-2026-93194", - "CVE-2026-93195", - "CVE-2026-93196", - "CVE-2026-93198", - "CVE-2026-93199", - "CVE-2026-93200", - "CVE-2026-93201", - "CVE-2026-93202", - "CVE-2026-93203", - "CVE-2026-93204", - "CVE-2026-93205", - "CVE-2026-93206", - "CVE-2026-93207", - "CVE-2026-93208", - "CVE-2026-93209", - "CVE-2026-93210", - "CVE-2026-93211", - "CVE-2026-93212", - "CVE-2026-93213", - "CVE-2026-93214", - "CVE-2026-93215", - "CVE-2026-93216", - "CVE-2026-93217", - "CVE-2026-93218", - "CVE-2026-93219", - "CVE-2026-93220", - "CVE-2026-93221", - "CVE-2026-93222", - "CVE-2026-93223", - "CVE-2026-93224", - "CVE-2026-93225", - "CVE-2026-93226", - "CVE-2026-93227", - "CVE-2026-93228", - "CVE-2026-93229", - "CVE-2026-93230", - "CVE-2026-93231", - "CVE-2026-93233", - "CVE-2026-93234", - "CVE-2026-93235", - "CVE-2026-93236", - "CVE-2026-93237", - "CVE-2026-93238", - "CVE-2026-93239", - "CVE-2026-93240", - "CVE-2026-93241", - "CVE-2026-93242", - "CVE-2026-93243", - "CVE-2026-93244", - "CVE-2026-93245", - "CVE-2026-93247", - "CVE-2026-93248", - "CVE-2026-93249", - "CVE-2026-93250", - "CVE-2026-93251", - "CVE-2026-93252", - "CVE-2026-93253", - "CVE-2026-93255", - "CVE-2026-93256", - "CVE-2026-93258", - "CVE-2026-93259", - "CVE-2026-93260", - "CVE-2026-93261", - "CVE-2026-93262", - "CVE-2026-93264", - "CVE-2026-93265", - "CVE-2026-93266", - "CVE-2026-93267", - "CVE-2026-93268", - "CVE-2026-93269", - "CVE-2026-93270", - "CVE-2026-93271", - "CVE-2026-93272", - "CVE-2026-93273", - "CVE-2026-93274", - "CVE-2026-93275", - "CVE-2026-93276", - "CVE-2026-93278", - "CVE-2026-93279", - "CVE-2026-93280", - "CVE-2026-93281", - "CVE-2026-93282", - "CVE-2026-93283", - "CVE-2026-93284", - "CVE-2026-93285", - "CVE-2026-93286", - "CVE-2026-93287", - "CVE-2026-93288", - "CVE-2026-93781", - "CVE-2026-93782", - "CVE-2026-93783", - "CVE-2026-93784", - "CVE-2026-93785", - "CVE-2026-93786", - "CVE-2026-93787", - "CVE-2026-93788", - "CVE-2026-93789", - "CVE-2026-93790", - "CVE-2026-93791", - "CVE-2026-93792", - "CVE-2026-93793", - "CVE-2026-93794", - "CVE-2026-93795", - "CVE-2026-93796", - "CVE-2026-93797", - "CVE-2026-93798", - "CVE-2026-93799", - "CVE-2026-93800", - "CVE-2026-93801", - "CVE-2026-93802", - "CVE-2026-93803", - "CVE-2026-93804", - "CVE-2026-93805", - "CVE-2026-93806", - "CVE-2026-93807", - "CVE-2026-93808", - "CVE-2026-93809", - "CVE-2026-93810", - "CVE-2026-93811", - "CVE-2026-93812", - "CVE-2026-93813", - "CVE-2026-93814", - "CVE-2026-93815", - "CVE-2026-93816", - "CVE-2026-93817", - "CVE-2026-93818", - "CVE-2026-93819", - "CVE-2026-93820", - "CVE-2026-93821", - "CVE-2026-93822", - "CVE-2026-93823", - "CVE-2026-93824", - "CVE-2026-93825", - "CVE-2026-93826", - "CVE-2026-93827", - "CVE-2026-93828", - "CVE-2026-93829", - "CVE-2026-93830", - "CVE-2026-97407", - "CVE-2026-97408", - "CVE-2026-97409", - "CVE-2026-97410", - "CVE-2026-97411", - "CVE-2026-97412", - "CVE-2026-97413", - "CVE-2026-97414", - "CVE-2026-97415", - "CVE-2026-97416", - "CVE-2026-97417", - "CVE-2026-97418", - "CVE-2026-97419", - "CVE-2026-97420", - "CVE-2026-97421", - "CVE-2026-97422", - "CVE-2026-97423", - "CVE-2026-97424", - "CVE-2026-97425