📊 SecuPortal 日次脆弱性ダイジェスト
新規 KEV 5
|
更新ソフト 23
|
対象期間 7日
|
生成 2026-08-11 15:12:55
📦 更新された主要ソフトウェア
| 製品 | 新バージョン | リリース日 | CVE件数 | Critical | High | KEV | 状態 |
|---|---|---|---|---|---|---|---|
| angular (22) | 22.1.1 | 2026-08-07 | 4 | 0 | 0 | 0 | ✅計画 |
| apache-cassandra (5.0) | 5.0.9 | 2026-08-07 | 3 | 0 | 1 | 0 | 🟠重要 |
| apache-cassandra (4.1) | 4.1.12 | 2026-08-07 | 3 | 0 | 1 | 0 | 🟠重要 |
| apache-cassandra (4.0) | 4.0.21 | 2026-08-07 | 3 | 0 | 1 | 0 | 🟠重要 |
| symfony (8.1) | 8.1.4 | 2026-08-07 | 30 | 3 | 13 | 0 | ⚠️要確認 |
| symfony (7.4) | 7.4.16 | 2026-08-07 | 30 | 3 | 13 | 0 | ⚠️要確認 |
| apache-activemq (6.3) | 6.3.1 | 2026-08-06 | 13 | 0 | 7 | 1 | ⚠️要確認 |
| drupal (11.4) | 11.4.5 | 2026-08-06 | 7 | 0 | 0 | 0 | ✅計画 |
| drupal (10.6) | 10.6.15 | 2026-08-06 | 7 | 0 | 0 | 0 | ✅計画 |
| gitlab (18.11) | 18.11.9 | 2026-08-06 | 171 | 0 | 51 | 0 | 🟠重要 |
| nodejs (26) | 26.7.0 | 2026-08-05 | 16 | 3 | 7 | 0 | ⚠️要確認 |
| python (3.14) | 3.14.7 | 2026-08-05 | 6 | 0 | 2 | 0 | 🟠重要 |
| python (3.13) | 3.13.15 | 2026-08-05 | 6 | 0 | 2 | 0 | 🟠重要 |
| opensearch (3) | 3.8.0 | 2026-08-05 | 1 | 0 | 1 | 0 | 🟠重要 |
| laravel (12) | 12.65.0 | 2026-08-05 | 0 | 0 | 0 | 0 | ✅計画 |
| nuxt (4) | 4.5.2 | 2026-08-05 | 0 | 0 | 0 | 0 | ✅計画 |
| nuxt (3) | 3.21.11 | 2026-08-05 | 0 | 0 | 0 | 0 | ✅計画 |
| vue (3.5) | 3.5.41 | 2026-08-05 | 0 | 0 | 0 | 0 | ✅計画 |
| django (6.0) | 6.0.8 | 2026-08-04 | 25 | 2 | 7 | 0 | ⚠️要確認 |
| django (5.2) | 5.2.17 | 2026-08-04 | 25 | 2 | 7 | 0 | ⚠️要確認 |
| laravel (13) | 13.24.0 | 2026-08-04 | 0 | 0 | 0 | 0 | ✅計画 |
| amazon-linux (2023) | 2023.12.20260727.0 | 2026-08-04 | 0 | 0 | 0 | 0 | ✅計画 |
| amazon-linux (2) | 2.0.20260727.0 | 2026-08-04 | 0 | 0 | 0 | 0 | ✅計画 |
非主要製品 の更新: 0件（OS ディストリ / Alpine 派生など、要対応度は低い）
🔴 ★★★ 要対応 CVE
| CVE ID | 製品 | CVSS | KEV | AV | 推奨アクション |
|---|---|---|---|---|---|
| CVE-2026-34486 | Apache Tomcat | 7.5 | ✓ | N | パッチ即時 |
🟠 ★★ 参考 CVE
展開して表示 (12件)
KEV 新規登録（自社運用外の製品）
主要製品の CVSS 9.0 以上（今回の更新に紐づく top_cves。is_remote 情報が入力に無く ★★★ 判定は保留）
📝 AI 全体サマリ
展開して読む
全体トレンド
今週の KEV 新規登録 5 件のうち 4 件はロードバランサ・CI・RMM・LLM 基盤といったエンタープライズ／管理系製品で、自社の運用対象（一般的な OSS スタック）とは重なりが小さい。一方で唯一の主要製品該当が Apache Tomcat の CVE-2026-34486 であり、CVSS 7.5 という中程度のスコアにもかかわらず KEV 登録＋EPSS 0.426 という実悪用寄りのプロファイルを示している点が今週の要点と言える。ソフトウェア更新側は Symfony・Node.js・Django に Critical が集中しており、いずれも定例リリースでの一括修正の可能性が高い。
特記事項
gitlab 18.11（EOL 2026-07-16 済）、nuxt 3（EOL 2026-07-31 済）、amazon-linux 2（EOL 2026-06-30 済）は既にサポート期限を越えている可能性があり、今後セキュリティ修正が届かない前提での計画が必要。drupal 10.6 も 2026-12-16 で期限を迎える。gitlab 18.11.9 は CVE 171 件（High 51）と件数が突出しているが、これは累積集計と見られ 18.11.9 自体で新規に 51 件の High が出たわけではない可能性が高い。実際の該当性はリリースノート単位での確認が必要。is_remote / KEV フラグが含まれていないため、Symfony・Node.js・Django の CVSS 9.0 以上は ★★★ 条件（CVSS>=9.0 かつ is_remote=true）を満たすか判定できず、今回は ★★ に留めている。攻撃ベクタが Network と確認された場合は ★★★ 相当に格上げすべきものが含まれる可能性がある。PoC 検証を推奨する CVE
CVE-2026-34486（Tomcat EncryptInterceptor バイパス）は、クラスタ間通信の暗号化が実際に無効化され得るかを検証環境で確認する価値があると考えられる。以下は 2 ノードクラスタを立てて server.xml の Channel/Interceptor 設定と通信内容を観測するための骨子（実際の攻撃コードは含めない）。
# docker-compose.yml（骨子）
services:
tomcat-a:
image: tomcat:<検証対象バージョン> # 修正前 / 修正後を切り替えて比較
volumes:
- ./conf/server-a.xml:/usr/local/tomcat/conf/server.xml:ro
- ./webapps/session-demo:/usr/local/tomcat/webapps/session-demo:ro
networks: [cluster-net]
tomcat-b:
image: tomcat:<検証対象バージョン>
volumes:
- ./conf/server-b.xml:/usr/local/tomcat/conf/server.xml:ro
