diff --git a/.kiro/specs/learning-harness/tasks.md b/.kiro/specs/learning-harness/tasks.md index 5be03ac..0740a8c 100644 --- a/.kiro/specs/learning-harness/tasks.md +++ b/.kiro/specs/learning-harness/tasks.md @@ -136,7 +136,7 @@ - _Depends: 3.7, 3.8_ - _Requirements: 11.1, 11.4_ -- [ ] 4. Corpus repairs +- [x] 4. Corpus repairs - [x] 4.1 Re-harvest absence rows with registration context - Absence rows in vibe-py and agent-vfc gain their family and the handler-context mode in the recipes; the maintainer re-harvests them over the network; every re-harvested excerpt keeps its license line, passes redaction and keeps the decorators and registration statements; failed fetches keep the old excerpt with a recorded reason; catalogs regenerate idempotently. - Observable: the vampi and threatbyte excerpts contain their registration lines, the entry-point mapper names their handlers, and the catalogs load with unchanged vendored counts. @@ -149,7 +149,7 @@ - _Depends: 4.1_ - _Requirements: 10.3, 10.4_ -- [ ] 4.3 Fix dates and the post-cutoff slice +- [x] 4.3 Fix dates and the post-cutoff slice - Catalog rows gain a fix date populated by the catalog generator from recipe metadata where available; rows without a date are counted separately; rows dated after the configured detector cutoff form a separately reported slice in every scoreboard. - Observable: the scoreboard shows the post-cutoff slice with its own counts, the cutoff date it used and the undated count. - _Depends: 1.3, 2.4_ @@ -236,3 +236,4 @@ - Task 4.2 (2026-09-06, RED first: 2 failing tests in `tests/test_fixture_difficulty.py`, and the check's own arm — `test_the_check_catches_a_fixture_that_is_easier_on_one_axis` — fails if the fixture hardening is reverted). Two parts: - **The five twins declare their limit.** A content hash is evidence; the catalog row is the maintainer standing behind it, and without one a re-harvest that changes a byte turns a known-unscorable row back into a scored one with no review. A declared limit that names one of the vocabulary's own reasons keeps that spelling, so `identical_twin` declared and `identical_twin` computed stay one fact instead of splitting across two buckets in every aggregation. `semantic.seed._skip_reason` was reordered for the same reason: an unscorable row reports `unscorable:` before either the known-limit or the split branch can claim it. Consequence, recorded because it moves a published number: leave-one-out over vibe-py now runs on **30 rows, not 35** — a pair whose two sides are the same code cannot be held out against itself. - **The fixture-difficulty check** (`learning/difficulty.py`), on three axes the corpus really varies on: binding hops from the identity source to the constrained use, registration distance (0 decorator on the handler, 1 statement elsewhere in the file, 2 another document), and guard distance (0 decorator, 1 call in the body, 2 nothing visible). The comparison is per axis over the whole set, because a suite covers a bug shape with several handlers between them. **Measured first, and it failed: the shared obligations fixture reached (1, 0, 2) where the vibe-py absence rows reach (5, 2, 2).** Every shared handler carried its own route decorator, so nothing in the suite exercised a handler registered from another document and no chain was longer than one binding — the checker was passing on a simpler world than the one it meets. `from_spec` was added to the fixture: the connexion shape those rows really have, a token validated by a call rather than a decorator and five bindings between the token and the constraint. The verdict is committed as `benchmarks/measurements/2026-09-06-fixture-difficulty.json` with both reaches and the history of the first measurement. One existing expectation moved with it (`from_spec` reads the user row and then the book: two real operations). +- Task 4.3 (2026-09-06, RED first: 10 failing tests in `tests/test_learning_cutoff.py`; then green, 11). The catalog generator fills `fix_date` from the recipe at the precision the recipe has: a full ISO day when one was recorded, otherwise the year. Every harvested recipe carries a year and almost none carries a day, and writing `-01-01` would turn a year into a claim about a month. A row therefore counts as post-cutoff only when its **earliest possible** date is after the cutoff, so a coarse date can under-claim the clean slice but never over-claim it — and over-claiming is the direction that would turn contamination into a result. `PairFamilyScore` carries the date, `aggregate(cutoff=...)` reports the same numbers over the post-cutoff rows beside the whole number and never instead of it, undated rows are counted on their own, and `publish` prints the slice with the cutoff it used. Without a configured cutoff every scoreboard says so rather than inventing one; `[learning].cutoff_date` has no default because guessing a model's training cutoff and publishing a contamination number from the guess would be worse than reporting none. Corpus dates as harvested: vibe-py all 2026, agent-vfc 67 of 69 in 2026, vfc spread 2014-2026, vfc-js 2014-2021. diff --git a/benchmarks/pairs/agent-vfc/catalog.toml b/benchmarks/pairs/agent-vfc/catalog.toml index 7407649..5a65a5d 100644 --- a/benchmarks/pairs/agent-vfc/catalog.toml +++ b/benchmarks/pairs/agent-vfc/catalog.toml @@ -25,6 +25,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-16" @@ -56,6 +57,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" @@ -85,6 +87,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-918" @@ -114,6 +117,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-918" @@ -145,6 +149,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -176,6 +181,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-16" @@ -208,6 +214,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-862" @@ -239,6 +246,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-16" @@ -268,6 +276,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-16" @@ -299,6 +308,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-639" @@ -330,6 +340,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-16" @@ -361,6 +372,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-16" @@ -390,6 +402,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-22" @@ -421,6 +434,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-862" @@ -450,6 +464,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-1321" @@ -481,6 +496,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-22" @@ -513,6 +529,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" @@ -542,6 +559,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-1321" @@ -571,6 +589,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-1321" @@ -602,6 +621,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -633,6 +653,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-16" @@ -664,6 +685,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -695,6 +717,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-798" @@ -726,6 +749,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-22" @@ -758,6 +782,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-22" @@ -789,6 +814,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -820,6 +846,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" @@ -852,6 +879,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -882,6 +910,7 @@ provenance = "agent" split = "holdout" review_tier = "title" known_limit = "client_side_caller" +fix_date = "2026" [[pair.expected]] cwe = "CWE-862" @@ -912,6 +941,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -941,6 +971,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-16" @@ -970,6 +1001,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-16" @@ -999,6 +1031,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-1321" @@ -1028,6 +1061,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-1321" @@ -1059,6 +1093,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-16" @@ -1088,6 +1123,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-16" @@ -1117,6 +1153,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-918" @@ -1148,6 +1185,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-798" @@ -1179,6 +1217,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-22" @@ -1209,6 +1248,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-639" @@ -1239,6 +1279,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-639" @@ -1269,6 +1310,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.context]] relpath = "services/web/app/src/router.mjs" @@ -1304,6 +1346,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-1321" @@ -1333,6 +1376,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-1321" @@ -1363,6 +1407,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-16" @@ -1394,6 +1439,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" @@ -1426,6 +1472,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2025" [[pair.expected]] cwe = "CWE-601" @@ -1457,6 +1504,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-918" @@ -1486,6 +1534,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-639" @@ -1516,6 +1565,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-639" @@ -1548,6 +1598,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -1577,6 +1628,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-78" @@ -1608,6 +1660,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-639" @@ -1637,6 +1690,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-22" @@ -1668,6 +1722,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-16" @@ -1697,6 +1752,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-22" @@ -1726,6 +1782,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-918" @@ -1755,6 +1812,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" @@ -1784,6 +1842,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "title" +fix_date = "2026" [[pair.expected]] cwe = "CWE-16" diff --git a/benchmarks/pairs/catalog_gen.py b/benchmarks/pairs/catalog_gen.py index 1e9b843..f673cbe 100644 --- a/benchmarks/pairs/catalog_gen.py +++ b/benchmarks/pairs/catalog_gen.py @@ -93,6 +93,9 @@ def catalog_text(slice_name: str, recipes: list[dict[str, object]]) -> str: lines.append(f'reviewer = "{_q(reviewer)}"') if recipe.get("known_limit"): lines.append(f'known_limit = "{_q(recipe["known_limit"])}"') + fix_date = _fix_date(recipe) + if fix_date: + lines.append(f'fix_date = "{_q(fix_date)}"') # Req 10.5: the post-cutoff slice needs a date to sort by for relpath, context_vuln, context_fixed in context_rel(recipe): lines += [ "", @@ -123,6 +126,19 @@ def catalog_text(slice_name: str, recipes: list[dict[str, object]]) -> str: return "\n".join(lines) +def _fix_date(recipe: dict[str, object]) -> str: + """The date of the fix at the precision the recipe recorded it: a full ISO day, or the year, or nothing. + + Every harvested recipe carries a year; almost none carries a day, and inventing `-01-01` would turn a year into + a claim about a month. The post-cutoff comparison reads the earliest possible date of whatever precision is + here, so a coarse date can only ever under-claim (learning-harness Req 10.5).""" + recorded = str(recipe.get("fix_date", "") or "") + if recorded: + return recorded + year = recipe.get("year") + return str(year) if isinstance(year, int) and 1990 <= year <= 2100 else "" + + _DEFAULT_TIER = {"vibe-py": "seeded", "vfc-js": "advisory", "agent-vfc": "title", "vfc": "advisory", "sast": "advisory"} diff --git a/benchmarks/pairs/vfc-js/catalog.toml b/benchmarks/pairs/vfc-js/catalog.toml index c71227a..7e18688 100644 --- a/benchmarks/pairs/vfc-js/catalog.toml +++ b/benchmarks/pairs/vfc-js/catalog.toml @@ -23,6 +23,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "advisory" +fix_date = "2018" [[pair.expected]] cwe = "CWE-22" @@ -53,6 +54,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "advisory" +fix_date = "2018" [[pair.expected]] cwe = "CWE-78" @@ -83,6 +85,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "advisory" +fix_date = "2020" [[pair.expected]] cwe = "CWE-78" @@ -113,6 +116,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "advisory" +fix_date = "2020" [[pair.expected]] cwe = "CWE-78" @@ -143,6 +147,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "advisory" +fix_date = "2020" [[pair.expected]] cwe = "CWE-78" @@ -173,6 +178,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "advisory" +fix_date = "2014" [[pair.expected]] cwe = "CWE-78" @@ -203,6 +209,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "advisory" +fix_date = "2018" [[pair.expected]] cwe = "CWE-22" @@ -232,6 +239,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "advisory" +fix_date = "2019" [[pair.expected]] cwe = "CWE-78" @@ -261,6 +269,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "advisory" +fix_date = "2018" [[pair.expected]] cwe = "CWE-78" @@ -290,6 +299,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "advisory" +fix_date = "2018" [[pair.expected]] cwe = "CWE-78" @@ -320,6 +330,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "advisory" +fix_date = "2017" [[pair.expected]] cwe = "CWE-78" @@ -350,6 +361,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-78" @@ -380,6 +392,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "advisory" +fix_date = "2019" [[pair.expected]] cwe = "CWE-22" @@ -409,6 +422,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "advisory" +fix_date = "2019" [[pair.expected]] cwe = "CWE-94" @@ -439,6 +453,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "advisory" +fix_date = "2020" [[pair.expected]] cwe = "CWE-94" @@ -469,6 +484,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-94" @@ -499,6 +515,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "advisory" +fix_date = "2018" [[pair.expected]] cwe = "CWE-78" diff --git a/benchmarks/pairs/vfc/catalog.toml b/benchmarks/pairs/vfc/catalog.toml index 95f961f..f1d9ed5 100644 --- a/benchmarks/pairs/vfc/catalog.toml +++ b/benchmarks/pairs/vfc/catalog.toml @@ -22,6 +22,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2014" [[pair.expected]] cwe = "CWE-126" @@ -52,6 +54,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2020" [[pair.expected]] cwe = "CWE-119" @@ -82,6 +86,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2019" [[pair.expected]] cwe = "CWE-416" @@ -112,6 +118,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2020" [[pair.expected]] cwe = "CWE-476" @@ -141,6 +149,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2020" [[pair.expected]] cwe = "CWE-476" @@ -170,6 +180,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-190" @@ -199,6 +211,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-120" @@ -228,6 +242,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-125" @@ -257,6 +273,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-835" @@ -286,6 +304,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-78" @@ -315,6 +335,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-787" @@ -344,6 +366,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-787" @@ -373,6 +397,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2023" [[pair.expected]] cwe = "CWE-843" @@ -402,6 +428,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2023" [[pair.expected]] cwe = "CWE-122" @@ -432,6 +460,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-20" @@ -461,6 +491,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2025" [[pair.expected]] cwe = "CWE-476" @@ -490,6 +522,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2025" [[pair.expected]] cwe = "CWE-770" @@ -519,6 +553,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-770" @@ -548,6 +584,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -577,6 +615,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -606,6 +646,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -635,6 +677,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -664,6 +708,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -693,6 +739,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -722,6 +770,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -751,6 +801,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -780,6 +832,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -809,6 +863,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -838,6 +894,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -867,6 +925,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -896,6 +956,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -925,6 +987,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -954,6 +1018,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -983,6 +1049,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-416" @@ -1012,6 +1080,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -1041,6 +1111,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -1070,6 +1142,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -1099,6 +1173,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -1128,6 +1204,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-476" @@ -1157,6 +1235,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -1186,6 +1266,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -1215,6 +1297,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-476" @@ -1244,6 +1328,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-476" @@ -1273,6 +1359,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-476" @@ -1302,6 +1390,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -1331,6 +1421,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -1360,6 +1452,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -1389,6 +1483,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -1418,6 +1514,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -1447,6 +1545,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -1476,6 +1576,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -1505,6 +1607,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-476" @@ -1534,6 +1638,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-476" @@ -1563,6 +1669,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-476" @@ -1592,6 +1700,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-476" @@ -1621,6 +1731,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -1650,6 +1762,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2025" [[pair.expected]] cwe = "CWE-119" @@ -1679,6 +1793,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2025" [[pair.expected]] cwe = "CWE-119" @@ -1708,6 +1824,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2025" [[pair.expected]] cwe = "CWE-119" @@ -1737,6 +1855,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2025" [[pair.expected]] cwe = "CWE-119" @@ -1766,6 +1886,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2025" [[pair.expected]] cwe = "CWE-119" @@ -1795,6 +1917,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2025" [[pair.expected]] cwe = "CWE-119" @@ -1824,6 +1948,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2025" [[pair.expected]] cwe = "CWE-119" @@ -1853,6 +1979,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2025" [[pair.expected]] cwe = "CWE-119" @@ -1882,6 +2010,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2025" [[pair.expected]] cwe = "CWE-119" @@ -1911,6 +2041,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2024" [[pair.expected]] cwe = "CWE-119" @@ -1940,6 +2072,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2024" [[pair.expected]] cwe = "CWE-119" @@ -1969,6 +2103,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2024" [[pair.expected]] cwe = "CWE-119" @@ -1998,6 +2134,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2024" [[pair.expected]] cwe = "CWE-119" @@ -2027,6 +2165,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2024" [[pair.expected]] cwe = "CWE-119" @@ -2056,6 +2196,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2024" [[pair.expected]] cwe = "CWE-119" @@ -2085,6 +2227,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2024" [[pair.expected]] cwe = "CWE-119" @@ -2114,6 +2258,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2024" [[pair.expected]] cwe = "CWE-119" @@ -2143,6 +2289,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2024" [[pair.expected]] cwe = "CWE-416" @@ -2172,6 +2320,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2024" [[pair.expected]] cwe = "CWE-416" @@ -2201,6 +2351,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2024" [[pair.expected]] cwe = "CWE-119" @@ -2230,6 +2382,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2024" [[pair.expected]] cwe = "CWE-416" @@ -2259,6 +2413,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2024" [[pair.expected]] cwe = "CWE-119" @@ -2288,6 +2444,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2024" [[pair.expected]] cwe = "CWE-119" @@ -2317,6 +2475,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2024" [[pair.expected]] cwe = "CWE-119" @@ -2346,6 +2506,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2024" [[pair.expected]] cwe = "CWE-119" @@ -2375,6 +2537,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2024" [[pair.expected]] cwe = "CWE-476" @@ -2404,6 +2568,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2024" [[pair.expected]] cwe = "CWE-476" @@ -2433,6 +2599,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2023" [[pair.expected]] cwe = "CWE-119" @@ -2462,6 +2630,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2023" [[pair.expected]] cwe = "CWE-119" @@ -2491,6 +2661,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2023" [[pair.expected]] cwe = "CWE-119" @@ -2520,6 +2692,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2023" [[pair.expected]] cwe = "CWE-119" @@ -2549,6 +2723,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2023" [[pair.expected]] cwe = "CWE-119" @@ -2578,6 +2754,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -2607,6 +2785,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -2636,6 +2816,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -2665,6 +2847,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -2694,6 +2878,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2023" [[pair.expected]] cwe = "CWE-119" @@ -2723,6 +2909,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2023" [[pair.expected]] cwe = "CWE-119" @@ -2752,6 +2940,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2023" [[pair.expected]] cwe = "CWE-119" @@ -2781,6 +2971,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -2810,6 +3002,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -2839,6 +3033,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -2868,6 +3064,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -2897,6 +3095,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2023" [[pair.expected]] cwe = "CWE-119" @@ -2926,6 +3126,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2023" [[pair.expected]] cwe = "CWE-119" @@ -2955,6 +3157,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2023" [[pair.expected]] cwe = "CWE-119" @@ -2984,6 +3188,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2023" [[pair.expected]] cwe = "CWE-119" @@ -3013,6 +3219,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -3042,6 +3250,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2020" [[pair.expected]] cwe = "CWE-119" @@ -3071,6 +3281,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -3100,6 +3312,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -3129,6 +3343,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -3158,6 +3374,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-476" @@ -3187,6 +3405,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-476" @@ -3216,6 +3436,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -3245,6 +3467,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -3274,6 +3498,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -3303,6 +3529,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -3332,6 +3560,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -3361,6 +3591,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -3390,6 +3622,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -3419,6 +3653,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -3448,6 +3684,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -3477,6 +3715,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -3506,6 +3746,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -3535,6 +3777,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -3564,6 +3808,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -3593,6 +3839,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -3622,6 +3870,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -3651,6 +3901,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -3680,6 +3932,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -3709,6 +3963,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -3738,6 +3994,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -3767,6 +4025,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -3796,6 +4056,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -3825,6 +4087,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-476" @@ -3854,6 +4118,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -3883,6 +4149,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -3912,6 +4180,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-476" @@ -3941,6 +4211,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2020" [[pair.expected]] cwe = "CWE-119" @@ -3970,6 +4242,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2020" [[pair.expected]] cwe = "CWE-476" @@ -3999,6 +4273,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2026" [[pair.expected]] cwe = "CWE-119" @@ -4028,6 +4304,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2023" [[pair.expected]] cwe = "CWE-119" @@ -4057,6 +4335,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -4086,6 +4366,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -4115,6 +4397,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -4144,6 +4428,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -4173,6 +4459,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -4202,6 +4490,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -4231,6 +4521,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -4260,6 +4552,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -4289,6 +4583,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -4318,6 +4614,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -4347,6 +4645,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -4376,6 +4676,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -4405,6 +4707,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -4434,6 +4738,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -4463,6 +4769,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2022" [[pair.expected]] cwe = "CWE-119" @@ -4492,6 +4800,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -4521,6 +4831,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -4550,6 +4862,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -4579,6 +4893,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -4608,6 +4924,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -4637,6 +4955,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -4666,6 +4986,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -4695,6 +5017,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -4724,6 +5048,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -4753,6 +5079,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -4782,6 +5110,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -4811,6 +5141,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -4840,6 +5172,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -4869,6 +5203,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -4898,6 +5234,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -4927,6 +5265,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2021" [[pair.expected]] cwe = "CWE-119" @@ -4956,6 +5296,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2020" [[pair.expected]] cwe = "CWE-119" @@ -4985,6 +5327,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2020" [[pair.expected]] cwe = "CWE-119" @@ -5014,6 +5358,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2020" [[pair.expected]] cwe = "CWE-119" @@ -5043,6 +5389,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "holdout" +review_tier = "advisory" +fix_date = "2020" [[pair.expected]] cwe = "CWE-119" @@ -5072,6 +5420,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2020" [[pair.expected]] cwe = "CWE-119" @@ -5101,6 +5451,8 @@ min_recall = 1.0 fix_policy = "silent" provenance = "human" split = "train" +review_tier = "advisory" +fix_date = "2020" [[pair.expected]] cwe = "CWE-119" diff --git a/benchmarks/pairs/vfc/training/manifest.jsonl b/benchmarks/pairs/vfc/training/manifest.jsonl index ce9c519..12dc540 100644 --- a/benchmarks/pairs/vfc/training/manifest.jsonl +++ b/benchmarks/pairs/vfc/training/manifest.jsonl @@ -1,352 +1,352 @@ -{"class": "buffer over-read", "commit": "0d7717fc9c83dafab8153cbd5e2180e6e04cc802", "commit_url": "https://github.com/openssl/openssl/commit/96db9023b881d7cd9f379b0c154650d6c108e9a3", "cve": "CVE-2014-0160", "cwe": "CWE-126", "file": "openssl-cve-2014-0160/vuln.c", "function": "tls1_process_heartbeat", "id": "openssl-cve-2014-0160:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2014-0160", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2014} -{"class": "buffer