📊 SecuPortal 日次脆弱性ダイジェスト
新規 KEV 1
|
更新ソフト 24
|
対象期間 7日
|
生成 2026-08-04 11:01:13
📦 更新された主要ソフトウェア
| 製品 | 新バージョン | リリース日 | CVE件数 | Critical | High | KEV | 状態 |
|---|---|---|---|---|---|---|---|
| apache-struts (6系) | 6.11.0 | 2026-08-01 | 3 | 0 | 3 | 0 | 🟠重要 |
| apache-struts (7系) | 7.3.0 | 2026-08-01 | 3 | 0 | 3 | 0 | 🟠重要 |
| nodejs (22系) | 22.23.2 | 2026-07-29 | 16 | 3 | 7 | 0 | ⚠️要確認 |
| nodejs (24系) | 24.18.1 | 2026-07-29 | 16 | 3 | 7 | 0 | ⚠️要確認 |
| nodejs (26系) | 26.5.1 | 2026-07-29 | 16 | 3 | 7 | 0 | ⚠️要確認 |
| rails (7.2系) | 7.2.3.2 | 2026-07-29 | 8 | 2 | 2 | 0 | ⚠️要確認 |
| rails (8.0系) | 8.0.5.1 | 2026-07-29 | 8 | 2 | 2 | 0 | ⚠️要確認 |
| rails (8.1系) | 8.1.3.1 | 2026-07-29 | 8 | 2 | 2 | 0 | ⚠️要確認 |
| symfony (6.4系) | 6.4.43 | 2026-07-29 | 30 | 3 | 13 | 0 | ⚠️要確認 |
| symfony (7.4系) | 7.4.15 | 2026-07-29 | 30 | 3 | 13 | 0 | ⚠️要確認 |
| symfony (8.0系) | 8.0.16 | 2026-07-29 | 30 | 3 | 13 | 0 | ⚠️要確認 |
| symfony (8.1系) | 8.1.3 | 2026-07-29 | 30 | 3 | 13 | 0 | ⚠️要確認 |
| gitlab (19.0系) | 19.0.5 | 2026-07-29 | 171 | 0 | 51 | 0 | 🟠重要 |
| gitlab (19.1系) | 19.1.3 | 2026-07-29 | 171 | 0 | 51 | 0 | 🟠重要 |
| gitlab (19.2系) | 19.2.1 | 2026-07-29 | 171 | 0 | 51 | 0 | 🟠重要 |
| haproxy (2.6系) | 2.6.32 | 2026-07-29 | 1 | 0 | 1 | 0 | 🟠重要 |
| haproxy (2.8系) | 2.8.27 | 2026-07-29 | 1 | 0 | 1 | 0 | 🟠重要 |
| haproxy (3.0系) | 3.0.26 | 2026-07-29 | 1 | 0 | 1 | 0 | 🟠重要 |
| haproxy (3.2系) | 3.2.22 | 2026-07-29 | 1 | 0 | 1 | 0 | 🟠重要 |
| haproxy (3.3系) | 3.3.13 | 2026-07-29 | 1 | 0 | 1 | 0 | 🟠重要 |
| haproxy (3.4系) | 3.4.3 | 2026-07-29 | 1 | 0 | 1 | 0 | 🟠重要 |
| angular (20系) | 20.3.27 | 2026-07-29 | 4 | 0 | 0 | 0 | ✅計画 |
| angular (21系) | 21.2.19 | 2026-07-29 | 4 | 0 | 0 | 0 | ✅計画 |
| angular (22系) | 22.1.0 | 2026-07-29 | 4 | 0 | 0 | 0 | ✅計画 |
非主要製品 の更新: 0件（OS ディストリ / Alpine 派生など、要対応度は低い）
🔴 ★★★ 要対応 CVE
本日の要対応該当なし
（本日のダイジェストでは、KEV 新規収録は非主要製品 1 件のみ、主要製品側の CVE は KEV 収録 0 件かつ攻撃ベクタ情報が未付与のため、★★★ の条件を満たすものは確認できませんでした。ただし CVSS 9.0 以上の Critical が nodejs / rails / symfony に含まれるため、下記 ★★ 参考 CVE の内容は公式アドバイザリで確認することを推奨します。）
🟠 ★★ 参考 CVE
展開して表示 (9件)
📝 AI 全体サマリ
展開して読む
- EOL 期限が近いブランチが複数あります。symfony 8.0（2026-07-31、既に経過）、rails 7.2（2026-08-09）、gitlab 19.0（2026-08-20）、gitlab 19.1（2026-09-17）。該当ブランチを利用している場合、以降はセキュリティ修正が提供されない可能性があるため、サポート継続ブランチへの移行計画を優先することを推奨します。
- gitlab は CVE 累計 171 件（High 51 件）と件数が突出していますが、これはブランチ全体の累積値であり今回リリース分の新規脆弱性数とは異なる可能性があります。実際の修正内容は GitLab の Patch Release ブログで確認してください。
- haproxy は 6 ブランチが同時更新されており、CVE-2025-11230（CVSS 7.5）への対応を含む可能性があります。リバースプロキシは外部公開面に位置するため、nginx とあわせて構成確認を推奨します。
- 本ダイジェストの software_update 側の CVE には attack_vector / KEV / EPSS が付与されていないため、優先度判定は CVSS スコアのみに基づく暫定的なものです。確定判断は公式アドバイザリで行ってください。
# docker-compose.yml — 脆弱版/修正版の挙動差分を比較するための骨子
services:
node-vuln:
image: node:22.23.1-bookworm-slim # 修正前バージョン（要:公式アドバイザリで対象範囲を確認）
working_dir: /app
volumes: [./app:/app]
command: ["node", "server.js"]
networks: [isolated]
node-fixed:
image: node:22.23.2-bookworm-slim # 今回リリースの修正版
working_dir: /app
volumes: [./app:/app]
command: ["node", "server.js"]
networks: [isolated]
networks:
isolated:
internal: true # 外部通信を遮断し、検証を閉じた環境に限定
検証手順の骨子: ① 公式アドバイザリで影響コンポーネントと対象バージョン範囲を特定 → ② 上記 2 コンテナに同一の最小再現アプリを配置 → ③ 正常系リクエストの挙動差分を記録 → ④ 差分が確認できた場合のみ、本番構成での該当機能の使用有無を棚卸し。検証は必ず internal ネットワーク内で実施し、本番系および外部ネットワークから隔離してください。
原本データ (JSON) — 表示するにはクリック
{
"range": {
"from": "2026-07-29",
"to": "2026-08-04",
"days": 7
},
"summary": {
"total_kev_new": 1,
"total_software_update": 24,
"by_date": {
"2026-08-02": {
"kev_new": 0,
"software_update": 2
},