- ./webapps/session-demo:/usr/local/tomcat/webapps/session-demo:ro
networks: [cluster-net]
# クラスタ通信を観測するための sniffer（同一ネットワークに参加させる）
observer:
image: nicolaka/netshoot
command: sleep infinity
cap_add: [NET_ADMIN, NET_RAW]
network_mode: "service:tomcat-a"
networks:
cluster-net:
検証の観点は、<Cluster> 配下に EncryptInterceptor（encryptionKey 設定あり）を入れた状態で、ノード間のセッションレプリケーション通信が平文で読めてしまうかどうか。修正前後のイメージで同一手順を実施し差分を見る形が妥当と考えられる。設定項目と修正版バージョンは Apache Tomcat の公式セキュリティアドバイザリで確認したうえで着手されたい。
原本データ (JSON) — 表示するにはクリック
{
"range": {
"from": "2026-08-05",
"to": "2026-08-11",
"days": 7
},
"summary": {
"total_kev_new": 5,
"total_software_update": 23,
"by_date": {
"2026-08-08": {
"kev_new": 1,
"software_update": 6
},
"2026-08-07": {
"kev_new": 0,
"software_update": 4
},
"2026-08-06": {
"kev_new": 1,
"software_update": 8
},
"2026-08-05": {
"kev_new": 3,
"software_update": 5
}
}
},
"kev_new": [
{
"digest_date": "2026-08-08",
"key": "CVE-2026-8037",
"cve_id": "CVE-2026-8037",
"vendor_project": "Progress",
"product": "LoadMaster",
"vulnerability_name": "Progress LoadMaster Command Injection Vulnerability",
"date_added": "2026-08-07",
"short_description": "Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints.",
"required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"due_date": "2026-08-10",
"known_ransomware": "Unknown",
"cvss_score": 9.6,
"cvss_severity": "CRITICAL",
"cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"attack_vector": "A",
"is_remote": true,
"is_major_product": false,
"matched_product": null,
"title_en": "OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints",
"epss_score": 0.84793
},
{
"digest_date": "2026-08-06",
"key": "CVE-2026-63077",
"cve_id": "CVE-2026-63077",
"vendor_project": "JetBrains",
"product": "TeamCity",
"vulnerability_name": "JetBrains TeamCity Deserialization of Untrusted Data Vulnerability",
"date_added": "2026-08-05",
"short_description": "JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol.",
"required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"due_date": "2026-08-08",
"known_ransomware": "Unknown",
"cvss_score": 9.8,
"cvss_severity": "CRITICAL",
"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"attack_vector": "N",
"is_remote": true,
"is_major_product": false,
"matched_product": null,
"title_en": "In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol",
"epss_score": 0.00649
},
{
"digest_date": "2026-08-05",
"key": "CVE-2026-18556",
"cve_id": "CVE-2026-18556",
"vendor_project": "N-able",
"product": "N-central",
"vulnerability_name": "N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability",
"date_added": "2026-08-04",
"short_description": "N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass.",
"required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"due_date": "2026-08-07",
"known_ransomware": "Unknown",
"cvss_score": null,
"cvss_severity": null,
"cvss_vector": null,
"attack_vector": null,
"is_remote": null,
"is_major_product": false,
"matched_product": null,
"title_en": "Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass.\n\nThis issue affects N-central: through 2026.1.",
"epss_score": 0.0027
},
{
"digest_date": "2026-08-05",
"key": "CVE-2026-34486",
"cve_id": "CVE-2026-34486",
"vendor_project": "Apache",
"product": "Tomcat",
"vulnerability_name": "Apache Tomcat Missing Encryption of Sensitive Data Vulnerability",
"date_added": "2026-08-04",
