📊 SecuPortal 日次脆弱性ダイジェスト
新規 KEV 5
|
更新ソフト 29
|
対象期間 7日
|
生成 2026-08-12 15:11:49
📦 更新された主要ソフトウェア
| 製品 | 新バージョン | リリース日 | CVE件数 | Critical | High | KEV | 状態 |
|---|---|---|---|---|---|---|---|
| jenkins | 2.577 | 2026-08-11 | 16 | 0 | 5 | 0 | 🟠重要 |
| postfix | 3.11.6 | 2026-08-11 | 0 | 0 | 0 | 0 | ✅計画 |
| postfix | 3.10.13 | 2026-08-11 | 0 | 0 | 0 | 0 | ✅計画 |
| postfix | 3.9.14 | 2026-08-11 | 0 | 0 | 0 | 0 | ✅計画 |
| postfix | 3.8.20 | 2026-08-11 | 0 | 0 | 0 | 0 | ✅計画 |
| postfix | 3.7.22 | 2026-08-11 | 0 | 0 | 0 | 0 | ✅計画 |
| postfix | 3.6.20 | 2026-08-11 | 0 | 0 | 0 | 0 | ✅計画 |
| postfix | 3.5.27 | 2026-08-11 | 0 | 0 | 0 | 0 | ✅計画 |
| typo3 | 14.3.6 | 2026-08-11 | 4 | 0 | 2 | 0 | 🟠重要 |
| typo3 | 13.4.34 | 2026-08-11 | 4 | 0 | 2 | 0 | 🟠重要 |
| angular | 22.1.1 | 2026-08-07 | 4 | 0 | 0 | 0 | ✅計画 |
| apache-cassandra | 5.0.9 | 2026-08-07 | 3 | 0 | 1 | 0 | 🟠重要 |
| apache-cassandra | 4.1.12 | 2026-08-07 | 3 | 0 | 1 | 0 | 🟠重要 |
| apache-cassandra | 4.0.21 | 2026-08-07 | 3 | 0 | 1 | 0 | 🟠重要 |
| symfony | 8.1.4 | 2026-08-07 | 30 | 3 | 13 | 0 | ⚠️要確認 |
| symfony | 7.4.16 | 2026-08-07 | 30 | 3 | 13 | 0 | ⚠️要確認 |
| apache-activemq | 6.3.1 | 2026-08-06 | 13 | 0 | 7 | 1 | ⚠️要確認 |
| drupal | 11.4.5 | 2026-08-06 | 7 | 0 | 0 | 0 | ✅計画 |
| drupal | 10.6.15 | 2026-08-06 | 7 | 0 | 0 | 0 | ✅計画 |
| gitlab | 18.11.9 | 2026-08-06 | 171 | 0 | 51 | 0 | 🟠重要 |
| laravel | 12.65.0 | 2026-08-05 | 0 | 0 | 0 | 0 | ✅計画 |
| nodejs | 26.7.0 | 2026-08-05 | 16 | 3 | 7 | 0 | ⚠️要確認 |
| nuxt | 4.5.2 | 2026-08-05 | 0 | 0 | 0 | 0 | ✅計画 |
| nuxt | 3.21.11 | 2026-08-05 | 0 | 0 | 0 | 0 | ✅計画 |
| opensearch | 3.8.0 | 2026-08-05 | 1 | 0 | 1 | 0 | 🟠重要 |
| python | 3.14.7 | 2026-08-05 | 6 | 0 | 2 | 0 | 🟠重要 |
| python | 3.13.15 | 2026-08-05 | 6 | 0 | 2 | 0 | 🟠重要 |
| vue | 3.5.41 | 2026-08-05 | 0 | 0 | 0 | 0 | ✅計画 |
非主要製品 の更新: 1件（OS ディストリ / Alpine 派生など、要対応度は低い）
🔴 ★★★ 要対応 CVE
本日の要対応該当なし
今回の KEV 新規登録 5 件はいずれも is_major_product=false（Cisco ASA/FTD、Windows AFD、Metabase、Progress LoadMaster、JetBrains TeamCity）であり、★★★ の条件（is_major_product=true）を満たすものはありませんでした。ただし後述の ★★ に、社内利用状況によっては影響が出る可能性があるものが含まれます。
🟠 ★★ 参考 CVE
展開して表示 (5件)
📝 AI 全体サマリ
展開して読む
- apache-activemq 6.3.1 は cve_stats に KEV 1 件が含まれています。ActiveMQ は過去にランサムウェアの侵入口として悪用された経緯があるため、社内で稼働している場合は公式アドバイザリを確認のうえ、他より前倒しで適用を検討する価値がある可能性があります。
- postfix が EOL サイクルまで一斉更新されています。3.5（EOL 2024-03-06）/ 3.6（2025-02-16）/ 3.7（2026-03-06）は既にサポート終了サイクルであり、これらを運用中であればバージョンアップ計画そのものの見直しが必要になる可能性があります。
- gitlab 18.11.9 は cycle の eol_date が 2026-07-16 で、既にサポート期間を過ぎている可能性があります。CVE 累計 171 件（High 51）と数が多く、サポート内サイクルへの移行を検討したほうがよいと考えられます。同様に nuxt 3（EOL 2026-07-31）も 4 系への移行検討対象です。
- Node.js 26.7.0 の CVE-2026-21636（CVSS 10.0） は数値上最も重大ですが、cve_stats はサイクル累計の集計である可能性があり、今回のリリースで新規に修正されたものとは限りません。実際の影響範囲は Node.js の公式セキュリティリリース告知で確認することを推奨します。
優先度としては CVE-2026-72898（Metabase, 未認証 SQLi, KEV） が、到達性の確認と検知ルールの妥当性検証の両面で有用と考えられます。自社利用の可能性が残るため、隔離環境での挙動確認を推奨します。以下は 脆弱性検証環境の構築 プロジェクト配下に置く想定の骨子です（exploit コードは含めません）。
```yaml
# docker-compose.yml (検証用・外部非公開ネットワークで実行)
services:
metabase:
image: metabase/metabase:<脆弱版タグ> # 公式アドバイザリで影響バージョンを確認して指定
ports:
- "127.0.0.1:3000:3000" # localhost バインド必須
environment:
MB_DB_TYPE: postgres
MB_DB_HOST: appdb
MB_DB_PORT: 5432
MB_DB_DBNAME: metabase
MB_DB_USER: metabase
MB_DB_PASS: verify-only-password
depends_on: [appdb]