"2026-07-30": {
"kev_new": 1,
"software_update": 22
}
}
},
"kev_new": [
{
"digest_date": "2026-07-30",
"key": "CVE-2026-20316",
"cve_id": "CVE-2026-20316",
"vendor_project": "Cisco",
"product": "Secure Firewall Management Center (FMC)",
"vulnerability_name": "Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability",
"date_added": "2026-07-29",
"short_description": "Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.",
"required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"due_date": "2026-08-01",
"known_ransomware": "Unknown",
"cvss_score": 5.3,
"cvss_severity": "MEDIUM",
"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"attack_vector": "N",
"is_remote": true,
"is_major_product": false,
"matched_product": null,
"title_en": "A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.\r\n\r\nThis vulnerability is due to the presence of static user credentials for a low-privileged account. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow t",
"epss_score": null
}
],
"software_update": [
{
"digest_date": "2026-08-02",
"key": "apache-struts:6",
"product": "apache-struts",
"category": "framework",
"cycle": "6",
"latest": "6.11.0",
"release_date": "2022-06-02",
"latest_release_date": "2026-08-01",
"eol_date": "false",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 3,
"critical": 0,
"high": 3,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-66675",
"severity": "HIGH",
"score": 8.2
},
{
"cve_id": "CVE-2025-68493",
"severity": "HIGH",
"score": 8.1
},
{
"cve_id": "CVE-2025-64775",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-08-02",
"key": "apache-struts:7",
"product": "apache-struts",
"category": "framework",
"cycle": "7",
"latest": "7.3.0",
"release_date": "2024-12-11",
"latest_release_date": "2026-08-01",
"eol_date": "false",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 3,
"critical": 0,
"high": 3,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-66675",
"severity": "HIGH",
"score": 8.2
},
{
"cve_id": "CVE-2025-68493",
"severity": "HIGH",
"score": 8.1
},
{
"cve_id": "CVE-2025-64775",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "angular:20",
"product": "angular",
"category": "framework",
"cycle": "20",
"latest": "20.3.27",
"release_date": "2025-05-28",
"latest_release_date": "2026-07-29",
"eol_date": "2026-11-28",
"support_date": "2025-11-19",
"is_major_product": true,
"cve_stats": {
"total": 4,
"critical": 0,
"high": 0,
"medium": 4,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-22610",
"severity": "MEDIUM",
"score": 6.1
},
{
"cve_id": "CVE-2026-27970",
"severity": "MEDIUM",
"score": 6.1
},
{
"cve_id": "CVE-2025-66412",
"severity": "MEDIUM",
"score": 5.4
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "angular:21",
"product": "angular",
"category": "framework",
"cycle": "21",
"latest": "21.2.19",
"release_date": "2025-11-19",
"latest_release_date": "2026-07-29",
"eol_date": "2027-06-30",
"support_date": "2026-06-03",
"is_major_product": true,
"cve_stats": {
"total": 4,
"critical": 0,
"high": 0,
"medium": 4,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-22610",
"severity": "MEDIUM",
"score": 6.1
},
{
"cve_id": "CVE-2026-27970",
"severity": "MEDIUM",
"score": 6.1
},
{
"cve_id": "CVE-2025-66412",
"severity": "MEDIUM",
"score": 5.4
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "angular:22",
"product": "angular",
"category": "framework",
"cycle": "22",
"latest": "22.1.0",
"release_date": "2026-06-03",
"latest_release_date": "2026-07-29",