over-read", "commit": "96db9023b881d7cd9f379b0c154650d6c108e9a3", "commit_url": "https://github.com/openssl/openssl/commit/96db9023b881d7cd9f379b0c154650d6c108e9a3", "cve": "CVE-2014-0160", "cwe": "CWE-126", "file": "openssl-cve-2014-0160/fixed.c", "function": "tls1_process_heartbeat", "id": "openssl-cve-2014-0160:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2014-0160", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2014} -{"class": "buffer overflow", "commit": "0c0f777161a9499dd149853ff62d356f75d16c2a", "commit_url": "https://hg.mozilla.org/mozilla-central/rev/b79b6cc78248eea7fda10bfb76aa273c19c9fa65", "cve": "CVE-2020-15667", "cwe": "CWE-119", "file": "firefox-cve-2020-15667/vuln.c", "function": "mar_insert_item", "id": "firefox-cve-2020-15667:vuln", "label": "vuln", "license": "MPL-2.0", "mechanism": "unchecked_length_copy", "pair": "firefox-cve-2020-15667", "project": "firefox", "provenance": "human", "relpath": "modules/libmar/src/mar_read.c", "repo": "mozilla-central", "split": "holdout", "year": 2020} -{"class": "buffer overflow", "commit": "b79b6cc78248eea7fda10bfb76aa273c19c9fa65", "commit_url": "https://hg.mozilla.org/mozilla-central/rev/b79b6cc78248eea7fda10bfb76aa273c19c9fa65", "cve": "CVE-2020-15667", "cwe": "CWE-119", "file": "firefox-cve-2020-15667/fixed.c", "function": "mar_insert_item", "id": "firefox-cve-2020-15667:fixed", "label": "fixed", "license": "MPL-2.0", "mechanism": "unchecked_length_copy", "pair": "firefox-cve-2020-15667", "project": "firefox", "provenance": "human", "relpath": "modules/libmar/src/mar_read.c", "repo": "mozilla-central", "split": "holdout", "year": 2020} -{"class": "use after free", "commit": "9f3fccdba567f30ea39b08f57d8d5b49cd832b4a", "commit_url": "https://github.com/chromium/chromium/commit/ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449", "cve": "CVE-2019-5786", "cwe": "CWE-416", "file": "chromium-cve-2019-5786/vuln.cc", "function": "ArrayBufferResult", "id": "chromium-cve-2019-5786:vuln", "label": "vuln", "license": "BSD-3-Clause", "mechanism": "uaf", "pair": "chromium-cve-2019-5786", "project": "chromium", "provenance": "human", "relpath": "third_party/blink/renderer/core/fileapi/file_reader_loader.cc", "repo": "chromium/chromium", "split": "train", "year": 2019} -{"class": "use after free", "commit": "ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449", "commit_url": "https://github.com/chromium/chromium/commit/ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449", "cve": "CVE-2019-5786", "cwe": "CWE-416", "file": "chromium-cve-2019-5786/fixed.cc", "function": "ArrayBufferResult", "id": "chromium-cve-2019-5786:fixed", "label": "fixed", "license": "BSD-3-Clause", "mechanism": "uaf", "pair": "chromium-cve-2019-5786", "project": "chromium", "provenance": "human", "relpath": "third_party/blink/renderer/core/fileapi/file_reader_loader.cc", "repo": "chromium/chromium", "split": "train", "year": 2019} -{"class": "null pointer dereference", "commit": "3656c08ab4b1b892730cb5e808b6f4298b08a2e6", "commit_url": "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4", "cve": "CVE-2020-1967", "cwe": "CWE-476", "file": "openssl-cve-2020-1967/vuln.c", "function": "tls1_check_sig_alg", "id": "openssl-cve-2020-1967:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2020-1967", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2020} -{"class": "null pointer dereference", "commit": "a87f3fe01a5a894aa27ccd6a239155fd129988e4", "commit_url": "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4", "cve": "CVE-2020-1967", "cwe": "CWE-476", "file": "openssl-cve-2020-1967/fixed.c", "function": "tls1_check_sig_alg", "id": "openssl-cve-2020-1967:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2020-1967", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2020} -{"class": "null pointer dereference", "commit": "198b11683568452282bd48828fcf60d4835bf327", "commit_url": "https://github.com/openssl/openssl/commit/b33c48b75aaf33c93aeda42d7138616b9e6a64cb", "cve": "CVE-2020-1971", "cwe": "CWE-476", "file": "openssl-cve-2020-1971/vuln.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2020-1971:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2020-1971", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "split": "holdout", "year": 2020} -{"class": "null pointer dereference", "commit": "b33c48b75aaf33c93aeda42d7138616b9e6a64cb", "commit_url": "https://github.com/openssl/openssl/commit/b33c48b75aaf33c93aeda42d7138616b9e6a64cb", "cve": "CVE-2020-1971", "cwe": "CWE-476", "file": "openssl-cve-2020-1971/fixed.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2020-1971:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2020-1971", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "split": "holdout", "year": 2020} -{"class": "integer overflow", "commit": "c1ddd392cf9737c09c1f9bf690adfbe596403c5e", "commit_url": "https://github.com/openssl/openssl/commit/c9fb704cf3af5524eb8e79961e31b60eee8c3c47", "cve": "CVE-2021-23840", "cwe": "CWE-190", "file": "openssl-cve-2021-23840/vuln.c", "function": "evp_EncryptDecryptUpdate", "id": "openssl-cve-2021-23840:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "signed_size_operand", "pair": "openssl-cve-2021-23840", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "integer overflow", "commit": "c9fb704cf3af5524eb8e79961e31b60eee8c3c47", "commit_url": "https://github.com/openssl/openssl/commit/c9fb704cf3af5524eb8e79961e31b60eee8c3c47", "cve": "CVE-2021-23840", "cwe": "CWE-190", "file": "openssl-cve-2021-23840/fixed.c", "function": "evp_EncryptDecryptUpdate", "id": "openssl-cve-2021-23840:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "signed_size_operand", "pair": "openssl-cve-2021-23840", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "buffer overflow", "commit": "8c74c9d1ade0fbdab5b815ddb747351b8b839641", "commit_url": "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "cve": "CVE-2021-3711", "cwe": "CWE-120", "file": "openssl-cve-2021-3711/vuln.c", "function": "sm2_plaintext_size", "id": "openssl-cve-2021-3711:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2021-3711", "project": "openssl", "provenance": "human", "relpath": "crypto/sm2/sm2_crypt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "buffer overflow", "commit": "59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "commit_url": "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "cve": "CVE-2021-3711", "cwe": "CWE-120", "file": "openssl-cve-2021-3711/fixed.c", "function": "sm2_plaintext_size", "id": "openssl-cve-2021-3711:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2021-3711", "project": "openssl", "provenance": "human", "relpath": "crypto/sm2/sm2_crypt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "buffer over-read", "commit": "1f365708a3318a5f1a395f90c38b584a58d37fb9", "commit_url": "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9", "cve": "CVE-2021-3712", "cwe": "CWE-125", "file": "openssl-cve-2021-3712/vuln.c", "function": "append_ia5", "id": "openssl-cve-2021-3712:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2021-3712", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "buffer over-read", "commit": "98624776c4d501c8badd6f772ab7048ac9191cb9", "commit_url": "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9", "cve": "CVE-2021-3712", "cwe": "CWE-125", "file": "openssl-cve-2021-3712/fixed.c", "function": "append_ia5", "id": "openssl-cve-2021-3712:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2021-3712", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "infinite loop", "commit": "1832bb0f02e519a48f06a10467c7ce5f7f3feeeb", "commit_url": "https://github.com/openssl/openssl/commit/9eafb53614bf65797db25f467946e735e1b43dc9", "cve": "CVE-2022-0778", "cwe": "CWE-835", "file": "openssl-cve-2022-0778/vuln.c", "function": "BN_mod_sqrt", "id": "openssl-cve-2022-0778:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-0778", "project": "openssl", "provenance": "human", "relpath": "crypto/bn/bn_sqrt.c", "repo": "openssl/openssl", "split": "train", "year": 2022} -{"class": "infinite loop", "commit": "9eafb53614bf65797db25f467946e735e1b43dc9", "commit_url": "https://github.com/openssl/openssl/commit/9eafb53614bf65797db25f467946e735e1b43dc9", "cve": "CVE-2022-0778", "cwe": "CWE-835", "file": "openssl-cve-2022-0778/fixed.c", "function": "BN_mod_sqrt", "id": "openssl-cve-2022-0778:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-0778", "project": "openssl", "provenance": "human", "relpath": "crypto/bn/bn_sqrt.c", "repo": "openssl/openssl", "split": "train", "year": 2022} -{"class": "command injection", "commit": "7d56a74a96828985db7354a55227a511615f732b", "commit_url": "https://github.com/openssl/openssl/commit/1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2", "cve": "CVE-2022-1292", "cwe": "CWE-78", "file": "openssl-cve-2022-1292/vuln.in", "function": "link_hash_cert", "id": "openssl-cve-2022-1292:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "source_reaches_sink", "pair": "openssl-cve-2022-1292", "project": "openssl", "provenance": "human", "relpath": "tools/c_rehash.in", "repo": "openssl/openssl", "split": "holdout", "year": 2022} -{"class": "command injection", "commit": "1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2", "commit_url": "https://github.com/openssl/openssl/commit/1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2", "cve": "CVE-2022-1292", "cwe": "CWE-78", "file": "openssl-cve-2022-1292/fixed.in", "function": "link_hash_cert", "id": "openssl-cve-2022-1292:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "source_reaches_sink", "pair": "openssl-cve-2022-1292", "project": "openssl", "provenance": "human", "relpath": "tools/c_rehash.in", "repo": "openssl/openssl", "split": "holdout", "year": 2022} -{"class": "buffer overflow", "commit": "89d72311327735ef15c804d2adea84a0fb1bfa0a", "commit_url": "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332", "cve": "CVE-2022-3602", "cwe": "CWE-787", "file": "openssl-cve-2022-3602/vuln.