networks: [verify]
appdb: # Metabase のアプリケーション DB
image: postgres:16
environment:
POSTGRES_DB: metabase
POSTGRES_USER: metabase
POSTGRES_PASSWORD: verify-only-password
networks: [verify]
networks:
verify:
internal: true # 外向き通信を遮断
```
検証時の観点（実施手順の骨子のみ）:
1. 脆弱版と修正版の 2 系統を用意し、同一リクエストに対する応答差分を比較する
2. アプリケーション DB 側のクエリログを有効化し、想定外の SQL が到達するかを観測する
3. 前段に WAF / リバースプロキシを挟んだ構成でも同様に観測し、緩和策の有効性を評価する
4. 検証結果をもとに SIEM 側の検知ルール（不審な Metabase エンドポイントへのアクセス等）を整備する
なお PoC の具体的なリクエスト内容は、ベンダー公式アドバイザリおよび CISA KEV の参照情報に基づいて取得してください。本レポートでは作成しません。
原本データ (JSON) — 表示するにはクリック
{
"range": {
"from": "2026-08-06",
"to": "2026-08-12",
"days": 7
},
"summary": {
"total_kev_new": 5,
"total_software_update": 29,
"by_date": {
"2026-08-12": {
"kev_new": 3,
"software_update": 11
},
"2026-08-08": {
"kev_new": 1,
"software_update": 6
},
"2026-08-07": {
"kev_new": 0,
"software_update": 4
},
"2026-08-06": {
"kev_new": 1,
"software_update": 8
}
}
},
"kev_new": [
{
"digest_date": "2026-08-12",
"key": "CVE-2026-20349",
"cve_id": "CVE-2026-20349",
"vendor_project": "Cisco",
"product": "Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) ",
"vulnerability_name": "Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability",
"date_added": "2026-08-11",
"short_description": "Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) contain a heap inspection vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.",
"required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"due_date": "2026-08-14",
"known_ransomware": "Unknown",
"cvss_score": 8.6,
"cvss_severity": "HIGH",
"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"attack_vector": "N",
"is_remote": true,
"is_major_product": false,
"matched_product": null,
"title_en": "A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. \r\n\r\nThis vulnerability is due to insufficient error checking when processing HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to t",
"epss_score": null
},
{
"digest_date": "2026-08-12",
"key": "CVE-2026-68820",
"cve_id": "CVE-2026-68820",
"vendor_project": "Microsoft",
"product": "Windows Ancillary Function Driver for WinSock ",
"vulnerability_name": "Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability",
"date_added": "2026-08-11",
"short_description": "Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.",
"required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"due_date": "2026-08-25",
"known_ransomware": "Unknown",
"cvss_score": 7.0,
"cvss_severity": "HIGH",
"cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"attack_vector": "L",
"is_remote": false,
"is_major_product": false,
"matched_product": null,
"title_en": "Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.",
"epss_score": null
},
{
"digest_date": "2026-08-12",
"key": "CVE-2026-72898",
"cve_id": "CVE-2026-72898",
"vendor_project": "Metabase",
"product": "Metabase",
"vulnerability_name": "Metabase SQL Injection Vulnerability",
"date_added": "2026-08-11",
"short_description": "Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, which can give them administrator access to the instance. From there, the attacker could change the application configuration, steal stored credentials for the connected databases, read any data accessible through those connections, and export data.",
