@blamejs/exceptd-skills 0.19.36 → 0.19.38

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (15) hide show
  1. package/CHANGELOG.md +18 -0
  2. package/data/_indexes/_meta.json +9 -9
  3. package/data/_indexes/activity-feed.json +2 -2
  4. package/data/_indexes/catalog-summaries.json +7 -7
  5. package/data/_indexes/chains.json +64478 -0
  6. package/data/atlas-ttps.json +11 -3
  7. package/data/attack-techniques.json +443 -39
  8. package/data/cve-catalog.json +11666 -2
  9. package/data/cwe-catalog.json +120 -11
  10. package/data/framework-control-gaps.json +521 -7
  11. package/data/zeroday-lessons.json +9215 -2
  12. package/manifest.json +53 -53
  13. package/package.json +2 -2
  14. package/sbom.cdx.json +29 -29
  15. package/scripts/check-catalog-gap-budget.js +9 -1
package/data/cwe-catalog.json CHANGED
@@ -49,11 +49,14 @@
49
49
  ],
50
50
  "evidence_cves": [
51
51
  "CVE-2009-0927",
52
+ "CVE-2009-1123",
52
53
  "CVE-2009-2055",
53
54
  "CVE-2010-2568",
54
55
  "CVE-2010-3035",
55
56
  "CVE-2011-2005",
56
57
  "CVE-2012-0151",
58
+ "CVE-2012-1535",
59
+ "CVE-2012-1856",
57
60
  "CVE-2013-3896",
58
61
  "CVE-2013-5065",
59
62
  "CVE-2013-6282",
@@ -64,6 +67,7 @@
64
67
  "CVE-2016-3714",
65
68
  "CVE-2016-7262",
66
69
  "CVE-2016-8562",
70
+ "CVE-2017-0145",
67
71
  "CVE-2017-0146",
68
72
  "CVE-2017-0148",
69
73
  "CVE-2017-12231",
@@ -75,6 +79,7 @@
75
79
  "CVE-2017-12319",
76
80
  "CVE-2017-15944",
77
81
  "CVE-2017-3881",
82
+ "CVE-2017-9791",
78
83
  "CVE-2018-0125",
79
84
  "CVE-2018-0147",
80
85
  "CVE-2018-0156",
@@ -85,13 +90,16 @@
85
90
  "CVE-2018-0174",
86
91
  "CVE-2018-19949",
87
92
  "CVE-2018-8414",
93
+ "CVE-2019-1068",
88
94
  "CVE-2019-11708",
89
95
  "CVE-2019-1652",
90
96
  "CVE-2019-7193",
91
97
  "CVE-2021-25489",
98
+ "CVE-2021-35247",
92
99
  "CVE-2021-38646",
93
100
  "CVE-2021-42278",
94
101
  "CVE-2022-1471",
102
+ "CVE-2022-24086",
95
103
  "CVE-2022-2856",
96
104
  "CVE-2022-29499",
97
105
  "CVE-2022-3075",
@@ -166,12 +174,14 @@
166
174
  "CVE-2016-0752",
167
175
  "CVE-2017-12637",
168
176
  "CVE-2018-18809",
177
+ "CVE-2018-20250",
169
178
  "CVE-2018-5430",
170
179
  "CVE-2019-16278",
171
180
  "CVE-2019-5418",
172
181
  "CVE-2019-7194",
173
182
  "CVE-2019-7195",
174
183
  "CVE-2019-7483",
184
+ "CVE-2020-14864",
175
185
  "CVE-2020-1631",
176
186
  "CVE-2020-36193",
177
187
  "CVE-2020-5410",
@@ -233,7 +243,9 @@
233
243
  "CVE-2026-25592",
234
244
  "CVE-2026-34909",
235
245
  "CVE-2026-34926",
236
- "CVE-2026-48282"
246
+ "CVE-2026-48282",
247
+ "CVE-2026-59310",
248
+ "CVE-2026-66384"
237
249
  ],
238
250
  "framework_controls_partially_addressing": [
239
251
  "NIST-800-53-AC-3",
@@ -274,6 +286,7 @@