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3602:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-3602", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "split": "train", "year": 2022} -{"class": "buffer overflow", "commit": "3b421ebc64c7b52f1b9feb3812bdc7781c784332", "commit_url": "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332", "cve": "CVE-2022-3602", "cwe": "CWE-787", "file": "openssl-cve-2022-3602/fixed.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3602:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-3602", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "split": "train", "year": 2022} -{"class": "buffer overflow", "commit": "3b421ebc64c7b52f1b9feb3812bdc7781c784332", "commit_url": "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "cve": "CVE-2022-3786", "cwe": "CWE-787", "file": "openssl-cve-2022-3786/vuln.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3786:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-3786", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} -{"class": "buffer overflow", "commit": "680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "commit_url": "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "cve": "CVE-2022-3786", "cwe": "CWE-787", "file": "openssl-cve-2022-3786/fixed.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3786:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-3786", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} -{"class": "type confusion", "commit": "adf77d6657e836fc87391fad53d857927a764297", "commit_url": "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f", "cve": "CVE-2023-0286", "cwe": "CWE-843", "file": "openssl-cve-2023-0286/vuln.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2023-0286:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "type_confusion", "pair": "openssl-cve-2023-0286", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "split": "train", "year": 2023} -{"class": "type confusion", "commit": "7880536fe17c2b5450e279155bedd51771d28c9f", "commit_url": "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f", "cve": "CVE-2023-0286", "cwe": "CWE-843", "file": "openssl-cve-2023-0286/fixed.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2023-0286:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "type_confusion", "pair": "openssl-cve-2023-0286", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "split": "train", "year": 2023} -{"class": "heap buffer overflow", "commit": "09e25b9d94f4106eac8ca3a43b221bdc66f405e4", "commit_url": "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147", "cve": "CVE-2023-38545", "cwe": "CWE-122", "file": "curl-cve-2023-38545/vuln.c", "function": "do_SOCKS5", "id": "curl-cve-2023-38545:vuln", "label": "vuln", "license": "curl", "mechanism": "unchecked_length_copy", "pair": "curl-cve-2023-38545", "project": "curl", "provenance": "human", "relpath": "lib/socks.c", "repo": "curl/curl", "split": "holdout", "year": 2023} -{"class": "heap buffer overflow", "commit": "fb4415d8aee6c1045be932a34fe6107c2f5ed147", "commit_url": "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147", "cve": "CVE-2023-38545", "cwe": "CWE-122", "file": "curl-cve-2023-38545/fixed.c", "function": "do_SOCKS5", "id": "curl-cve-2023-38545:fixed", "label": "fixed", "license": "curl", "mechanism": "unchecked_length_copy", "pair": "curl-cve-2023-38545", "project": "curl", "provenance": "human", "relpath": "lib/socks.c", "repo": "curl/curl", "split": "holdout", "year": 2023} -{"class": "insufficient input validation", "commit": "a07d0ae0a7dc68686adca10dcf11138cb2f4ab6d", "commit_url": "https://github.com/chromium/chromium/commit/22c61cfae5d1b37c773e638d342488ae11118b51", "cve": "CVE-2022-2162", "cwe": "CWE-20", "file": "chromium-cve-2022-2162/vuln.cc", "function": "IsShellIntegratedExtension", "id": "chromium-cve-2022-2162:vuln", "label": "vuln", "license": "BSD-3-Clause", "mechanism": "validation_strength", "pair": "chromium-cve-2022-2162", "project": "chromium", "provenance": "human", "relpath": "content/browser/file_system_access/file_system_chooser.cc", "repo": "chromium/chromium", "split": "holdout", "year": 2022} -{"class": "insufficient input validation", "commit": "22c61cfae5d1b37c773e638d342488ae11118b51", "commit_url": "https://github.com/chromium/chromium/commit/22c61cfae5d1b37c773e638d342488ae11118b51", "cve": "CVE-2022-2162", "cwe": "CWE-20", "file": "chromium-cve-2022-2162/fixed.cc", "function": "IsShellIntegratedExtension", "id": "chromium-cve-2022-2162:fixed", "label": "fixed", "license": "BSD-3-Clause", "mechanism": "validation_strength", "pair": "chromium-cve-2022-2162", "project": "chromium", "provenance": "human", "relpath": "content/browser/file_system_access/file_system_chooser.cc", "repo": "chromium/chromium", "split": "holdout", "year": 2022} -{"class": "null pointer dereference", "commit": "ea8fc4c345fbd749048809c9f7c881ea656b0b94", "commit_url": "https://github.com/openssl/openssl/commit/2c13bf15286328641a805eb3b7c97e27d42881fb", "cve": "CVE-2025-69421", "cwe": "CWE-476", "file": "openssl-cve-2025-69421/vuln.c", "function": "PKCS12_item_decrypt_d2i_ex", "id": "openssl-cve-2025-69421:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2025-69421", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_decr.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} -{"class": "null pointer dereference", "commit": "2c13bf15286328641a805eb3b7c97e27d42881fb", "commit_url": "https://github.com/openssl/openssl/commit/2c13bf15286328641a805eb3b7c97e27d42881fb", "cve": "CVE-2025-69421", "cwe": "CWE-476", "file": "openssl-cve-2025-69421/fixed.c", "function": "PKCS12_item_decrypt_d2i_ex", "id": "openssl-cve-2025-69421:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2025-69421", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_decr.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} -{"class": "uncontrolled allocation", "commit": "b21663c35a6f0ed4c8de06855bdc7a6a21f00c2f", "commit_url": "https://github.com/openssl/openssl/commit/84f73f79af9f69c1527a9a372b7a9e771a394c2a", "cve": "CVE-2025-66199", "cwe": "CWE-770", "file": "openssl-cve-2025-66199/vuln.c", "function": "tls13_process_compressed_certificate", "id": "openssl-cve-2025-66199:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_alloc_size", "pair": "openssl-cve-2025-66199", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2025} -{"class": "uncontrolled allocation", "commit": "84f73f79af9f69c1527a9a372b7a9e771a394c2a", "commit_url": "https://github.com/openssl/openssl/commit/84f73f79af9f69c1527a9a372b7a9e771a394c2a", "cve": "CVE-2025-66199", "cwe": "CWE-770", "file": "openssl-cve-2025-66199/fixed.c", "function": "tls13_process_compressed_certificate", "id": "openssl-cve-2025-66199:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_alloc_size", "pair": "openssl-cve-2025-66199", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2025} -{"class": "uncontrolled allocation", "commit": "eed0931f85474d0db6e2326dfd9718c6bf1cd418", "commit_url": "https://github.com/mozilla-firefox/firefox/commit/e46f28da1cd3a5d46a2680b3d87361e9e8de4ae6", "cve": "BUG-2058173", "cwe": "CWE-770", "file": "firefox-bug-2058173/vuln.c", "function": "mar_read_index", "id": "firefox-bug-2058173:vuln", "label": "vuln", "license": "MPL-2.0", "mechanism": "unchecked_alloc_size", "pair": "firefox-bug-2058173", "project": "firefox", "provenance": "human", "relpath": "modules/libmar/src/mar_read.c", "repo": "mozilla-firefox/firefox", "split": "train", "year": 2026} -{"class": "uncontrolled allocation", "commit": "e46f28da1cd3a5d46a2680b3d87361e9e8de4ae6", "commit_url": "https://github.com/mozilla-firefox/firefox/commit/e46f28da1cd3a5d46a2680b3d87361e9e8de4ae6", "cve": "BUG-2058173", "cwe": "CWE-770", "file": "firefox-bug-2058173/fixed.c", "function": "mar_read_index", "id": "firefox-bug-2058173:fixed", "label": "fixed", "license": "MPL-2.0", "mechanism": "unchecked_alloc_size", "pair": "firefox-bug-2058173", "project": "firefox", "provenance": "human", "relpath": "modules/libmar/src/mar_read.c", "repo": "mozilla-firefox/firefox", "split": "train", "year": 2026} -{"class": "security fix", "commit": "48f5785425ee6b5316f8e5f921978397ba632cc6", "commit_url": "https://github.com/openssl/openssl/commit/70cebd74d3592f5272945501b58a60374c4e13af", "cve": "CVE-2026-18798", "cwe": "CWE-119", "file": "openssl-cve-2026-18798/vuln.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-18798:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-18798", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "70cebd74d3592f5272945501b58a60374c4e13af", "commit_url": "https://github.com/openssl/openssl/commit/70cebd74d3592f5272945501b58a60374c4e13af", "cve": "CVE-2026-18798", "cwe": "CWE-119", "file": "openssl-cve-2026-18798/fixed.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-18798:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-18798", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "a0c8ec557d9cac078f032d76cdf684fe743eb382", "commit_url": "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874/vuln.c", "function": "DTLS_RECORD_LAYER_clear", "id": "openssl-cve-2026-54874:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-54874", "project": "openssl", "provenance": "human", "relpath": "ssl/record/rec_layer_d1.