CVE-2026-18991 | HIGH | 7.3 | 2026-08-06 | 2026-08-06 | nvd | A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64. This affects an unknown part of the file container/agent-runne…A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64. This affects an unknown part of the file container/agent-runner/src/mcp-tools/core.ts of the component send_file. Such manipulation leads to path traversal. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet. |
CVE-2026-18990 | HIGH | 7.3 | 2026-08-06 | 2026-08-06 | nvd | A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API …A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API Status Route. The manipulation results in missing authentication. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. |
CVE-2026-18980 | MEDIUM | 6.3 | 2026-08-06 | 2026-08-06 | nvd | A vulnerability was identified in nearai ironclaw up to 0.29.1. Affected is the function classify_command_risk of the file src/tools/builtin…A vulnerability was identified in nearai ironclaw up to 0.29.1. Affected is the function classify_command_risk of the file src/tools/builtin/shell.rs. Such manipulation leads to command injection. The attack may be launched remotely. The exploit is publicly available and might be used. The name of the patch is a1d7c3ba428ed575900469b207fb5668725f9a71. Applying a patch is advised to resolve this issue. |
CVE-2026-18976 | MEDIUM | 6.3 | 2026-08-06 | 2026-08-06 | nvd | A vulnerability was determined in NousResearch hermes-agent up to 0.16.0. This impacts the function get_tool_definitions of the file agent/a…A vulnerability was determined in NousResearch hermes-agent up to 0.16.0. This impacts the function get_tool_definitions of the file agent/agent_init.py of the component disabled_toolsets Handler. This manipulation causes incorrect privilege assignment. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report. |
CVE-2026-18974 | MEDIUM | 5.3 | 2026-08-06 | 2026-08-06 | nvd | A vulnerability was found in heshengtao super-agent-party up to 0.4.1. This affects the function get_file_content of the file server.py of t…A vulnerability was found in heshengtao super-agent-party up to 0.4.1. This affects the function get_file_content of the file server.py of the component execute_tool_manually Endpoint. The manipulation of the argument tool_name/tool_params results in information disclosure. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. |
CVE-2026-18973 | HIGH | 7.3 | 2026-08-06 | 2026-08-06 | nvd | A vulnerability has been found in heshengtao super-agent-party up to 0.4.1. The impacted element is the function sanitize_proxy_url of the f…A vulnerability has been found in heshengtao super-agent-party up to 0.4.1. The impacted element is the function sanitize_proxy_url of the file server.py of the component extension_proxy Route. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. |
CVE-2025-15366 | - | - | 2026-01-20 | 2026-08-06 | nvd | The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands…The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters. |
CVE-2026-44210 | CRITICAL | 9.9 | 2026-07-23 | 2026-08-06 | nvd | Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like cont…Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Versions prior to 3.31.0 ship with a default configuration that allows pod creators to inject arbitrary command-line arguments into the virtiofsd process through the `io.katacontainers.config.hypervisor.virtio_fs_extra_args` pod annotation. By injecting `-o source=/` along with `--no-announce-submounts` and `--sandbox=none`, an attacker can override the virtiofsd shared directory to serve the entire host root filesystem into the guest VM. Combined with the `kernel_params` annotation (also enabled by default) to activate the agent debug console, the attacker can mount the host filesystem from inside the VM and read or write any file on the host, including /etc/shadow. Version 3.31.0 patches the issue. |
CVE-2026-48029 | HIGH | 7.1 | 2026-07-22 | 2026-08-06 | nvd | libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItem_Grid::decode_gr…libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow. Version 1.22.0 fixes the issue. |
CVE-2026-54120 | CRITICAL | 9.9 | 2026-07-24 | 2026-08-06 | nvd | Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network. |
CVE-2026-63317 | MEDIUM | 5.6 | 2026-07-24 | 2026-08-06 | nvd | Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP
Versions Affected:
- before 2.5.10
-…Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP
Versions Affected:
- before 2.5.10
- before 3.0.0-M5
Description:
Three code paths in Apache OpenNLP load a class by its fully-qualified name via Class.forName() and invoke its no-arg constructor without any prior validation of the class name or its type.