274
286
  "CVE-2011-0411",
275
287
  "CVE-2012-1823",
276
288
  "CVE-2014-8361",
289
+ "CVE-2015-2051",
277
290
  "CVE-2016-10033",
278
291
  "CVE-2016-1555",
279
292
  "CVE-2016-20017",
@@ -346,7 +359,9 @@
346
359
  "webapp-security"
347
360
  ],
348
361
  "evidence_cves": [
362
+ "CVE-2014-6271",
349
363
  "CVE-2014-6278",
364
+ "CVE-2014-7169",
350
365
  "CVE-2016-11021",
351
366
  "CVE-2017-18368",
352
367
  "CVE-2017-3506",
@@ -373,6 +388,7 @@
373
388
  "CVE-2019-20500",
374
389
  "CVE-2019-3929",
375
390
  "CVE-2019-7256",
391
+ "CVE-2020-11978",
376
392
  "CVE-2020-12641",
377
393
  "CVE-2020-15415",
378
394
  "CVE-2020-1956",
@@ -382,6 +398,10 @@
382
398
  "CVE-2020-9054",
383
399
  "CVE-2020-9377",
384
400
  "CVE-2021-20035",
401
+ "CVE-2021-21315",
402
+ "CVE-2021-25296",
403
+ "CVE-2021-25297",
404
+ "CVE-2021-25298",
385
405
  "CVE-2021-36380",
386
406
  "CVE-2021-40407",
387
407
  "CVE-2021-45382",
@@ -590,6 +610,7 @@
590
610
  "CVE-2018-7841",
591
611
  "CVE-2019-12989",
592
612
  "CVE-2020-29574",
613
+ "CVE-2020-5722",
593
614
  "CVE-2021-20028",
594
615
  "CVE-2021-44026",
595
616
  "CVE-2023-34362",
@@ -650,13 +671,18 @@
650
671
  "CVE-2010-3765",
651
672
  "CVE-2010-3962",
652
673
  "CVE-2011-3402",
674
+ "CVE-2012-0391",
675
+ "CVE-2012-1535",
676
+ "CVE-2013-3906",
653
677
  "CVE-2013-3918",
654
678
  "CVE-2013-4810",
655
679
  "CVE-2014-4148",
656
680
  "CVE-2014-6287",
657
681
  "CVE-2015-1427",
682
+ "CVE-2015-1635",
658
683
  "CVE-2017-1000353",
659
684
  "CVE-2017-7494",
685
+ "CVE-2017-9841",
660
686
  "CVE-2018-1273",
661
687
  "CVE-2018-14667",
662
688
  "CVE-2018-7602",
@@ -730,7 +756,9 @@
730
756
  "CVE-2026-34197",
731
757
  "CVE-2026-45829",
732
758
  "CVE-2026-5760",
759
+ "CVE-2026-60004",
733
760
  "CVE-2026-6973",
761
+ "CVE-2026-72530",
734
762
  "CVE-2026-9198",
735
763
  "MAL-2026-3083",
736
764
  "MAL-2026-TRAPDOOR-CROSS-ECOSYSTEM"
@@ -762,6 +790,7 @@
762
790
  "hardening"
763
791
  ],
764
792
  "evidence_cves": [
793
+ "CVE-2008-3431",
765
794
  "CVE-2024-42479",
766
795
  "CVE-2026-43284"
767
796
  ],
@@ -983,6 +1012,7 @@
983
1012
  ],
984
1013
  "evidence_cves": [
985
1014
  "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
1015
+ "CVE-2002-0367",
986
1016
  "CVE-2010-0840",
987
1017
  "CVE-2013-0643",
988
1018
  "CVE-2014-2817",
@@ -992,6 +1022,7 @@
992
1022
  "CVE-2016-0151",
993
1023
  "CVE-2016-0165",
994
1024
  "CVE-2017-0001",
1025
+ "CVE-2017-5689",
995
1026
  "CVE-2018-8440",
996
1027
  "CVE-2018-8581",
997
1028
  "CVE-2019-1322",
@@ -1052,6 +1083,9 @@
1052
1083
  "idp-incident-response"
1053
1084
  ],
1054
1085
  "evidence_cves": [
1086
+ "CVE-2011-3544",
1087
+ "CVE-2012-1723",
1088