"eol_date": "2028-06-30",
"support_date": "2027-06-30",
"is_major_product": true,
"cve_stats": {
"total": 4,
"critical": 0,
"high": 0,
"medium": 4,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-22610",
"severity": "MEDIUM",
"score": 6.1
},
{
"cve_id": "CVE-2026-27970",
"severity": "MEDIUM",
"score": 6.1
},
{
"cve_id": "CVE-2025-66412",
"severity": "MEDIUM",
"score": 5.4
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "gitlab:19.0",
"product": "gitlab",
"category": "devops",
"cycle": "19.0",
"latest": "19.0.5",
"release_date": "2026-05-21",
"latest_release_date": "2026-07-29",
"eol_date": "2026-08-20",
"support_date": "2026-06-18",
"is_major_product": true,
"cve_stats": {
"total": 171,
"critical": 0,
"high": 51,
"medium": 92,
"low": 27,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-1090",
"severity": "HIGH",
"score": 8.7
},
{
"cve_id": "CVE-2026-6552",
"severity": "HIGH",
"score": 8.7
},
{
"cve_id": "CVE-2026-6896",
"severity": "HIGH",
"score": 8.7
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "gitlab:19.1",
"product": "gitlab",
"category": "devops",
"cycle": "19.1",
"latest": "19.1.3",
"release_date": "2026-06-18",
"latest_release_date": "2026-07-29",
"eol_date": "2026-09-17",
"support_date": "2026-07-16",
"is_major_product": true,
"cve_stats": {
"total": 171,
"critical": 0,
"high": 51,
"medium": 92,
"low": 27,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-1090",
"severity": "HIGH",
"score": 8.7
},
{
"cve_id": "CVE-2026-6552",
"severity": "HIGH",
"score": 8.7
},
{
"cve_id": "CVE-2026-6896",
"severity": "HIGH",
"score": 8.7
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "gitlab:19.2",
"product": "gitlab",
"category": "devops",
"cycle": "19.2",
"latest": "19.2.1",
"release_date": "2026-07-16",
"latest_release_date": "2026-07-29",
"eol_date": "2026-10-20",
"support_date": "2026-08-20",
"is_major_product": true,
"cve_stats": {
"total": 171,
"critical": 0,
"high": 51,
"medium": 92,
"low": 27,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-1090",
"severity": "HIGH",
"score": 8.7
},
{
"cve_id": "CVE-2026-6552",
"severity": "HIGH",
"score": 8.7
},
{
"cve_id": "CVE-2026-6896",
"severity": "HIGH",
"score": 8.7
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "haproxy:2.6",
"product": "haproxy",
"category": "webserver",
"cycle": "2.6",
"latest": "2.6.32",
"release_date": "2022-05-31",
"latest_release_date": "2026-07-29",
"eol_date": "2027-04-01",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 1,
"critical": 0,
"high": 1,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-11230",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "haproxy:2.8",
"product": "haproxy",
"category": "webserver",
"cycle": "2.8",
"latest": "2.8.27",
"release_date": "2023-05-31",
"latest_release_date": "2026-07-29",
"eol_date": "2028-04-01",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 1,
"critical": 0,
"high": 1,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-11230",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "haproxy:3.0",
"product": "haproxy",
"category": "webserver",
"cycle": "3.0",
"latest": "3.0.26",
"release_date": "2024-05-29",
"latest_release_date": "2026-07-29",
"eol_date": "2029-04-01",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 1,
"critical": 0,
"high": 1,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-11230",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "haproxy:3.2",
"product": "haproxy",
"category": "webserver",
"cycle": "3.2",