The affected paths are:
(1) GeneratorFactory, which reads the class attribute of generator elements in an XML feature generator descriptor; such descriptors are embedded as artifacts in model archives (e.g. TokenNameFinder and POSTagger models) and are parsed during model loading, so an attacker who can supply a crafted model archive controls the class name directly.
(2) StreamFactoryRegistry.getFactory(Class, String), which falls back to interpreting an unregistered format name as the fully-qualified class name of an ObjectStreamFactory; this is exploitable in applications that pass untrusted format names (e.g. exposing the -format parameter of the command-line tooling to external input).
(3) StringInterners, which instantiates the interner implementation named by the opennlp.interner.class system property; this value is normally deployer-controlled, so it is hardened as defense in depth rather than being independently attacker-reachable.
Exploitation requires a class with attacker-useful side effects in its static initializer or no-arg constructor (JNDI lookup, outbound network I/O, filesystem access) to be present on the classpath, so this is not drop-in remote code execution. T
Mitigation:
Upgrade to a fixed release.
The fix routes all three paths through ExtensionLoader.instantiateExtension(...), which consults a package-prefix allowlist before Class.forName() is invoked, so a disallowed class is never loaded, initialized, or constructed.
Classes under the opennlp. prefix remain permitted by default. Deployments that load models referencing feature generator factories, object stream factories, or string interners outside opennlp.* must opt those packages in, either programmatically via ExtensionLoader.registerAllowedPackage(String) before the first model load, or by setting the OPENNLP_EXT_ALLOWED_PACKAGES system property to a comma-separated list of allowed package prefixes.
Users who cannot upgrade immediately should ensure all model files and format names are sourced from trusted origins and should audit their classpath for classes with side-effecting static initializers or constructors. |
CVE-2026-66010 | MEDIUM | 6.1 | 2026-07-24 | 2026-08-06 | nvd | DOMPurify before 3.4.12 fails to execute afterSanitizeElements hook for custom elements allowed via CUSTOM_ELEMENT_HANDLING.tagNameCheck, al…DOMPurify before 3.4.12 fails to execute afterSanitizeElements hook for custom elements allowed via CUSTOM_ELEMENT_HANDLING.tagNameCheck, allowing attributes to bypass application security policies. Attackers can preserve sensitive attributes on custom elements that later re-inject them into innerHTML sinks, creating second-order XSS gadgets. |
CVE-2026-49326 | MEDIUM | 6.5 | 2026-07-24 | 2026-08-06 | nvd | Missing Authorization vulnerability in Apache HBase thrift and rest delegation service.
A scan operation in thrift/rest service has 3 steps…Missing Authorization vulnerability in Apache HBase thrift and rest delegation service.
A scan operation in thrift/rest service has 3 steps, open, fetch(possible multiple times), close.
The open step will return an id which will be passed back to server for identifying the scanner instances stored at server side.
We missed the owner check in fetch and close steps which means a user can fetch rows from the scanner which is opened by other users, and close scanners which belongs to other users.
This issue affects Apache HBase:from 3.0.0-alpha-1 through 3.0.0-beta-1, from 2.6.0 through 2.6.5, from 2.5.0 through 2.5.14, through 2.4.*.