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "commit_url": "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874/fixed.c", "function": "DTLS_RECORD_LAYER_clear", "id": "openssl-cve-2026-54874:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-54874", "project": "openssl", "provenance": "human", "relpath": "ssl/record/rec_layer_d1.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "a0c8ec557d9cac078f032d76cdf684fe743eb382", "commit_url": "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874-dtls1_process_record/vuln.c", "function": "dtls1_process_record", "id": "openssl-cve-2026-54874-dtls1_process_record:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-54874-dtls1_process_record", "project": "openssl", "provenance": "human", "relpath": "ssl/record/ssl3_record.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "commit_url": "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874-dtls1_process_record/fixed.c", "function": "dtls1_process_record", "id": "openssl-cve-2026-54874-dtls1_process_record:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-54874-dtls1_process_record", "project": "openssl", "provenance": "human", "relpath": "ssl/record/ssl3_record.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "9ec2f6d2ae2bcad907cf7ee38584855bafe4979a", "commit_url": "https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor/vuln.c", "function": "dtls_rlayer_buffer_record", "id": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/dtls_meth.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "7110cb2f75806d0bf809eb2f90790d477900be40", "commit_url": "https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor/fixed.c", "function": "dtls_rlayer_buffer_record", "id": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/dtls_meth.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "buffer overflow", "commit": "d307f61f1b341b6eb7d5d07bd6902a939c709bc6", "commit_url": "https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382", "cve": "CVE-2026-63072", "cwe": "CWE-119", "file": "openssl-cve-2026-63072/vuln.c", "function": "cms_kek_cipher", "id": "openssl-cve-2026-63072:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-63072", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_kari.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "buffer overflow", "commit": "a0c8ec557d9cac078f032d76cdf684fe743eb382", "commit_url": "https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382", "cve": "CVE-2026-63072", "cwe": "CWE-119", "file": "openssl-cve-2026-63072/fixed.c", "function": "cms_kek_cipher", "id": "openssl-cve-2026-63072:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-63072", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_kari.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "buffer overflow", "commit": "1951c3cbd9d5101e027a1eb126f26c3c758f6cc0", "commit_url": "https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756", "cve": "CVE-2026-63072", "cwe": "CWE-119", "file": "openssl-cve-2026-63072-cms_kek_cipher/vuln.c", "function": "cms_kek_cipher", "id": "openssl-cve-2026-63072-cms_kek_cipher:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-63072-cms_kek_cipher", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_kemri.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "buffer overflow", "commit": "2a3dac874c8057c1f0186849bf1ede1ae7b6b756", "commit_url": "https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756", "cve": "CVE-2026-63072", "cwe": "CWE-119", "file": "openssl-cve-2026-63072-cms_kek_cipher/fixed.c", "function": "cms_kek_cipher", "id": "openssl-cve-2026-63072-cms_kek_cipher:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-63072-cms_kek_cipher", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_kemri.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "1e8c398db67404babd3e5af999bb6bd86f720c76", "commit_url": "https://github.com/openssl/openssl/commit/a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4", "cve": "CVE-2026-63073", "cwe": "CWE-119", "file": "openssl-cve-2026-63073/vuln.c", "function": "ossl_cmp_msg_check_update", "id": "openssl-cve-2026-63073:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-63073", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_vfy.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4", "commit_url": "https://github.com/openssl/openssl/commit/a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4", "cve": "CVE-2026-63073", "cwe": "CWE-119", "file": "openssl-cve-2026-63073/fixed.c", "function": "ossl_cmp_msg_check_update", "id": "openssl-cve-2026-63073:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-63073", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_vfy.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "f636f9ca0fa1bae5b42f9e787f025c96fb09c43a", "commit_url": "https://github.com/openssl/openssl/commit/1e8c398db67404babd3e5af999bb6bd86f720c76", "cve": "CVE-2026-14457", "cwe": "CWE-119", "file": "openssl-cve-2026-14457/vuln.c", "function": "check_cert_usable", "id": "openssl-cve-2026-14457:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-14457", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "1e8c398db67404babd3e5af999bb6bd86f720c76", "commit_url": "https://github.com/openssl/openssl/commit/1e8c398db67404babd3e5af999bb6bd86f720c76", "cve": "CVE-2026-14457", "cwe": "CWE-119", "file": "openssl-cve-2026-14457/fixed.c", "function": "check_cert_usable", "id": "openssl-cve-2026-14457:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-14457", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "9f2b8522d39ff869fac2ff7c3f20609b54843188", "commit_url": "https://github.com/openssl/openssl/commit/21a5d9658b0c66daace60e10ea18ff32a448de9f", "cve": "CVE-2026-63074", "cwe": "CWE-119", "file": "openssl-cve-2026-63074/vuln.c", "function": "ossl_cmp_msg_check_update", "id": "openssl-cve-2026-63074:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-63074", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_vfy.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "21a5d9658b0c66daace60e10ea18ff32a448de9f", "commit_url": "https://github.com/openssl/openssl/commit/21a5d9658b0c66daace60e10ea18ff32a448de9f", "cve": "CVE-2026-63074", "cwe": "CWE-119", "file": "openssl-cve-2026-63074/fixed.c", "function": "ossl_cmp_msg_check_update", "id": "openssl-cve-2026-63074:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-63074", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_vfy.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "a1f348ccb328c3afbd4ba6883f9b7c813c043259", "commit_url": "https://github.com/openssl/openssl/commit/c902e5f16d6a9e130e96d3ca6d8f64d71652e393", "cve": "CVE-2026-63075", "cwe": "CWE-119", "file": "openssl-cve-2026-63075-txp_pkt_commit/vuln.c", "function": "txp_pkt_commit", "id": "openssl-cve-2026-63075-txp_pkt_commit:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-63075-txp_pkt_commit", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_txp.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "c902e5f16d6a9e130e96d3ca6d8f64d71652e393", "commit_url": "https://github.com/openssl/openssl/commit/c902e5f16d6a9e130e96d3ca6d8f64d71652e393", "cve": "CVE-2026-63075", "cwe": "CWE-119", "file": "openssl-cve-2026-63075-txp_pkt_commit/fixed.c", "function": "txp_pkt_commit", "id": "openssl-cve-2026-63075-txp_pkt_commit:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-63075-txp_pkt_commit", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_txp.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "39488cb863074d5b8ece833905f7ad2b357d44fe", "commit_url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803/vuln.c", "function": "aes_ocb_cipher", "id": "openssl-cve-2026-75803:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-75803", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_ocb.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "119ab9555dc62275bbd71f6f49529b1a44feba42", "commit_url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803/fixed.c", "function": "aes_ocb_cipher", "id": "openssl-cve-2026-75803:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-75803", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_ocb.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "39488cb863074d5b8ece833905f7ad2b357d44fe", "commit_url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803-chacha20_poly1305_cipher/vuln.c", "function": "chacha20_poly1305_cipher", "id": "openssl-cve-2026-75803-chacha20_poly1305_cipher:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-75803-chacha20_poly1305_cipher", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_chacha20_poly1305.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "119ab9555dc62275bbd71f6f49529b1a44feba42", "commit_url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803-chacha20_poly1305_cipher/fixed.c", "function": "chacha20_poly1305_cipher", "id": "openssl-cve-2026-75803-chacha20_poly1305_cipher:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-75803-chacha20_poly1305_cipher", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_chacha20_poly1305.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "de7d1871087fc1fa3e2c1db4b11275b68d72f416", "commit_url": "https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803-aes_gcm_siv_finish/vuln.c", "function": "aes_gcm_siv_finish", "id": "openssl-cve-2026-75803-aes_gcm_siv_finish:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-75803-aes_gcm_siv_finish", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "bf95f5f772e9362f87b25cfa2f8cb15d984865b9", "commit_url": "https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803-aes_gcm_siv_finish/fixed.c", "function": "aes_gcm_siv_finish", "id": "openssl-cve-2026-75803-aes_gcm_siv_finish:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-75803-aes_gcm_siv_finish", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "2dacccc943b47b8dc1ce8f7109c9852391b5a0d8", "commit_url": "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9", "cve": "CVE-2026-14456", "cwe": "CWE-119", "file": "openssl-cve-2026-14456-port_default_packet_hand/vuln.