VULNERABILITY REMEDIATIONCVE remediation guides
Move from asset identification to supported remediation and post-change verification while keeping source evidence visible.
These defensive guides do not provide exploit reproduction or bypass instructions. 01Confirm exposure first
Match the product, version, installation path, and external exposure before treating a score as an action order.
02Prefer supported fixes
Use vendor advisories and supported update paths. An unverified fixed-version field stays visibly unresolved.
03Verify and retain rollback
Confirm version state, service health, access paths, logs, and rollback readiness after the change.
20,185 guide candidatesPage 869 of 1683
Review reviewHighResearch in progress
CVE-2026-50131fedify-dev fedify, vocab-runtime
- Affected
- >= >= 0.11.2, < 1.9.12, >= >= 1.10.0, < 1.10.11, >= >= 2.0.0, < 2.0.19, >= >= 2.1.0, < 2.1.15, >= >= 2.2.0, < 2.2.4
- Fixed
- No verified fixed-version field is available yet
Review reviewHighResearch in progress
CVE-2026-48110Eugeny russh
- Affected
- >= >= 0.34.0, < 0.61.0
- Fixed
- No verified fixed-version field is available yet
Review reviewHighResearch in progress
CVE-2026-46702Eugeny russh
- Affected
- >= >= 0.34.0, < 0.61.1
- Fixed
- No verified fixed-version field is available yet
Review reviewHighResearch in progress
CVE-2026-46689kanidm
- Affected
- < 1.9.3
- Fixed
- No verified fixed-version field is available yet
Review reviewHighResearch in progress
CVE-2026-46679libp2p js-libp2p
- Affected
- < 15.0.23
- Fixed
- No verified fixed-version field is available yet
Review reviewHighResearch in progress
CVE-2026-46673Eugeny russh
- Affected
- < 0.60.3
- Fixed
- No verified fixed-version field is available yet
Review reviewHighFixed-version data
CVE-2026-46669openvm-org openvm
- Affected
- < 1.6.0
- Fixed
- 1.6.0
Review reviewHighResearch in progress
CVE-2026-46654Plonky3
- Affected
- < 0.4.3, >= >= 0.5.0, < 0.5.3
- Fixed
- No verified fixed-version field is available yet
Review reviewHighResearch in progress
CVE-2026-46625js-cookie js-cookie, Cryostat 4 on RHEL 9, Red Hat Advanced Cluster Security for Kubernetes 4.10
- Affected
- < 3.0.7
- Fixed
- No verified fixed-version field is available yet
Review reviewHighFixed-version data
CVE-2026-46522ImageMagick ImageMagick, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 6
- Affected
- < 6.9.13-48, >= 7.0.0-0 < 7.1.2-23
- Fixed
- 6.9.13-48, 7.1.2-23
Review reviewHighFixed-version data
CVE-2026-46520ImageMagick ImageMagick, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 6
- Affected
- < 6.9.13-48, >= 7.0.0-0 < 7.1.2-23
- Fixed
- 6.9.13-48, 7.1.2-23
Review reviewHighResearch in progress
CVE-2026-45783libp2p js-libp2p
- Affected
- < 16.2.6
- Fixed
- No verified fixed-version field is available yet