"short_description": "Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor.",
"required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"due_date": "2026-08-07",
"known_ransomware": "Unknown",
"cvss_score": 7.5,
"cvss_severity": "HIGH",
"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"attack_vector": "N",
"is_remote": true,
"is_major_product": true,
"matched_product": "tomcat",
"title_en": "Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor.\n\nThis issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116.\n\nUsers are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.",
"epss_score": 0.42627
},
{
"digest_date": "2026-08-05",
"key": "CVE-2026-9198",
"cve_id": "CVE-2026-9198",
"vendor_project": "IBM",
"product": "Langflow",
"vulnerability_name": "IBM Langflow Code Injection Vulnerability",
"date_added": "2026-08-04",
"short_description": "Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.",
"required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"due_date": "2026-08-07",
"known_ransomware": "Unknown",
"cvss_score": 9.8,
"cvss_severity": "CRITICAL",
"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"attack_vector": "N",
"is_remote": true,
"is_major_product": false,
"matched_product": null,
"title_en": "IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments",
"epss_score": 0.01886
}
],
"software_update": [
{
"digest_date": "2026-08-08",
"key": "angular:22",
"product": "angular",
"category": "framework",
"cycle": "22",
"latest": "22.1.1",
"release_date": "2026-06-03",
"latest_release_date": "2026-08-07",
"eol_date": "2028-06-30",
"support_date": "2027-06-30",
"is_major_product": true,
"cve_stats": {
"total": 4,
"critical": 0,
"high": 0,
"medium": 4,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-27970",
"severity": "MEDIUM",
"score": 6.1
},
{
"cve_id": "CVE-2026-22610",
"severity": "MEDIUM",
"score": 6.1
},
{
"cve_id": "CVE-2025-61261",
"severity": "MEDIUM",
"score": 5.4
}
]
}
},
{
"digest_date": "2026-08-08",
"key": "apache-cassandra:4.0",
"product": "apache-cassandra",
"category": "database",
"cycle": "4.0",
"latest": "4.0.21",
"release_date": "2021-07-26",
"latest_release_date": "2026-08-07",
"eol_date": "false",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 3,
"critical": 0,
"high": 1,
"medium": 2,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-27314",
"severity": "HIGH",
"score": 8.8
},
{
"cve_id": "CVE-2026-32588",
"severity": "MEDIUM",
"score": 6.5
},
{
"cve_id": "CVE-2026-27315",
"severity": "MEDIUM",
"score": 5.5
}
]
}
},
{
"digest_date": "2026-08-08",
"key": "apache-cassandra:4.1",
"product": "apache-cassandra",
"category": "database",
"cycle": "4.1",
"latest": "4.1.12",
"release_date": "2022-12-13",
"latest_release_date": "2026-08-07",
"eol_date": "false",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 3,
"critical": 0,
"high": 1,
"medium": 2,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-27314",
"severity": "HIGH",
"score": 8.8
},
{
"cve_id": "CVE-2026-32588",
"severity": "MEDIUM",
"score": 6.5
},
{
"cve_id": "CVE-2026-27315",
"severity": "MEDIUM",
"score": 5.5
}
]
}
},
{
"digest_date": "2026-08-08",
"key": "apache-cassandra:5.0",
"product": "apache-cassandra",
"category": "database",
"cycle": "5.0",
"latest": "5.0.9",
"release_date": "2024-09-05",
"latest_release_date": "2026-08-07",