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-14456-port_default_packet_hand:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-14456-port_default_packet_hand", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "08e7756c3900bcfd77a720e7b74e27d6e4ed01a9", "commit_url": "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9", "cve": "CVE-2026-14456", "cwe": "CWE-119", "file": "openssl-cve-2026-14456-port_default_packet_hand/fixed.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-14456-port_default_packet_hand:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-14456-port_default_packet_hand", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "2c9a078b6030444ed868a3943991f42b35cd49dc", "commit_url": "https://github.com/openssl/openssl/commit/9416706d408bb84deb7cee4647bff3045d2dc7ba", "cve": "CVE-2026-14456", "cwe": "CWE-119", "file": "openssl-cve-2026-14456-expect_quic_for_value/vuln.c", "function": "expect_quic_for_value", "id": "openssl-cve-2026-14456-expect_quic_for_value:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-14456-expect_quic_for_value", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_impl.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "9416706d408bb84deb7cee4647bff3045d2dc7ba", "commit_url": "https://github.com/openssl/openssl/commit/9416706d408bb84deb7cee4647bff3045d2dc7ba", "cve": "CVE-2026-14456", "cwe": "CWE-119", "file": "openssl-cve-2026-14456-expect_quic_for_value/fixed.c", "function": "expect_quic_for_value", "id": "openssl-cve-2026-14456-expect_quic_for_value:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-14456-expect_quic_for_value", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_impl.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "use after free", "commit": "609bcb24866d64f1fc49d38b852edbb39057d721", "commit_url": "https://github.com/openssl/openssl/commit/f4129fbe3cde786d363510069fe297234f99be8f", "cve": "CVE-2026-45447", "cwe": "CWE-416", "file": "openssl-cve-2026-45447/vuln.c", "function": "PKCS7_verify", "id": "openssl-cve-2026-45447:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2026-45447", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_smime.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "use after free", "commit": "f4129fbe3cde786d363510069fe297234f99be8f", "commit_url": "https://github.com/openssl/openssl/commit/f4129fbe3cde786d363510069fe297234f99be8f", "cve": "CVE-2026-45447", "cwe": "CWE-416", "file": "openssl-cve-2026-45447/fixed.c", "function": "PKCS7_verify", "id": "openssl-cve-2026-45447:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2026-45447", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_smime.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "f87f0b6a8e04bcdeb98afc82b0da06a2d537f399", "commit_url": "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721", "cve": "CVE-2026-45446", "cwe": "CWE-119", "file": "openssl-cve-2026-45446/vuln.c", "function": "aes_gcm_siv_initkey", "id": "openssl-cve-2026-45446:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-45446", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "609bcb24866d64f1fc49d38b852edbb39057d721", "commit_url": "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721", "cve": "CVE-2026-45446", "cwe": "CWE-119", "file": "openssl-cve-2026-45446/fixed.c", "function": "aes_gcm_siv_initkey", "id": "openssl-cve-2026-45446:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-45446", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "f87f0b6a8e04bcdeb98afc82b0da06a2d537f399", "commit_url": "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721", "cve": "CVE-2026-45446", "cwe": "CWE-119", "file": "openssl-cve-2026-45446-aes_siv_set_ctx_params/vuln.c", "function": "aes_siv_set_ctx_params", "id": "openssl-cve-2026-45446-aes_siv_set_ctx_params:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-45446-aes_siv_set_ctx_params", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_siv.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "609bcb24866d64f1fc49d38b852edbb39057d721", "commit_url": "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721", "cve": "CVE-2026-45446", "cwe": "CWE-119", "file": "openssl-cve-2026-45446-aes_siv_set_ctx_params/fixed.c", "function": "aes_siv_set_ctx_params", "id": "openssl-cve-2026-45446-aes_siv_set_ctx_params:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-45446-aes_siv_set_ctx_params", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_siv.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "5f489043b662fed32fbf7eb7442c479568eb43fd", "commit_url": "https://github.com/openssl/openssl/commit/f87f0b6a8e04bcdeb98afc82b0da06a2d537f399", "cve": "CVE-2026-45445", "cwe": "CWE-119", "file": "openssl-cve-2026-45445/vuln.c", "function": "aes_ocb_cipher", "id": "openssl-cve-2026-45445:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-45445", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_ocb.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "f87f0b6a8e04bcdeb98afc82b0da06a2d537f399", "commit_url": "https://github.com/openssl/openssl/commit/f87f0b6a8e04bcdeb98afc82b0da06a2d537f399", "cve": "CVE-2026-45445", "cwe": "CWE-119", "file": "openssl-cve-2026-45445/fixed.c", "function": "aes_ocb_cipher", "id": "openssl-cve-2026-45445:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-45445", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_ocb.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "0f3fab2eccc7c3417093a8243dd15d95b6cb472d", "commit_url": "https://github.com/openssl/openssl/commit/b3a555a0a7aa0028887149f6f973af89a4937bea", "cve": "CVE-2026-42771", "cwe": "CWE-119", "file": "openssl-cve-2026-42771/vuln.c", "function": "validate_hostname_part", "id": "openssl-cve-2026-42771:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-42771", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vpm.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "b3a555a0a7aa0028887149f6f973af89a4937bea", "commit_url": "https://github.com/openssl/openssl/commit/b3a555a0a7aa0028887149f6f973af89a4937bea", "cve": "CVE-2026-42771", "cwe": "CWE-119", "file": "openssl-cve-2026-42771/fixed.c", "function": "validate_hostname_part", "id": "openssl-cve-2026-42771:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-42771", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vpm.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "null pointer dereference", "commit": "d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "commit_url": "https://github.com/openssl/openssl/commit/c2765d53c2649b56bc1ca1bb799e42002953056a", "cve": "CVE-2026-42769", "cwe": "CWE-476", "file": "openssl-cve-2026-42769/vuln.c", "function": "selfsigned_verify_cb", "id": "openssl-cve-2026-42769:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42769", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_genm.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "null pointer dereference", "commit": "c2765d53c2649b56bc1ca1bb799e42002953056a", "commit_url": "https://github.com/openssl/openssl/commit/c2765d53c2649b56bc1ca1bb799e42002953056a", "cve": "CVE-2026-42769", "cwe": "CWE-476", "file": "openssl-cve-2026-42769/fixed.c", "function": "selfsigned_verify_cb", "id": "openssl-cve-2026-42769:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42769", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_genm.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "f04d65692dd8109be9f387ce2ddd9fb1ab612b6b", "commit_url": "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "cve": "CVE-2026-42768", "cwe": "CWE-119", "file": "openssl-cve-2026-42768/vuln.c", "function": "cms_RecipientInfo_ktri_decrypt", "id": "openssl-cve-2026-42768:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-42768", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_env.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "commit_url": "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "cve": "CVE-2026-42768", "cwe": "CWE-119", "file": "openssl-cve-2026-42768/fixed.c", "function": "cms_RecipientInfo_ktri_decrypt", "id": "openssl-cve-2026-42768:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-42768", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_env.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "f04d65692dd8109be9f387ce2ddd9fb1ab612b6b", "commit_url": "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "cve": "CVE-2026-42768", "cwe": "CWE-119", "file": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo/vuln.c", "function": "pkcs7_decrypt_rinfo", "id": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_doit.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "commit_url": "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "cve": "CVE-2026-42768", "cwe": "CWE-119", "file": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo/fixed.c", "function": "pkcs7_decrypt_rinfo", "id": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_doit.