{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-10144", "tracking": { "current_release_date": "2026-09-29T18:32:07.314977Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-10144", "initial_release_date": "2026-09-15T21:39:07.641076Z", "revision_history": [ { "date": "2026-09-15T21:39:07.641076Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (4).| CWES updated (1)." }, { "date": "2026-09-15T21:39:09.865572Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-09-15T22:26:14.572737Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (4).| CWES updated (1)." }, { "date": "2026-09-15T22:26:16.890259Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-09-16T12:18:18.948979Z", "number": "5", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (240).| References created (6).| CWES updated (1)." }, { "date": "2026-09-16T12:18:41.625715Z", "number": "6", "summary": "NCSC Score updated." }, { "date": "2026-09-16T15:16:39.247350Z", "number": "7", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-16T15:16:49.653581Z", "number": "8", "summary": "NCSC Score updated." }, { "date": "2026-09-21T18:38:47.509538Z", "number": "9", "summary": "Unknown change." }, { "date": "2026-09-29T16:12:44.658854Z", "number": "10", "summary": "EPSS created.| Unknown change." } ], "status": "interim", "version": "10" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:semver/<2.0.9", "product": { "name": "vers:semver/<2.0.9", "product_id": "CSAFPID-9320987" } }, { "category": "product_version_range", "name": "vers:unknown/0.7.0-beta.3", "product": { "name": "vers:unknown/0.7.0-beta.3", "product_id": "CSAFPID-9329989" } }, { "category": "product_version_range", "name": "vers:unknown/0.7.0-beta.7", "product": { "name": "vers:unknown/0.7.0-beta.7", "product_id": "CSAFPID-9329985" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.12", "product": { "name": "vers:unknown/1.0.12", "product_id": "CSAFPID-9329937" } }, { "category": "product_version_range", "name": "vers:unknown/v.1.3.4", "product": { "name": "vers:unknown/v.1.3.4", "product_id": "CSAFPID-9329882" } }, { "category": "product_version_range", "name": "vers:unknown/v.1.4.1", "product": { "name": "vers:unknown/v.1.4.1", "product_id": "CSAFPID-9329855" } }, { "category": "product_version_range", "name": "vers:unknown/v0.0.17", "product": { "name": "vers:unknown/v0.0.17", "product_id": "CSAFPID-9330000" } }, { "category": "product_version_range", "name": "vers:unknown/v0.0.19", "product": { "name": "vers:unknown/v0.0.19", "product_id": "CSAFPID-9329999" } }, { "category": "product_version_range", "name": "vers:unknown/v0.0.27", "product": { "name": "vers:unknown/v0.0.27", "product_id": "CSAFPID-9329998" } }, { "category": "product_version_range", "name": "vers:unknown/v0.0.3", "product": { "name": "vers:unknown/v0.0.3", "product_id": "CSAFPID-9330004" } }, { "category": "product_version_range", "name": "vers:unknown/v0.0.4", "product": { "name": "vers:unknown/v0.0.4", "product_id": "CSAFPID-9330003" } }, { "category": "product_version_range", "name": "vers:unknown/v0.0.5", "product": { "name": "vers:unknown/v0.0.5", "product_id": "CSAFPID-9330002" } }, { "category": "product_version_range", "name": "vers:unknown/v0.0.7", "product": { "name": "vers:unknown/v0.0.7", "product_id": "CSAFPID-9330001" } }, { "category": "product_version_range", "name": "vers:unknown/v0.2.7", "product": { "name": "vers:unknown/v0.2.7", "product_id": "CSAFPID-9329997" } }, { "category": "product_version_range", "name": "vers:unknown/v0.3.0", "product": { "name": "vers:unknown/v0.3.0", "product_id": "CSAFPID-9329996" } }, { "category": "product_version_range", "name": "vers:unknown/v0.3.1", "product": { "name": "vers:unknown/v0.3.1", "product_id": "CSAFPID-9329995" } }, { "category": "product_version_range", "name": "vers:unknown/v0.4.0", "product": { "name": "vers:unknown/v0.4.0", "product_id": "CSAFPID-9329994" } }, { "category": "product_version_range", "name": "vers:unknown/v0.4.5", "product": { "name": "vers:unknown/v0.4.5", "product_id": "CSAFPID-9329993" } }, { "category": "product_version_range", "name": "vers:unknown/v0.6.1", "product": { "name": "vers:unknown/v0.6.1", "product_id": "CSAFPID-9329992" } }, { "category": "product_version_range", "name": "vers:unknown/v0.7.0", "product": { "name": "vers:unknown/v0.7.0", "product_id": "CSAFPID-9329982" } }, { "category": "product_version_range", "name": "vers:unknown/v0.7.0-beta.1", "product": { "name": "vers:unknown/v0.7.0-beta.1", "product_id": "CSAFPID-9329991" } }, { "category": "product_version_range", "name": "vers:unknown/v0.7.0-beta.2", "product": { "name": "vers:unknown/v0.7.0-beta.2", "product_id": "CSAFPID-9329990" } }, { "category": "product_version_range", "name": "vers:unknown/v0.7.0-beta.4", "product": { "name": "vers:unknown/v0.7.0-beta.4", "product_id": "CSAFPID-9329988" } }, { "category": "product_version_range", "name": "vers:unknown/v0.7.0-beta.5", "product": { "name": "vers:unknown/v0.7.0-beta.5", "product_id": "CSAFPID-9329987" } }, { "category": "product_version_range", "name": "vers:unknown/v0.7.0-beta.6", "product": { "name": "vers:unknown/v0.7.0-beta.6", "product_id": "CSAFPID-9329986" } }, { "category": "product_version_range", "name": "vers:unknown/v0.7.0-beta.8", "product": { "name": "vers:unknown/v0.7.0-beta.8", "product_id": "CSAFPID-9329984" } }, { "category": "product_version_range", "name": "vers:unknown/v0.7.0-beta.9", "product": { "name": "vers:unknown/v0.7.0-beta.9", "product_id": "CSAFPID-9329983" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.0", "product": { "name": "vers:unknown/v1.0.0-alpha.0", "product_id": "CSAFPID-9329981" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.1", "product": { "name": "vers:unknown/v1.0.0-alpha.1", "product_id": "CSAFPID-9329980" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.2", "product": { "name": "vers:unknown/v1.0.0-alpha.2", "product_id": "CSAFPID-9329979" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.3", "product": { "name": "vers:unknown/v1.0.0-alpha.3", "product_id": "CSAFPID-9329978" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.4", "product": { "name": "vers:unknown/v1.0.0-alpha.4", "product_id": "CSAFPID-9329977" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.5", "product": { "name": "vers:unknown/v1.0.0-alpha.5", "product_id": "CSAFPID-9329976" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.6", "product": { "name": "vers:unknown/v1.0.0-alpha.6", "product_id": "CSAFPID-9329975" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.7", "product": { "name": "vers:unknown/v1.0.0-alpha.7", "product_id": "CSAFPID-9329974" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.8", "product": { "name": "vers:unknown/v1.0.0-alpha.8", "product_id": "CSAFPID-9329973" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0-alpha.9", "product": { "name": "vers:unknown/v1.0.0-alpha.9", "product_id": "CSAFPID-9329972" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1", "product": { "name": "vers:unknown/v1.0.1", "product_id": "CSAFPID-9329948" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-beta.0", "product": { "name": "vers:unknown/v1.0.1-beta.0", "product_id": "CSAFPID-9329971" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-beta.1", "product": { "name": "vers:unknown/v1.0.1-beta.1", "product_id": "CSAFPID-9329970" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-beta.10", "product": { "name": "vers:unknown/v1.0.1-beta.10", "product_id": "CSAFPID-9329961" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-beta.11", "product": { "name": "vers:unknown/v1.0.1-beta.11", "product_id": "CSAFPID-9329960" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-beta.12", "product": { "name": "vers:unknown/v1.0.1-beta.12", "product_id": "CSAFPID-9329959" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-beta.13", "product": { "name": "vers:unknown/v1.0.1-beta.13", "product_id": "CSAFPID-9329958" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-beta.14", "product": { "name": "vers:unknown/v1.0.1-beta.14", "product_id": "CSAFPID-9329957" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-beta.15", "product": { "name": "vers:unknown/v1.0.1-beta.15", "product_id": "CSAFPID-9329956" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-beta.16", "product": { "name": "vers:unknown/v1.0.1-beta.16", "product_id": "CSAFPID-9329955" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-beta.2", "product": { "name": "vers:unknown/v1.0.1-beta.2", "product_id": "CSAFPID-9329969" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-beta.3", "product": { "name": "vers:unknown/v1.0.1-beta.3", "product_id": "CSAFPID-9329968" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-beta.4", "product": { "name": "vers:unknown/v1.0.1-beta.4", "product_id": "CSAFPID-9329967" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-beta.5", "product": { "name": "vers:unknown/v1.0.1-beta.5", "product_id": "CSAFPID-9329966" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-beta.6", "product": { "name": "vers:unknown/v1.0.1-beta.6", "product_id": "CSAFPID-9329965" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-beta.7", "product": { "name": "vers:unknown/v1.0.1-beta.7", "product_id": "CSAFPID-9329964" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-beta.8", "product": { "name": "vers:unknown/v1.0.1-beta.8", "product_id": "CSAFPID-9329963" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-beta.9", "product": { "name": "vers:unknown/v1.0.1-beta.9", "product_id": "CSAFPID-9329962" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-rc.0", "product": { "name": "vers:unknown/v1.0.1-rc.0", "product_id": "CSAFPID-9329954" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-rc.1", "product": { "name": "vers:unknown/v1.0.1-rc.1", "product_id": "CSAFPID-9329953" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-rc.2", "product": { "name": "vers:unknown/v1.0.1-rc.2", "product_id": "CSAFPID-9329952" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-rc.3", "product": { "name": "vers:unknown/v1.0.1-rc.3", "product_id": "CSAFPID-9329951" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-rc.4", "product": { "name": "vers:unknown/v1.0.1-rc.4", "product_id": "CSAFPID-9329950" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1-rc.5", "product": { "name": "vers:unknown/v1.0.1-rc.5", "product_id": "CSAFPID-9329949" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.10", "product": { "name": "vers:unknown/v1.0.10", "product_id": "CSAFPID-9329939" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.11", "product": { "name": "vers:unknown/v1.0.11", "product_id": "CSAFPID-9329938" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.13", "product": { "name": "vers:unknown/v1.0.13", "product_id": "CSAFPID-9329936" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.14", "product": { "name": "vers:unknown/v1.0.14", "product_id": "CSAFPID-9329935" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.15", "product": { "name": "vers:unknown/v1.0.15", "product_id": "CSAFPID-9329934" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.16", "product": { "name": "vers:unknown/v1.0.16", "product_id": "CSAFPID-9329933" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.17", "product": { "name": "vers:unknown/v1.0.17", "product_id": "CSAFPID-9329932" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.18", "product": { "name": "vers:unknown/v1.0.18", "product_id": "CSAFPID-9329931" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.19", "product": { "name": "vers:unknown/v1.0.19", "product_id": "CSAFPID-9329930" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.2", "product": { "name": "vers:unknown/v1.0.2", "product_id": "CSAFPID-9329947" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.3", "product": { "name": "vers:unknown/v1.0.3", "product_id": "CSAFPID-9329946" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.4", "product": { "name": "vers:unknown/v1.0.4", "product_