"required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"due_date": "2026-08-14",
"known_ransomware": "Unknown",
"cvss_score": 10.0,
"cvss_severity": "CRITICAL",
"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"attack_vector": "N",
"is_remote": true,
"is_major_product": false,
"matched_product": null,
"title_en": "Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.",
"epss_score": 0.0069
},
{
"digest_date": "2026-08-08",
"key": "CVE-2026-8037",
"cve_id": "CVE-2026-8037",
"vendor_project": "Progress",
"product": "LoadMaster",
"vulnerability_name": "Progress LoadMaster Command Injection Vulnerability",
"date_added": "2026-08-07",
"short_description": "Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints.",
"required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"due_date": "2026-08-10",
"known_ransomware": "Unknown",
"cvss_score": 9.6,
"cvss_severity": "CRITICAL",
"cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"attack_vector": "A",
"is_remote": true,
"is_major_product": false,
"matched_product": null,
"title_en": "OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints",
"epss_score": 0.84793
},
{
"digest_date": "2026-08-06",
"key": "CVE-2026-63077",
"cve_id": "CVE-2026-63077",
"vendor_project": "JetBrains",
"product": "TeamCity",
"vulnerability_name": "JetBrains TeamCity Deserialization of Untrusted Data Vulnerability",
"date_added": "2026-08-05",
"short_description": "JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol.",
"required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"due_date": "2026-08-08",
"known_ransomware": "Unknown",
"cvss_score": 9.8,
"cvss_severity": "CRITICAL",
"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"attack_vector": "N",
"is_remote": true,
"is_major_product": false,
"matched_product": null,
"title_en": "In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol",
"epss_score": 0.00649
}
],
"software_update": [
{
"digest_date": "2026-08-12",
"key": "firefox:153",
"product": "firefox",
"category": "browser",
"cycle": "153",
"latest": "153.0.4",
"release_date": "2026-07-21",
"latest_release_date": "2026-08-11",
"eol_date": "false",
"support_date": null,
"is_major_product": false,
"cve_stats": {
"total": 0,
"critical": 0,
"high": 0,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": []
}
},
{
"digest_date": "2026-08-12",
"key": "jenkins:2",
"product": "jenkins",
"category": "devops",
"cycle": "2",
"latest": "2.577",
"release_date": "2016-04-20",
"latest_release_date": "2026-08-11",
"eol_date": "false",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 16,
"critical": 0,
"high": 5,
"medium": 10,
"low": 1,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-53435",
"severity": "HIGH",
"score": 8.8
},
{
"cve_id": "CVE-2026-33001",
"severity": "HIGH",
"score": 8.8
},
{
"cve_id": "CVE-2026-27099",
"severity": "HIGH",
"score": 8.0
}
]
}
},
{
"digest_date": "2026-08-12",
"key": "postfix:3.10",
"product": "postfix",
"category": "middleware",
"cycle": "3.10",
"latest": "3.10.13",
"release_date": "2025-02-16",
"latest_release_date": "2026-08-11",
"eol_date": "false",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 0,
"critical": 0,
"high": 0,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": []
}
},
{
