npm - @blamejs/exceptd-skills - Versions diffs - 0.21.2 → 0.21.4 - Mend

@blamejs/exceptd-skills 0.21.2 → 0.21.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (19) hide show

package/CHANGELOG.md +16 -0
package/data/_indexes/_meta.json +8 -8
package/data/_indexes/activity-feed.json +16 -16
package/data/_indexes/catalog-summaries.json +9 -9
package/data/_indexes/chains.json +2 -2
package/data/attack-techniques.json +93 -4
package/data/cve-catalog.json +3542 -4
package/data/cwe-catalog.json +33 -1
package/data/framework-control-gaps.json +174 -2
package/data/zeroday-lessons.json +2662 -5
package/lib/cve-batch.js +32 -2
package/lib/cve-enrich.js +18 -1
package/lib/gap-detectors.js +64 -2
package/manifest.json +53 -53
package/package.json +2 -2
package/sbom.cdx.json +37 -37
package/scripts/audit-catalog-gaps.js +4 -12
package/scripts/check-catalog-gap-budget.js +6 -1
package/scripts/release.js +13 -5

package/data/framework-control-gaps.json CHANGED Viewed

@@ -856,6 +856,7 @@
       "CVE-2015-3043",
       "CVE-2015-3246",
       "CVE-2015-4495",
+      "CVE-2015-4852",
       "CVE-2015-5287",
       "CVE-2015-5317",
       "CVE-2015-6175",
@@ -921,6 +922,7 @@
       "CVE-2017-10271",
       "CVE-2017-11317",
       "CVE-2017-11357",
+      "CVE-2017-11774",
       "CVE-2017-12149",
       "CVE-2017-12231",
       "CVE-2017-12232",
@@ -1037,12 +1039,17 @@
       "CVE-2018-8589",
       "CVE-2018-8611",
       "CVE-2018-8639",
+      "CVE-2018-8653",
       "CVE-2019-0211",
       "CVE-2019-0344",
+      "CVE-2019-0541",
       "CVE-2019-0543",
+      "CVE-2019-0604",
       "CVE-2019-0676",
       "CVE-2019-0703",
+      "CVE-2019-0797",
       "CVE-2019-0841",
+      "CVE-2019-0863",
       "CVE-2019-0880",
       "CVE-2019-0903",
       "CVE-2019-1003029",
@@ -1058,6 +1065,7 @@
       "CVE-2019-1132",
       "CVE-2019-11580",
       "CVE-2019-11581",
+      "CVE-2019-1214",
       "CVE-2019-1253",
       "CVE-2019-1297",
       "CVE-2019-12989",
@@ -1069,11 +1077,13 @@
       "CVE-2019-1385",
       "CVE-2019-1388",
       "CVE-2019-1405",
+      "CVE-2019-1429",
       "CVE-2019-1458",
       "CVE-2019-15107",
       "CVE-2019-15271",
       "CVE-2019-15752",
       "CVE-2019-1579",
+      "CVE-2019-15949",
       "CVE-2019-16057",
       "CVE-2019-1652",
       "CVE-2019-1653",
@@ -1118,11 +1128,13 @@
       "CVE-2019-9875",
       "CVE-2020-0041",
       "CVE-2020-0069",
+      "CVE-2020-0601",
       "CVE-2020-0618",
       "CVE-2020-0638",
       "CVE-2020-0683",
       "CVE-2020-0787",
       "CVE-2020-0796",
+      "CVE-2020-0986",
       "CVE-2020-10148",
       "CVE-2020-1027",
       "CVE-2020-11023",
@@ -1130,8 +1142,12 @@
       "CVE-2020-11899",
       "CVE-2020-11978",
       "CVE-2020-13671",
+      "CVE-2020-1380",
       "CVE-2020-14644",
+      "CVE-2020-14750",
       "CVE-2020-14864",
+      "CVE-2020-14882",
+      "CVE-2020-14883",
       "CVE-2020-15069",
       "CVE-2020-15415",
       "CVE-2020-15505",
@@ -1155,6 +1171,7 @@
       "CVE-2020-25223",
       "CVE-2020-25506",
       "CVE-2020-2551",
+      "CVE-2020-2555",
       "CVE-2020-27932",
       "CVE-2020-27950",
       "CVE-2020-2883",
@@ -1180,6 +1197,8 @@