id": "CSAFPID-9329945" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.5", "product": { "name": "vers:unknown/v1.0.5", "product_id": "CSAFPID-9329944" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.6", "product": { "name": "vers:unknown/v1.0.6", "product_id": "CSAFPID-9329943" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.7", "product": { "name": "vers:unknown/v1.0.7", "product_id": "CSAFPID-9329942" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.8", "product": { "name": "vers:unknown/v1.0.8", "product_id": "CSAFPID-9329941" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.9", "product": { "name": "vers:unknown/v1.0.9", "product_id": "CSAFPID-9329940" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.0", "product": { "name": "vers:unknown/v1.1.0", "product_id": "CSAFPID-9329927" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.0-beta.0", "product": { "name": "vers:unknown/v1.1.0-beta.0", "product_id": "CSAFPID-9329929" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.0-beta.1", "product": { "name": "vers:unknown/v1.1.0-beta.1", "product_id": "CSAFPID-9329928" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.1", "product": { "name": "vers:unknown/v1.1.1", "product_id": "CSAFPID-9329926" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.10", "product": { "name": "vers:unknown/v1.1.10", "product_id": "CSAFPID-9329917" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.11", "product": { "name": "vers:unknown/v1.1.11", "product_id": "CSAFPID-9329916" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.12", "product": { "name": "vers:unknown/v1.1.12", "product_id": "CSAFPID-9329915" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.13", "product": { "name": "vers:unknown/v1.1.13", "product_id": "CSAFPID-9329911" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.2", "product": { "name": "vers:unknown/v1.1.2", "product_id": "CSAFPID-9329925" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.3", "product": { "name": "vers:unknown/v1.1.3", "product_id": "CSAFPID-9329924" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.4", "product": { "name": "vers:unknown/v1.1.4", "product_id": "CSAFPID-9329923" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.5", "product": { "name": "vers:unknown/v1.1.5", "product_id": "CSAFPID-9329922" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.6", "product": { "name": "vers:unknown/v1.1.6", "product_id": "CSAFPID-9329921" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.7", "product": { "name": "vers:unknown/v1.1.7", "product_id": "CSAFPID-9329920" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.8", "product": { "name": "vers:unknown/v1.1.8", "product_id": "CSAFPID-9329919" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.9", "product": { "name": "vers:unknown/v1.1.9", "product_id": "CSAFPID-9329918" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.0", "product": { "name": "vers:unknown/v1.2.0", "product_id": "CSAFPID-9329910" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.0-alpha.0", "product": { "name": "vers:unknown/v1.2.0-alpha.0", "product_id": "CSAFPID-9329914" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.0-beta.0", "product": { "name": "vers:unknown/v1.2.0-beta.0", "product_id": "CSAFPID-9329913" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.0-beta.1", "product": { "name": "vers:unknown/v1.2.0-beta.1", "product_id": "CSAFPID-9329912" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.1", "product": { "name": "vers:unknown/v1.2.1", "product_id": "CSAFPID-9329909" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.10", "product": { "name": "vers:unknown/v1.2.10", "product_id": "CSAFPID-9329900" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.11", "product": { "name": "vers:unknown/v1.2.11", "product_id": "CSAFPID-9329899" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.12", "product": { "name": "vers:unknown/v1.2.12", "product_id": "CSAFPID-9329898" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.13", "product": { "name": "vers:unknown/v1.2.13", "product_id": "CSAFPID-9329897" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.14", "product": { "name": "vers:unknown/v1.2.14", "product_id": "CSAFPID-9329896" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.15", "product": { "name": "vers:unknown/v1.2.15", "product_id": "CSAFPID-9329895" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.16", "product": { "name": "vers:unknown/v1.2.16", "product_id": "CSAFPID-9329894" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.17", "product": { "name": "vers:unknown/v1.2.17", "product_id": "CSAFPID-9329893" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.18", "product": { "name": "vers:unknown/v1.2.18", "product_id": "CSAFPID-9329892" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.19", "product": { "name": "vers:unknown/v1.2.19", "product_id": "CSAFPID-9329891" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.2", "product": { "name": "vers:unknown/v1.2.2", "product_id": "CSAFPID-9329908" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.3", "product": { "name": "vers:unknown/v1.2.3", "product_id": "CSAFPID-9329907" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.4", "product": { "name": "vers:unknown/v1.2.4", "product_id": "CSAFPID-9329906" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.5", "product": { "name": "vers:unknown/v1.2.5", "product_id": "CSAFPID-9329905" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.6", "product": { "name": "vers:unknown/v1.2.6", "product_id": "CSAFPID-9329904" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.7", "product": { "name": "vers:unknown/v1.2.7", "product_id": "CSAFPID-9329903" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.8", "product": { "name": "vers:unknown/v1.2.8", "product_id": "CSAFPID-9329902" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.9", "product": { "name": "vers:unknown/v1.2.9", "product_id": "CSAFPID-9329901" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.0", "product": { "name": "vers:unknown/v1.3.0", "product_id": "CSAFPID-9329886" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.0-beta.0", "product": { "name": "vers:unknown/v1.3.0-beta.0", "product_id": "CSAFPID-9329890" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.0-beta.1", "product": { "name": "vers:unknown/v1.3.0-beta.1", "product_id": "CSAFPID-9329889" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.0-beta.2", "product": { "name": "vers:unknown/v1.3.0-beta.2", "product_id": "CSAFPID-9329888" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.0-beta.3", "product": { "name": "vers:unknown/v1.3.0-beta.3", "product_id": "CSAFPID-9329887" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.1", "product": { "name": "vers:unknown/v1.3.1", "product_id": "CSAFPID-9329885" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.10", "product": { "name": "vers:unknown/v1.3.10", "product_id": "CSAFPID-9329876" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.11", "product": { "name": "vers:unknown/v1.3.11", "product_id": "CSAFPID-9329875" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.12", "product": { "name": "vers:unknown/v1.3.12", "product_id": "CSAFPID-9329874" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.13", "product": { "name": "vers:unknown/v1.3.13", "product_id": "CSAFPID-9329873" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.14", "product": { "name": "vers:unknown/v1.3.14", "product_id": "CSAFPID-9329872" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.15", "product": { "name": "vers:unknown/v1.3.15", "product_id": "CSAFPID-9329871" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.16", "product": { "name": "vers:unknown/v1.3.16", "product_id": "CSAFPID-9329870" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.17", "product": { "name": "vers:unknown/v1.3.17", "product_id": "CSAFPID-9329869" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.18", "product": { "name": "vers:unknown/v1.3.18", "product_id": "CSAFPID-9329868" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.19", "product": { "name": "vers:unknown/v1.3.19", "product_id": "CSAFPID-9329867" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.2", "product": { "name": "vers:unknown/v1.3.2", "product_id": "CSAFPID-9329884" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.20", "product": { "name": "vers:unknown/v1.3.20", "product_id": "CSAFPID-9329866" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.21", "product": { "name": "vers:unknown/v1.3.21", "product_id": "CSAFPID-9329865" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.22", "product": { "name": "vers:unknown/v1.3.22", "product_id": "CSAFPID-9329864" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.3", "product": { "name": "vers:unknown/v1.3.3", "product_id": "CSAFPID-9329883" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.5", "product": { "name": "vers:unknown/v1.3.5", "product_id": "CSAFPID-9329881" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.6", "product": { "name": "vers:unknown/v1.3.6", "product_id": "CSAFPID-9329880" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.7", "product": { "name": "vers:unknown/v1.3.7", "product_id": "CSAFPID-9329879" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.8", "product": { "name": "vers:unknown/v1.3.8", "product_id": "CSAFPID-9329878" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.9", "product": { "name": "vers:unknown/v1.3.9", "product_id": "CSAFPID-9329877" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.0", "product": { "name": "vers:unknown/v1.4.0", "product_id": "CSAFPID-9329856" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.0-beta.0", "product": { "name": "vers:unknown/v1.4.0-beta.0", "product_id": "CSAFPID-9329863" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.0-beta.1", "product": { "name": "vers:unknown/v1.4.0-beta.1", "product_id": "CSAFPID-9329862" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.0-beta.2", "product": { "name": "vers:unknown/v1.4.0-beta.2", "product_id": "CSAFPID-9329861" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.0-beta.3", "product": { "name": "vers:unknown/v1.4.0-beta.3", "product_id": "CSAFPID-9329860" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.0-beta.4", "product": { "name": "vers:unknown/v1.4.0-beta.4", "product_id": "CSAFPID-9329859" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.0-beta.5", "product": { "name": "vers:unknown/v1.4.0-beta.5", "product_id": "CSAFPID-9329858" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.0-rc.0", "product": { "name": "vers:unknown/v1.4.0-rc.0", "product_id": "CSAFPID-9329857" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.10", "product": { "name": "vers:unknown/v1.4.10", "product_id": "CSAFPID-9329846" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.11", "product": { "name": "vers:unknown/v1.4.11", "product_id": "CSAFPID-9329845" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.12", "product": { "name": "vers:unknown/v1.4.12", "product_id": "CSAFPID-9329844" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.13", "product": { "name": "vers:unknown/v1.4.13", "product_id": "CSAFPID-9329843" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.14", "product": { "name": "vers:unknown/v1.4.14", "product_id": "CSAFPID-9329842" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.15", "product": { "name": "vers:unknown/v1.4.15", "product_id": "CSAFPID-9329835" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.2", "product": { "name": "vers:unknown/v1.4.2", "product_id": "CSAFPID-9329854" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.3", "product": { "name": "vers:unknown/v1.4.3", "product_id": "CSAFPID-9329853" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.4", "product": { "name": "vers:unknown/v1.4.4", "product_id": "CSAFPID-9329852" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.5", "product": { "name": "vers:unknown