Users are recommended to upgrade to version 3.0.0-beta-2, 2.6.6 and 2.5.15, which fixes the issue. |
CVE-2026-58630 | CRITICAL | 10.0 | 2026-07-24 | 2026-08-06 | nvd | Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-17650 | HIGH | 8.3 | 2026-07-30 | 2026-08-06 | nvd | Use after free in Compositing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to …Use after free in Compositing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) |
CVE-2026-17652 | CRITICAL | 9.6 | 2026-07-30 | 2026-08-06 | nvd | Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potent…Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) |
CVE-2026-17653 | HIGH | 8.3 | 2026-07-30 | 2026-08-06 | nvd | Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potenti…Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) |
CVE-2026-17654 | HIGH | 7.8 | 2026-07-30 | 2026-08-06 | nvd | Race in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malic…Race in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Critical) |
CVE-2026-17655 | CRITICAL | 9.6 | 2026-07-30 | 2026-08-06 | nvd | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform…Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) |
CVE-2026-17656 | CRITICAL | 9.6 | 2026-07-30 | 2026-08-06 | nvd | Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a craf…Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) |
CVE-2026-17657 | HIGH | 8.3 | 2026-07-30 | 2026-08-06 | nvd | Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to p…Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) |
CVE-2026-17658 | HIGH | 8.8 | 2026-07-30 | 2026-08-06 | nvd | Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a craf…Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) |
CVE-2026-17659 | MEDIUM | 4.2 | 2026-07-30 | 2026-08-06 | nvd | Inappropriate implementation in SiteIsolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the rend…Inappropriate implementation in SiteIsolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High) |
CVE-2026-17660 | HIGH | 8.3 | 2026-07-30 | 2026-08-06 | nvd | Insufficient validation of untrusted input in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised …Insufficient validation of untrusted input in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) |
CVE-2026-67873 | - | - | 2026-08-06 | 2026-08-06 | nvd | A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path. The issue occurs because FileSegm…A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path. The issue occurs because FileSegment_encode() validates only the standalone segment length via FileSegment_GetMaxDataSize() and does not verify the residual capacity of the current ASDU frame before encoding object fields and segment data |
CVE-2026-67872 | - | - | 2026-08-06 | 2026-08-06 | nvd | An issue in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the event monitored-item queue resize handlingAn issue in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the event monitored-item queue resize handling |
CVE-2026-67871 | - | - | 2026-08-06 | 2026-08-06 | nvd | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the AddNodes, address_space_…Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the AddNodes, address_space_bs.c, sopc_node_mgt_helper_internal.c, and toolkit_test_server |
CVE-2026-67870 | - | - | 2026-08-06 | 2026-08-06 | nvd | In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId target…In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId targets. A remote attacker can send a crafted AddReferencesRequest with an empty targetServerUri and a non-zero targetNodeId.serverIndex, causing the target node pointer to remain NULL while execution continues. |
CVE-2026-67869 | HIGH | 7.5 | 2026-08-06 | 2026-08-06 | nvd | Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Service_Call validates input…Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Service_Call validates input arguments against runtime-resolved InputArguments metadata |
CVE-2026-67531 | - | - | 2026-08-06 | 2026-08-06 | nvd | FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP). Prior to 1.5.7, the sandboxed codecall:execute tool exposes l…FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP). Prior to 1.5.7, the sandboxed codecall:execute tool exposes live host Zod schema instances to the script via getTool(), and because Zod v4 defines _zod as a non-configurable, non-writable own property, the ECMAScript Proxy invariants force the security membrane to hand back the raw host object, letting a script reach _zod.constr.constructor (the host Function constructor) and execute arbitrary code in the server process. A single tools/call is sufficient to escape the sandbox and achieve remote code execution as the server user, exposing everything the process holds such as OAuth client secrets, JWT_SECRET, session keys, database credentials, and cloud instance metadata. Because the framework's DEFAULT_AUTH_OPTIONS is public mode, an unconfigured server serves this to unauthenticated callers, and on authenticated servers an indirect prompt injection in tool output or fetched content can trigger it without a human attackerThis issue is fixed in version 1.5.7. |