+ "CVE-2012-4681",
1055
1089
  "CVE-2012-5076",
1056
1090
  "CVE-2013-0422",
1057
1091
  "CVE-2013-2423",
@@ -1061,6 +1095,7 @@
1061
1095
  "CVE-2020-2506",
1062
1096
  "CVE-2021-22941",
1063
1097
  "CVE-2021-27876",
1098
+ "CVE-2022-23134",
1064
1099
  "CVE-2023-23752",
1065
1100
  "CVE-2023-24489",
1066
1101
  "CVE-2023-26360",
@@ -1076,6 +1111,7 @@
1076
1111
  "CVE-2025-31125",
1077
1112
  "CVE-2025-33073",
1078
1113
  "CVE-2025-59230",
1114
+ "CVE-2026-21962",
1079
1115
  "CVE-2026-34908",
1080
1116
  "CVE-2026-35616",
1081
1117
  "CVE-2026-48907"
@@ -1133,11 +1169,14 @@
1133
1169
  "CVE-2020-10148",
1134
1170
  "CVE-2021-27877",
1135
1171
  "CVE-2021-32030",
1172
+ "CVE-2021-32648",
1136
1173
  "CVE-2021-33044",
1137
1174
  "CVE-2021-33045",
1175
+ "CVE-2021-33766",
1138
1176
  "CVE-2021-39226",
1139
1177
  "CVE-2022-0492",
1140
1178
  "CVE-2022-1040",
1179
+ "CVE-2022-23134",
1141
1180
  "CVE-2022-40684",
1142
1181
  "CVE-2023-20867",
1143
1182
  "CVE-2023-27351",
@@ -1145,6 +1184,7 @@
1145
1184
  "CVE-2023-35078",
1146
1185
  "CVE-2023-35082",
1147
1186
  "CVE-2023-46805",
1187
+ "CVE-2023-49105",
1148
1188
  "CVE-2024-12776",
1149
1189
  "CVE-2024-1709",
1150
1190
  "CVE-2024-21410",
@@ -1161,7 +1201,8 @@
1161
1201
  "CVE-2026-20127",
1162
1202
  "CVE-2026-20182",
1163
1203
  "CVE-2026-46817",
1164
- "CVE-2026-50751"
1204
+ "CVE-2026-50751",
1205
+ "CVE-2026-65400"
1165
1206
  ],
1166
1207
  "framework_controls_partially_addressing": [
1167
1208
  "NIST-800-53-IA-2",
@@ -1195,7 +1236,9 @@
1195
1236
  "sector-telecom"
1196
1237
  ],
1197
1238
  "evidence_cves": [
1239
+ "CVE-2017-10271",
1198
1240
  "CVE-2018-19410",
1241
+ "CVE-2020-13927",
1199
1242
  "CVE-2020-24363",
1200
1243
  "CVE-2021-35587",
1201
1244
  "CVE-2021-39144",
@@ -1236,7 +1279,8 @@
1236
1279
  "CVE-2026-39987",
1237
1280
  "CVE-2026-41940",
1238
1281
  "CVE-2026-46817",
1239
- "CVE-2026-56164"
1282
+ "CVE-2026-56164",
1283
+ "CVE-2026-72529"
1240
1284
  ],
1241
1285
  "framework_controls_partially_addressing": [
1242
1286
  "NIST-800-53-IA-2",
@@ -1692,9 +1736,12 @@
1692
1736
  "CVE-2010-0806",
1693
1737
  "CVE-2012-4792",
1694
1738
  "CVE-2012-4969",
1739
+ "CVE-2013-1347",
1695
1740
  "CVE-2013-2551",
1741
+ "CVE-2013-3897",
1696
1742
  "CVE-2014-0322",
1697
1743
  "CVE-2014-0496",
1744
+ "CVE-2014-1776",
1698
1745
  "CVE-2014-8439",
1699
1746
  "CVE-2015-0311",
1700
1747
  "CVE-2015-0313",
@@ -1708,6 +1755,8 @@
1708
1755
  "CVE-2016-9079",
1709
1756
  "CVE-2017-0059",
1710
1757
  "CVE-2017-0261",
1758
+ "CVE-2017-0263",
1759
+ "CVE-2018-15982",
1711
1760
  "CVE-2019-13720",
1712
1761
  "CVE-2019-5786",
1713
1762
  "CVE-2019-8526",
@@ -1720,7 +1769,9 @@
1720
1769
  "CVE-2021-29256",