"digest_date": "2026-08-12",
"key": "postfix:3.11",
"product": "postfix",
"category": "middleware",
"cycle": "3.11",
"latest": "3.11.6",
"release_date": "2026-03-06",
"latest_release_date": "2026-08-11",
"eol_date": "false",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 0,
"critical": 0,
"high": 0,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": []
}
},
{
"digest_date": "2026-08-12",
"key": "postfix:3.5",
"product": "postfix",
"category": "middleware",
"cycle": "3.5",
"latest": "3.5.27",
"release_date": "2020-03-15",
"latest_release_date": "2026-08-11",
"eol_date": "2024-03-06",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 0,
"critical": 0,
"high": 0,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": []
}
},
{
"digest_date": "2026-08-12",
"key": "postfix:3.6",
"product": "postfix",
"category": "middleware",
"cycle": "3.6",
"latest": "3.6.20",
"release_date": "2021-04-29",
"latest_release_date": "2026-08-11",
"eol_date": "2025-02-16",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 0,
"critical": 0,
"high": 0,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": []
}
},
{
"digest_date": "2026-08-12",
"key": "postfix:3.7",
"product": "postfix",
"category": "middleware",
"cycle": "3.7",
"latest": "3.7.22",
"release_date": "2022-02-06",
"latest_release_date": "2026-08-11",
"eol_date": "2026-03-06",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 0,
"critical": 0,
"high": 0,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": []
}
},
{
"digest_date": "2026-08-12",
"key": "postfix:3.8",
"product": "postfix",
"category": "middleware",
"cycle": "3.8",
"latest": "3.8.20",
"release_date": "2023-04-17",
"latest_release_date": "2026-08-11",
"eol_date": "false",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 0,
"critical": 0,
"high": 0,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": []
}
},
{
"digest_date": "2026-08-12",
"key": "postfix:3.9",
"product": "postfix",
"category": "middleware",
"cycle": "3.9",
"latest": "3.9.14",
"release_date": "2024-03-06",
"latest_release_date": "2026-08-11",
"eol_date": "false",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 0,
"critical": 0,
"high": 0,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": []
}
},
{
"digest_date": "2026-08-12",
"key": "typo3:13",
"product": "typo3",
"category": "cms",
"cycle": "13",
"latest": "13.4.34",
"release_date": "2024-01-30",
"latest_release_date": "2026-08-11",
"eol_date": "2027-12-31",
"support_date": "2026-06-30",
"is_major_product": true,
"cve_stats": {
"total": 4,
"critical": 0,
"high": 2,
"medium": 2,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-59022",
"severity": "HIGH",
"score": 8.1
},
{
"cve_id": "CVE-2026-0859",
"severity": "HIGH",
"score": 7.8
},
{
"cve_id": "CVE-2025-59020",
"severity": "MEDIUM",
"score": 6.5
}
]
}
},
{
"digest_date": "2026-08-12",
"key": "typo3:14",
"product": "typo3",
"category": "cms",
"cycle": "14",
"latest": "14.3.6",
"release_date": "2025-11-25",
"latest_release_date": "2026-08-11",
"eol_date": "2029-06-30",
"support_date": "2027-12-31",
"is_major_product": true,
"cve_stats": {
"total": 4,
"critical": 0,
"high": 2,
"medium": 2,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-59022",
"severity": "HIGH",
"score": 8.1
},
{
"cve_id": "CVE-2026-0859",