       "CVE-2020-5741",
       "CVE-2020-5902",
       "CVE-2020-6572",
+      "CVE-2020-6819",
+      "CVE-2020-6820",
       "CVE-2020-7247",
       "CVE-2020-7961",
       "CVE-2020-8193",
@@ -1187,6 +1206,7 @@
       "CVE-2020-8196",
       "CVE-2020-8218",
       "CVE-2020-8515",
+      "CVE-2020-8644",
       "CVE-2020-8816",
       "CVE-2020-9054",
       "CVE-2020-9377",
@@ -1250,6 +1270,8 @@
       "CVE-2021-26084",
       "CVE-2021-26085",
       "CVE-2021-26086",
+      "CVE-2021-27059",
+      "CVE-2021-27085",
       "CVE-2021-27101",
       "CVE-2021-27102",
       "CVE-2021-27103",
@@ -1259,6 +1281,7 @@
       "CVE-2021-27860",
       "CVE-2021-27876",
       "CVE-2021-27877",
+      "CVE-2021-28310",
       "CVE-2021-28663",
       "CVE-2021-28664",
       "CVE-2021-29256",
@@ -1285,6 +1308,9 @@
       "CVE-2021-31010",
       "CVE-2021-31166",
       "CVE-2021-31196",
+      "CVE-2021-31199",
+      "CVE-2021-31201",
+      "CVE-2021-31207",
       "CVE-2021-3156",
       "CVE-2021-31955",
       "CVE-2021-32030",
@@ -1302,6 +1328,7 @@
       "CVE-2021-36260",
       "CVE-2021-36380",
       "CVE-2021-36934",
+      "CVE-2021-36948",
       "CVE-2021-37415",
       "CVE-2021-37973",
       "CVE-2021-37975",
@@ -1311,6 +1338,8 @@
       "CVE-2021-38371",
       "CVE-2021-38406",
       "CVE-2021-38647",
+      "CVE-2021-38648",
+      "CVE-2021-38649",
       "CVE-2021-39226",
       "CVE-2021-39793",
       "CVE-2021-39935",
@@ -2114,6 +2143,7 @@
       "CVE-2026-87491",
       "CVE-2026-87886",
       "CVE-2026-9082",
+      "CVE-2026-93952",
       "CVE-2026-9586",
       "MAL-2025-AI-FOUND-FFMPEG-BIGSLEEP"
     ],
@@ -3068,6 +3098,7 @@
       "CVE-2016-7193",
       "CVE-2017-0059",
       "CVE-2017-0262",
+      "CVE-2017-11774",
       "CVE-2017-12233",
       "CVE-2017-12238",
       "CVE-2017-6737",
@@ -3075,6 +3106,7 @@
       "CVE-2018-0173",
       "CVE-2018-8406",
       "CVE-2019-1069",
+      "CVE-2019-18935",
       "CVE-2020-27950",
       "CVE-2020-3580",
       "CVE-2021-22991",
@@ -3230,6 +3262,7 @@
       "CVE-2013-5223",
       "CVE-2015-1427",
       "CVE-2015-3113",
+      "CVE-2015-4852",
       "CVE-2015-7450",
       "CVE-2016-0752",
       "CVE-2016-2386",
@@ -3685,12 +3718,17 @@
       "CVE-2018-8589",
       "CVE-2018-8611",
       "CVE-2018-8639",
+      "CVE-2018-8653",
       "CVE-2019-0193",
       "CVE-2019-0344",
+      "CVE-2019-0541",
       "CVE-2019-0543",
+      "CVE-2019-0604",
       "CVE-2019-0676",
       "CVE-2019-0752",
+      "CVE-2019-0797",
       "CVE-2019-0841",
+      "CVE-2019-0863",
       "CVE-2019-0880",
       "CVE-2019-1003029",
       "CVE-2019-10149",
@@ -3705,6 +3743,7 @@
       "CVE-2019-11634",
       "CVE-2019-11707",
       "CVE-2019-11708",
+      "CVE-2019-1214",
       "CVE-2019-1253",
       "CVE-2019-12989",
       "CVE-2019-1315",
@@ -3715,9 +3754,11 @@
       "CVE-2019-1385",
       "CVE-2019-1388",
       "CVE-2019-1405",
+      "CVE-2019-1429",
       "CVE-2019-1458",
       "CVE-2019-15271",
       "CVE-2019-1579",
+      "CVE-2019-15949",
       "CVE-2019-16057",
       "CVE-2019-16278",
       "CVE-2019-1652",
@@ -3767,13 +3808,16 @@