CVE-2026-52466 | - | - | 2026-08-06 | 2026-08-06 | nvd | Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toInorrect Access Control. The application fails to stop processing an inco…Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toInorrect Access Control. The application fails to stop processing an incoming request in VuFind\Controller\AbstractBase::validateAccessPermission after it has found that controller level access permissions do not allow access to the requested function. The requester receives a response indicating that access was denied, but the actual function is executed regardless of that. |
CVE-2026-19028 | - | - | 2026-08-06 | 2026-08-06 | nvd | H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing chec…H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size without checking that the buffer is at least 4 bytes, allowing a size_t underflow. This allows attackers to cause a denial of service (massively out-of-bounds read and application crash in H5_checksum_fletcher32) via a crafted HDF5 file with a Fletcher32-filtered chunk smaller than 4 bytes, triggered via H5Dread, e.g. by the h5ls or h5dump tools. |
CVE-2026-19027 | - | - | 2026-08-06 | 2026-08-06 | nvd | The H5Z__nbit_decompress_one_byte, H5Z__nbit_decompress_one_nooptype, and H5Z__nbit_decompress_one_atomic functions in H5Znbit.c in HDF5 thr…The H5Z__nbit_decompress_one_byte, H5Z__nbit_decompress_one_nooptype, and H5Z__nbit_decompress_one_atomic functions in H5Znbit.c in HDF5 through 2.3.0 advance a read index into the compressed chunk buffer without bounding it against the buffer's actual size. This allows attackers to cause an out-of-bounds heap read, and in constrained cases disclosure of adjacent heap memory into decompressed dataset values, via a crafted HDF5 file whose N-Bit filter parameters describe more decompressed data than the stored compressed chunk actually contains, triggered via H5Dread, e.g. by the h5ls or h5repack tools. |
CVE-2026-18970 | HIGH | 7.3 | 2026-08-06 | 2026-08-06 | nvd | A flaw has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. The affected element is an unknown func…A flaw has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. The affected element is an unknown function of the file /dm/dispatch/user/findAll. Executing a manipulation of the argument Name can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. |
CVE-2026-18969 | HIGH | 7.3 | 2026-08-06 | 2026-08-06 | nvd | A vulnerability was detected in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. Impacted is an unknown function …A vulnerability was detected in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. Impacted is an unknown function of the file /dm/dispatch/userinfo/upload. Performing a manipulation of the argument File results in unrestricted upload. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. |
CVE-2026-18968 | MEDIUM | 4.3 | 2026-08-06 | 2026-08-06 | nvd | A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f. This issue affects some unknow…A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f. This issue affects some unknown processing of the file /tags.php. Such manipulation of the argument day leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The vendor was contacted early about this disclosure but did not respond in any way. |
CVE-2023-54389 | - | - | 2026-08-06 | 2026-08-06 | nvd | Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned.Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned. |
CVE-2023-54388 | - | - | 2026-08-06 | 2026-08-06 | nvd | Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned.Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned. |
CVE-2023-54387 | - | - | 2026-08-06 | 2026-08-06 | nvd | Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned.Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned. |
CVE-2023-54386 | - | - | 2026-08-06 | 2026-08-06 | nvd | Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned.Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned. |
CVE-2023-54385 | - | - | 2026-08-06 | 2026-08-06 | nvd | Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned.Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned. |
CVE-2023-54384 | - | - | 2026-08-06 | 2026-08-06 | nvd | Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned.Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned. |
CVE-2023-54383 | - | - | 2026-08-06 | 2026-08-06 | nvd | Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned.Rejected reason: Erroneously reserved under wrong year by automation defect; never assigned. |
CVE-2023-54382 | - | - | 2026-08-06 | 2026-08-06 | nvd | Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. |
CVE-2023-54381 | - | - | 2026-08-06 | 2026-08-06 | nvd | Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. |
CVE-2023-54380 | - | - | 2026-08-06 | 2026-08-06 | nvd | Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. |
CVE-2023-54379 | - | - | 2026-08-06 | 2026-08-06 | nvd | Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. |
CVE-2023-54378 | - | - | 2026-08-06 | 2026-08-06 | nvd | Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. |
CVE-2023-54377 | - | - | 2026-08-06 | 2026-08-06 | nvd | Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. |
CVE-2023-54376 | - | - | 2026-08-06 | 2026-08-06 | nvd | Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. |