1721
1770
  "CVE-2021-31166",
1722
1771
  "CVE-2021-34486",
1772
+ "CVE-2022-0609",
1723
1773
  "CVE-2022-22071",
1774
+ "CVE-2022-22620",
1724
1775
  "CVE-2022-2586",
1725
1776
  "CVE-2022-26485",
1726
1777
  "CVE-2022-26486",
@@ -1827,10 +1878,12 @@
1827
1878
  "webapp-security"
1828
1879
  ],
1829
1880
  "evidence_cves": [
1881
+ "CVE-2016-3088",
1830
1882
  "CVE-2017-11357",
1831
1883
  "CVE-2017-12615",
1832
1884
  "CVE-2017-12617",
1833
1885
  "CVE-2018-4063",
1886
+ "CVE-2020-13671",
1834
1887
  "CVE-2021-26828",
1835
1888
  "CVE-2024-39717",
1836
1889
  "CVE-2024-50623",
@@ -1917,6 +1970,7 @@
1917
1970
  "CVE-2017-3066",
1918
1971
  "CVE-2018-0147",
1919
1972
  "CVE-2018-0824",
1973
+ "CVE-2018-1000861",
1920
1974
  "CVE-2018-15133",
1921
1975
  "CVE-2018-2628",
1922
1976
  "CVE-2019-0344",
@@ -1930,6 +1984,7 @@
1930
1984
  "CVE-2020-2551",
1931
1985
  "CVE-2020-2883",
1932
1986
  "CVE-2020-5741",
1987
+ "CVE-2021-23758",
1933
1988
  "CVE-2021-27852",
1934
1989
  "CVE-2021-31010",
1935
1990
  "CVE-2021-31196",
@@ -2178,6 +2233,7 @@
2178
2233
  "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND",
2179
2234
  "BUG-2026-NIGHTMARE-ECLIPSE-YELLOWKEY",
2180
2235
  "CVE-2018-13374",
2236
+ "CVE-2021-36934",
2181
2237
  "CVE-2022-22960"
2182
2238
  ],
2183
2239
  "framework_controls_partially_addressing": [
@@ -2271,20 +2327,27 @@
2271
2327
  "kernel-lpe-triage"
2272
2328
  ],
2273
2329
  "evidence_cves": [
2330
+ "CVE-2008-2992",
2274
2331
  "CVE-2009-0563",
2275
2332
  "CVE-2009-1537",
2276
2333
  "CVE-2009-1862",
2334
+ "CVE-2009-3129",
2277
2335
  "CVE-2009-3953",
2278
2336
  "CVE-2010-1297",
2279
2337
  "CVE-2010-2883",
2338
+ "CVE-2010-3333",
2280
2339
  "CVE-2010-4344",
2281
2340
  "CVE-2010-4398",
2282
2341
  "CVE-2011-2462",
2283
2342
  "CVE-2012-0754",
2284
2343
  "CVE-2012-1889",
2285
2344
  "CVE-2012-2539",
2345
+ "CVE-2013-0640",
2286
2346
  "CVE-2013-0648",
2287
2347
  "CVE-2013-3163",
2348
+ "CVE-2013-3346",
2349
+ "CVE-2014-1761",
2350
+ "CVE-2014-4404",
2288
2351
  "CVE-2015-1642",
2289
2352
  "CVE-2015-2387",
2290
2353
  "CVE-2015-2419",
@@ -2300,11 +2363,14 @@
2300
2363
  "CVE-2016-4657",
2301
2364
  "CVE-2016-5198",
2302
2365
  "CVE-2016-7200",
2366
+ "CVE-2017-0144",
2303
2367
  "CVE-2017-0149",
2368
+ "CVE-2017-0222",
2304
2369
  "CVE-2017-8540",
2305
2370
  "CVE-2018-0172",
2306
2371
  "CVE-2018-17480",
2307
2372
  "CVE-2018-5002",
2373
+ "CVE-2018-8174",
2308
2374
  "CVE-2018-8373",
2309
2375
  "CVE-2019-11043",
2310
2376
  "CVE-2019-16928",
@@ -2315,6 +2381,7 @@
2315
2381
  "CVE-2020-1027",
2316
2382
  "CVE-2020-3837",
2317
2383
  "CVE-2020-9907",
2384
+ "CVE-2021-20038",
2318
2385
  "CVE-2021-22555",
2319
2386