       "CVE-2020-0787",
       "CVE-2020-0796",
       "CVE-2020-0878",
+      "CVE-2020-0986",
       "CVE-2020-1027",
       "CVE-2020-11023",
       "CVE-2020-11261",
       "CVE-2020-12641",
       "CVE-2020-13671",
+      "CVE-2020-1380",
       "CVE-2020-13965",
       "CVE-2020-14644",
+      "CVE-2020-14750",
       "CVE-2020-15069",
       "CVE-2020-15505",
       "CVE-2020-15999",
@@ -3791,6 +3835,7 @@
       "CVE-2020-25223",
       "CVE-2020-25506",
       "CVE-2020-2551",
+      "CVE-2020-2555",
       "CVE-2020-27930",
       "CVE-2020-27932",
       "CVE-2020-2883",
@@ -3811,6 +3856,8 @@
       "CVE-2020-5902",
       "CVE-2020-6418",
       "CVE-2020-6572",
+      "CVE-2020-6819",
+      "CVE-2020-6820",
       "CVE-2020-7247",
       "CVE-2020-7796",
       "CVE-2020-8193",
@@ -3871,6 +3918,8 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27059",
+      "CVE-2021-27085",
       "CVE-2021-27102",
       "CVE-2021-27103",
       "CVE-2021-27104",
@@ -3878,6 +3927,7 @@
       "CVE-2021-27562",
       "CVE-2021-27860",
       "CVE-2021-27878",
+      "CVE-2021-28310",
       "CVE-2021-28550",
       "CVE-2021-28663",
       "CVE-2021-28664",
@@ -3905,6 +3955,9 @@
       "CVE-2021-30983",
       "CVE-2021-31010",
       "CVE-2021-31196",
+      "CVE-2021-31199",
+      "CVE-2021-31201",
+      "CVE-2021-31207",
       "CVE-2021-3129",
       "CVE-2021-3156",
       "CVE-2021-31955",
@@ -3914,11 +3967,13 @@
       "CVE-2021-33515",
       "CVE-2021-33739",
       "CVE-2021-33742",
+      "CVE-2021-34473",
       "CVE-2021-34484",
       "CVE-2021-35464",
       "CVE-2021-3560",
       "CVE-2021-36260",
       "CVE-2021-36380",
+      "CVE-2021-36948",
       "CVE-2021-37973",
       "CVE-2021-37975",
       "CVE-2021-37976",
@@ -3928,6 +3983,8 @@
       "CVE-2021-38371",
       "CVE-2021-38406",
       "CVE-2021-38647",
+      "CVE-2021-38648",
+      "CVE-2021-38649",
       "CVE-2021-39144",
       "CVE-2021-39935",
       "CVE-2021-4034",
@@ -4794,8 +4851,11 @@
       "CVE-2018-8120",
       "CVE-2018-8440",
       "CVE-2018-8611",
+      "CVE-2019-0604",
+      "CVE-2019-0797",
       "CVE-2019-10068",
       "CVE-2019-11580",
+      "CVE-2019-18935",
       "CVE-2019-19781",
       "CVE-2019-3929",
       "CVE-2019-6340",
@@ -5101,12 +5161,15 @@
       "CVE-2018-8405",
       "CVE-2018-8453",
       "CVE-2018-8611",
+      "CVE-2018-8653",
       "CVE-2019-0193",
       "CVE-2019-0211",
       "CVE-2019-0543",
       "CVE-2019-0676",
       "CVE-2019-0752",
+      "CVE-2019-0797",
       "CVE-2019-0841",
+      "CVE-2019-0863",
       "CVE-2019-0880",
       "CVE-2019-0903",
       "CVE-2019-10149",
@@ -5117,6 +5180,7 @@
       "CVE-2019-11580",
       "CVE-2019-11707",
       "CVE-2019-11708",
+      "CVE-2019-1214",
       "CVE-2019-1253",
       "CVE-2019-1297",
       "CVE-2019-12991",
@@ -5162,6 +5226,8 @@
       "CVE-2020-11261",
       "CVE-2020-11978",
       "CVE-2020-12641",
+      "CVE-2020-1380",
+      "CVE-2020-14883",
       "CVE-2020-15415",
       "CVE-2020-16009",
       "CVE-2020-16010",
@@ -5169,6 +5235,7 @@
       "CVE-2020-16017",
       "CVE-2020-25223",
       "CVE-2020-25506",
