📊 SecuPortal 日次脆弱性ダイジェスト
新規 KEV 2
|
更新ソフト 27
|
対象期間 7日
|
生成 2026-08-05 11:01:12
📦 更新された主要ソフトウェア
| 製品 | 新バージョン | リリース日 | CVE件数 | Critical | High | KEV | 状態 |
|---|---|---|---|---|---|---|---|
| GitLab (18.11) | 18.11.8 | 2026-08-03 | 171 | 0 | 51 | 0 | 🟠重要 |
| Node.js (24) | 24.19.0 | 2026-08-03 | 16 | 3 | 7 | 0 | ⚠️要確認 |
| Node.js (26) | 26.6.0 | 2026-08-03 | 16 | 3 | 7 | 0 | ⚠️要確認 |
| Apache Struts (6) | 6.11.0 | 2026-08-01 | 3 | 0 | 3 | 0 | 🟠重要 |
| Apache Struts (7) | 7.3.0 | 2026-08-01 | 3 | 0 | 3 | 0 | 🟠重要 |
| Node.js (22) | 22.23.2 | 2026-07-29 | 16 | 3 | 7 | 0 | ⚠️要確認 |
| Node.js (24) | 24.18.1 | 2026-07-29 | 16 | 3 | 7 | 0 | ⚠️要確認 |
| Node.js (26) | 26.5.1 | 2026-07-29 | 16 | 3 | 7 | 0 | ⚠️要確認 |
| Rails (7.2) | 7.2.3.2 | 2026-07-29 | 8 | 2 | 2 | 0 | ⚠️要確認 |
| Rails (8.0) | 8.0.5.1 | 2026-07-29 | 8 | 2 | 2 | 0 | ⚠️要確認 |
| Rails (8.1) | 8.1.3.1 | 2026-07-29 | 8 | 2 | 2 | 0 | ⚠️要確認 |
| Symfony (6.4) | 6.4.43 | 2026-07-29 | 30 | 3 | 13 | 0 | ⚠️要確認 |
| Symfony (7.4) | 7.4.15 | 2026-07-29 | 30 | 3 | 13 | 0 | ⚠️要確認 |
| Symfony (8.0) | 8.0.16 | 2026-07-29 | 30 | 3 | 13 | 0 | ⚠️要確認 |
| Symfony (8.1) | 8.1.3 | 2026-07-29 | 30 | 3 | 13 | 0 | ⚠️要確認 |
| GitLab (19.0) | 19.0.5 | 2026-07-29 | 171 | 0 | 51 | 0 | 🟠重要 |
| GitLab (19.1) | 19.1.3 | 2026-07-29 | 171 | 0 | 51 | 0 | 🟠重要 |
| GitLab (19.2) | 19.2.1 | 2026-07-29 | 171 | 0 | 51 | 0 | 🟠重要 |
| HAProxy (2.6) | 2.6.32 | 2026-07-29 | 1 | 0 | 1 | 0 | 🟠重要 |
| HAProxy (2.8) | 2.8.27 | 2026-07-29 | 1 | 0 | 1 | 0 | 🟠重要 |
| HAProxy (3.0) | 3.0.26 | 2026-07-29 | 1 | 0 | 1 | 0 | 🟠重要 |
| HAProxy (3.2) | 3.2.22 | 2026-07-29 | 1 | 0 | 1 | 0 | 🟠重要 |
| HAProxy (3.3) | 3.3.13 | 2026-07-29 | 1 | 0 | 1 | 0 | 🟠重要 |
| HAProxy (3.4) | 3.4.3 | 2026-07-29 | 1 | 0 | 1 | 0 | 🟠重要 |
| Angular (20) | 20.3.27 | 2026-07-29 | 4 | 0 | 0 | 0 | ✅計画 |
| Angular (21) | 21.2.19 | 2026-07-29 | 4 | 0 | 0 | 0 | ✅計画 |
| Angular (22) | 22.1.0 | 2026-07-29 | 4 | 0 | 0 | 0 | ✅計画 |
非主要製品 の更新: 0件（今回のダイジェストには OS ディストリ / Alpine 派生などの非主要製品エントリは含まれていない）
🔴 ★★★ 要対応 CVE
本日の要対応該当なし
新規 KEV 登録の 2 件（N-able N-central / Cisco Secure Firewall Management Center）はいずれも is_major_product=false で、自社の運用対象外と判断されるため ★★★ には該当しませんでした。また、主要製品側で CVSS 9.0 以上の CVE は複数存在しますが、いずれも is_remote フラグが本ダイジェストに含まれておらず、KEV 登録もないため、現時点では ★★★ の条件を満たすと断定できません。攻撃経路の確定は公式アドバイザリで確認してください。
🟠 ★★ 参考 CVE
展開して表示 (10件)
📝 AI 全体サマリ
展開して読む
- GitLab 18.11 は eol_date=2026-07-16 で既に EOL を超過しています。18.11.8 を当てても以降の修正提供は期待できないため、19.x 系への移行を優先的に検討する必要がある可能性があります。
- Symfony 8.0 も eol_date=2026-07-31 で超過済み。8.1 系への移行を推奨。
- Rails 7.2 は eol_date=2026-08-09 で期限が目前。8.0 / 8.1 への移行計画の前倒しが妥当な可能性があります。
- GitLab 19.0 も eol_date=2026-08-20 と近いため、19.2 系への追随を検討してください。
- Angular 20 は eol_date=2026-11-28。今回の更新は MEDIUM のみで緊急性は低いと考えられます。
- CVE 件数（GitLab 171 件、Symfony 30 件など）は製品累計と推測され、今回リリースで修正された件数とは一致しない可能性があります。実際の修正対象は各公式アドバイザリで確認してください。
# docker-compose.yml（骨子 / 脆弱・修正版の挙動差分比較用）
services:
node-vuln:
image: node:24.18.1-bookworm # 修正前想定バージョン
working_dir: /app
volumes: ["./app:/app"]
command: ["node", "server.js"]
ports: ["8081:3000"]
networks: [lab]
node-fixed:
image: node:24.19.0-bookworm # 修正後バージョン
working_dir: /app
volumes: ["./app:/app"]
command: ["node", "server.js"]
ports: ["8082:3000"]
networks: [lab]
networks:
lab:
internal: true # 外部到達を遮断（検証は内部ネットワーク内に限定）
検証手順の骨子:
1. ./app/server.js に自社アプリと同等の最小構成（使用ミドルウェア・依存パッケージのみ）を置く
2. 公式アドバイザリで示された影響 API / 機能を使っているかを両コンテナで洗い出す