"eol_date": "false",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 3,
"critical": 0,
"high": 1,
"medium": 2,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-27314",
"severity": "HIGH",
"score": 8.8
},
{
"cve_id": "CVE-2026-32588",
"severity": "MEDIUM",
"score": 6.5
},
{
"cve_id": "CVE-2026-27315",
"severity": "MEDIUM",
"score": 5.5
}
]
}
},
{
"digest_date": "2026-08-08",
"key": "symfony:7.4",
"product": "symfony",
"category": "framework",
"cycle": "7.4",
"latest": "7.4.16",
"release_date": "2025-11-27",
"latest_release_date": "2026-08-07",
"eol_date": "2029-11-30",
"support_date": "2028-11-30",
"is_major_product": true,
"cve_stats": {
"total": 30,
"critical": 3,
"high": 13,
"medium": 14,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-47767",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2026-45069",
"severity": "CRITICAL",
"score": 9.1
},
{
"cve_id": "CVE-2026-45063",
"severity": "CRITICAL",
"score": 9.1
}
]
}
},
{
"digest_date": "2026-08-08",
"key": "symfony:8.1",
"product": "symfony",
"category": "framework",
"cycle": "8.1",
"latest": "8.1.4",
"release_date": "2026-05-29",
"latest_release_date": "2026-08-07",
"eol_date": "2027-01-31",
"support_date": "2027-01-31",
"is_major_product": true,
"cve_stats": {
"total": 30,
"critical": 3,
"high": 13,
"medium": 14,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-47767",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2026-45069",
"severity": "CRITICAL",
"score": 9.1
},
{
"cve_id": "CVE-2026-45063",
"severity": "CRITICAL",
"score": 9.1
}
]
}
},
{
"digest_date": "2026-08-07",
"key": "apache-activemq:6.3",
"product": "apache-activemq",
"category": "middleware",
"cycle": "6.3",
"latest": "6.3.1",
"release_date": "2026-07-24",
"latest_release_date": "2026-08-06",
"eol_date": "false",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 13,
"critical": 0,
"high": 7,
"medium": 6,
"low": 0,
"kev": 1,
"top_cves": [
{
"cve_id": "CVE-2026-49157",
"severity": "HIGH",
"score": 8.8
},
{
"cve_id": "CVE-2026-40466",
"severity": "HIGH",
"score": 8.8
},
{
"cve_id": "CVE-2026-45505",
"severity": "HIGH",
"score": 8.8
}
]
}
},
{
"digest_date": "2026-08-07",
"key": "drupal:10.6",
"product": "drupal",
"category": "cms",
"cycle": "10.6",
"latest": "10.6.15",
"release_date": "2025-12-17",
"latest_release_date": "2026-08-06",
"eol_date": "2026-12-16",
"support_date": "2026-06-16",
"is_major_product": true,
"cve_stats": {
"total": 7,
"critical": 0,
"high": 0,
"medium": 6,
"low": 1,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-6366",
"severity": "MEDIUM",
"score": 6.6
},
{
"cve_id": "CVE-2026-6367",
"severity": "MEDIUM",
"score": 6.1
},
{
"cve_id": "CVE-2026-6365",
"severity": "MEDIUM",
"score": 6.1
}
]
}
},
{
"digest_date": "2026-08-07",
"key": "drupal:11.4",
"product": "drupal",
"category": "cms",
"cycle": "11.4",
"latest": "11.4.5",
"release_date": "2026-07-01",
"latest_release_date": "2026-08-06",
"eol_date": "2027-07-07",
"support_date": "2027-01-01",
"is_major_product": true,
"cve_stats": {
"total": 7,
"critical": 0,
"high": 0,
"medium": 6,
"low": 1,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-6366",
"severity": "MEDIUM",
"score": 6.6
},
{
"cve_id": "CVE-2026-6367",
"severity": "MEDIUM",
"score": 6.1
},
{
"cve_id": "CVE-2026-6365",
"severity": "MEDIUM",
"score": 6.1
}
]
}
},
{
"digest_date": "2026-08-07",
"key": "gitlab:18.11",