"latest": "3.2.22",
"release_date": "2025-05-28",
"latest_release_date": "2026-07-29",
"eol_date": "2030-04-01",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 1,
"critical": 0,
"high": 1,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-11230",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "haproxy:3.3",
"product": "haproxy",
"category": "webserver",
"cycle": "3.3",
"latest": "3.3.13",
"release_date": "2025-11-26",
"latest_release_date": "2026-07-29",
"eol_date": "2027-01-01",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 1,
"critical": 0,
"high": 1,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-11230",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "haproxy:3.4",
"product": "haproxy",
"category": "webserver",
"cycle": "3.4",
"latest": "3.4.3",
"release_date": "2026-06-03",
"latest_release_date": "2026-07-29",
"eol_date": "2031-04-01",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 1,
"critical": 0,
"high": 1,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-11230",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "nodejs:22",
"product": "nodejs",
"category": "programming",
"cycle": "22",
"latest": "22.23.2",
"release_date": "2024-04-24",
"latest_release_date": "2026-07-29",
"eol_date": "2027-04-30",
"support_date": "2025-10-21",
"is_major_product": true,
"cve_stats": {
"total": 16,
"critical": 3,
"high": 7,
"medium": 4,
"low": 2,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-21636",
"severity": "CRITICAL",
"score": 10.0
},
{
"cve_id": "CVE-2026-48930",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2025-55130",
"severity": "CRITICAL",
"score": 9.1
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "nodejs:24",
"product": "nodejs",
"category": "programming",
"cycle": "24",
"latest": "24.18.1",
"release_date": "2025-05-06",
"latest_release_date": "2026-07-29",
"eol_date": "2028-04-30",
"support_date": "2026-10-20",
"is_major_product": true,
"cve_stats": {
"total": 16,
"critical": 3,
"high": 7,
"medium": 4,
"low": 2,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-21636",
"severity": "CRITICAL",
"score": 10.0
},
{
"cve_id": "CVE-2026-48930",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2025-55130",
"severity": "CRITICAL",
"score": 9.1
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "nodejs:26",
"product": "nodejs",
"category": "programming",
"cycle": "26",
"latest": "26.5.1",
"release_date": "2026-05-05",
"latest_release_date": "2026-07-29",
"eol_date": "2029-04-30",
"support_date": "2027-10-27",
"is_major_product": true,
"cve_stats": {
"total": 16,
"critical": 3,
"high": 7,
"medium": 4,
"low": 2,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-21636",
"severity": "CRITICAL",
"score": 10.0
},
{
"cve_id": "CVE-2026-48930",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2025-55130",
"severity": "CRITICAL",
"score": 9.1
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "rails:7.2",
"product": "rails",
"category": "framework",
"cycle": "7.2",
"latest": "7.2.3.2",
"release_date": "2024-08-09",
"latest_release_date": "2026-07-29",
"eol_date": "2026-08-09",
"support_date": "2025-08-09",
"is_major_product": true,
"cve_stats": {
"total": 8,
"critical": 2,
"high": 2,
"medium": 4,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-33195",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2026-33202",
"severity": "CRITICAL",
"score": 9.1
},
{
"cve_id": "CVE-2026-33176",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "rails:8.0",