3. 8081（修正前）と 8082（修正後）で同一の正常系リクエストを流し、挙動・ログ差分を記録する
4. 具体的な攻撃再現は、公式アドバイザリまたはベンダ提供の再現手順が公開された後に限り、隔離ネットワーク内で実施する
原本データ (JSON) — 表示するにはクリック
{
"range": {
"from": "2026-07-30",
"to": "2026-08-05",
"days": 7
},
"summary": {
"total_kev_new": 2,
"total_software_update": 27,
"by_date": {
"2026-08-04": {
"kev_new": 1,
"software_update": 3
},
"2026-08-02": {
"kev_new": 0,
"software_update": 2
},
"2026-07-30": {
"kev_new": 1,
"software_update": 22
}
}
},
"kev_new": [
{
"digest_date": "2026-08-04",
"key": "CVE-2026-18577",
"cve_id": "CVE-2026-18577",
"vendor_project": "N-able",
"product": "N-central",
"vulnerability_name": "N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability",
"date_added": "2026-08-03",
"short_description": "N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account takeover in N-central. This vulnerability is the result of an incomplete patch for CVE-2026-18556.",
"required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"due_date": "2026-08-06",
"known_ransomware": "Unknown",
"cvss_score": null,
"cvss_severity": null,
"cvss_vector": null,
"attack_vector": null,
"is_remote": null,
"is_major_product": false,
"matched_product": null,
"title_en": "An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1",
"epss_score": 0.01477
},
{
"digest_date": "2026-07-30",
"key": "CVE-2026-20316",
"cve_id": "CVE-2026-20316",
"vendor_project": "Cisco",
"product": "Secure Firewall Management Center (FMC)",
"vulnerability_name": "Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability",
"date_added": "2026-07-29",
"short_description": "Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.",
"required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"due_date": "2026-08-01",
"known_ransomware": "Unknown",
"cvss_score": 5.3,
"cvss_severity": "MEDIUM",
"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"attack_vector": "N",
"is_remote": true,
"is_major_product": false,
"matched_product": null,
"title_en": "A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.\r\n\r\nThis vulnerability is due to the presence of static user credentials for a low-privileged account. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow t",
"epss_score": null
}
],
"software_update": [
{
"digest_date": "2026-08-04",
"key": "gitlab:18.11",
"product": "gitlab",
"category": "devops",
"cycle": "18.11",
"latest": "18.11.8",
"release_date": "2026-04-16",
"latest_release_date": "2026-08-03",
"eol_date": "2026-07-16",
"support_date": "2026-05-21",
"is_major_product": true,
"cve_stats": {
"total": 171,
"critical": 0,
"high": 51,
"medium": 92,
"low": 27,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-9222",
"severity": "HIGH",
"score": 8.7
},
{
"cve_id": "CVE-2026-1090",
"severity": "HIGH",
"score": 8.7
},
{
"cve_id": "CVE-2026-6073",
"severity": "HIGH",
"score": 8.7
}
]
}
},
{
"digest_date": "2026-08-04",
"key": "nodejs:24",
"product": "nodejs",
"category": "programming",
"cycle": "24",
"latest": "24.19.0",
"release_date": "2025-05-06",
"latest_release_date": "2026-08-03",
"eol_date": "2028-04-30",
"support_date": "2026-10-20",
"is_major_product": true,
"cve_stats": {
"total": 16,
"critical": 3,
"high": 7,
"medium": 4,
"low": 2,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-21636",
"severity": "CRITICAL",
"score": 10.0
},
{
"cve_id": "CVE-2026-48930",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2025-55130",
"severity": "CRITICAL",