  "CVE-2021-25372",
2320
2387
  "CVE-2021-30883",
@@ -2322,8 +2389,11 @@
2322
2389
  "CVE-2021-38406",
2323
2390
  "CVE-2021-39793",
2324
2391
  "CVE-2021-4034",
2392
+ "CVE-2022-0995",
2325
2393
  "CVE-2022-20700",
2326
2394
  "CVE-2022-20701",
2395
+ "CVE-2022-21882",
2396
+ "CVE-2022-22587",
2327
2397
  "CVE-2022-22675",
2328
2398
  "CVE-2022-2294",
2329
2399
  "CVE-2022-24521",
@@ -2384,7 +2454,8 @@
2384
2454
  "CVE-2026-3909",
2385
2455
  "CVE-2026-42945",
2386
2456
  "CVE-2026-43500",
2387
- "CVE-2026-46300"
2457
+ "CVE-2026-46300",
2458
+ "CVE-2026-53362"
2388
2459
  ],
2389
2460
  "framework_controls_partially_addressing": [
2390
2461
  "NIST-800-53-SI-10",
@@ -2462,6 +2533,8 @@
2462
2533
  "supply-chain-integrity"
2463
2534
  ],
2464
2535
  "evidence_cves": [
2536
+ "CVE-2014-6352",
2537
+ "CVE-2017-8570",
2465
2538
  "CVE-2025-32463",
2466
2539
  "CVE-2025-54136",
2467
2540
  "CVE-2025-64496",
@@ -2644,6 +2717,7 @@
2644
2717
  "CVE-2020-7796",
2645
2718
  "CVE-2021-21311",
2646
2719
  "CVE-2021-21973",
2720
+ "CVE-2021-21975",
2647
2721
  "CVE-2021-22054",
2648
2722
  "CVE-2021-22175",
2649
2723
  "CVE-2021-39935",
@@ -2662,7 +2736,8 @@
2662
2736
  "CVE-2025-61884",
2663
2737
  "CVE-2026-15409",
2664
2738
  "CVE-2026-20230",
2665
- "CVE-2026-22219"
2739
+ "CVE-2026-22219",
2740
+ "CVE-2026-64849"
2666
2741
  ],
2667
2742
  "framework_controls_partially_addressing": [
2668
2743
  "NIST-800-53-SC-7",
@@ -2744,6 +2819,7 @@
2744
2819
  "webapp-security"
2745
2820
  ],
2746
2821
  "evidence_cves": [
2822
+ "CVE-2020-13927",
2747
2823
  "CVE-2022-24706",
2748
2824
  "CVE-2023-27524",
2749
2825
  "CVE-2023-6448",
@@ -2897,6 +2973,7 @@
2897
2973
  "evidence_cves": [
2898
2974
  "CVE-2011-0411",
2899
2975
  "CVE-2015-1769",
2976
+ "CVE-2015-3246",
2900
2977
  "CVE-2026-31635"
2901
2978
  ],
2902
2979
  "last_verified": "2026-05-18",
@@ -2921,6 +2998,7 @@
2921
2998
  "CWE-826"
2922
2999
  ],
2923
3000
  "evidence_cves": [
3001
+ "CVE-2015-3246",
2924
3002
  "CVE-2020-17103-REREGRESSION-2026",
2925
3003
  "CVE-2022-48618",
2926
3004
  "CVE-2023-35311",
@@ -2948,7 +3026,8 @@
2948
3026
  "CWE-1392"
2949
3027
  ],
2950
3028
  "evidence_cves": [
2951
- "BUG-2026-NIGHTMARE-ECLIPSE-YELLOWKEY"
3029
+ "BUG-2026-NIGHTMARE-ECLIPSE-YELLOWKEY",
3030
+ "CVE-2026-55040"
2952
3031
  ],
2953
3032
  "last_verified": "2026-05-18",
2954
3033
  "notes": "Added v0.13.17 to back the YellowKey BitLocker TPM-only bypass entry. CWE-1390 captures the structural weakness of TPM-only BitLocker — the TPM unseals the VMK based on platform-state attestation alone, with no user-authentication component, so a boot-flow bypass can inherit the unsealed key without ever proving identity."
