CVE catalog

CVE-2022-41409

pcre2 affected and fixed versions

[CVE catalog]

Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
Published
Source
[NVD] · [CVE record]
EPSS
1.12% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixie-securitypcre210.46-1~deb13u3Fixed[CVE-2022-41409]
Debiantrixiepcre210.42-1FixedDistribution-reported fixed boundary[CVE-2022-41409]
Debiantrixiepcre210.46-1~deb13u2Fixed[CVE-2022-41409]
Debiansidpcre210.42-1FixedDistribution-reported fixed boundary[CVE-2022-41409]
Debiansidpcre210.49-1Fixed[CVE-2022-41409]
Debianforkypcre210.42-1FixedDistribution-reported fixed boundary[CVE-2022-41409]
Debianforkypcre210.48-3.1Fixed[CVE-2022-41409]
Debianbookworm-securitypcre210.42-1+deb12u2Fixed[CVE-2022-41409]
Debianbookwormpcre210.42-1FixedDistribution-reported fixed boundary[CVE-2022-41409]

Showing 9 fix observations. All 42 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedpcre210.42-1UnknownSource applicability is not establishedProvider not reported
Debianbookwormpcre210.42-1FixedDistribution-reported fixed boundary[CVE-2022-41409]
Debianbookworm-securitypcre210.42-1+deb12u2Fixed[CVE-2022-41409]
Debianforkypcre210.42-1FixedDistribution-reported fixed boundary[CVE-2022-41409]
Debianforkypcre210.48-3.1Fixed[CVE-2022-41409]
Debiansidpcre210.42-1FixedDistribution-reported fixed boundary[CVE-2022-41409]
Debiansidpcre210.49-1Fixed[CVE-2022-41409]
Debiantrixiepcre210.42-1FixedDistribution-reported fixed boundary[CVE-2022-41409]
Debiantrixiepcre210.46-1~deb13u2Fixed[CVE-2022-41409]
Debiantrixie-securitypcre210.46-1~deb13u3Fixed[CVE-2022-41409]
Opensuseleap 15.4pcre210.39-150400.4.9.1UnknownSource applicability is not established[SUSE-SU-2023:3327-1]
Opensuseleap 15.5pcre210.39-150400.4.9.1UnknownSource applicability is not established[SUSE-SU-2023:3327-1]
Opensuseleap micro 5.3pcre210.39-150400.4.9.1UnknownSource applicability is not established[SUSE-SU-2023:3327-1]
Opensuseleap micro 5.4pcre210.39-150400.4.9.1UnknownSource applicability is not established[SUSE-SU-2023:3327-1]
Suselinux enterprise micro 5.1pcre210.31-150000.3.15.1UnknownSource applicability is not established[SUSE-SU-2023:3210-1]
Suselinux enterprise micro 5.2pcre210.31-150000.3.15.1UnknownSource applicability is not established[SUSE-SU-2023:3210-1]
Suselinux enterprise micro 5.3pcre210.39-150400.4.9.1UnknownSource applicability is not established[SUSE-SU-2023:3327-1]
Suselinux enterprise micro 5.4pcre210.39-150400.4.9.1UnknownSource applicability is not established[SUSE-SU-2023:3327-1]
Suselinux enterprise module for basesystem 15 sp4pcre210.39-150400.4.9.1UnknownSource applicability is not established[SUSE-SU-2023:3327-1]
Suselinux enterprise module for basesystem 15 sp5pcre210.39-150400.4.9.1UnknownSource applicability is not established[SUSE-SU-2023:3327-1]
Suselinux enterprise server 12 sp5pcre210.34-1.13.1UnknownSource applicability is not established[SUSE-SU-2023:3328-1]
Suselinux enterprise server for sap applications 12 sp5pcre210.34-1.13.1UnknownSource applicability is not established[SUSE-SU-2023:3328-1]
Suselinux enterprise software development kit 12 sp5pcre210.34-1.13.1UnknownSource applicability is not established[SUSE-SU-2023:3328-1]
Susemanager proxy 4.2pcre210.31-150000.3.15.1UnknownSource applicability is not established[SUSE-SU-2023:3210-1]
Susemanager server 4.2pcre210.31-150000.3.15.1UnknownSource applicability is not established[SUSE-SU-2023:3210-1]
Ubuntu16.04pcre210.20-1UnknownSource applicability is not established[UBUNTU-CVE-2022-41409]
Ubuntu16.04pcre210.20-2UnknownSource applicability is not established[UBUNTU-CVE-2022-41409]
Ubuntu16.04pcre210.20-3UnknownSource applicability is not established[UBUNTU-CVE-2022-41409]
Ubuntu16.04pcre210.21-1UnknownSource applicability is not established[UBUNTU-CVE-2022-41409]
Ubuntu20.04pcre210.32-5UnknownSource applicability is not established[UBUNTU-CVE-2022-41409]
Ubuntu20.04pcre210.34-7UnknownSource applicability is not established[UBUNTU-CVE-2022-41409]
Ubuntu20.04pcre210.34-7ubuntu0.1UnknownSource applicability is not established[UBUNTU-CVE-2022-41409]
Ubuntu22.04pcre210.37-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2022-41409]
Ubuntu22.04pcre210.39-3UnknownSource applicability is not established[UBUNTU-CVE-2022-41409]
Ubuntu22.04pcre210.39-3build1UnknownSource applicability is not established[UBUNTU-CVE-2022-41409]
Ubuntu22.04pcre210.39-3ubuntu0.1UnknownSource applicability is not established[UBUNTU-CVE-2022-41409]
Ubuntupropcre210.22-3UnknownSource applicability is not established[UBUNTU-CVE-2022-41409]
Ubuntupropcre210.22-4UnknownSource applicability is not established[UBUNTU-CVE-2022-41409]
Ubuntupropcre210.22-5UnknownSource applicability is not established[UBUNTU-CVE-2022-41409]
Ubuntupropcre210.22-6UnknownSource applicability is not established[UBUNTU-CVE-2022-41409]
Ubuntupropcre210.31-2UnknownSource applicability is not established[UBUNTU-CVE-2022-41409]
Ubuntupropcre210.31-2ubuntu0.1~esm1UnknownSource applicability is not established[UBUNTU-CVE-2022-41409]
Original provider fields
{
  "package_releases": [
    {
      "name": "pcre2",
      "status": "fixed",
      "release": "sid",
      "version": "10.49-1"
    },
    {
      "name": "pcre2",
      "status": "fixed",
      "release": "forky",
      "version": "10.48-3.1"
    },
    {
      "name": "pcre2",
      "status": "fixed",
      "release": "trixie",
      "version": "10.46-1~deb13u2"
    },
    {
      "name": "pcre2",
      "status": "fixed",
      "release": "trixie-security",
      "version": "10.46-1~deb13u3"
    },
    {
      "name": "pcre2",
      "status": "fixed",
      "release": "bookworm",
      "version": "10.42-1"
    },
    {
      "name": "pcre2",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "10.42-1+deb12u2"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "pcre2",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "unimportant",
      "fixed_version": "10.42-1"
    },
    {
      "bug": null,
      "name": "pcre2",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "unimportant",
      "fixed_version": "10.42-1"
    },
    {
      "bug": null,
      "name": "pcre2",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "unimportant",
      "fixed_version": "10.42-1"
    },
    {
      "bug": null,
      "name": "pcre2",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "unimportant",
      "fixed_version": "10.42-1"
    }
  ],
  "distribution_packages": [
    {
      "name": "pcre2",
      "fixed_version": "10.42-1",
      "applicability_unknown": true
    },
    {
      "name": "pcre2",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "10.20-1",
        "10.20-2",
        "10.20-3",
        "10.21-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-41409",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-41409",
      "provider_updated_at": "2026-04-22T13:23:47.523941Z",
      "applicability_unknown": true
    },
    {
      "name": "pcre2",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "10.22-3",