"score": 9.1
}
]
}
},
{
"digest_date": "2026-08-04",
"key": "nodejs:26",
"product": "nodejs",
"category": "programming",
"cycle": "26",
"latest": "26.6.0",
"release_date": "2026-05-05",
"latest_release_date": "2026-08-03",
"eol_date": "2029-04-30",
"support_date": "2027-10-27",
"is_major_product": true,
"cve_stats": {
"total": 16,
"critical": 3,
"high": 7,
"medium": 4,
"low": 2,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-21636",
"severity": "CRITICAL",
"score": 10.0
},
{
"cve_id": "CVE-2026-48930",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2025-55130",
"severity": "CRITICAL",
"score": 9.1
}
]
}
},
{
"digest_date": "2026-08-02",
"key": "apache-struts:6",
"product": "apache-struts",
"category": "framework",
"cycle": "6",
"latest": "6.11.0",
"release_date": "2022-06-02",
"latest_release_date": "2026-08-01",
"eol_date": "false",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 3,
"critical": 0,
"high": 3,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-66675",
"severity": "HIGH",
"score": 8.2
},
{
"cve_id": "CVE-2025-68493",
"severity": "HIGH",
"score": 8.1
},
{
"cve_id": "CVE-2025-64775",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-08-02",
"key": "apache-struts:7",
"product": "apache-struts",
"category": "framework",
"cycle": "7",
"latest": "7.3.0",
"release_date": "2024-12-11",
"latest_release_date": "2026-08-01",
"eol_date": "false",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 3,
"critical": 0,
"high": 3,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-66675",
"severity": "HIGH",
"score": 8.2
},
{
"cve_id": "CVE-2025-68493",
"severity": "HIGH",
"score": 8.1
},
{
"cve_id": "CVE-2025-64775",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "angular:20",
"product": "angular",
"category": "framework",
"cycle": "20",
"latest": "20.3.27",
"release_date": "2025-05-28",
"latest_release_date": "2026-07-29",
"eol_date": "2026-11-28",
"support_date": "2025-11-19",
"is_major_product": true,
"cve_stats": {
"total": 4,
"critical": 0,
"high": 0,
"medium": 4,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-22610",
"severity": "MEDIUM",
"score": 6.1
},
{
"cve_id": "CVE-2026-27970",
"severity": "MEDIUM",
"score": 6.1
},
{
"cve_id": "CVE-2025-66412",
"severity": "MEDIUM",
"score": 5.4
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "angular:21",
"product": "angular",
"category": "framework",
"cycle": "21",
"latest": "21.2.19",
"release_date": "2025-11-19",
"latest_release_date": "2026-07-29",
"eol_date": "2027-06-30",
"support_date": "2026-06-03",
"is_major_product": true,
"cve_stats": {
"total": 4,
"critical": 0,
"high": 0,
"medium": 4,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-22610",
"severity": "MEDIUM",
"score": 6.1
},
{
"cve_id": "CVE-2026-27970",
"severity": "MEDIUM",
"score": 6.1
},
{
"cve_id": "CVE-2025-66412",
"severity": "MEDIUM",
"score": 5.4
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "angular:22",
"product": "angular",
"category": "framework",
"cycle": "22",
"latest": "22.1.0",
"release_date": "2026-06-03",
"latest_release_date": "2026-07-29",
"eol_date": "2028-06-30",
"support_date": "2027-06-30",
"is_major_product": true,
"cve_stats": {
"total": 4,
"critical": 0,
"high": 0,
"medium": 4,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-22610",
"severity": "MEDIUM",
"score": 6.1
},
{
"cve_id": "CVE-2026-27970",
"severity": "MEDIUM",