+      "CVE-2020-2555",
       "CVE-2020-27930",
       "CVE-2020-27932",
       "CVE-2020-27950",
@@ -5179,6 +5246,7 @@
       "CVE-2020-5741",
       "CVE-2020-6418",
       "CVE-2020-6572",
+      "CVE-2020-6819",
       "CVE-2020-7247",
       "CVE-2020-8218",
       "CVE-2020-8515",
@@ -5210,11 +5278,14 @@
       "CVE-2021-25394",
       "CVE-2021-25487",
       "CVE-2021-25489",
+      "CVE-2021-27059",
+      "CVE-2021-27085",
       "CVE-2021-27103",
       "CVE-2021-27104",
       "CVE-2021-27876",
       "CVE-2021-27877",
       "CVE-2021-27878",
+      "CVE-2021-28310",
       "CVE-2021-28550",
       "CVE-2021-28663",
       "CVE-2021-28664",
@@ -5238,16 +5309,22 @@
       "CVE-2021-30983",
       "CVE-2021-31010",
       "CVE-2021-31196",
+      "CVE-2021-31201",
+      "CVE-2021-31207",
       "CVE-2021-3129",
       "CVE-2021-31955",
       "CVE-2021-33739",
+      "CVE-2021-34473",
       "CVE-2021-3493",
       "CVE-2021-35464",
       "CVE-2021-36260",
       "CVE-2021-36934",
+      "CVE-2021-36948",
       "CVE-2021-38000",
       "CVE-2021-38163",
       "CVE-2021-38646",
+      "CVE-2021-38648",
+      "CVE-2021-38649",
       "CVE-2021-4034",
       "CVE-2021-40449",
       "CVE-2021-40450",
@@ -5930,8 +6007,10 @@
       "CVE-2020-0041",
       "CVE-2020-1027",
       "CVE-2020-11978",
+      "CVE-2020-14883",
       "CVE-2020-1631",
       "CVE-2020-1938",
+      "CVE-2020-2555",
       "CVE-2020-3118",
       "CVE-2020-3161",
       "CVE-2020-3837",
@@ -6151,7 +6230,9 @@
       "CVE-2016-5198",
       "CVE-2017-0263",
       "CVE-2018-19321",
+      "CVE-2019-0797",
       "CVE-2019-7287",
+      "CVE-2020-0986",
       "CVE-2020-17087",
       "CVE-2021-1782",
       "CVE-2021-22600",
@@ -6218,6 +6299,7 @@
       "CVE-2015-2051",
       "CVE-2015-3035",
       "CVE-2015-4068",
+      "CVE-2015-4852",
       "CVE-2016-10174",
       "CVE-2016-11021",
       "CVE-2016-3718",
@@ -6489,6 +6571,7 @@
     "opened_date": "2026-04-01",
     "evidence_cves": [
       "CVE-2014-0160",
+      "CVE-2020-0601",
       "CVE-2022-27924",
       "CVE-2025-39682",
       "CVE-2025-47729",
@@ -6686,6 +6769,7 @@
       "CVE-2026-83549",
       "CVE-2026-85706",
       "CVE-2026-9082",
+      "CVE-2026-93952",
       "CVE-2026-9586"
     ],
     "atlas_refs": [
@@ -6887,6 +6971,7 @@
       "CVE-2015-3246",
       "CVE-2015-4068",
       "CVE-2015-4495",
+      "CVE-2015-4852",
       "CVE-2015-4902",
       "CVE-2015-5119",
       "CVE-2015-5122",
@@ -6949,6 +7034,7 @@
       "CVE-2017-1000486",
       "CVE-2017-11292",
       "CVE-2017-11317",
+      "CVE-2017-11774",
       "CVE-2017-11826",
       "CVE-2017-12233",
       "CVE-2017-12240",
@@ -7034,10 +7120,15 @@
       "CVE-2018-8581",
       "CVE-2018-8611",
       "CVE-2018-8639",
+      "CVE-2018-8653",
       "CVE-2019-0344",
+      "CVE-2019-0541",
       "CVE-2019-0543",
+      "CVE-2019-0604",
       "CVE-2019-0703",
+      "CVE-2019-0797",
       "CVE-2019-0841",
+      "CVE-2019-0863",
       "CVE-2019-0903",
       "CVE-2019-1064",
       "CVE-2019-1068",
@@ -7052,6 +7143,7 @@
       "CVE-2019-11634",
       "CVE-2019-11707",
       "CVE-2019-11708",
+      "CVE-2019-1214",