"severity": "HIGH",
"score": 7.8
},
{
"cve_id": "CVE-2025-59020",
"severity": "MEDIUM",
"score": 6.5
}
]
}
},
{
"digest_date": "2026-08-08",
"key": "angular:22",
"product": "angular",
"category": "framework",
"cycle": "22",
"latest": "22.1.1",
"release_date": "2026-06-03",
"latest_release_date": "2026-08-07",
"eol_date": "2028-06-30",
"support_date": "2027-06-30",
"is_major_product": true,
"cve_stats": {
"total": 4,
"critical": 0,
"high": 0,
"medium": 4,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-27970",
"severity": "MEDIUM",
"score": 6.1
},
{
"cve_id": "CVE-2026-22610",
"severity": "MEDIUM",
"score": 6.1
},
{
"cve_id": "CVE-2025-61261",
"severity": "MEDIUM",
"score": 5.4
}
]
}
},
{
"digest_date": "2026-08-08",
"key": "apache-cassandra:4.0",
"product": "apache-cassandra",
"category": "database",
"cycle": "4.0",
"latest": "4.0.21",
"release_date": "2021-07-26",
"latest_release_date": "2026-08-07",
"eol_date": "false",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 3,
"critical": 0,
"high": 1,
"medium": 2,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-27314",
"severity": "HIGH",
"score": 8.8
},
{
"cve_id": "CVE-2026-32588",
"severity": "MEDIUM",
"score": 6.5
},
{
"cve_id": "CVE-2026-27315",
"severity": "MEDIUM",
"score": 5.5
}
]
}
},
{
"digest_date": "2026-08-08",
"key": "apache-cassandra:4.1",
"product": "apache-cassandra",
"category": "database",
"cycle": "4.1",
"latest": "4.1.12",
"release_date": "2022-12-13",
"latest_release_date": "2026-08-07",
"eol_date": "false",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 3,
"critical": 0,
"high": 1,
"medium": 2,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-27314",
"severity": "HIGH",
"score": 8.8
},
{
"cve_id": "CVE-2026-32588",
"severity": "MEDIUM",
"score": 6.5
},
{
"cve_id": "CVE-2026-27315",
"severity": "MEDIUM",
"score": 5.5
}
]
}
},
{
"digest_date": "2026-08-08",
"key": "apache-cassandra:5.0",
"product": "apache-cassandra",
"category": "database",
"cycle": "5.0",
"latest": "5.0.9",
"release_date": "2024-09-05",
"latest_release_date": "2026-08-07",
"eol_date": "false",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 3,
"critical": 0,
"high": 1,
"medium": 2,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-27314",
"severity": "HIGH",
"score": 8.8
},
{
"cve_id": "CVE-2026-32588",
"severity": "MEDIUM",
"score": 6.5
},
{
"cve_id": "CVE-2026-27315",
"severity": "MEDIUM",
"score": 5.5
}
]
}
},
{
"digest_date": "2026-08-08",
"key": "symfony:7.4",
"product": "symfony",
"category": "framework",
"cycle": "7.4",
"latest": "7.4.16",
"release_date": "2025-11-27",
"latest_release_date": "2026-08-07",
"eol_date": "2029-11-30",
"support_date": "2028-11-30",
"is_major_product": true,
"cve_stats": {
"total": 30,
"critical": 3,
"high": 13,
"medium": 14,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-47767",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2026-45069",
"severity": "CRITICAL",
"score": 9.1
},
{
"cve_id": "CVE-2026-45063",
"severity": "CRITICAL",
"score": 9.1
}
]
}
},
{
"digest_date": "2026-08-08",
"key": "symfony:8.1",
"product": "symfony",
"category": "framework",
"cycle": "8.1",
"latest": "8.1.4",
"release_date": "2026-05-29",
"latest_release_date": "2026-08-07",
"eol_date": "2027-01-31",