/v1.4.5", "product_id": "CSAFPID-9329851" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.6", "product": { "name": "vers:unknown/v1.4.6", "product_id": "CSAFPID-9329850" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.7", "product": { "name": "vers:unknown/v1.4.7", "product_id": "CSAFPID-9329849" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.8", "product": { "name": "vers:unknown/v1.4.8", "product_id": "CSAFPID-9329848" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.9", "product": { "name": "vers:unknown/v1.4.9", "product_id": "CSAFPID-9329847" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.0", "product": { "name": "vers:unknown/v1.5.0", "product_id": "CSAFPID-9329834" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.0-beta.0", "product": { "name": "vers:unknown/v1.5.0-beta.0", "product_id": "CSAFPID-9329841" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.0-beta.1", "product": { "name": "vers:unknown/v1.5.0-beta.1", "product_id": "CSAFPID-9329840" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.0-beta.2", "product": { "name": "vers:unknown/v1.5.0-beta.2", "product_id": "CSAFPID-9329839" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.0-beta.3", "product": { "name": "vers:unknown/v1.5.0-beta.3", "product_id": "CSAFPID-9329838" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.0-beta.4", "product": { "name": "vers:unknown/v1.5.0-beta.4", "product_id": "CSAFPID-9329837" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.0-rc.0", "product": { "name": "vers:unknown/v1.5.0-rc.0", "product_id": "CSAFPID-9329836" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.1", "product": { "name": "vers:unknown/v1.5.1", "product_id": "CSAFPID-9329833" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.10", "product": { "name": "vers:unknown/v1.5.10", "product_id": "CSAFPID-9329824" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.11", "product": { "name": "vers:unknown/v1.5.11", "product_id": "CSAFPID-9329823" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.12", "product": { "name": "vers:unknown/v1.5.12", "product_id": "CSAFPID-9329822" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.13", "product": { "name": "vers:unknown/v1.5.13", "product_id": "CSAFPID-9329821" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.14", "product": { "name": "vers:unknown/v1.5.14", "product_id": "CSAFPID-9329820" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.15", "product": { "name": "vers:unknown/v1.5.15", "product_id": "CSAFPID-9329819" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.16", "product": { "name": "vers:unknown/v1.5.16", "product_id": "CSAFPID-9329818" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.17", "product": { "name": "vers:unknown/v1.5.17", "product_id": "CSAFPID-9329817" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.2", "product": { "name": "vers:unknown/v1.5.2", "product_id": "CSAFPID-9329832" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.3", "product": { "name": "vers:unknown/v1.5.3", "product_id": "CSAFPID-9329831" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.4", "product": { "name": "vers:unknown/v1.5.4", "product_id": "CSAFPID-9329830" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.5", "product": { "name": "vers:unknown/v1.5.5", "product_id": "CSAFPID-9329829" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.6", "product": { "name": "vers:unknown/v1.5.6", "product_id": "CSAFPID-9329828" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.7", "product": { "name": "vers:unknown/v1.5.7", "product_id": "CSAFPID-9329827" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.8", "product": { "name": "vers:unknown/v1.5.8", "product_id": "CSAFPID-9329826" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.9", "product": { "name": "vers:unknown/v1.5.9", "product_id": "CSAFPID-9329825" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.0", "product": { "name": "vers:unknown/v1.6.0", "product_id": "CSAFPID-9329814" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.0-beta.0", "product": { "name": "vers:unknown/v1.6.0-beta.0", "product_id": "CSAFPID-9329816" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.0-beta.1", "product": { "name": "vers:unknown/v1.6.0-beta.1", "product_id": "CSAFPID-9329815" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.1", "product": { "name": "vers:unknown/v1.6.1", "product_id": "CSAFPID-9329813" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.10", "product": { "name": "vers:unknown/v1.6.10", "product_id": "CSAFPID-9329804" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.11", "product": { "name": "vers:unknown/v1.6.11", "product_id": "CSAFPID-9329803" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.12", "product": { "name": "vers:unknown/v1.6.12", "product_id": "CSAFPID-9329802" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.13", "product": { "name": "vers:unknown/v1.6.13", "product_id": "CSAFPID-9329801" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.14", "product": { "name": "vers:unknown/v1.6.14", "product_id": "CSAFPID-9329800" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.2", "product": { "name": "vers:unknown/v1.6.2", "product_id": "CSAFPID-9329812" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.3", "product": { "name": "vers:unknown/v1.6.3", "product_id": "CSAFPID-9329811" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.4", "product": { "name": "vers:unknown/v1.6.4", "product_id": "CSAFPID-9329810" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.5", "product": { "name": "vers:unknown/v1.6.5", "product_id": "CSAFPID-9329809" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.6", "product": { "name": "vers:unknown/v1.6.6", "product_id": "CSAFPID-9329808" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.7", "product": { "name": "vers:unknown/v1.6.7", "product_id": "CSAFPID-9329807" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.8", "product": { "name": "vers:unknown