       "CVE-2019-1253",
       "CVE-2019-1297",
       "CVE-2019-12989",
@@ -7063,6 +7155,7 @@
       "CVE-2019-13720",
       "CVE-2019-1385",
       "CVE-2019-1405",
+      "CVE-2019-1429",
       "CVE-2019-1458",
       "CVE-2019-15107",
       "CVE-2019-15271",
@@ -7072,6 +7165,7 @@
       "CVE-2019-16920",
       "CVE-2019-16928",
       "CVE-2019-18426",
+      "CVE-2019-18935",
       "CVE-2019-19006",
       "CVE-2019-19781",
       "CVE-2019-20500",
@@ -7114,8 +7208,10 @@
       "CVE-2020-11023",
       "CVE-2020-11261",
       "CVE-2020-12641",
+      "CVE-2020-1380",
       "CVE-2020-13965",
       "CVE-2020-14644",
+      "CVE-2020-14750",
       "CVE-2020-15415",
       "CVE-2020-15999",
       "CVE-2020-16009",
@@ -7132,6 +7228,7 @@
       "CVE-2020-2509",
       "CVE-2020-25506",
       "CVE-2020-2551",
+      "CVE-2020-2555",
       "CVE-2020-27930",
       "CVE-2020-27932",
       "CVE-2020-2883",
@@ -7150,6 +7247,8 @@
       "CVE-2020-5902",
       "CVE-2020-6418",
       "CVE-2020-6572",
+      "CVE-2020-6819",
+      "CVE-2020-6820",
       "CVE-2020-7247",
       "CVE-2020-7796",
       "CVE-2020-8193",
@@ -7206,12 +7305,15 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27059",
+      "CVE-2021-27085",
       "CVE-2021-27102",
       "CVE-2021-27103",
       "CVE-2021-27137",
       "CVE-2021-27852",
       "CVE-2021-27860",
       "CVE-2021-27876",
+      "CVE-2021-28310",
       "CVE-2021-28663",
       "CVE-2021-28799",
       "CVE-2021-30533",
@@ -7237,6 +7339,9 @@
       "CVE-2021-31010",
       "CVE-2021-31166",
       "CVE-2021-31196",
+      "CVE-2021-31199",
+      "CVE-2021-31201",
+      "CVE-2021-31207",
       "CVE-2021-3129",
       "CVE-2021-3156",
       "CVE-2021-31955",
@@ -7245,11 +7350,13 @@
       "CVE-2021-33515",
       "CVE-2021-33739",
       "CVE-2021-33742",
+      "CVE-2021-34473",
       "CVE-2021-34484",
       "CVE-2021-34486",
       "CVE-2021-35464",
       "CVE-2021-36260",
       "CVE-2021-36380",
+      "CVE-2021-36948",
       "CVE-2021-37975",
       "CVE-2021-37976",
       "CVE-2021-38000",
@@ -7258,6 +7365,8 @@
       "CVE-2021-38371",
       "CVE-2021-38406",
       "CVE-2021-38646",
+      "CVE-2021-38648",
+      "CVE-2021-38649",
       "CVE-2021-39144",
       "CVE-2021-39793",
       "CVE-2021-39935",
@@ -9220,6 +9329,7 @@
       "CVE-2016-7836",
       "CVE-2017-0001",
       "CVE-2017-0213",
+      "CVE-2017-11774",
       "CVE-2017-5521",
       "CVE-2017-5689",
       "CVE-2017-6743",
@@ -9249,6 +9359,7 @@
       "CVE-2020-0787",
       "CVE-2020-12812",
       "CVE-2020-13927",
+      "CVE-2020-14882",
       "CVE-2020-2021",
       "CVE-2020-24363",
       "CVE-2020-2506",
@@ -9256,6 +9367,7 @@
       "CVE-2020-3259",
       "CVE-2020-3433",
       "CVE-2020-4427",
+      "CVE-2020-8644",
       "CVE-2020-8816",
       "CVE-2020-9934",
       "CVE-2021-1871",
@@ -9279,6 +9391,7 @@
       "CVE-2021-35587",
       "CVE-2021-36934",
       "CVE-2021-37415",
+      "CVE-2021-38648",
       "CVE-2021-40870",
       "CVE-2021-42278",
       "CVE-2021-42287",
@@ -9508,6 +9621,7 @@
       "CVE-2018-14933",
       "CVE-2018-19320",
       "CVE-2018-8406",
