Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-27148 State: PUBLISHED Published: 2022-04-08T15:33:10 Last Updated: 2024-08-03T05:18:39.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to Integer Overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2067
CVE ID: CVE-2022-27149 State: REJECTED Published: 2022-04-09T00:48:34 Last Updated: 2022-04-09T00:48:34 Description: No description available.
CVE ID: CVE-2022-27152 State: PUBLISHED Published: 2022-04-08T00:00:00 Last Updated: 2024-08-03T05:18:39.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file modification. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/llamasoft/RootMyRoku - https://support.roku.com/article/12554388937879
CVE ID: CVE-2022-27156 State: PUBLISHED Published: 2022-04-11T14:36:10 Last Updated: 2024-08-03T05:18:39.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Daylight Studio Fuel CMS 1.5.1 is vulnerable to HTML Injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/daylightstudio/FUEL-CMS/issues/593
CVE ID: CVE-2022-27157 State: PUBLISHED Published: 2022-04-15T18:00:49 Last Updated: 2024-08-03T05:18:39.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: pearweb < 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pear/pearweb/commit/6447c174a6b4bd76d28ecca8543cbd24bf394f99#diff-204452a70c5b0b0084097fcff6aee77c2c38cb77a41c4b2dd0065fda37a7489c
CVE ID: CVE-2022-27158 State: PUBLISHED Published: 2022-04-15T18:03:40 Last Updated: 2024-08-03T05:18:39.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: pearweb < 1.32 suffers from Deserialization of Untrusted Data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pear/pearweb/commit/6447c174a6b4bd76d28ecca8543cbd24bf394f99
CVE ID: CVE-2022-27161 State: PUBLISHED Published: 2022-04-12T15:05:25 Last Updated: 2024-08-03T05:18:39.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_viewUsers Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cskaza/cszcms/issues/43
CVE ID: CVE-2022-27162 State: PUBLISHED Published: 2022-04-12T15:06:52 Last Updated: 2024-08-03T05:18:39.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_editUser Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cskaza/cszcms/issues/44
CVE ID: CVE-2022-27163 State: PUBLISHED Published: 2022-04-12T15:08:38 Last Updated: 2024-08-03T05:18:39.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_editUser Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cskaza/cszcms/issues/45
CVE ID: CVE-2022-27164 State: PUBLISHED Published: 2022-04-12T15:10:11 Last Updated: 2024-08-03T05:18:39.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_viewUsers Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cskaza/cszcms/issues/42
CVE ID: CVE-2022-27165 State: PUBLISHED Published: 2022-04-12T15:11:45 Last Updated: 2024-08-03T05:18:39.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Plugin_manager_setstatus Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cskaza/cszcms/issues/41
CVE ID: CVE-2022-27166 State: PUBLISHED Published: 2022-08-04T06:15:17 Last Updated: 2024-08-03T05:18:39.251Z Vendors: Apache Software Foundation Products: Apache JSPWiki Problem Types: Cross-site scripting vulnerability on XHRHtml2Markup.jsp Description: A carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability on Apache JSPWiki up to and including 2.11.2, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Additional Analyst Notes: - CVE Program Container: References: - https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2022-28732
CVE ID: CVE-2022-27167 State: PUBLISHED Published: 2022-05-10T19:43:59.570695Z Last Updated: 2024-09-16T21:56:50.610Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: ESET, spol. s r.o. Products: ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Endpoint Antivirus, ESET Endpoint Security, ESET Server Security for Microsoft Windows Server, ESET File Security for Microsoft Windows Server, ESET Mail Security for Microsoft Exchange Server, ESET Mail Security for IBM Domino, ESET Security for Microsoft SharePoint Server Problem Types: CWE-280 Description: Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allow
r Problem Types: CWE-280 Description: Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versi
ecurity 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0. Additional Analyst Notes: - CVE Program Container: References: - https://support.eset.com/en/ca8268
CVE ID: CVE-2022-27168 State: PUBLISHED Published: 2022-07-11T00:40:19 Last Updated: 2024-08-03T05:18:39.338Z Vendors: LiteCart Products: LiteCart Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in LiteCart versions prior to 2.4.2 allows a remote attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.litecart.net/en/ - https://github.com/litecart/litecart - https://github.com/litecart/litecart/commit/050fea86cc162f3da2f7824f586602125a0f6d63 - https://jvn.jp/en/jp/JVN32625020/index.html
CVE ID: CVE-2022-27169 State: PUBLISHED Published: 2022-05-25T20:15:29.603Z Last Updated: 2025-04-15T19:00:46.608Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Open Automation Software Products: OAS Platform Problem Types: CWE-306 Description: An information disclosure vulnerability exists in the OAS Engine SecureBrowseFile functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted network request can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligenc
lity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1494
CVE ID: CVE-2022-27170 State: PUBLISHED Published: 2023-02-16T20:00:16.311Z Last Updated: 2025-01-27T18:16:48.424Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: n/a Products: Intel(R) Media SDK software Problem Types: escalation of privilege Description: Protection mechanism failure in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00731.html
CVE ID: CVE-2022-27172 State: PUBLISHED Published: 2022-05-12T17:01:55.794Z Last Updated: 2025-04-15T19:01:38.397Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: InHand Networks Products: InRouter302 Problem Types: CWE-259 Description: A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted network request can lead to privileged operation execution. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.inhandnetworks.com/upload/attachment/202205/10/InH
Program Container: - CISA ADP Vulnrichment: References: - https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1496
CVE ID: CVE-2022-27173 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:18.098Z Description: No description available.