@@ -3014,6 +3093,7 @@
3014
3093
  "related_weaknesses": [],
3015
3094
  "evidence_cves": [
3016
3095
  "CVE-2020-5410",
3096
+ "CVE-2021-40870",
3017
3097
  "CVE-2024-27199",
3018
3098
  "CVE-2025-64446",
3019
3099
  "CVE-2026-34926"
@@ -3054,6 +3134,8 @@
3054
3134
  ],
3055
3135
  "related_weaknesses": [],
3056
3136
  "evidence_cves": [
3137
+ "CVE-2015-1130",
3138
+ "CVE-2015-5287",
3057
3139
  "CVE-2018-8440",
3058
3140
  "CVE-2019-0841",
3059
3141
  "CVE-2019-1064",
@@ -3064,6 +3146,7 @@
3064
3146
  "CVE-2019-1315",
3065
3147
  "CVE-2019-1385",
3066
3148
  "CVE-2020-0638",
3149
+ "CVE-2020-0787",
3067
3150
  "CVE-2020-36193",
3068
3151
  "CVE-2021-34484",
3069
3152
  "CVE-2021-41379",
@@ -3136,6 +3219,7 @@
3136
3219
  "related_weaknesses": [],
3137
3220
  "evidence_cves": [
3138
3221
  "CVE-2008-4250",
3222
+ "CVE-2011-1889",
3139
3223
  "CVE-2012-2034",
3140
3224
  "CVE-2013-0648",
3141
3225
  "CVE-2013-1690",
@@ -3174,6 +3258,8 @@
3174
3258
  "CVE-2019-0903",
3175
3259
  "CVE-2019-1297",
3176
3260
  "CVE-2019-8720",
3261
+ "CVE-2020-0796",
3262
+ "CVE-2021-22991",
3177
3263
  "CVE-2022-22706",
3178
3264
  "CVE-2023-33106",
3179
3265
  "CVE-2023-36033",
@@ -3187,7 +3273,8 @@
3187
3273
  "CVE-2025-7775",
3188
3274
  "CVE-2026-20700",
3189
3275
  "CVE-2026-34159",
3190
- "CVE-2026-3910"
3276
+ "CVE-2026-3910",
3277
+ "CVE-2026-8452"
3191
3278
  ],
3192
3279
  "last_verified": "2026-05-18",
3193
3280
  "notes": "Added v0.13.17 KEV bulk-import."
@@ -3206,9 +3293,11 @@
3206
3293
  ],
3207
3294
  "related_weaknesses": [],
3208
3295
  "evidence_cves": [
3296
+ "CVE-2004-0210",
3209
3297
  "CVE-2006-2492",
3210
3298
  "CVE-2007-5659",
3211
3299
  "CVE-2010-2572",
3300
+ "CVE-2013-0641",
3212
3301
  "CVE-2013-1331",
3213
3302
  "CVE-2016-0099",
3214
3303
  "CVE-2016-10174",
@@ -3247,6 +3336,7 @@
3247
3336
  "CVE-2013-2597",
3248
3337
  "CVE-2014-9163",
3249
3338
  "CVE-2018-5002",
3339
+ "CVE-2021-20038",
3250
3340
  "CVE-2021-27137",
3251
3341
  "CVE-2022-20699",
3252
3342
  "CVE-2022-20700",
@@ -3637,16 +3727,20 @@
3637
3727
  ],
3638
3728
  "related_weaknesses": [],
3639
3729
  "evidence_cves": [
3730
+ "CVE-2011-0611",
3731
+ "CVE-2012-0507",
3640
3732
  "CVE-2015-7645",
3641
3733
  "CVE-2016-4117",
3642
3734
  "CVE-2016-7201",
3643
3735
  "CVE-2017-0037",
3644
3736
  "CVE-2017-0213",
3737
+ "CVE-2017-0262",
3645
3738
  "CVE-2017-11292",
3646
3739
  "CVE-2017-5070",
3647
3740
  "CVE-2017-8291",
3648
3741
  "CVE-2018-17463",
3649
3742
  "CVE-2018-8298",
3743
+ "CVE-2019-0752",
3650
3744
  "CVE-2019-11707",
3651
3745
  "CVE-2019-8506",
3652
3746
  "CVE-2021-1789",
@@ -3837,7 +3931,8 @@
3837
3931
  "CVE-2025-24985",
3838
3932
  "CVE-2025-24993",
3839
3933
  "CVE-2025-32706",
3840
- "CVE-2026-22778"
3934
+ "CVE-2026-22778",
3935
+ "CVE-2026-53362"
3841
3936
  ],
3842
3937
  "last_verified": "2026-05-18",
3843
3938
  "notes": "Added v0.13.17 KEV bulk-import round 2."