"product": "rails",
"category": "framework",
"cycle": "8.0",
"latest": "8.0.5.1",
"release_date": "2024-11-07",
"latest_release_date": "2026-07-29",
"eol_date": "2026-11-07",
"support_date": "2026-05-07",
"is_major_product": true,
"cve_stats": {
"total": 8,
"critical": 2,
"high": 2,
"medium": 4,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-33195",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2026-33202",
"severity": "CRITICAL",
"score": 9.1
},
{
"cve_id": "CVE-2026-33176",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "rails:8.1",
"product": "rails",
"category": "framework",
"cycle": "8.1",
"latest": "8.1.3.1",
"release_date": "2025-10-22",
"latest_release_date": "2026-07-29",
"eol_date": "2027-10-10",
"support_date": "2026-10-10",
"is_major_product": true,
"cve_stats": {
"total": 8,
"critical": 2,
"high": 2,
"medium": 4,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-33195",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2026-33202",
"severity": "CRITICAL",
"score": 9.1
},
{
"cve_id": "CVE-2026-33176",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "symfony:6.4",
"product": "symfony",
"category": "framework",
"cycle": "6.4",
"latest": "6.4.43",
"release_date": "2023-11-29",
"latest_release_date": "2026-07-29",
"eol_date": "2027-11-30",
"support_date": "2026-11-30",
"is_major_product": true,
"cve_stats": {
"total": 30,
"critical": 3,
"high": 13,
"medium": 14,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-47767",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2026-45069",
"severity": "CRITICAL",
"score": 9.1
},
{
"cve_id": "CVE-2026-45063",
"severity": "CRITICAL",
"score": 9.1
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "symfony:7.4",
"product": "symfony",
"category": "framework",
"cycle": "7.4",
"latest": "7.4.15",
"release_date": "2025-11-27",
"latest_release_date": "2026-07-29",
"eol_date": "2029-11-30",
"support_date": "2028-11-30",
"is_major_product": true,
"cve_stats": {
"total": 30,
"critical": 3,
"high": 13,
"medium": 14,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-47767",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2026-45069",
"severity": "CRITICAL",
"score": 9.1
},
{
"cve_id": "CVE-2026-45063",
"severity": "CRITICAL",
"score": 9.1
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "symfony:8.0",
"product": "symfony",
"category": "framework",
"cycle": "8.0",
"latest": "8.0.16",
"release_date": "2025-11-27",
"latest_release_date": "2026-07-29",
"eol_date": "2026-07-31",
"support_date": "2026-07-31",
"is_major_product": true,
"cve_stats": {
"total": 30,
"critical": 3,
"high": 13,
"medium": 14,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-47767",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2026-45069",
"severity": "CRITICAL",
"score": 9.1
},
{
"cve_id": "CVE-2026-45063",
"severity": "CRITICAL",
"score": 9.1
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "symfony:8.1",
"product": "symfony",
"category": "framework",
"cycle": "8.1",
"latest": "8.1.3",
"release_date": "2026-05-29",
"latest_release_date": "2026-07-29",
"eol_date": "2027-01-31",
"support_date": "2027-01-31",
"is_major_product": true,
"cve_stats": {
"total": 30,
"critical": 3,
"high": 13,
"medium": 14,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-47767",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2026-45069",
"severity": "CRITICAL",
"score": 9.1
},
{
"cve_id": "CVE-2026-45063",
"severity": "CRITICAL",
"score": 9.1
}
]
}
}
]
}