"score": 6.1
},
{
"cve_id": "CVE-2025-66412",
"severity": "MEDIUM",
"score": 5.4
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "gitlab:19.0",
"product": "gitlab",
"category": "devops",
"cycle": "19.0",
"latest": "19.0.5",
"release_date": "2026-05-21",
"latest_release_date": "2026-07-29",
"eol_date": "2026-08-20",
"support_date": "2026-06-18",
"is_major_product": true,
"cve_stats": {
"total": 171,
"critical": 0,
"high": 51,
"medium": 92,
"low": 27,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-1090",
"severity": "HIGH",
"score": 8.7
},
{
"cve_id": "CVE-2026-6552",
"severity": "HIGH",
"score": 8.7
},
{
"cve_id": "CVE-2026-6896",
"severity": "HIGH",
"score": 8.7
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "gitlab:19.1",
"product": "gitlab",
"category": "devops",
"cycle": "19.1",
"latest": "19.1.3",
"release_date": "2026-06-18",
"latest_release_date": "2026-07-29",
"eol_date": "2026-09-17",
"support_date": "2026-07-16",
"is_major_product": true,
"cve_stats": {
"total": 171,
"critical": 0,
"high": 51,
"medium": 92,
"low": 27,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-1090",
"severity": "HIGH",
"score": 8.7
},
{
"cve_id": "CVE-2026-6552",
"severity": "HIGH",
"score": 8.7
},
{
"cve_id": "CVE-2026-6896",
"severity": "HIGH",
"score": 8.7
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "gitlab:19.2",
"product": "gitlab",
"category": "devops",
"cycle": "19.2",
"latest": "19.2.1",
"release_date": "2026-07-16",
"latest_release_date": "2026-07-29",
"eol_date": "2026-10-20",
"support_date": "2026-08-20",
"is_major_product": true,
"cve_stats": {
"total": 171,
"critical": 0,
"high": 51,
"medium": 92,
"low": 27,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-1090",
"severity": "HIGH",
"score": 8.7
},
{
"cve_id": "CVE-2026-6552",
"severity": "HIGH",
"score": 8.7
},
{
"cve_id": "CVE-2026-6896",
"severity": "HIGH",
"score": 8.7
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "haproxy:2.6",
"product": "haproxy",
"category": "webserver",
"cycle": "2.6",
"latest": "2.6.32",
"release_date": "2022-05-31",
"latest_release_date": "2026-07-29",
"eol_date": "2027-04-01",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 1,
"critical": 0,
"high": 1,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-11230",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "haproxy:2.8",
"product": "haproxy",
"category": "webserver",
"cycle": "2.8",
"latest": "2.8.27",
"release_date": "2023-05-31",
"latest_release_date": "2026-07-29",
"eol_date": "2028-04-01",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 1,
"critical": 0,
"high": 1,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-11230",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "haproxy:3.0",
"product": "haproxy",
"category": "webserver",
"cycle": "3.0",
"latest": "3.0.26",
"release_date": "2024-05-29",
"latest_release_date": "2026-07-29",
"eol_date": "2029-04-01",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 1,
"critical": 0,
"high": 1,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-11230",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "haproxy:3.2",
"product": "haproxy",
"category": "webserver",
"cycle": "3.2",
"latest": "3.2.22",
"release_date": "2025-05-28",
"latest_release_date": "2026-07-29",
"eol_date": "2030-04-01",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 1,
"critical": 0,
