Weekly Threat Summary: 2026-W03

Weekly Threat Summary 2026-W03 — 9 items tracked

9 CVEs 1 KEV EPSS avg 0.3357

Lane Breakdown

1 on-fire 8 background

Top CVEs by EPSS

CVE-2023-44487 KEV

1.0000EPSS

Exploit-DB: HTTP/2 2.0 - Denial Of Service (DOS)

CVSS 7.5

CVE-2025-58183

0.0038EPSS

A flaw was found in the archive/tar package in the Go standard library. tar.R...

CVSS 7.5

CVE-2025-47907

0.0033EPSS

A flaw was found in database/sql. Concurrent queries can produce unexpected r...

CVSS 7

CVE-2025-9288

A vulnerability was found in sha.js, where the hashing implementation does no...

CVSS 7.7

CVE-2022-21698

A denial of service attack was found in prometheus/client_golang. This flaw a...

CVSS 7.5

CVE-2025-9287

An improper input validation vulnerability was found in the cipher-base npm p...

CVSS 7.5

CVE-2025-30204

A flaw was found in the golang-jwt implementation of JSON Web Tokens (JWT). I...

CVSS 7.5

CVE-2025-7195

Early versions of Operator-SDK provided an insecure method to allow operator ...

CVSS 6.4

CVE-2024-24786

A flaw was found in Golang's protobuf module, where the unmarshal function ca...

CVSS 5.9

CISA KEV Additions

CVE-2023-44487 KEV

Exploit-DB: HTTP/2 2.0 - Denial Of Service (DOS)