", - "CVE-2026-97426", - "CVE-2026-97427", - "CVE-2026-97428", - "CVE-2026-97429", - "CVE-2026-97430", - "CVE-2026-97431", - "CVE-2026-97432", - "CVE-2026-97433", - "CVE-2026-97434", - "CVE-2026-97435", - "CVE-2026-97436", - "CVE-2026-97437", - "CVE-2026-97438", - "CVE-2026-97439", - "CVE-2026-97440", - "CVE-2026-97441", - "CVE-2026-97442", - "CVE-2026-97443", - "CVE-2026-97444", - "CVE-2026-97445", - "CVE-2026-97446", - "CVE-2026-97447", - "CVE-2026-97448", - "CVE-2026-97449", - "CVE-2026-97450", - "CVE-2026-97451", - "CVE-2026-97452", - "CVE-2026-97453", - "CVE-2026-97454", - "CVE-2026-97455", - "CVE-2026-97456", - "CVE-2026-97472", - "CVE-2026-97473", - "CVE-2026-97474", - "CVE-2026-97475", - "CVE-2026-97476", - "CVE-2026-97477", - "CVE-2026-97478", - "CVE-2026-97479", - "CVE-2026-97480", - "CVE-2026-97481", - "CVE-2026-97482", - "CVE-2026-97483", - "CVE-2026-97484", - "CVE-2026-97485", - "CVE-2026-97486", - "CVE-2026-97487", - "CVE-2026-97488", - "CVE-2026-97489", - "CVE-2026-97490", - "CVE-2026-97491", - "CVE-2026-97492", - "CVE-2026-97493", - "CVE-2026-97494", - "CVE-2026-97495", - "CVE-2026-97496", - "CVE-2026-97497", - "CVE-2026-97498", - "CVE-2026-97499", - "CVE-2026-97500", - "CVE-2026-97501", - "CVE-2026-97502", - "CVE-2026-97503", - "CVE-2026-97505", - "CVE-2026-97506", - "CVE-2026-97507", - "CVE-2026-97508", - "CVE-2026-97509", - "CVE-2026-97510", - "CVE-2026-97511", - "CVE-2026-97512", - "CVE-2026-97513", - "CVE-2026-97514", - "CVE-2026-97515", - "CVE-2026-97516", - "CVE-2026-97517", - "CVE-2026-97518", - "CVE-2026-97519", - "CVE-2026-97520", - "CVE-2026-97521", - "CVE-2026-97522", - "CVE-2026-97523", - "CVE-2026-97524", - "CVE-2026-97525", - "CVE-2026-97526", - "CVE-2026-97527", - "CVE-2026-97528", - "CVE-2026-97529", - "CVE-2026-97530", - "CVE-2026-97531", - "CVE-2026-97532", - "CVE-2026-97533", - "CVE-2026-97534", - "CVE-2026-97535", - "CVE-2026-97536", - "CVE-2026-97537", - "CVE-2026-97538", - "CVE-2026-97539", - "CVE-2026-97540", - "CVE-2026-97541", - "CVE-2026-97542", - "CVE-2026-97543", - "CVE-2026-97544", - "CVE-2026-97545", - "CVE-2026-97546", - "CVE-2026-97547", - "CVE-2026-97548", - "CVE-2026-97549", - "CVE-2026-97550", - "CVE-2026-97551", - "CVE-2026-97552", - "CVE-2026-97553", - "CVE-2026-97554", - "CVE-2026-97555", - "CVE-2026-97556", - "CVE-2026-97557", - "CVE-2026-97558", - "CVE-2026-97559", - "CVE-2026-97560", - "CVE-2026-97561", - "CVE-2026-97562", - "CVE-2026-97563", - "CVE-2026-97564", - "CVE-2026-97565", - "CVE-2026-97566", - "CVE-2026-97567", - "CVE-2026-97568", - "CVE-2026-97571", - "CVE-2026-97572", - "CVE-2026-97573", - "CVE-2026-97574", - "CVE-2026-97575", - "CVE-2026-97576", - "CVE-2026-97577", - "CVE-2026-97578", - "CVE-2026-97579", - "CVE-2026-97580", - "CVE-2026-97581", - "CVE-2026-97582", - "CVE-2026-97583", - "CVE-2026-97584", - "CVE-2026-97585", - "CVE-2026-97586", - "CVE-2026-97587", - "CVE-2026-97588", - "CVE-2026-97589", - "CVE-2026-97590", - "CVE-2026-97591", - "CVE-2026-97592", - "CVE-2026-97593", - "CVE-2026-97594", - "CVE-2026-97595", - "CVE-2026-97596", - "CVE-2026-97597", - "CVE-2026-97598", - "CVE-2026-97599", - "CVE-2026-97600", - "CVE-2026-97601", - "CVE-2026-97602", - "CVE-2026-97603", - "CVE-2026-97604", - "CVE-2026-97605", - "CVE-2026-97606", - "CVE-2026-97607", - "CVE-2026-97608", - "CVE-2026-97609", - "CVE-2026-97610", - "CVE-2026-97611", - "CVE-2026-97612", - "CVE-2026-97613", - "CVE-2026-97614", - "CVE-2026-97615", - "CVE-2026-97616", - "CVE-2026-97617", - "CVE-2026-97618", - "CVE-2026-97619", - "CVE-2026-97620", - "CVE-2026-97621", - "CVE-2026-97899", - "CVE-2026-97900", - "CVE-2026-97901", - "CVE-2026-97902", - "CVE-2026-97903", - "CVE-2026-97904", - "CVE-2026-97905", - "CVE-2026-97906", - "CVE-2026-97907", - "CVE-2026-97908", - "CVE-2026-97909", - "CVE-2026-97910", - "CVE-2026-97912", - "CVE-2026-97913", - "CVE-2026-97914", - "CVE-2026-97915", - "CVE-2026-97916", - "CVE-2026-97917", - "CVE-2026-97918", - "CVE-2026-97919", - "CVE-2026-97920", - "CVE-2026-97921", - "CVE-2026-97922", - "CVE-2026-97923", - "CVE-2026-97924", - "CVE-2026-97925", - "CVE-2026-97926", - "CVE-2026-97927", - "CVE-2026-97928", - "CVE-2026-97929", - "CVE-2026-97930", - "CVE-2026-97931", - "CVE-2026-97932", - "CVE-2026-97933", - "CVE-2026-97934", - "CVE-2026-97935", - "CVE-2026-97936", - "CVE-2026-97938", - "CVE-2026-97939", - "CVE-2026-97940", - "CVE-2026-97942", - "CVE-2026-97943", - "CVE-2026-97944", - "CVE-2026-97945", - "CVE-2026-97946", - "CVE-2026-97947", - "CVE-2026-97948", - "CVE-2026-97949", - "CVE-2026-97950", - "CVE-2026-97951", - "CVE-2026-97952", - "CVE-2026-97953", - "CVE-2026-97954", - "CVE-2026-97955", - "CVE-2026-97956", - "CVE-2026-97957", - "CVE-2026-97958", - "CVE-2026-97959", - "CVE-2026-97960", - "CVE-2026-97961", - "CVE-2026-97962", - "CVE-2026-97963", - "CVE-2026-97964", - "CVE-2026-97965", - "CVE-2026-97966", - "CVE-2026-97967", - "CVE-2026-97968", - "CVE-2026-97969", - "CVE-2026-97970", - "CVE-2026-97971", - "CVE-2026-97972", - "CVE-2026-97973", - "CVE-2026-97974", - "CVE-2026-97975", - "CVE-2026-97976", - "CVE-2026-97977", - "CVE-2026-97978", - "CVE-2026-97979", - "CVE-2026-97981", - "CVE-2026-97982", - "CVE-2026-97983", - "CVE-2026-97984", - "CVE-2026-97985", - "CVE-2026-97986", - "CVE-2026-97987", - "CVE-2026-97988", - "CVE-2026-97989", - "CVE-2026-97990", - "CVE-2026-97991", - "CVE-2026-97992", - "CVE-2026-97993", - "CVE-2026-97994", - "CVE-2026-97995", - "CVE-2026-97996", - "CVE-2026-97997", - "CVE-2026-97998", - "CVE-2026-98000", - "CVE-2026-98001", - "CVE-2026-98002", - "CVE-2026-98003", - "CVE-2026-98004", - "CVE-2026-98005", - "CVE-2026-98006", - "CVE-2026-98007", - "CVE-2026-98008", - "CVE-2026-98009", - "CVE-2026-98010", - "CVE-2026-98011", - "CVE-2026-98012", - "CVE-2026-98013", - "CVE-2026-98014", - "CVE-2026-98015", - "CVE-2026-98016", - "CVE-2026-98017", - "CVE-2026-98018", - "CVE-2026-98019", - "CVE-2026-98020", - "CVE-2026-98021", - "CVE-2026-98022", - "CVE-2026-98023", - "CVE-2026-98024", - "CVE-2026-98025", - "CVE-2026-98026", - "CVE-2026-98027", - "CVE-2026-98028", - "CVE-2026-98029", - "CVE-2026-98030", - "CVE-2026-98031", - "CVE-2026-98032", - "CVE-2026-98033", - "CVE-2026-98034", - "CVE-2026-98037", - "CVE-2026-98038", - "CVE-2026-98039", - "CVE-2026-