"high": 1,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-11230",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "haproxy:3.3",
"product": "haproxy",
"category": "webserver",
"cycle": "3.3",
"latest": "3.3.13",
"release_date": "2025-11-26",
"latest_release_date": "2026-07-29",
"eol_date": "2027-01-01",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 1,
"critical": 0,
"high": 1,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-11230",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "haproxy:3.4",
"product": "haproxy",
"category": "webserver",
"cycle": "3.4",
"latest": "3.4.3",
"release_date": "2026-06-03",
"latest_release_date": "2026-07-29",
"eol_date": "2031-04-01",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 1,
"critical": 0,
"high": 1,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-11230",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "nodejs:22",
"product": "nodejs",
"category": "programming",
"cycle": "22",
"latest": "22.23.2",
"release_date": "2024-04-24",
"latest_release_date": "2026-07-29",
"eol_date": "2027-04-30",
"support_date": "2025-10-21",
"is_major_product": true,
"cve_stats": {
"total": 16,
"critical": 3,
"high": 7,
"medium": 4,
"low": 2,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-21636",
"severity": "CRITICAL",
"score": 10.0
},
{
"cve_id": "CVE-2026-48930",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2025-55130",
"severity": "CRITICAL",
"score": 9.1
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "nodejs:24",
"product": "nodejs",
"category": "programming",
"cycle": "24",
"latest": "24.18.1",
"release_date": "2025-05-06",
"latest_release_date": "2026-07-29",
"eol_date": "2028-04-30",
"support_date": "2026-10-20",
"is_major_product": true,
"cve_stats": {
"total": 16,
"critical": 3,
"high": 7,
"medium": 4,
"low": 2,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-21636",
"severity": "CRITICAL",
"score": 10.0
},
{
"cve_id": "CVE-2026-48930",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2025-55130",
"severity": "CRITICAL",
"score": 9.1
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "nodejs:26",
"product": "nodejs",
"category": "programming",
"cycle": "26",
"latest": "26.5.1",
"release_date": "2026-05-05",
"latest_release_date": "2026-07-29",
"eol_date": "2029-04-30",
"support_date": "2027-10-27",
"is_major_product": true,
"cve_stats": {
"total": 16,
"critical": 3,
"high": 7,
"medium": 4,
"low": 2,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-21636",
"severity": "CRITICAL",
"score": 10.0
},
{
"cve_id": "CVE-2026-48930",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2025-55130",
"severity": "CRITICAL",
"score": 9.1
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "rails:7.2",
"product": "rails",
"category": "framework",
"cycle": "7.2",
"latest": "7.2.3.2",
"release_date": "2024-08-09",
"latest_release_date": "2026-07-29",
"eol_date": "2026-08-09",
"support_date": "2025-08-09",
"is_major_product": true,
"cve_stats": {
"total": 8,
"critical": 2,
"high": 2,
"medium": 4,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-33195",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2026-33202",
"severity": "CRITICAL",
"score": 9.1
},
{
"cve_id": "CVE-2026-33176",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "rails:8.0",
"product": "rails",
"category": "framework",
"cycle": "8.0",
"latest": "8.0.5.1",