+      "CVE-2019-0604",
       "CVE-2019-1069",
       "CVE-2019-19781",
       "CVE-2019-2616",
@@ -9516,6 +9630,7 @@
       "CVE-2019-7483",
       "CVE-2020-10148",
       "CVE-2020-13965",
+      "CVE-2020-14883",
       "CVE-2020-17087",
       "CVE-2020-27950",
       "CVE-2020-3452",
@@ -9633,6 +9748,7 @@
       "CVE-2018-7600",
       "CVE-2018-8440",
       "CVE-2019-0703",
+      "CVE-2019-18935",
       "CVE-2020-2509",
       "CVE-2021-20038",
       "CVE-2021-21166",
@@ -10850,6 +10966,7 @@
       "CVE-2017-0059",
       "CVE-2017-0213",
       "CVE-2017-11292",
+      "CVE-2017-11774",
       "CVE-2017-12637",
       "CVE-2017-3066",
       "CVE-2017-6740",
@@ -10869,6 +10986,7 @@
       "CVE-2018-8639",
       "CVE-2018-9276",
       "CVE-2019-0344",
+      "CVE-2019-0541",
       "CVE-2019-1064",
       "CVE-2019-10758",
       "CVE-2019-11001",
@@ -10883,11 +11001,13 @@
       "CVE-2019-9874",
       "CVE-2019-9875",
       "CVE-2020-0069",
+      "CVE-2020-0986",
       "CVE-2020-11023",
       "CVE-2020-13671",
       "CVE-2020-13927",
       "CVE-2020-14644",
       "CVE-2020-14864",
+      "CVE-2020-14882",
       "CVE-2020-15069",
       "CVE-2020-17087",
       "CVE-2020-2506",
@@ -10897,6 +11017,7 @@
       "CVE-2020-3259",
       "CVE-2020-5410",
       "CVE-2020-7796",
+      "CVE-2020-8644",
       "CVE-2020-8655",
       "CVE-2021-22205",
       "CVE-2021-23874",
@@ -10905,6 +11026,7 @@
       "CVE-2021-25371",
       "CVE-2021-25395",
       "CVE-2021-26086",
+      "CVE-2021-31199",
       "CVE-2021-3156",
       "CVE-2021-32030",
       "CVE-2021-33742",
@@ -11353,9 +11475,11 @@
       "CVE-2019-3396",
       "CVE-2019-7192",
       "CVE-2019-7238",
+      "CVE-2020-14882",
       "CVE-2020-2506",
       "CVE-2020-29574",
       "CVE-2020-8193",
+      "CVE-2020-8644",
       "CVE-2020-9934",
       "CVE-2021-20090",
       "CVE-2021-25337",
@@ -11578,6 +11702,7 @@
       "CVE-2019-1388",
       "CVE-2019-1458",
       "CVE-2019-15752",
+      "CVE-2019-15949",
       "CVE-2019-16928",
       "CVE-2019-19006",
       "CVE-2019-3010",
@@ -11609,6 +11734,8 @@
       "CVE-2021-3493",
       "CVE-2021-3560",
       "CVE-2021-36934",
+      "CVE-2021-38648",
+      "CVE-2021-38649",
       "CVE-2021-4034",
       "CVE-2021-40407",
       "CVE-2021-40449",
@@ -12329,6 +12456,7 @@
       "CVE-2015-3113",
       "CVE-2015-3246",
       "CVE-2015-4495",
+      "CVE-2015-4852",
       "CVE-2015-4902",
       "CVE-2015-5119",
       "CVE-2015-5287",
@@ -12491,13 +12619,17 @@
       "CVE-2018-8589",
       "CVE-2018-8611",
       "CVE-2018-8639",
+      "CVE-2018-8653",
       "CVE-2019-0193",
       "CVE-2019-0211",
       "CVE-2019-0344",
+      "CVE-2019-0541",
       "CVE-2019-0543",
       "CVE-2019-0676",
       "CVE-2019-0752",
+      "CVE-2019-0797",
       "CVE-2019-0841",
+      "CVE-2019-0863",
       "CVE-2019-0880",
       "CVE-2019-0903",
       "CVE-2019-10068",
@@ -12514,6 +12646,7 @@
       "CVE-2019-11634",
       "CVE-2019-11707",
       "CVE-2019-11708",
+      "CVE-2019-1214",
       "CVE-2019-1253",
       "CVE-2019-1297",
       "CVE-2019-12989",
@@ -12525,11 +12658,13 @@
       "CVE-2019-13720",