98041", - "CVE-2026-98043", - "CVE-2026-98044", - "CVE-2026-98045", - "CVE-2026-98046", - "CVE-2026-98047", - "CVE-2026-98048", - "CVE-2026-98049", - "CVE-2026-98050", - "CVE-2026-98051", - "CVE-2026-98052", - "CVE-2026-98053", - "CVE-2026-98054", - "CVE-2026-98055", - "CVE-2026-98056", - "CVE-2026-98057", - "CVE-2026-98058", - "CVE-2026-98059", - "CVE-2026-98060", - "CVE-2026-98061", - "CVE-2026-98062", - "CVE-2026-98063", - "CVE-2026-98064", - "CVE-2026-98065", - "CVE-2026-98066", - "CVE-2026-98067", - "CVE-2026-98068", - "CVE-2026-98069", - "CVE-2026-98070", - "CVE-2026-98071", - "CVE-2026-98072", - "CVE-2026-98073", - "CVE-2026-98074", - "CVE-2026-98075", - "CVE-2026-98076", - "CVE-2026-98077", - "CVE-2026-98078", - "CVE-2026-98079", - "CVE-2026-98080", - "CVE-2026-98081", - "CVE-2026-98082", - "CVE-2026-98083", - "CVE-2026-98084", - "CVE-2026-98085", - "CVE-2026-98086", - "CVE-2026-98087", - "CVE-2026-98088", - "CVE-2026-98089", - "CVE-2026-98090", - "CVE-2026-98091", - "CVE-2026-98092", - "CVE-2026-98093", - "CVE-2026-98094", - "CVE-2026-98095", - "CVE-2026-98096", - "CVE-2026-98097", - "CVE-2026-98098", - "CVE-2026-98099", - "CVE-2026-98101", - "CVE-2026-98102", - "CVE-2026-98103", - "CVE-2026-98104", - "CVE-2026-98105", - "CVE-2026-98106", - "CVE-2026-98107", - "CVE-2026-98108", - "CVE-2026-98109", - "CVE-2026-98110", - "CVE-2026-98111", - "CVE-2026-98112", - "CVE-2026-98113", - "CVE-2026-98114", - "CVE-2026-98115", - "CVE-2026-98116", - "CVE-2026-98117", - "CVE-2026-98118", - "CVE-2026-98119", - "CVE-2026-98120", - "CVE-2026-98121", - "CVE-2026-98122", - "CVE-2026-98123", - "CVE-2026-98124", - "CVE-2026-98125", - "CVE-2026-98126", - "CVE-2026-98127", - "CVE-2026-98128", - "CVE-2026-98129", - "CVE-2026-98130", - "CVE-2026-98131", - "CVE-2026-98134", - "CVE-2026-98142", - "CVE-2026-98143", - "CVE-2026-98144", - "CVE-2026-98146", - "CVE-2026-98147", - "CVE-2026-98148", - "CVE-2026-98149", - "CVE-2026-98150", - "CVE-2026-98151", - "CVE-2026-98152", - "CVE-2026-98153", - "CVE-2026-98154", - "CVE-2026-98155", - "CVE-2026-98156", - "CVE-2026-98157", - "CVE-2026-98158", - "CVE-2026-98159", - "CVE-2026-98160", - "CVE-2026-98161", - "CVE-2026-98162", - "CVE-2026-98163", - "CVE-2026-98164", - "CVE-2026-98166", - "CVE-2026-98167", - "CVE-2026-98168", - "CVE-2026-98169", - "CVE-2026-98170", - "CVE-2026-98171", - "CVE-2026-98172", - "CVE-2026-98173", - "CVE-2026-98174", - "CVE-2026-98175", - "CVE-2026-98176", - "CVE-2026-98177", - "CVE-2026-98179", - "CVE-2026-98180", - "CVE-2026-98181", - "CVE-2026-98182", - "CVE-2026-98184", - "CVE-2026-98185", - "CVE-2026-98186", - "CVE-2026-98187", - "CVE-2026-98188", - "CVE-2026-98189", - "CVE-2026-98190", - "CVE-2026-98191", - "CVE-2026-98192", - "CVE-2026-98193", - "CVE-2026-98194", - "CVE-2026-98195", - "CVE-2026-98196", - "CVE-2026-98197", - "CVE-2026-98198", - "CVE-2026-98199", - "CVE-2026-98200", - "CVE-2026-98201", - "CVE-2026-98202", - "CVE-2026-98203", - "CVE-2026-98204", - "CVE-2026-98205", - "CVE-2026-98206", - "CVE-2026-98207", - "CVE-2026-98208", - "CVE-2026-98209", - "CVE-2026-98210", - "CVE-2026-98211", - "CVE-2026-98212", - "CVE-2026-98213", - "CVE-2026-98214", - "CVE-2026-98215", - "CVE-2026-98216", - "CVE-2026-98217", - "CVE-2026-98218", - "CVE-2026-98221", - "CVE-2026-98222", - "CVE-2026-98223", - "CVE-2026-98224", - "CVE-2026-98226", - "CVE-2026-98227", - "CVE-2026-98228", - "CVE-2026-98229", - "CVE-2026-98230", - "CVE-2026-98231", - "CVE-2026-98232", - "CVE-2026-98233", - "CVE-2026-98234", - "CVE-2026-98235", - "CVE-2026-98236", - "CVE-2026-98237", - "CVE-2026-98238", - "CVE-2026-98239", - "CVE-2026-98240", - "CVE-2026-98241", - "CVE-2026-98242", - "CVE-2026-98244", - "CVE-2026-98245", - "CVE-2026-98246", - "CVE-2026-98247", - "CVE-2026-98248", - "CVE-2026-98249", - "CVE-2026-98251", - "CVE-2026-98252", - "CVE-2026-98253", - "CVE-2026-98254", - "CVE-2026-98255", - "CVE-2026-98256", - "CVE-2026-98257", - "CVE-2026-98258", - "CVE-2026-98259", - "CVE-2026-98260", - "CVE-2026-98261", - "CVE-2026-98262", - "CVE-2026-98263", - "CVE-2026-98264", - "CVE-2026-98265", - "CVE-2026-98266", - "CVE-2026-98267", - "CVE-2026-98268", - "CVE-2026-98269", - "CVE-2026-98270", - "CVE-2026-98271", - "CVE-2026-98272", - "CVE-2026-98273", - "CVE-2026-98274", - "CVE-2026-98275", - "CVE-2026-98276", - "CVE-2026-98277", - "CVE-2026-98278", - "CVE-2026-98279", - "CVE-2026-98280", - "CVE-2026-98281", - "CVE-2026-98282", - "CVE-2026-98283", - "CVE-2026-98284", - "CVE-2026-98285", - "CVE-2026-98286", - "CVE-2026-98287", - "CVE-2026-98288", - "CVE-2026-98289", - "CVE-2026-98290", - "CVE-2026-98291", - "CVE-2026-98292", - "CVE-2026-98293", - "CVE-2026-98294", - "CVE-2026-98295", - "CVE-2026-98296", - "CVE-2026-98297", - "CVE-2026-98298", - "CVE-2026-98299", - "CVE-2026-98300", - "CVE-2026-98301", - "CVE-2026-98302", - "CVE-2026-98303", - "CVE-2026-98304", - "CVE-2026-98306", - "CVE-2026-98307", - "CVE-2026-98308", - "CVE-2026-98309", - "CVE-2026-98311", - "CVE-2026-98312", - "CVE-2026-98314", - "CVE-2026-98316", - "CVE-2026-98317", - "CVE-2026-98318", - "CVE-2026-98319", - "CVE-2026-98320", - "CVE-2026-98321", - "CVE-2026-98322", - "CVE-2026-98323", - "CVE-2026-98324", - "CVE-2026-98325", - "CVE-2026-98326", - "CVE-2026-98327", - "CVE-2026-98328", - "CVE-2026-98329", - "CVE-2026-98330", - "CVE-2026-98331", - "CVE-2026-98332", - "CVE-2026-98333", - "CVE-2026-98334", - "CVE-2026-98335", - "CVE-2026-98336", - "CVE-2026-98337", - "CVE-2026-98338", - "CVE-2026-98339", - "CVE-2026-98340", - "CVE-2026-98341", - "CVE-2026-98342", - "CVE-2026-98343", - "CVE-2026-98344", - "CVE-2026-98345", - "CVE-2026-98346", - "CVE-2026-98347", - "CVE-2026-98348", - "CVE-2026-98349", - "CVE-2026-98350", - "CVE-2026-98351", - "CVE-2026-98352", - "CVE-2026-98354", - "CVE-2026-98355", - "CVE-2026-98356", - "CVE-2026-98357", - "CVE-2026-98358", - "CVE-2026-98359", - "CVE-2026-98360", - "CVE-2026-98361", - "CVE-2026-98362", - "CVE-2026-98363", - "CVE-2026-98364", - "CVE-2026-98365", - "CVE-2026-98366", - "CVE-2026-98367", - "CVE-2026-98368", - "CVE-2026-98369", - "CVE-2026-98370", - "CVE-2026-98371", - "CVE-2026-98372", - "CVE-2026-98373", - "CVE-2026-98374", - "CVE-2026-98375", - "CVE-2026-98376", - "CVE-2026-98377", - "CVE-2026-98378", - "CVE-2026