"release_date": "2024-11-07",
"latest_release_date": "2026-07-29",
"eol_date": "2026-11-07",
"support_date": "2026-05-07",
"is_major_product": true,
"cve_stats": {
"total": 8,
"critical": 2,
"high": 2,
"medium": 4,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-33195",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2026-33202",
"severity": "CRITICAL",
"score": 9.1
},
{
"cve_id": "CVE-2026-33176",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "rails:8.1",
"product": "rails",
"category": "framework",
"cycle": "8.1",
"latest": "8.1.3.1",
"release_date": "2025-10-22",
"latest_release_date": "2026-07-29",
"eol_date": "2027-10-10",
"support_date": "2026-10-10",
"is_major_product": true,
"cve_stats": {
"total": 8,
"critical": 2,
"high": 2,
"medium": 4,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-33195",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2026-33202",
"severity": "CRITICAL",
"score": 9.1
},
{
"cve_id": "CVE-2026-33176",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "symfony:6.4",
"product": "symfony",
"category": "framework",
"cycle": "6.4",
"latest": "6.4.43",
"release_date": "2023-11-29",
"latest_release_date": "2026-07-29",
"eol_date": "2027-11-30",
"support_date": "2026-11-30",
"is_major_product": true,
"cve_stats": {
"total": 30,
"critical": 3,
"high": 13,
"medium": 14,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-47767",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2026-45069",
"severity": "CRITICAL",
"score": 9.1
},
{
"cve_id": "CVE-2026-45063",
"severity": "CRITICAL",
"score": 9.1
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "symfony:7.4",
"product": "symfony",
"category": "framework",
"cycle": "7.4",
"latest": "7.4.15",
"release_date": "2025-11-27",
"latest_release_date": "2026-07-29",
"eol_date": "2029-11-30",
"support_date": "2028-11-30",
"is_major_product": true,
"cve_stats": {
"total": 30,
"critical": 3,
"high": 13,
"medium": 14,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-47767",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2026-45069",
"severity": "CRITICAL",
"score": 9.1
},
{
"cve_id": "CVE-2026-45063",
"severity": "CRITICAL",
"score": 9.1
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "symfony:8.0",
"product": "symfony",
"category": "framework",
"cycle": "8.0",
"latest": "8.0.16",
"release_date": "2025-11-27",
"latest_release_date": "2026-07-29",
"eol_date": "2026-07-31",
"support_date": "2026-07-31",
"is_major_product": true,
"cve_stats": {
"total": 30,
"critical": 3,
"high": 13,
"medium": 14,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-47767",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2026-45069",
"severity": "CRITICAL",
"score": 9.1
},
{
"cve_id": "CVE-2026-45063",
"severity": "CRITICAL",
"score": 9.1
}
]
}
},
{
"digest_date": "2026-07-30",
"key": "symfony:8.1",
"product": "symfony",
"category": "framework",
"cycle": "8.1",
"latest": "8.1.3",
"release_date": "2026-05-29",
"latest_release_date": "2026-07-29",
"eol_date": "2027-01-31",
"support_date": "2027-01-31",
"is_major_product": true,
"cve_stats": {
"total": 30,
"critical": 3,
"high": 13,
"medium": 14,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-47767",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2026-45069",
"severity": "CRITICAL",
"score": 9.1
},
{
"cve_id": "CVE-2026-45063",
"severity": "CRITICAL",
"score": 9.1
}
]
}
}
]
}