"support_date": "2027-01-31",
"is_major_product": true,
"cve_stats": {
"total": 30,
"critical": 3,
"high": 13,
"medium": 14,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-47767",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2026-45069",
"severity": "CRITICAL",
"score": 9.1
},
{
"cve_id": "CVE-2026-45063",
"severity": "CRITICAL",
"score": 9.1
}
]
}
},
{
"digest_date": "2026-08-07",
"key": "apache-activemq:6.3",
"product": "apache-activemq",
"category": "middleware",
"cycle": "6.3",
"latest": "6.3.1",
"release_date": "2026-07-24",
"latest_release_date": "2026-08-06",
"eol_date": "false",
"support_date": null,
"is_major_product": true,
"cve_stats": {
"total": 13,
"critical": 0,
"high": 7,
"medium": 6,
"low": 0,
"kev": 1,
"top_cves": [
{
"cve_id": "CVE-2026-49157",
"severity": "HIGH",
"score": 8.8
},
{
"cve_id": "CVE-2026-40466",
"severity": "HIGH",
"score": 8.8
},
{
"cve_id": "CVE-2026-45505",
"severity": "HIGH",
"score": 8.8
}
]
}
},
{
"digest_date": "2026-08-07",
"key": "drupal:10.6",
"product": "drupal",
"category": "cms",
"cycle": "10.6",
"latest": "10.6.15",
"release_date": "2025-12-17",
"latest_release_date": "2026-08-06",
"eol_date": "2026-12-16",
"support_date": "2026-06-16",
"is_major_product": true,
"cve_stats": {
"total": 7,
"critical": 0,
"high": 0,
"medium": 6,
"low": 1,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-6366",
"severity": "MEDIUM",
"score": 6.6
},
{
"cve_id": "CVE-2026-6367",
"severity": "MEDIUM",
"score": 6.1
},
{
"cve_id": "CVE-2026-6365",
"severity": "MEDIUM",
"score": 6.1
}
]
}
},
{
"digest_date": "2026-08-07",
"key": "drupal:11.4",
"product": "drupal",
"category": "cms",
"cycle": "11.4",
"latest": "11.4.5",
"release_date": "2026-07-01",
"latest_release_date": "2026-08-06",
"eol_date": "2027-07-07",
"support_date": "2027-01-01",
"is_major_product": true,
"cve_stats": {
"total": 7,
"critical": 0,
"high": 0,
"medium": 6,
"low": 1,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-6366",
"severity": "MEDIUM",
"score": 6.6
},
{
"cve_id": "CVE-2026-6367",
"severity": "MEDIUM",
"score": 6.1
},
{
"cve_id": "CVE-2026-6365",
"severity": "MEDIUM",
"score": 6.1
}
]
}
},
{
"digest_date": "2026-08-07",
"key": "gitlab:18.11",
"product": "gitlab",
"category": "devops",
"cycle": "18.11",
"latest": "18.11.9",
"release_date": "2026-04-16",
"latest_release_date": "2026-08-06",
"eol_date": "2026-07-16",
"support_date": "2026-05-21",
"is_major_product": true,
"cve_stats": {
"total": 171,
"critical": 0,
"high": 51,
"medium": 92,
"low": 27,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-7377",
"severity": "HIGH",
"score": 8.7
},
{
"cve_id": "CVE-2025-9222",
"severity": "HIGH",
"score": 8.7
},
{
"cve_id": "CVE-2026-6552",
"severity": "HIGH",
"score": 8.7
}
]
}
},
{
"digest_date": "2026-08-06",
"key": "laravel:12",
"product": "laravel",
"category": "framework",
"cycle": "12",
"latest": "12.65.0",
"release_date": "2025-02-24",
"latest_release_date": "2026-08-05",
"eol_date": "2027-02-24",
"support_date": "2026-08-16",
"is_major_product": true,
"cve_stats": {
"total": 0,
"critical": 0,
"high": 0,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": []
}
},
{
"digest_date": "2026-08-06",
"key": "nodejs:26",
"product": "nodejs",
"category": "programming",
"cycle": "26",