        "10.22-4",
        "10.22-5",
        "10.22-6",
        "10.31-2",
        "10.31-2ubuntu0.1~esm1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-41409",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-41409",
      "provider_updated_at": "2026-04-22T13:23:47.523941Z",
      "applicability_unknown": true
    },
    {
      "name": "pcre2",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "10.32-5",
        "10.34-7",
        "10.34-7ubuntu0.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-41409",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-41409",
      "provider_updated_at": "2026-04-22T13:23:47.523941Z",
      "applicability_unknown": true
    },
    {
      "name": "pcre2",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "10.37-0ubuntu2",
        "10.39-3",
        "10.39-3build1",
        "10.39-3ubuntu0.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-41409",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-41409",
      "provider_updated_at": "2026-04-22T13:23:47.523941Z",
      "applicability_unknown": true
    },
    {
      "name": "pcre2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.31-150000.3.15.1"
            }
          ]
        }
      ],
      "release": "manager proxy 4.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:3210-1",
      "fixed_version": "10.31-150000.3.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:3210-1",
      "provider_updated_at": "2026-02-04T04:11:25.452823Z",
      "applicability_unknown": true
    },
    {
      "name": "pcre2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.31-150000.3.15.1"
            }
          ]
        }
      ],
      "release": "manager server 4.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:3210-1",
      "fixed_version": "10.31-150000.3.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:3210-1",
      "provider_updated_at": "2026-02-04T04:11:25.452823Z",
      "applicability_unknown": true
    },
    {
      "name": "pcre2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.31-150000.3.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:3210-1",
      "fixed_version": "10.31-150000.3.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:3210-1",
      "provider_updated_at": "2026-02-04T04:11:25.452823Z",
      "applicability_unknown": true
    },
    {
      "name": "pcre2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.31-150000.3.15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:3210-1",
      "fixed_version": "10.31-150000.3.15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:3210-1",
      "provider_updated_at": "2026-02-04T04:11:25.452823Z",
      "applicability_unknown": true
    },
    {
      "name": "pcre2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.39-150400.4.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:3327-1",
      "fixed_version": "10.39-150400.4.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:3327-1",
      "provider_updated_at": "2026-02-04T04:04:52.551664Z",
      "applicability_unknown": true
    },
    {
      "name": "pcre2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.39-150400.4.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:3327-1",
      "fixed_version": "10.39-150400.4.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:3327-1",
      "provider_updated_at": "2026-02-04T04:04:52.551664Z",
      "applicability_unknown": true
    },
    {
      "name": "pcre2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.39-150400.4.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:3327-1",
      "fixed_version": "10.39-150400.4.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:3327-1",
      "provider_updated_at": "2026-02-04T04:04:52.551664Z",
      "applicability_unknown": true
    },
    {
      "name": "pcre2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.39-150400.4.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:3327-1",
      "fixed_version": "10.39-150400.4.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:3327-1",
      "provider_updated_at": "2026-02-04T04:04:52.551664Z",
      "applicability_unknown": true
    },
    {
      "name": "pcre2",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.39-150400.4.9.1"
            }
          ]
        }
      ],
      "release": "leap micro 5.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:3327-1",
      "fixed_version": "10.39-150400.4.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:3327-1",
      "provider_updated_at": "2026-02-04T04:04:52.551664Z",
      "applicability_unknown": true
    },
    {
      "name": "pcre2",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.39-150400.4.9.1"
            }
          ]
        }
      ],
      "release": "leap micro 5.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:3327-1",
      "fixed_version": "10.39-150400.4.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:3327-1",
      "provider_updated_at": "2026-02-04T04:04:52.551664Z",
      "applicability_unknown": true
    },
    {
      "name": "pcre2",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.39-150400.4.9.1"
            }
          ]
        }
      ],
      "release": "leap 15.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:3327-1",
      "fixed_version": "10.39-150400.4.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:3327-1",
      "provider_updated_at": "2026-02-04T04:04:52.551664Z",
      "applicability_unknown": true
    },
    {
      "name": "pcre2",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.39-150400.4.9.1"
            }
          ]
        }
      ],
      "release": "leap 15.5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:3327-1",
      "fixed_version": "10.39-150400.4.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:3327-1",
      "provider_updated_at": "2026-02-04T04:04:52.551664Z",
      "applicability_unknown": true
    },
    {
      "name": "pcre2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.34-1.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:3328-1",
      "fixed_version": "10.34-1.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:3328-1",
      "provider_updated_at": "2026-02-04T03:54:52.616623Z",
      "applicability_unknown": true
    },
    {
      "name": "pcre2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.34-1.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:3328-1",
      "fixed_version": "10.34-1.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:3328-1",
      "provider_updated_at": "2026-02-04T03:54:52.616623Z",
      "applicability_unknown": true
    },
    {
      "name": "pcre2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.34-1.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:3328-1",
      "fixed_version": "10.34-1.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:3328-1",
      "provider_updated_at": "2026-02-04T03:54:52.616623Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libpcre2-16-0]Unknown