@@ -3896,6 +3991,7 @@
3896
3991
  ],
3897
3992
  "related_weaknesses": [],
3898
3993
  "evidence_cves": [
3994
+ "CVE-2022-23131",
3899
3995
  "CVE-2022-24112",
3900
3996
  "CVE-2023-50224",
3901
3997
  "CVE-2024-4358",
@@ -4669,7 +4765,9 @@
4669
4765
  "CWE-2000"
4670
4766
  ],
4671
4767
  "related_weaknesses": [],
4672
- "evidence_cves": [],
4768
+ "evidence_cves": [
4769
+ "CVE-2010-0188"
4770
+ ],
4673
4771
  "last_verified": "2026-05-19",
4674
4772
  "notes": "Bulk-imported v0.13.18 from the canonical MITRE Top 25 + commonly-referenced-class expansion.",
4675
4773
  "_auto_imported": true,
@@ -4710,6 +4808,7 @@
4710
4808
  ],
4711
4809
  "related_weaknesses": [],
4712
4810
  "evidence_cves": [
4811
+ "CVE-2006-1547",
4713
4812
  "CVE-2010-0738",
4714
4813
  "CVE-2010-1428",
4715
4814
  "CVE-2018-19322"
@@ -4757,6 +4856,7 @@
4757
4856
  ],
4758
4857
  "related_weaknesses": [],
4759
4858
  "evidence_cves": [
4859
+ "CVE-2010-0232",
4760
4860
  "CVE-2018-0154",
4761
4861
  "CVE-2018-0155",
4762
4862
  "CVE-2020-7247",
@@ -5290,7 +5390,9 @@
5290
5390
  "CWE-2000"
5291
5391
  ],
5292
5392
  "related_weaknesses": [],
5293
- "evidence_cves": [],
5393
+ "evidence_cves": [
5394
+ "CVE-2018-8453"
5395
+ ],
5294
5396
  "last_verified": "2026-05-19",
5295
5397
  "notes": "Bulk-imported v0.13.18 from the canonical MITRE Top 25 + commonly-referenced-class expansion.",
5296
5398
  "_auto_imported": true,
@@ -5669,6 +5771,7 @@
5669
5771
  ],
5670
5772
  "skills_referencing": [],
5671
5773
  "evidence_cves": [
5774
+ "CVE-2022-24682",
5672
5775
  "CVE-2022-42948",
5673
5776
  "CVE-2024-38475",
5674
5777
  "CVE-2026-20245"
@@ -5925,6 +6028,7 @@
5925
6028
  ],
5926
6029
  "skills_referencing": [],
5927
6030
  "evidence_cves": [
6031
+ "CVE-2018-20250",
5928
6032
  "CVE-2024-13159",
5929
6033
  "CVE-2024-13160",
5930
6034
  "CVE-2024-13161",
@@ -6023,6 +6127,7 @@
6023
6127
  "related_attack_patterns_capec": [],
6024
6128
  "skills_referencing": [],
6025
6129
  "evidence_cves": [
6130
+ "CVE-2021-22017",
6026
6131
  "CVE-2022-43939"
6027
6132
  ]
6028
6133
  },
@@ -6062,6 +6167,7 @@
6062
6167
  ],
6063
6168
  "skills_referencing": [],
6064
6169
  "evidence_cves": [
6170
+ "CVE-2017-8464",
6065
6171
  "CVE-2022-23748"
6066
6172
  ],
6067
6173
  "framework_controls_partially_addressing": [
@@ -6373,6 +6479,7 @@
6373
6479
  ],
6374
6480
  "skills_referencing": [],
6375
6481
  "evidence_cves": [
6482
+ "CVE-2013-0632",
6376
6483
  "CVE-2022-22948"
6377
6484
  ],
6378
6485
  "framework_controls_partially_addressing": [
@@ -6451,7 +6558,8 @@
6451
6558
  "evidence_cves": [
6452
6559
  "CVE-2014-0502",
6453
6560
  "CVE-2018-4990",
6454
- "CVE-2021-22600"
6561
+ "CVE-2021-22600",
6562
+ "CVE-2026-33824"
6455
6563
  ],
6456
6564
  "framework_controls_partially_addressing": [
6457
6565
  "NIST-800-53-SI-16",
@@ -7242,6 +7350,7 @@
7242
7350
  ],
7243
7351
  "skills_referencing": [],
7244
7352
  "evidence_cves": [
7353
+ "CVE-2013-1675",
7245
7354
  "CVE-2022-0847"
7246
7355
  ],
7247
7356
  "framework_controls_partially_addressing": [