"latest": "26.7.0",
"release_date": "2026-05-05",
"latest_release_date": "2026-08-05",
"eol_date": "2029-04-30",
"support_date": "2027-10-27",
"is_major_product": true,
"cve_stats": {
"total": 16,
"critical": 3,
"high": 7,
"medium": 4,
"low": 2,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-21636",
"severity": "CRITICAL",
"score": 10.0
},
{
"cve_id": "CVE-2026-48930",
"severity": "CRITICAL",
"score": 9.8
},
{
"cve_id": "CVE-2025-55130",
"severity": "CRITICAL",
"score": 9.1
}
]
}
},
{
"digest_date": "2026-08-06",
"key": "nuxt:3",
"product": "nuxt",
"category": "framework",
"cycle": "3",
"latest": "3.21.11",
"release_date": "2022-11-16",
"latest_release_date": "2026-08-05",
"eol_date": "2026-07-31",
"support_date": "2025-07-16",
"is_major_product": true,
"cve_stats": {
"total": 0,
"critical": 0,
"high": 0,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": []
}
},
{
"digest_date": "2026-08-06",
"key": "nuxt:4",
"product": "nuxt",
"category": "framework",
"cycle": "4",
"latest": "4.5.2",
"release_date": "2025-07-16",
"latest_release_date": "2026-08-05",
"eol_date": "false",
"support_date": "true",
"is_major_product": true,
"cve_stats": {
"total": 0,
"critical": 0,
"high": 0,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": []
}
},
{
"digest_date": "2026-08-06",
"key": "opensearch:3",
"product": "opensearch",
"category": "database",
"cycle": "3",
"latest": "3.8.0",
"release_date": "2025-05-06",
"latest_release_date": "2026-08-05",
"eol_date": "false",
"support_date": "true",
"is_major_product": true,
"cve_stats": {
"total": 1,
"critical": 0,
"high": 1,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2025-9624",
"severity": "HIGH",
"score": 7.5
}
]
}
},
{
"digest_date": "2026-08-06",
"key": "python:3.13",
"product": "python",
"category": "programming",
"cycle": "3.13",
"latest": "3.13.15",
"release_date": "2024-10-07",
"latest_release_date": "2026-08-05",
"eol_date": "2029-10-31",
"support_date": "2026-10-01",
"is_major_product": true,
"cve_stats": {
"total": 6,
"critical": 0,
"high": 2,
"medium": 3,
"low": 1,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-15308",
"severity": "HIGH",
"score": 7.5
},
{
"cve_id": "CVE-2025-13836",
"severity": "HIGH",
"score": 7.5
},
{
"cve_id": "CVE-2025-13837",
"severity": "MEDIUM",
"score": 5.5
}
]
}
},
{
"digest_date": "2026-08-06",
"key": "python:3.14",
"product": "python",
"category": "programming",
"cycle": "3.14",
"latest": "3.14.7",
"release_date": "2025-10-07",
"latest_release_date": "2026-08-05",
"eol_date": "2030-10-31",
"support_date": "2027-10-01",
"is_major_product": true,
"cve_stats": {
"total": 6,
"critical": 0,
"high": 2,
"medium": 3,
"low": 1,
"kev": 0,
"top_cves": [
{
"cve_id": "CVE-2026-15308",
"severity": "HIGH",
"score": 7.5
},
{
"cve_id": "CVE-2025-13836",
"severity": "HIGH",
"score": 7.5
},
{
"cve_id": "CVE-2025-13837",
"severity": "MEDIUM",
"score": 5.5
}
]
}
},
{
"digest_date": "2026-08-06",
"key": "vue:3.5",
"product": "vue",
"category": "framework",
"cycle": "3.5",
"latest": "3.5.41",
"release_date": "2024-09-03",
"latest_release_date": "2026-08-05",
"eol_date": "false",
"support_date": "true",
"is_major_product": true,
"cve_stats": {
"total": 0,
"critical": 0,
"high": 0,
"medium": 0,
"low": 0,
"kev": 0,
"top_cves": []
}
}
]
}