       "CVE-2019-1385",
       "CVE-2019-1388",
+      "CVE-2019-1429",
       "CVE-2019-1458",
       "CVE-2019-15107",
       "CVE-2019-15271",
       "CVE-2019-15752",
       "CVE-2019-1579",
+      "CVE-2019-15949",
       "CVE-2019-16057",
       "CVE-2019-16278",
       "CVE-2019-1652",
@@ -12568,18 +12703,22 @@
       "CVE-2019-9875",
       "CVE-2020-0041",
       "CVE-2020-0069",
+      "CVE-2020-0601",
       "CVE-2020-0618",
       "CVE-2020-0638",
       "CVE-2020-0683",
       "CVE-2020-0796",
       "CVE-2020-0878",
+      "CVE-2020-0986",
       "CVE-2020-1027",
       "CVE-2020-11023",
       "CVE-2020-11261",
       "CVE-2020-11978",
       "CVE-2020-12641",
       "CVE-2020-13671",
+      "CVE-2020-1380",
       "CVE-2020-14644",
+      "CVE-2020-14750",
       "CVE-2020-14864",
       "CVE-2020-15069",
       "CVE-2020-15415",
@@ -12602,6 +12741,7 @@
       "CVE-2020-25223",
       "CVE-2020-25506",
       "CVE-2020-2551",
+      "CVE-2020-2555",
       "CVE-2020-27930",
       "CVE-2020-27932",
       "CVE-2020-28949",
@@ -12626,6 +12766,8 @@
       "CVE-2020-5902",
       "CVE-2020-6418",
       "CVE-2020-6572",
+      "CVE-2020-6819",
+      "CVE-2020-6820",
       "CVE-2020-7247",
       "CVE-2020-7796",
       "CVE-2020-7961",
@@ -12688,10 +12830,13 @@
       "CVE-2021-26086",
       "CVE-2021-26828",
       "CVE-2021-26829",
+      "CVE-2021-27059",
+      "CVE-2021-27085",
       "CVE-2021-27103",
       "CVE-2021-27137",
       "CVE-2021-27562",
       "CVE-2021-27860",
+      "CVE-2021-28310",
       "CVE-2021-28550",
       "CVE-2021-28663",
       "CVE-2021-28664",
@@ -12718,12 +12863,16 @@
       "CVE-2021-30983",
       "CVE-2021-31010",
       "CVE-2021-31196",
+      "CVE-2021-31199",
+      "CVE-2021-31201",
+      "CVE-2021-31207",
       "CVE-2021-3129",
       "CVE-2021-3156",
       "CVE-2021-31955",
       "CVE-2021-33515",
       "CVE-2021-33739",
       "CVE-2021-33742",
+      "CVE-2021-34473",
       "CVE-2021-34484",
       "CVE-2021-3493",
       "CVE-2021-35247",
@@ -12732,6 +12881,7 @@
       "CVE-2021-3560",
       "CVE-2021-36260",
       "CVE-2021-36380",
+      "CVE-2021-36948",
       "CVE-2021-37975",
       "CVE-2021-38000",
       "CVE-2021-38003",
@@ -12740,6 +12890,7 @@
       "CVE-2021-38406",
       "CVE-2021-38646",
       "CVE-2021-38647",
+      "CVE-2021-38649",
       "CVE-2021-39144",
       "CVE-2021-39793",
       "CVE-2021-39935",
@@ -13484,6 +13635,7 @@
       "CVE-2026-87886",
       "CVE-2026-9082",
       "CVE-2026-9198",
+      "CVE-2026-93952",
       "CVE-2026-9586",
       "MAL-2024-PYPI-ULTRALYTICS-XMRIG",
       "MAL-2025-AI-FOUND-FFMPEG-BIGSLEEP",
@@ -13529,9 +13681,13 @@
       "CVE-2013-0625",
       "CVE-2013-0632",
       "CVE-2019-17558",
+      "CVE-2020-14882",
       "CVE-2020-2021",
+      "CVE-2020-2555",
+      "CVE-2020-8644",
       "CVE-2021-33044",
       "CVE-2021-33045",
+      "CVE-2021-34473",
       "CVE-2022-20700",
       "CVE-2022-26925",
       "CVE-2023-33246",
@@ -13860,7 +14016,9 @@
       "CVE-2018-20753",
       "CVE-2018-8581",
       "CVE-2020-10148",
+      "CVE-2020-14882",
       "CVE-2020-2506",
+      "CVE-2020-8644",