CVE ID: CVE-2022-27174 State: PUBLISHED Published: 2022-06-13T04:50:28 Last Updated: 2024-08-03T05:25:31.006Z Vendors: COREMOBILE Co. Ltd. Products: Easy Blog for EC-CUBE4 Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Easy Blog for EC-CUBE4 Ver.1.0.1 and earlier allows a remote unauthenticated attacker to hijack the authentication of the administrator and delete a blog article or a category via a specially crafted page. Additional Analyst Notes: - CVE Program Container: References: - https://www.ec-cube.net/products/detail.php?product_id=2217 - https://jvn.jp/en/jp/JVN46241173/index.html
CVE ID: CVE-2022-27175 State: PUBLISHED Published: 2022-03-29T16:37:15.390Z Last Updated: 2025-04-16T16:35:06.259Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetCalcTagList. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01
CVE ID: CVE-2022-27176 State: PUBLISHED Published: 2022-06-14T07:05:36 Last Updated: 2024-08-03T05:25:31.007Z Vendors: J’s Communication Co., Ltd. Products: RevoWorks SCVX, RevoWorks Browser, and RevoWorks Problem Types: Incomplete Filtering of Special Elements Description: Incomplete filtering of special elements vulnerability exists in RevoWorks SCVX using 'File Sanitization Library' 1.043 and prior versions, RevoWorks Browser 2.2.67 and prior versions (when using 'File Sanitization Option'), and RevoWorks Desktop 2.1.84 and prior versions (when using 'File Sanitization Option'), which may allow an attacker to execute a malicious macro by having a user to download, import, and open a speci
ption'), which may allow an attacker to execute a malicious macro by having a user to download, import, and open a specially crafted file in the local environment. Additional Analyst Notes: - CVE Program Container: References: - https://jscom.jp/news-20220527/ - https://jvn.jp/en/jp/JVN27256219/index.html
CVE ID: CVE-2022-27177 State: PUBLISHED Published: 2022-04-01T22:17:04 Last Updated: 2024-08-03T05:25:31.009Z Vendors: n/a Products: ConsoleMe Problem Types: Format String Vulnerability in ConsoleMe Description: A Python format string issue leading to information disclosure and potentially remote code execution in ConsoleMe for all versions prior to 1.2.2 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2022-001.md
CVE ID: CVE-2022-27178 State: PUBLISHED Published: 2022-08-05T21:19:00.879Z Last Updated: 2025-04-15T18:53:48.105Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-284 Description: A denial of service vulnerability exists in the confctl_set_wan_cfg functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to denial of service. An attacker can send packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1506
CVE ID: CVE-2022-27179 State: PUBLISHED Published: 2022-04-20T15:30:32.718Z Last Updated: 2025-04-16T16:28:30.764Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L) Vendors: Red Lion Products: DA50N Problem Types: CWE-522 Description: A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource. If the same passwords were used for other resources, further such assets may be compromised. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-03
CVE ID: CVE-2022-27180 State: PUBLISHED Published: 2023-05-10T13:17:20.857Z Last Updated: 2025-01-24T17:46:55.483Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: n/a Products: Intel(R) MacCPUID software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in the Intel(R) MacCPUID software before version 3.2 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00784.html
CVE ID: CVE-2022-27181 State: PUBLISHED Published: 2022-05-05T16:07:20.273580Z Last Updated: 2024-09-16T16:39:02.704Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: F5 Products: BIG-IP APM Problem Types: CWE-400 Description: On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when APM is configured on a virtual server and the associated access profile is configured with APM AAA NTLM Auth, undisclosed requests can cause an increase in internal resource utilization. Note: Software versions which have reached End of Tech
requests can cause an increase in internal resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K93543114
CVE ID: CVE-2022-27182 State: PUBLISHED Published: 2022-05-05T16:08:18.164018Z Last Updated: 2024-09-16T16:33:47.317Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: F5 Products: BIG-IP Problem Types: CWE-400 Description: On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, and 14.1.x versions prior to 14.1.4.6, when BIG-IP packet filters are enabled and a virtual server is configured with the type set to Reject, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container:
which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K31856317