-98379", - "CVE-2026-98380", - "CVE-2026-98381", - "CVE-2026-98382", - "CVE-2026-98383", - "CVE-2026-98384", - "CVE-2026-98386", - "CVE-2026-98387", - "CVE-2026-98388", - "CVE-2026-98389", - "CVE-2026-98390", - "CVE-2026-98391", - "CVE-2026-98392", - "CVE-2026-98393", - "CVE-2026-98394", - "CVE-2026-98398", - "CVE-2026-98399", - "CVE-2026-98400", - "CVE-2026-98401", - "CVE-2026-98402", - "CVE-2026-98403", - "CVE-2026-98404", - "CVE-2026-98406", - "CVE-2026-98407", - "CVE-2026-98408", - "CVE-2026-98409", - "CVE-2026-98410", - "CVE-2026-98411", - "CVE-2026-98412", - "CVE-2026-98413", - "CVE-2026-98414", - "CVE-2026-98415", - "CVE-2026-98416", - "CVE-2026-98417", - "CVE-2026-98419", - "CVE-2026-98420", - "CVE-2026-98421", - "CVE-2026-98422", - "CVE-2026-98423", - "CVE-2026-98424", - "CVE-2026-98425", - "CVE-2026-98426", - "CVE-2026-98427", - "CVE-2026-98428", - "CVE-2026-98429", - "CVE-2026-98430", - "CVE-2026-98431", - "CVE-2026-98432", - "CVE-2026-98433", - "CVE-2026-98434", - "CVE-2026-98435", - "CVE-2026-98436", - "CVE-2026-98437", - "CVE-2026-98439", - "CVE-2026-98440", - "CVE-2026-98441", - "CVE-2026-98442", - "CVE-2026-98443", - "CVE-2026-98444", - "CVE-2026-98445", - "CVE-2026-98446", - "CVE-2026-98447", - "CVE-2026-98448", - "CVE-2026-98449", - "CVE-2026-98450", - "CVE-2026-98451", - "CVE-2026-98452", - "CVE-2026-98453", - "CVE-2026-98454", - "CVE-2026-98455", - "CVE-2026-98456", - "CVE-2026-98457", - "CVE-2026-98458", - "CVE-2026-98459", - "CVE-2026-98460", - "CVE-2026-98461", - "CVE-2026-98462", - "CVE-2026-98463", - "CVE-2026-98464", - "CVE-2026-98465", - "CVE-2026-98466", - "CVE-2026-98467", - "CVE-2026-98468", - "CVE-2026-98469", - "CVE-2026-98470", - "CVE-2026-98471", - "CVE-2026-98472", - "CVE-2026-98473", - "CVE-2026-98474", - "CVE-2026-98475", - "CVE-2026-98476", - "CVE-2026-98477", - "CVE-2026-98478", - "CVE-2026-98479", - "CVE-2026-98480", - "CVE-2026-98481", - "CVE-2026-98482", - "CVE-2026-98483", - "CVE-2026-98484", - "CVE-2026-98485", - "CVE-2026-98486", - "CVE-2026-98487", - "CVE-2026-98488", - "CVE-2026-98489", - "CVE-2026-98490", - "CVE-2026-98491", - "CVE-2026-98492", - "CVE-2026-98493", - "CVE-2026-98494", - "CVE-2026-98495", - "CVE-2026-98496", - "CVE-2026-98497", - "CVE-2026-98498", - "CVE-2026-98499", - "CVE-2026-98501", - "CVE-2026-98502", - "CVE-2026-98503", - "CVE-2026-98504", - "CVE-2026-98505", - "CVE-2026-98506", - "CVE-2026-98507", - "CVE-2026-98508", - "CVE-2026-98509", - "CVE-2026-98510", - "CVE-2026-98511", - "CVE-2026-98512", - "CVE-2026-98513", - "CVE-2026-98514", - "CVE-2026-98515", - "CVE-2026-98516", - "CVE-2026-98517", - "CVE-2026-98518", - "CVE-2026-98519", - "CVE-2026-98521", - "CVE-2026-98522", - "CVE-2026-98523", - "CVE-2026-98524", - "CVE-2026-98525", - "CVE-2026-98526", - "CVE-2026-98527", - "CVE-2026-98528", - "CVE-2026-98529", - "CVE-2026-98530", - "CVE-2026-98531", - "CVE-2026-98532", - "CVE-2026-98533", - "CVE-2026-98534", - "CVE-2026-98535", - "CVE-2026-98536", - "CVE-2026-98537", - "CVE-2026-98538", - "CVE-2026-98539", - "CVE-2026-98541", - "CVE-2026-98542", - "CVE-2026-98543", - "CVE-2026-98544", - "CVE-2026-98545", - "CVE-2026-98546", - "CVE-2026-98547", - "CVE-2026-98548", - "CVE-2026-98549", - "CVE-2026-98550", - "CVE-2026-98551", - "CVE-2026-98552", - "CVE-2026-98553", - "CVE-2026-98554", - "CVE-2026-98555", - "CVE-2026-98556", - "CVE-2026-98558", - "CVE-2026-98559", - "CVE-2026-98560", - "CVE-2026-98561", - "CVE-2026-98562", - "CVE-2026-98563", - "CVE-2026-98564", - "CVE-2026-98565", - "CVE-2026-98566", - "CVE-2026-98567", - "CVE-2026-98568", - "CVE-2026-98569", - "CVE-2026-98570", - "CVE-2026-98571", - "CVE-2026-98572", - "CVE-2026-98573", - "CVE-2026-98574", - "CVE-2026-98575", - "CVE-2026-98576", - "CVE-2026-98577", - "CVE-2026-98578", - "CVE-2026-98579", - "CVE-2026-98580", - "CVE-2026-98581", - "CVE-2026-98582", - "CVE-2026-98583", - "CVE-2026-98584", - "CVE-2026-98585", - "CVE-2026-98586", - "CVE-2026-98588", - "CVE-2026-98589", - "CVE-2026-98590", - "CVE-2026-98591", - "CVE-2026-98592", - "CVE-2026-98593", - "CVE-2026-98594", - "CVE-2026-98595", - "CVE-2026-98596", - "CVE-2026-98597", - "CVE-2026-98598", - "CVE-2026-98599", - "CVE-2026-98601", - "CVE-2026-98602", - "CVE-2026-98603", - "CVE-2026-98604", - "CVE-2026-98605", - "CVE-2026-98606", - "CVE-2026-98607", - "CVE-2026-98608", - "CVE-2026-98609", - "CVE-2026-98610", - "CVE-2026-98611", - "CVE-2026-98612", - "CVE-2026-98613", - "CVE-2026-98614", - "CVE-2026-98615", - "CVE-2026-98616", - "CVE-2026-98617", - "CVE-2026-98618", - "CVE-2026-98620", - "CVE-2026-98621", - "CVE-2026-98622", - "CVE-2026-98623", - "CVE-2026-98624", - "CVE-2026-98625", - "CVE-2026-98626", - "CVE-2026-98628", - "CVE-2026-98629", - "CVE-2026-98630", - "CVE-2026-98631", - "CVE-2026-98632", - "CVE-2026-98633", - "CVE-2026-98634", - "CVE-2026-98635", - "CVE-2026-98636", - "CVE-2026-98637", - "CVE-2026-98638", - "CVE-2026-98639", - "CVE-2026-98640", - "CVE-2026-98641", - "CVE-2026-98642", - "CVE-2026-98643", - "CVE-2026-98644", - "CVE-2026-98646", - "CVE-2026-98647", - "CVE-2026-98648", - "CVE-2026-98649", - "CVE-2026-98650", - "CVE-2026-98651", - "CVE-2026-98652", - "CVE-2026-98653", - "CVE-2026-98655", - "CVE-2026-98656", - "CVE-2026-98657", - "CVE-2026-98658", - "CVE-2026-98659", - "CVE-2026-98660", - "CVE-2026-98661", - "CVE-2026-98662", - "CVE-2026-98663", - "CVE-2026-98664", - "CVE-2026-98665", - "CVE-2026-98666", - "CVE-2026-98667", - "CVE-2026-98668", - "CVE-2026-98669", - "CVE-2026-98670", - "CVE-2026-98671", - "CVE-2026-98672", - "CVE-2026-98673", - "CVE-2026-98674", - "CVE-2026-98675", - "CVE-2026-98676", - "CVE-2026-98677", - "CVE-2026-98678", - "CVE-2026-98679", - "CVE-2026-98680", - "CVE-2026-98681", - "CVE-2026-98682", - "CVE-2026-98683", - "CVE-2026-98684", - "CVE-2026-98685", - "CVE-2026-98686", - "CVE-2026-98687", - "CVE-2026-98689", - "CVE-2026-98690", - "CVE-2026-98691", - "CVE-2026-98692", - "CVE-2026-98693", - "CVE-2026-98694", - "CVE-2026-98695", - "CVE-2026-98696", - "CVE-2026-98697", - "CVE-2026-98698", - "CVE-2026-98699", - "CVE-2026-98700", - "CVE-2026-98701", - "CVE-2026-98702", - "CVE-2026-98703", - "CVE-2026-98704", - "CVE-2026-98705", - "CVE-2026-98706", - "CVE-2026-98707", - "CVE-2026-98708", - "CVE-2026-98709", - "CVE-