    Source package: [pcre2]

    Details (2)

    • 10.42-1 · amd64 · bookworm

      Fixed · Fixed: 10.42-1

      dsa · pcre2 · debian · bookworm

    • 10.42-1 · arm64 · bookworm

      Fixed · Fixed: 10.42-1

      dsa · pcre2 · debian · bookworm

  • [libpcre2-32-0]Unknown

    Source package: [pcre2]

    Details (2)

    • 10.42-1 · amd64 · bookworm

      Fixed · Fixed: 10.42-1

      dsa · pcre2 · debian · bookworm

    • 10.42-1 · arm64 · bookworm

      Fixed · Fixed: 10.42-1

      dsa · pcre2 · debian · bookworm

  • [libpcre2-8-0]Unknown

    Source package: [pcre2]

    Details (2)

    • 10.42-1 · amd64 · bookworm

      Fixed · Fixed: 10.42-1

      dsa · pcre2 · debian · bookworm

    • 10.42-1 · arm64 · bookworm

      Fixed · Fixed: 10.42-1

      dsa · pcre2 · debian · bookworm

  • [libpcre2-dev]Unknown

    Source package: [pcre2]

    Details (2)

    • 10.42-1 · amd64 · bookworm

      Fixed · Fixed: 10.42-1

      dsa · pcre2 · debian · bookworm

    • 10.42-1 · arm64 · bookworm

      Fixed · Fixed: 10.42-1

      dsa · pcre2 · debian · bookworm

  • [libpcre2-posix3]Unknown

    Source package: [pcre2]

    Details (2)

    • 10.42-1 · amd64 · bookworm

      Fixed · Fixed: 10.42-1

      dsa · pcre2 · debian · bookworm

    • 10.42-1 · arm64 · bookworm

      Fixed · Fixed: 10.42-1

      dsa · pcre2 · debian · bookworm

  • [pcre2-utils]Unknown

    Source package: [pcre2]

    Details (2)

    • 10.42-1 · amd64 · bookworm

      Fixed · Fixed: 10.42-1

      dsa · pcre2 · debian · bookworm

    • 10.42-1 · arm64 · bookworm

      Fixed · Fixed: 10.42-1

      dsa · pcre2 · debian · bookworm

Observed:

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]