/v1.6.8", "product_id": "CSAFPID-9329806" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.9", "product": { "name": "vers:unknown/v1.6.9", "product_id": "CSAFPID-9329805" } }, { "category": "product_version_range", "name": "vers:unknown/v1.7.0", "product": { "name": "vers:unknown/v1.7.0", "product_id": "CSAFPID-9329796" } }, { "category": "product_version_range", "name": "vers:unknown/v1.7.0-beta.0", "product": { "name": "vers:unknown/v1.7.0-beta.0", "product_id": "CSAFPID-9329799" } }, { "category": "product_version_range", "name": "vers:unknown/v1.7.0-beta.1", "product": { "name": "vers:unknown/v1.7.0-beta.1", "product_id": "CSAFPID-9329798" } }, { "category": "product_version_range", "name": "vers:unknown/v1.7.0-beta.2", "product": { "name": "vers:unknown/v1.7.0-beta.2", "product_id": "CSAFPID-9329797" } }, { "category": "product_version_range", "name": "vers:unknown/v1.7.1", "product": { "name": "vers:unknown/v1.7.1", "product_id": "CSAFPID-9329795" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0", "product": { "name": "vers:unknown/v2.0.0", "product_id": "CSAFPID-9329772" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-alpha.0", "product": { "name": "vers:unknown/v2.0.0-alpha.0", "product_id": "CSAFPID-9329794" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-alpha.1", "product": { "name": "vers:unknown/v2.0.0-alpha.1", "product_id": "CSAFPID-9329793" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-alpha.2", "product": { "name": "vers:unknown/v2.0.0-alpha.2", "product_id": "CSAFPID-9329792" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-alpha.3", "product": { "name": "vers:unknown/v2.0.0-alpha.3", "product_id": "CSAFPID-9329791" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-alpha.4", "product": { "name": "vers:unknown/v2.0.0-alpha.4", "product_id": "CSAFPID-9329790" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta.0", "product": { "name": "vers:unknown/v2.0.0-beta.0", "product_id": "CSAFPID-9329789" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta.1", "product": { "name": "vers:unknown/v2.0.0-beta.1", "product_id": "CSAFPID-9329788" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta.10", "product": { "name": "vers:unknown/v2.0.0-beta.10", "product_id": "CSAFPID-9329779" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta.11", "product": { "name": "vers:unknown/v2.0.0-beta.11", "product_id": "CSAFPID-9329778" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta.2", "product": { "name": "vers:unknown/v2.0.0-beta.2", "product_id": "CSAFPID-9329787" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta.3", "product": { "name": "vers:unknown/v2.0.0-beta.3", "product_id": "CSAFPID-9329786" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta.4", "product": { "name": "vers:unknown/v2.0.0-beta.4", "product_id": "CSAFPID-9329785" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta.5", "product": { "name": "vers:unknown/v2.0.0-beta.5", "product_id": "CSAFPID-9329784" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta.6", "product": { "name": "vers:unknown/v2.0.0-beta.6", "product_id": "CSAFPID-9329783" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta.7", "product": { "name": "vers:unknown/v2.0.0-beta.7", "product_id": "CSAFPID-9329782" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta.8", "product": { "name": "vers:unknown/v2.0.0-beta.8", "product_id": "CSAFPID-9329781" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta.9", "product": { "name": "vers:unknown/v2.0.0-beta.9", "product_id": "CSAFPID-9329780" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-rc.0", "product": { "name": "vers:unknown/v2.0.0-rc.0", "product_id": "CSAFPID-9329777" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-rc.1", "product": { "name": "vers:unknown/v2.0.0-rc.1", "product_id": "CSAFPID-9329776" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-rc.2", "product": { "name": "vers:unknown/v2.0.0-rc.2", "product_id": "CSAFPID-9329775" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-rc.3", "product": { "name": "vers:unknown/v2.0.0-rc.3", "product_id": "CSAFPID-9329774" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-rc.4", "product": { "name": "vers:unknown/v2.0.0-rc.4", "product_id": "CSAFPID-9329773" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.1", "product": { "name": "vers:unknown/v2.0.1", "product_id": "CSAFPID-9329771" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.2", "product": { "name": "vers:unknown/v2.0.2", "product_id": "CSAFPID-9329770" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.3", "product": { "name": "vers:unknown/v2.0.3", "product_id": "CSAFPID-9329769" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.4", "product": { "name": "vers:unknown/v2.0.4", "product_id": "CSAFPID-9329768" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.5", "product": { "name": "vers:unknown/v2.0.5", "product_id": "CSAFPID-9329767" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.6", "product": { "name": "vers:unknown/v2.0.6", "product_id": "CSAFPID-9329766" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.8", "product": { "name": "vers:unknown/v2.0.8", "product_id": "CSAFPID-9329765" } } ], "category": "product_name", "name": "rsbuild" } ], "category": "vendor", "name": "web-infra-dev" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-10144", "cwe": { "id": "CWE-78", "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" }, "notes": [ { "category": "description", "text": "Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by supplying a crafted URL containing shell metacharacters to the server.open configuration on macOS. The openBrowser() function in packages/core/src/server/open.ts passes the URL through encodeURI() before interpolating it into a shell command executed via child_process.exec(), but because encodeURI() does not encode dollar signs, parentheses, or semicolons, embedded shell metacharacters are evaluated by /bin/sh, enabling arbitrary command execution.