2026-98710", - "CVE-2026-98711", - "CVE-2026-98712", - "CVE-2026-98713", - "CVE-2026-98714", - "CVE-2026-98715", - "CVE-2026-98716", - "CVE-2026-98717", - "CVE-2026-98718", - "CVE-2026-98719", - "CVE-2026-98720", - "CVE-2026-98721", - "CVE-2026-98722", - "CVE-2026-98723", - "CVE-2026-98724", - "CVE-2026-98725", - "CVE-2026-98726", - "CVE-2026-98727", - "CVE-2026-98728", - "CVE-2026-98729", - "CVE-2026-98730", - "CVE-2026-98731", - "CVE-2026-98732", - "CVE-2026-98733", - "CVE-2026-98734", - "CVE-2026-98735", - "CVE-2026-98736", - "CVE-2026-98737", - "CVE-2026-98738", - "CVE-2026-98739", - "CVE-2026-98740", - "CVE-2026-98741", - "CVE-2026-98742", - "CVE-2026-98743", - "CVE-2026-98744", - "CVE-2026-98745", - "CVE-2026-98746", - "CVE-2026-98747", - "CVE-2026-98748", - "CVE-2026-98749", - "CVE-2026-98750", - "CVE-2026-98751", - "CVE-2026-98752", - "CVE-2026-98753", - "CVE-2026-98754", - "CVE-2026-98755", - "CVE-2026-98756", - "CVE-2026-98757", - "CVE-2026-98758", - "CVE-2026-98759", - "CVE-2026-98760", - "CVE-2026-98761", - "CVE-2026-98762", - "CVE-2026-98763", - "CVE-2026-98764", - "CVE-2026-98765", - "CVE-2026-98766", - "CVE-2026-98767", - "CVE-2026-98768", - "CVE-2026-98769", - "CVE-2026-98770", - "CVE-2026-98771", - "CVE-2026-98772", - "CVE-2026-98773", - "CVE-2026-98774", - "CVE-2026-98775", - "CVE-2026-98776", - "CVE-2026-98777", - "CVE-2026-98778", - "CVE-2026-98779", - "CVE-2026-98780", - "CVE-2026-98781", - "CVE-2026-98782", - "CVE-2026-98783", - "CVE-2026-98784", - "CVE-2026-98785", - "CVE-2026-98786", - "CVE-2026-98788", - "CVE-2026-98789", - "CVE-2026-98790", - "CVE-2026-98791", - "CVE-2026-98792", - "CVE-2026-98793", - "CVE-2026-98794", - "CVE-2026-98795", - "CVE-2026-98796", - "CVE-2026-98797", - "CVE-2026-98798", - "CVE-2026-98799", - "CVE-2026-98800", - "CVE-2026-98801", - "CVE-2026-98802", - "CVE-2026-98803", - "CVE-2026-98804", - "CVE-2026-98805", - "CVE-2026-98806", - "CVE-2026-98807", - "CVE-2026-98808", - "CVE-2026-98809", - "CVE-2026-98810", - "CVE-2026-98811", - "CVE-2026-98812", - "CVE-2026-98813", - "CVE-2026-98814", - "CVE-2026-98815", - "CVE-2026-98816", - "CVE-2026-98817", - "CVE-2026-98818", - "CVE-2026-98819", - "CVE-2026-98820", - "CVE-2026-98821", - "CVE-2026-98822", - "CVE-2026-98823", - "CVE-2026-98824", - "CVE-2026-98825", - "CVE-2026-98826", - "CVE-2026-98827", - "CVE-2026-98828", - "CVE-2026-98829", - "CVE-2026-98830", - "CVE-2026-98831", - "CVE-2026-98833", - "CVE-2026-98834", - "CVE-2026-98835", - "CVE-2026-98836", - "CVE-2026-98837", - "CVE-2026-98838", - "CVE-2026-98839", - "CVE-2026-98840", - "CVE-2026-98841", - "CVE-2026-98842", - "CVE-2026-98843", - "CVE-2026-98844", - "CVE-2026-98845", - "CVE-2026-98846", - "CVE-2026-98847", - "CVE-2026-98848", - "CVE-2026-98849", - "CVE-2026-98850", - "CVE-2026-98851", - "CVE-2026-98852", - "CVE-2026-98853", - "CVE-2026-98854", - "CVE-2026-98855", - "CVE-2026-98856", - "CVE-2026-98857", - "CVE-2026-98858", - "CVE-2026-98859", - "CVE-2026-98860", - "CVE-2026-98861", - "CVE-2026-98862", - "CVE-2026-98863", - "CVE-2026-98867", - "CVE-2026-98868", - "CVE-2026-98869", - "CVE-2026-99999" - ] + "ids": [] }