"product": "gitlab",
"category": "devops",
"cycle": "18.11",
"latest": "18.11.9",
"release_date": "2026-04-16",
"latest_release_date": "2026-08-06",
"eol_date": "2026-07-16",
"support_date": "2026-05-21",
"is_major_product": true,
"cve_stats": {
"total": 171,
"critical": 0,
"high": 51,
"medium": 92,
"low": 27,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-7377",
"severity": "HIGH",
"score": 8.7
},
{
"cve_id": "CVE-2025-9222",
"severity": "HIGH",
"score": 8.7
},
{
"cve_id": "CVE-2026-6552",
"severity": "HIGH",
"score": 8.7
}
]
}
},
{
"digest_date": "2026-08-06",
"key": "laravel:12",
"product": "laravel",
"category": "framework",
"cycle": "12",
"latest": "12.65.0",
"release_date": "2025-02-24",
"latest_release_date": "2026-08-05",
"eol_date": "2027-02-24",
"support_date": "2026-08-16",
"is_major_product": true,
"cve_stats": {
"total": 0,
"critical": 0,
"high": 0,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": []
}
},
{
"digest_date": "2026-08-06",
"key": "nodejs:26",
"product": "nodejs",
"category": "programming",
"cycle": "26",
"latest": "26.7.0",
"release_date": "2026-05-05",
"latest_release_date": "2026-08-05",
"eol_date": "2029-04-30",
"support_date": "2027-10-27",
"is_major_product": true,
"cve_stats": {
"total": 16,
"critical": 3,
"high": 7,
"medium": 4,
"low": 2,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-21636",
"severity": "CRITICAL",
"score": 10.0
},
{
"cve_id": "CVE-2026-48930",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2025-55130",
"severity": "CRITICAL",
"score": 9.1
}
]
}
},
{
"digest_date": "2026-08-06",
"key": "nuxt:3",
"product": "nuxt",
"category": "framework",
"cycle": "3",
"latest": "3.21.11",
"release_date": "2022-11-16",
"latest_release_date": "2026-08-05",
"eol_date": "2026-07-31",
"support_date": "2025-07-16",
"is_major_product": true,
"cve_stats": {
"total": 0,
"critical": 0,
"high": 0,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": []
}
},
{
"digest_date": "2026-08-06",
"key": "nuxt:4",
"product": "nuxt",
"category": "framework",
"cycle": "4",
"latest": "4.5.2",
"release_date": "2025-07-16",
"latest_release_date": "2026-08-05",
"eol_date": "false",
"support_date": "true",
"is_major_product": true,
"cve_stats": {
"total": 0,
"critical": 0,
"high": 0,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": []
}
},
{
"digest_date": "2026-08-06",
"key": "opensearch:3",
"product": "opensearch",
"category": "database",
"cycle": "3",
"latest": "3.8.0",
"release_date": "2025-05-06",
"latest_release_date": "2026-08-05",
"eol_date": "false",
"support_date": "true",
"is_major_product": true,
"cve_stats": {
"total": 1,
"critical": 0,
"high": 1,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-9624",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-08-06",
"key": "python:3.13",
"product": "python",
"category": "programming",
"cycle": "3.13",
"latest": "3.13.15",
"release_date": "2024-10-07",
"latest_release_date": "2026-08-05",
"eol_date": "2029-10-31",
"support_date": "2026-10-01",
"is_major_product": true,
"cve_stats": {
"total": 6,
"critical": 0,
"high": 2,
"medium": 3,
"low": 1,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-15308",
"severity": "HIGH",
"score": 7.5
},
{
"cve_id": "CVE-2025-13836",
"severity": "HIGH",
"score": 7.5
},
{
"cve_id": "CVE-2025-13837",
"severity": "MEDIUM",
"score": 5.5
}
]
}
},
{
"digest_date": "2026-08-06",