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-10144" }, { "category": "description", "text": "Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by supplying a crafted URL containing shell metacharacters to the server.open configuration on macOS. The openBrowser() function in packages/core/src/server/open.ts passes the URL through encodeURI() before interpolating it into a shell command executed via child_process.exec(), but because encodeURI() does not encode dollar signs, parentheses, or semicolons, embedded shell metacharacters are evaluated by /bin/sh, enabling arbitrary command execution.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-10144.json?alt=media" }, { "category": "description", "text": "Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by supplying a crafted URL containing shell metacharacters to the server.open configuration on macOS. The openBrowser() function in packages/core/src/server/open.ts passes the URL through encodeURI() before interpolating it into a shell command executed via child_process.exec(), but because encodeURI() does not encode dollar signs, parentheses, or semicolons, embedded shell metacharacters are evaluated by /bin/sh, enabling arbitrary command execution.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-10144" }, { "category": "other", "text": "0.01648", "title": "EPSS" }, { "category": "other", "text": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "title": "CVSSV4" }, { "category": "other", "text": "7.1", "title": "CVSSV4 base score" }, { "category": "other", "text": "4.0", "title": "NCSC Score" }, { "category": "other", "text": "There is cwe data available from source Nvd, The value of the most recent CVSS (V3) score", "title": "NCSC Score top decreasing factors" } ], "product_status": { "known_affected": [ "CSAFPID-9329765", "CSAFPID-9329766", "CSAFPID-9329767", "CSAFPID-9329768", "CSAFPID-9329769", "CSAFPID-9329770", "CSAFPID-9329771", "CSAFPID-9329772", "CSAFPID-9329773", "CSAFPID-9329774", "CSAFPID-9329775", "CSAFPID-9329776", "CSAFPID-9329777", "CSAFPID-9329778", "CSAFPID-9329779", "CSAFPID-9329780", "CSAFPID-9329781", "CSAFPID-9329782", "CSAFPID-9329783", "CSAFPID-9329784", "CSAFPID-9329785", "CSAFPID-9329786", "CSAFPID-9329787", "CSAFPID-9329788", "CSAFPID-9329789", "CSAFPID-9329790", "CSAFPID-9329791", "CSAFPID-9329792", "CSAFPID-9329793", "CSAFPID-9329794", "CSAFPID-9329795", "CSAFPID-9329796", "CSAFPID-9329797", "CSAFPID-9329798", "CSAFPID-9329799", "CSAFPID-9329800", "CSAFPID-9329801", "CSAFPID-9329802", "CSAFPID-9329803", "CSAFPID-9329804", "CSAFPID-9329805", "CSAFPID-9329806", "CSAFPID-9329807", "CSAFPID-9329808", "CSAFPID-9329809", "CSAFPID-9329810", "CSAFPID-9329811", "CSAFPID-9329812", "CSAFPID-9329813", "CSAFPID-9329814", "CSAFPID-9329815", "CSAFPID-9329816", "CSAFPID-9329817", "CSAFPID-9329818", "CSAFPID-9329819", "CSAFPID-9329820", "CSAFPID-9329821", "CSAFPID-9329822", "CSAFPID-9329823", "CSAFPID-9329824", "CSAFPID-9329825", "CSAFPID-9329826", "CSAFPID-9329827", "CSAFPID-9329828", "CSAFPID-9329829", "CSAFPID-9329830", "CSAFPID-9329831", "CSAFPID-9329832", "CSAFPID-9329833", "CSAFPID-9329834", "CSAFPID-9329835", "CSAFPID-9329836", "CSAFPID-9329837", "CSAFPID-9329838", "CSAFPID-9329839", "CSAFPID-9329840", "CSAFPID-9329841", "CSAFPID-9329842", "CSAFPID-9329843", "CSAFPID-9329844", "CSAFPID-9329845", "CSAFPID-9329846", "CSAFPID-9329847", "CSAFPID-9329848", "CSAFPID-9329849", "CSAFPID-9329850", "CSAFPID-9329851", "CSAFPID-9329852", "CSAFPID-9329853", "CSAFPID-9329854", "CSAFPID-9329855", "CSAFPID-9329856", "CSAFPID-9329857", "CSAFPID-9329858", "CSAFPID-9329859", "CSAFPID-9329860", "CSAFPID-9329861", "CSAFPID-9329862", "CSAFPID-9329863", "CSAFPID-9329864", "CSAFPID-9329865", "CSAFPID-9329866", "CSAFPID-9329867", "CSAFPID-9329868", "CSAFPID-9329869", "CSAFPID-9329870", "CSAFPID-9329871", "CSAFPID-9329872", "CSAFPID-9329873", "CSAFPID-9329874", "CSAFPID-9329875", "CSAFPID-9329876", "CSAFPID-9329877", "CSAFPID-9329878", "CSAFPID-9329879", "CSAFPID-9329880", "CSAFPID-9329881", "CSAFPID-9329882", "CSAFPID-9329883", "CSAFPID-9329884", "CSAFPID-9329885", "CSAFPID-9329886", "CSAFPID-9329887", "CSAFPID-9329888", "CSAFPID-9329889", "CSAFPID-9329890", "CSAFPID-9329891", "CSAFPID-9329892", "CSAFPID-9329893", "CSAFPID-9329894", "CSAFPID-9329895", "CSAFPID-9329896", "CSAFPID-9329897", "CSAFPID-9329898", "CSAFPID-9329899", "CSAFPID-9329900", "CSAFPID-9329901", "CSAFPID-9329902", "CSAFPID-9329903", "CSAFPID-9329904", "CSAFPID-9329905", "CSAFPID-9329906", "CSAFPID-9329907", "CSAFPID-9329908", "CSAFPID-9329909", "CSAFPID-9329910", "CSAFPID-9329911", "CSAFPID-9329912", "CSAFPID-9329913", "CSAFPID-9329914", "CSAFPID-9329915", "CSAFPID-9329916", "CSAFPID-9329917", "CSAFPID-9329918", "CSAFPID-9329919", "CSAFPID-9329920", "CSAFPID-9329921", "CSAFPID-9329922", "CSAFPID-9329923", "CSAFPID-9329924", "CSAFPID-9329925", "CSAFPID-9329926", "CSAFPID-9329927", "CSAFPID-9329928", "CSAFPID-9329929", "CSAFPID-9329930", "CSAFPID-9329931", "CSAFPID-9329932", "CSAFPID-9329933", "CSAFPID-9329934", "CSAFPID-9329935", "CSAFPID-9329936", "CSAFPID-9329937", "CSAFPID-9329938", "CSAFPID-9329939", "CSAFPID-9329940", "CSAFPID-9329941", "CSAFPID-9329942", "CSAFPID-9329943", "CSAFPID-9329944", "CSAFPID-9329945", "CSAFPID-9329946", "CSAFPID-9329947", "CSAFPID-9329948", "CSAFPID-9329949", "CSAFPID-9329950", "CSAFPID-9329951", "CSAFPID-9329952", "CSAFPID-9329953", "CSAFPID-9329954", "CSAFPID-9329955", "CSAFPID-9329956", "CSAFPID-9329957", "CSAFPID-9329958", "CSAFPID-9329959", "CSAFPID-9329960", "CSAFPID-9329961", "CSAFPID-9329962", "CSAFPID-9329963", "CSAFPID-9329964", "CSAFPID-9329965", "CSAFPID-9329966", "CSAFPID-9329967", "CSAFPID-9329968", "CSAFPID-9329969", "CSAFPID-9329970", "CSAFPID-9329971", "CSAFPID-9329972", "CSAFPID-9329973", "CSAFPID-9329974", "CSAFPID-9329975", "CSAFPID-9329976", "CSAFPID-9329977", "CSAFPID-9329978", "CSAFPID-9329979", "CSAFPID-9329980", "CSAFPID-9329981", "CSAFPID-9329982", "CSAFPID-9329983", "CSAFPID-9329984", "CSAFPID-9329985", "CSAFPID-9329986", "CSAFPID-9329987", "CSAFPID-9329988", "CSAFPID-9329989", "CSAFPID-9329990", "CSAFPID-9329991", "CSAFPID-9329992", "CSAFPID-9329993", "CSAFPID-9329994", "CSAFPID-9329995", "CSAFPID-9329996", "CSAFPID-9329997", "CSAFPID-9329998", "CSAFPID-9329999", "CSAFPID-9330000", "CSAFPID-9330001", "CSAFPID-9330002", "CSAFPID-9330003", "CSAFPID-9330004", "CSAFPID-9320987" ] }, "references": [ { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10144" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-10144" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-10144.json?alt=media" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-10144" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/web-infra-dev/rsbuild/commit/c1e2aebd6b1bbdaece15265572c3284f934b674d" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/web-infra-dev/rsbuild/pull/7789" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/web-infra-dev/rsbuild/releases/tag/v2.0.9" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://www.vulncheck.com/advisories/rsbuild-command-injection-via-openbrowser-url-handling" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/10xxx/CVE-2026-10144.json" }, { "category": "external", "summary": "Reference - osv", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10144" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-9320987", "CSAFPID-9329765", "CSAFPID-9329766", "CSAFPID-9329767", "CSAFPID-9329768", "CSAFPID-9329769", "CSAFPID-9329770", "CSAFPID-9329771", "CSAFPID-9329772", "CSAFPID-9329773", "CSAFPID-9329774", "CSAFPID-9329775", "CSAFPID-9329776", "CSAFPID-9329777", "CSAFPID-9329778", "CSAFPID-9329779", "CSAFPID-9329780", "CSAFPID-9329781", "CSAFPID-9329782", "CSAFPID-9329783", "CSAFPID-9329784", "CSAFPID-9329785", "CSAFPID-9329786", "CSAFPID-9329787", "CSAFPID-9329788", "CSAFPID-9329789", "CSAFPID-9329790", "CSAFPID-9329791", "CSAFPID-9329792", "CSAFPID-9329793", "CSAFPID-9329794", "CSAFPID-9329795", "CSAFPID-9329796", "CSAFPID-9329797", "CSAFPID-9329798", "CSAFPID-9329799", "CSAFPID-9329800", "CSAFPID-9329801", "CSAFPID-9329802", "CSAFPID-9329803", "CSAFPID-9329804", "CSAFPID-9329805", "CSAFPID-9329806", "CSAFPID-9329807", "CSAFPID-9329808", "CSAFPID-9329809", "CSAFPID-9329810", "CSAFPID-9329811", "CSAFPID-9329812", "CSAFPID-9329813", "CSAFPID-9329814", "CSAFPID-9329815", "CSAFPID-9329816", "CSAFPID-9329817", "CSAFPID-9329818", "CSAFPID-9329819", "CSAFPID-9329820", "CSAFPID-9329821", "CSAFPID-9329822", "CSAFPID-9329823", "CSAFPID-9329824", "CSAFPID-9329825", "CSAFPID-9329826", "CSAFPID-9329827", "CSAFPID-9329828", "CSAFPID-9329829", "CSAFPID-9329830", "CSAFPID-9329831", "CSAFPID-9329832", "CSAFPID-9329833", "CSAFPID-9329834", "CSAFPID-9329835", "CSAFPID-9329836", "CSAFPID-9329837", "CSAFPID-9329838", "CSAFPID-9329839", "CSAFPID-9329840", "CSAFPID-9329841", "CSAFPID-9329842", "CSAFPID-9329843", "CSAFPID-9329844", "CSAFPID-9329845", "CSAFPID-9329846", "CSAFPID-9329847", "CSAFPID-9329848", "CSAFPID-9329849", "CSAFPID-9329850", "CSAFPID-9329851", "CSAFPID-9329852", "CSAFPID-9329853", "CSAFPID-9329854", "CSAFPID-9329855", "CSAFPID-9329856", "CSAFPID-9329857", "CSAFPID-9329858", "CSAFPID-9329859", "CSAFPID-9329860", "CSAFPID-9329861", "CSAFPID-9329862", "CSAFPID-9329863", "CSAFPID-9329864", "CSAFPID-9329865", "CSAFPID-9329866", "CSAFPID-9329867", "CSAFPID-9329868", "CSAFPID-9329869", "CSAFPID-9329870", "CSAFPID-9329871", "CSAFPID-9329872", "CSAFPID-9329873", "CSAFPID-9329874", "CSAFPID-9329875", "CSAFPID-9329876", "CSAFPID-9329877", "CSAFPID-9329878", "CSAFPID-9329879", "CSAFPID-9329880", "CSAFPID-9329881", "CSAFPID-9329882", "CSAFPID-9329883", "CSAFPID-9329884", "CSAFPID-9329885", "CSAFPID-9329886", "CSAFPID-9329887", "CSAFPID-9329888", "CSAFPID-9329889", "CSAFPID-9329890", "CSAFPID-9329891", "CSAFPID-9329892", "CSAFPID-9329893", "CSAFPID-9329894", "CSAFPID-9329895", "CSAFPID-9329896", "CSAFPID-9329897", "CSAFPID-9329898", "CSAFPID-9329899", "CSAFPID-9329900", "CSAFPID-9329901", "CSAFPID-9329902", "CSAFPID-9329903", "CSAFPID-9329904", "CSAFPID-9329905", "CSAFPID-9329906", "CSAFPID-9329907", "CSAFPID-9329908", "CSAFPID-9329909", "CSAFPID-9329910", "CSAFPID-9329911", "CSAFPID-9329912", "CSAFPID-9329913", "CSAFPID-9329914", "CSAFPID-9329915", "CSAFPID-9329916", "CSAFPID-9329917", "CSAFPID-9329918", "CSAFPID-9329919", "CSAFPID-9329920", "CSAFPID-9329921", "CSAFPID-9329922", "CSAFPID-9329923", "CSAFPID-9329924", "CSAFPID-9329925", "CSAFPID-9329926", "CSAFPID-9329927", "CSAFPID-9329928", "CSAFPID-9329929", "CSAFPID-9329930", "CSAFPID-9329931", "CSAFPID-9329932", "CSAFPID-9329933", "CSAFPID-9329934", "CSAFPID-9329935", "CSAFPID-9329936", "CSAFPID-9329937", "CSAFPID-9329938", "CSAFPID-9329939", "CSAFPID-9329940", "CSAFPID-9329941", "CSAFPID-9329942", "CSAFPID-9329943", "CSAFPID-9329944", "CSAFPID-9329945", "CSAFPID-9329946", "CSAFPID-9329947", "CSAFPID-9329948", "CSAFPID-9329949", "CSAFPID-9329950", "CSAFPID-9329951", "CSAFPID-9329952", "CSAFPID-9329953", "CSAFPID-9329954", "CSAFPID-9329955", "CSAFPID-9329956", "CSAFPID-9329957", "CSAFPID-9329958", "CSAFPID-9329959", "CSAFPID-9329960", "CSAFPID-9329961", "CSAFPID-9329962", "CSAFPID-9329963", "CSAFPID-9329964", "CSAFPID-9329965", "CSAFPID-9329966", "CSAFPID-9329967", "CSAFPID-9329968", "CSAFPID-9329969", "CSAFPID-9329970", "CSAFPID-9329971", "CSAFPID-9329972", "CSAFPID-9329973", "CSAFPID-9329974", "CSAFPID-9329975", "CSAFPID-9329976", "CSAFPID-9329977", "CSAFPID-9329978", "CSAFPID-9329979", "CSAFPID-9329980", "CSAFPID-9329981", "CSAFPID-9329982", "CSAFPID-9329983", "CSAFPID-9329984", "CSAFPID-9329985", "CSAFPID-9329986", "CSAFPID-9329987", "CSAFPID-9329988", "CSAFPID-9329989", "CSAFPID-9329990", "CSAFPID-9329991", "CSAFPID-9329992", "CSAFPID-9329993", "CSAFPID-9329994", "CSAFPID-9329995", "CSAFPID-9329996", "CSAFPID-9329997", "CSAFPID-9329998", "CSAFPID-9329999", "CSAFPID-9330000", "CSAFPID-9330001", "CSAFPID-9330002", "CSAFPID-9330003", "CSAFPID-9330004" ] } ], "title": "CVE-2026-10144" } ] }