CVE ID: CVE-2022-27183 State: PUBLISHED Published: 2022-05-06T16:38:41 Last Updated: 2024-08-03T05:25:31.044Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Splunk Products: Splunk Enterprise Problem Types: CWE-79 Description: The Monitoring Console app configured in Distributed mode allows for a Reflected XSS in a query parameter in Splunk Enterprise versions before 8.1.4. The Monitoring Console app is a bundled app included in Splunk Enterprise, not for download on SplunkBase, and not installed on Splunk Cloud Platform instances. Note that the Cloud Monitoring Console is not impacted. Additional Analyst Notes: - CVE Program Container: References: - https://
the Cloud Monitoring Console is not impacted. Additional Analyst Notes: - CVE Program Container: References: - https://www.splunk.com/en_us/product-security/announcements/svd-2022-0505.html - https://research.splunk.com/application/splunk_xss_in_monitoring_console/
CVE ID: CVE-2022-27184 State: PUBLISHED Published: 2022-06-01T13:40:06.875Z Last Updated: 2025-04-16T17:52:59.385Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Horner Automation Products: Horner Automation Cscape Csfont Problem Types: CWE-787 Description: The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-146-02
CVE ID: CVE-2022-27185 State: PUBLISHED Published: 2022-08-05T21:19:12.166Z Last Updated: 2025-04-15T18:53:41.480Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-284 Description: A denial of service vulnerability exists in the confctl_set_master_wlan functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to denial of service. An attacker can send packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1505
CVE ID: CVE-2022-27187 State: PUBLISHED Published: 2022-11-11T15:48:42.269Z Last Updated: 2025-02-05T20:52:35.658Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Quartus Prime Standard edition software Problem Types: escalation of privilege Description: Uncontrolled search path element in the Intel(R) Quartus Prime Standard edition software before version 21.1 Patch 0.02std may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00659
: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00659.html
CVE ID: CVE-2022-27188 State: PUBLISHED Published: 2022-04-15T01:45:23 Last Updated: 2024-08-03T05:25:31.127Z Vendors: Yokogawa Electric Corporation Products: CENTUM VP series with VP6E5150(Graphic Builder) installed and B/M9000 VP Problem Types: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Description: OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 to R4.03.00, and B/M9000 VP R6.01.01 to R6.03.02, which may allow an attacker who can access the computer where the affected product is installed to execute an arbitrary OS command by altering a file generated
ess the computer where the affected product is installed to execute an arbitrary OS command by altering a file generated using Graphic Builder. Additional Analyst Notes: - CVE Program Container: References: - https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/ - https://jvn.jp/vu/JVNVU99204686/index.html
CVE ID: CVE-2022-27189 State: PUBLISHED Published: 2022-05-05T16:09:13.113345Z Last Updated: 2024-09-17T03:53:54.726Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-681 Description: On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when an Internet Content Adaptation Protocol (ICAP) profile is configured on a virtual server, undisclosed traffic can cause an increase in Traffic Management Microkernel (TMM) memory resource utilization. Note: Software versions which have reached End of
in Traffic Management Microkernel (TMM) memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K16187341
CVE ID: CVE-2022-27191 State: PUBLISHED Published: 2022-03-18T06:03:34 Last Updated: 2024-08-03T05:25:31.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/g/golang-announce - https://groups.google.com/g/golang-announce/c/-cp44ypCT5s - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HHGBEGJ54DZZGTXFUQNS7ZIG3E624YAF/ - https://lists.fedoraproject.org/archives/list/package-annou
edoraproject.org/message/HHGBEGJ54DZZGTXFUQNS7ZIG3E624YAF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QTFOIDHQRGNI4P6LYN6ILH5G443RYYKB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YHYRQB7TRMHDB3NEHW5XBRG7PPMUTPGV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQNPPQWSTP2IX7SHE6TS4SP4EVMI5EZK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J5WPM42UR6XIBQNQPNQHM32X7S4LJTRX/ - https://security.netapp.com/advisory/ntap-20220429-0002/ - https://lists.fedoraproject.org/archives/list/pa
X7S4LJTRX/ - https://security.netapp.com/advisory/ntap-20220429-0002/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ3S7LB65N54HXXBCB67P4TTOHTNPP5O/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZFUNHFHQVJSADNH7EZ3B53CYDZVEEPBP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLUJZV3HBP56ADXU6QH2V7RNYUPMVBXQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message
RQ7UBRZ7JIX6H6F5JHJR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/