"key": "python:3.14",
"product": "python",
"category": "programming",
"cycle": "3.14",
"latest": "3.14.7",
"release_date": "2025-10-07",
"latest_release_date": "2026-08-05",
"eol_date": "2030-10-31",
"support_date": "2027-10-01",
"is_major_product": true,
"cve_stats": {
"total": 6,
"critical": 0,
"high": 2,
"medium": 3,
"low": 1,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-15308",
"severity": "HIGH",
"score": 7.5
},
{
"cve_id": "CVE-2025-13836",
"severity": "HIGH",
"score": 7.5
},
{
"cve_id": "CVE-2025-13837",
"severity": "MEDIUM",
"score": 5.5
}
]
}
},
{
"digest_date": "2026-08-06",
"key": "vue:3.5",
"product": "vue",
"category": "framework",
"cycle": "3.5",
"latest": "3.5.41",
"release_date": "2024-09-03",
"latest_release_date": "2026-08-05",
"eol_date": "false",
"support_date": "true",
"is_major_product": true,
"cve_stats": {
"total": 0,
"critical": 0,
"high": 0,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": []
}
},
{
"digest_date": "2026-08-05",
"key": "amazon-linux:2",
"product": "amazon-linux",
"category": "os",
"cycle": "2",
"latest": "2.0.20260727.0",
"release_date": "2018-06-26",
"latest_release_date": "2026-08-04",
"eol_date": "2026-06-30",
"support_date": "2026-06-30",
"is_major_product": true,
"cve_stats": {
"total": 0,
"critical": 0,
"high": 0,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": []
}
},
{
"digest_date": "2026-08-05",
"key": "amazon-linux:2023",
"product": "amazon-linux",
"category": "os",
"cycle": "2023",
"latest": "2023.12.20260727.0",
"release_date": "2023-03-01",
"latest_release_date": "2026-08-04",
"eol_date": "2029-06-30",
"support_date": "2027-06-30",
"is_major_product": true,
"cve_stats": {
"total": 0,
"critical": 0,
"high": 0,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": []
}
},
{
"digest_date": "2026-08-05",
"key": "django:5.2",
"product": "django",
"category": "framework",
"cycle": "5.2",
"latest": "5.2.17",
"release_date": "2025-04-02",
"latest_release_date": "2026-08-04",
"eol_date": "2028-04-30",
"support_date": "2025-12-03",
"is_major_product": true,
"cve_stats": {
"total": 25,
"critical": 2,
"high": 7,
"medium": 8,
"low": 8,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-4277",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2025-64459",
"severity": "CRITICAL",
"score": 9.1
},
{
"cve_id": "CVE-2026-3902",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-08-05",
"key": "django:6.0",
"product": "django",
"category": "framework",
"cycle": "6.0",
"latest": "6.0.8",
"release_date": "2025-12-03",
"latest_release_date": "2026-08-04",
"eol_date": "2027-04-30",
"support_date": "2026-08-31",
"is_major_product": true,
"cve_stats": {
"total": 25,
"critical": 2,
"high": 7,
"medium": 8,
"low": 8,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-4277",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2025-64459",
"severity": "CRITICAL",
"score": 9.1
},
{
"cve_id": "CVE-2026-3902",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-08-05",
"key": "laravel:13",
"product": "laravel",
"category": "framework",
"cycle": "13",
"latest": "13.24.0",
"release_date": "2026-03-17",
"latest_release_date": "2026-08-04",
"eol_date": "2028-03-17",
"support_date": "2027-09-30",
"is_major_product": true,
"cve_stats": {
"total": 0,
"critical": 0,
"high": 0,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": []
}
}
]
}