       "CVE-2021-22506",
       "CVE-2021-25337",
       "CVE-2021-27876",
@@ -14210,6 +14368,7 @@
       "CVE-2015-1187",
       "CVE-2015-1635",
       "CVE-2015-2051",
+      "CVE-2015-4852",
       "CVE-2015-7755",
       "CVE-2016-10174",
       "CVE-2016-20017",
@@ -14252,6 +14411,7 @@
       "CVE-2019-0703",
       "CVE-2019-10068",
       "CVE-2019-12989",
+      "CVE-2019-15949",
       "CVE-2019-1652",
       "CVE-2019-1653",
       "CVE-2019-19006",
@@ -14261,8 +14421,10 @@
       "CVE-2019-7256",
       "CVE-2019-7483",
       "CVE-2019-7609",
+      "CVE-2020-0601",
       "CVE-2020-0796",
       "CVE-2020-13965",
+      "CVE-2020-14750",
       "CVE-2020-15505",
       "CVE-2020-17519",
       "CVE-2020-1938",
@@ -14504,6 +14666,7 @@
       "CVE-2026-76461",
       "CVE-2026-83548",
       "CVE-2026-83549",
+      "CVE-2026-93952",
       "CVE-2026-9586"
     ],
     "atlas_refs": [],
@@ -14613,7 +14776,9 @@
     "real_requirement": "Scanning evidence must show coverage of the KEV-listed vulnerabilities relevant to the estate, with a named alternative check (a version query, a vendor script, a manual inspection) wherever no scanner signature exists, and must link each finding to the patching deadline it falls under.",
     "status": "open",
     "opened_date": "2026-05-18",
-    "evidence_cves": [],
+    "evidence_cves": [
+      "CVE-2019-18935"
+    ],
     "forward_looking": true,
     "forward_looking_reason": "No CVE in the catalog anchors this gap yet; it records the control class without binding it to a single incident.",
     "atlas_refs": [],
@@ -15185,7 +15350,8 @@
       "CVE-2025-8671",
       "CVE-2026-48939",
       "CVE-2026-67277",
-      "CVE-2026-7482"
+      "CVE-2026-7482",
+      "CVE-2026-93952"
     ],
     "theater_test": {
       "claim": "We are compliant with A.8.9 (Configuration management) because we follow the documented requirement: Annex A.8.9 — establishing, documenting, implementing, monitoring, and reviewing configurations of hardware, software, services, and networks. Anchored on a documented baseline and continuous monitori",
@@ -15250,6 +15416,7 @@
       "CVE-2017-11317",
       "CVE-2018-13374",
       "CVE-2018-15811",
+      "CVE-2020-0601",
       "CVE-2022-26923",
       "CVE-2022-41125",
       "CVE-2024-43451",
@@ -15695,6 +15862,7 @@
       "CVE-2018-7445",
       "CVE-2019-0703",
       "CVE-2019-7483",
+      "CVE-2020-14883",
       "CVE-2022-22947",
       "CVE-2024-12450",
       "CVE-2025-22224",
@@ -16455,9 +16623,11 @@
       "CVE-2018-5430",
       "CVE-2018-7841",
       "CVE-2018-8414",
+      "CVE-2019-0604",
       "CVE-2019-1069",
       "CVE-2019-11581",
       "CVE-2019-1315",
+      "CVE-2019-1429",
       "CVE-2019-16278",
       "CVE-2019-16920",
       "CVE-2019-5786",
@@ -16467,6 +16637,7 @@
       "CVE-2020-17463",
       "CVE-2020-17530",
       "CVE-2020-1956",
+      "CVE-2020-6820",
       "CVE-2020-9934",
       "CVE-2021-1647",
       "CVE-2021-1870",
@@ -16634,6 +16805,7 @@
       "CVE-2021-30713",
       "CVE-2021-30869",
       "CVE-2021-30883",
+      "CVE-2021-36948",
       "CVE-2021-37973",
       "CVE-2021-37976",
       "CVE-2021-38003",