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "null pointer dereference", "commit": "a9af3442290e8a04706a3cd5f284ffd5b486e3f6", "commit_url": "https://github.com/openssl/openssl/commit/74245170b5a64b234ac4af27c86a25ec251c8b2a", "cve": "CVE-2026-42766", "cwe": "CWE-476", "file": "openssl-cve-2026-42766/vuln.c", "function": "ossl_cms_RecipientInfo_pwri_crypt", "id": "openssl-cve-2026-42766:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42766", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "null pointer dereference", "commit": "74245170b5a64b234ac4af27c86a25ec251c8b2a", "commit_url": "https://github.com/openssl/openssl/commit/74245170b5a64b234ac4af27c86a25ec251c8b2a", "cve": "CVE-2026-42766", "cwe": "CWE-476", "file": "openssl-cve-2026-42766/fixed.c", "function": "ossl_cms_RecipientInfo_pwri_crypt", "id": "openssl-cve-2026-42766:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42766", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "null pointer dereference", "commit": "5097ec4dae239112498abb722e255ea60ef7ac48", "commit_url": "https://github.com/openssl/openssl/commit/a9af3442290e8a04706a3cd5f284ffd5b486e3f6", "cve": "CVE-2026-42765", "cwe": "CWE-476", "file": "openssl-cve-2026-42765/vuln.c", "function": "check_revocation", "id": "openssl-cve-2026-42765:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42765", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "null pointer dereference", "commit": "a9af3442290e8a04706a3cd5f284ffd5b486e3f6", "commit_url": "https://github.com/openssl/openssl/commit/a9af3442290e8a04706a3cd5f284ffd5b486e3f6", "cve": "CVE-2026-42765", "cwe": "CWE-476", "file": "openssl-cve-2026-42765/fixed.c", "function": "check_revocation", "id": "openssl-cve-2026-42765:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42765", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "null pointer dereference", "commit": "58633b658fe74095c8cdde191e4ce1bf94f8c5f9", "commit_url": "https://github.com/openssl/openssl/commit/5097ec4dae239112498abb722e255ea60ef7ac48", "cve": "CVE-2026-42764", "cwe": "CWE-476", "file": "openssl-cve-2026-42764/vuln.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-42764:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42764", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "null pointer dereference", "commit": "5097ec4dae239112498abb722e255ea60ef7ac48", "commit_url": "https://github.com/openssl/openssl/commit/5097ec4dae239112498abb722e255ea60ef7ac48", "cve": "CVE-2026-42764", "cwe": "CWE-476", "file": "openssl-cve-2026-42764/fixed.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-42764:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42764", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "68ef88913e321bdb47eee88118ceba18ed2388cd", "commit_url": "https://github.com/openssl/openssl/commit/58633b658fe74095c8cdde191e4ce1bf94f8c5f9", "cve": "CVE-2026-35188", "cwe": "CWE-119", "file": "openssl-cve-2026-35188/vuln.c", "function": "check_cert_ocsp_resp", "id": "openssl-cve-2026-35188:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-35188", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "58633b658fe74095c8cdde191e4ce1bf94f8c5f9", "commit_url": "https://github.com/openssl/openssl/commit/58633b658fe74095c8cdde191e4ce1bf94f8c5f9", "cve": "CVE-2026-35188", "cwe": "CWE-119", "file": "openssl-cve-2026-35188/fixed.c", "function": "check_cert_ocsp_resp", "id": "openssl-cve-2026-35188:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-35188", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "fcb23806047f5afbe55d5d601a527fc24bf7ca2c", "commit_url": "https://github.com/openssl/openssl/commit/5a0230b6cc95a576b0c2b7b5b2ba7c74232e7b7c", "cve": "CVE-2026-34181", "cwe": "CWE-119", "file": "openssl-cve-2026-34181/vuln.c", "function": "PBMAC1_PBKDF2_HMAC", "id": "openssl-cve-2026-34181:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-34181", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "5a0230b6cc95a576b0c2b7b5b2ba7c74232e7b7c", "commit_url": "https://github.com/openssl/openssl/commit/5a0230b6cc95a576b0c2b7b5b2ba7c74232e7b7c", "cve": "CVE-2026-34181", "cwe": "CWE-119", "file": "openssl-cve-2026-34181/fixed.c", "function": "PBMAC1_PBKDF2_HMAC", "id": "openssl-cve-2026-34181:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-34181", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "buffer overflow", "commit": "97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9", "commit_url": "https://github.com/openssl/openssl/commit/51d1800e95283a8beec85152e35e3634dab8dd82", "cve": "CVE-2026-9076", "cwe": "CWE-119", "file": "openssl-cve-2026-9076/vuln.c", "function": "kek_unwrap_key", "id": "openssl-cve-2026-9076:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-9076", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "buffer overflow", "commit": "51d1800e95283a8beec85152e35e3634dab8dd82", "commit_url": "https://github.com/openssl/openssl/commit/51d1800e95283a8beec85152e35e3634dab8dd82", "cve": "CVE-2026-9076", "cwe": "CWE-119", "file": "openssl-cve-2026-9076/fixed.c", "function": "kek_unwrap_key", "id": "openssl-cve-2026-9076:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-9076", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "cb005ceaaf1fb50722e0101762a3e266338c5bf9", "commit_url": "https://github.com/openssl/openssl/commit/97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9", "cve": "CVE-2026-7383", "cwe": "CWE-119", "file": "openssl-cve-2026-7383/vuln.c", "function": "ASN1_mbstring_ncopy", "id": "openssl-cve-2026-7383:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-7383", "project": "openssl", "provenance": "human", "relpath": "crypto/asn1/a_mbstr.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9", "commit_url": "https://github.com/openssl/openssl/commit/97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9", "cve": "CVE-2026-7383", "cwe": "CWE-119", "file": "openssl-cve-2026-7383/fixed.c", "function": "ASN1_mbstring_ncopy", "id": "openssl-cve-2026-7383:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-7383", "project": "openssl", "provenance": "human", "relpath": "crypto/asn1/a_mbstr.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "a91e537d16d74050dbde50bb0dfb1fe9930f0521", "commit_url": "https://github.com/openssl/openssl/commit/eed200f58cd8645ed77e46b7e9f764e284df379e", "cve": "CVE-2026-31790", "cwe": "CWE-119", "file": "openssl-cve-2026-31790/vuln.c", "function": "rsasve_generate", "id": "openssl-cve-2026-31790:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-31790", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/kem/rsa_kem.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "eed200f58cd8645ed77e46b7e9f764e284df379e", "commit_url": "https://github.com/openssl/openssl/commit/eed200f58cd8645ed77e46b7e9f764e284df379e", "cve": "CVE-2026-31790", "cwe": "CWE-119", "file": "openssl-cve-2026-31790/fixed.c", "function": "rsasve_generate", "id": "openssl-cve-2026-31790:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-31790", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/kem/rsa_kem.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "commit_url": "https://github.com/openssl/openssl/commit/abd8b2eec7e3f3fda60ecfb68498b246b52af482", "cve": "CVE-2026-31790", "cwe": "CWE-119", "file": "openssl-cve-2026-31790-rsasve_generate/vuln.in", "function": "rsasve_generate", "id": "openssl-cve-2026-31790-rsasve_generate:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-31790-rsasve_generate", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/kem/rsa_kem.c.in", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "abd8b2eec7e3f3fda60ecfb68498b246b52af482", "commit_url": "https://github.com/openssl/openssl/commit/abd8b2eec7e3f3fda60ecfb68498b246b52af482", "cve": "CVE-2026-31790", "cwe": "CWE-119", "file": "openssl-cve-2026-31790-rsasve_generate/fixed.in", "function": "rsasve_generate", "id": "openssl-cve-2026-31790-rsasve_generate:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-31790-rsasve_generate", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/kem/rsa_kem.c.in", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "buffer overflow", "commit": "b7ae7a093997b5cd549bc21cccd715510fef86c0", "commit_url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "cve": "CVE-2026-31789", "cwe": "CWE-119", "file": "openssl-cve-2026-31789/vuln.c", "function": "buf2hexstr_sep", "id": "openssl-cve-2026-31789:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-31789", "project": "openssl", "provenance": "human", "relpath": "crypto/o_str.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "buffer overflow", "commit": "a91e537d16d74050dbde50bb0dfb1fe9930f0521", "commit_url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "cve": "CVE-2026-31789", "cwe": "CWE-119", "file": "openssl-cve-2026-31789/fixed.c", "function": "buf2hexstr_sep", "id": "openssl-cve-2026-31789:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-31789", "project": "openssl", "provenance": "human", "relpath": "crypto/o_str.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "null pointer dereference", "commit": "d044f9252fe9a54001986fb4eb4e32076a056527", "commit_url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "cve": "CVE-2026-28388", "cwe": "CWE-476", "file": "openssl-cve-2026-28388/vuln.c", "function": "check_delta_base", "id": "openssl-cve-2026-28388:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28388", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "null pointer dereference", "commit": "59c3b3158553ab53275bbbccca5cb305d591cf2e", "commit_url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "cve": "CVE-2026-28388", "cwe": "CWE-476", "file": "openssl-cve-2026-28388/fixed.c", "function": "check_delta_base", "id": "openssl-cve-2026-28388:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28388", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "null pointer dereference", "commit": "6e74b1275cbc1fd1cf7ba32f662602d68501f6ca", "commit_url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389/vuln.c", "function": "rsa_cms_decrypt", "id": "openssl-cve-2026-28389:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28389", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_rsa.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "null pointer dereference", "commit": "af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "commit_url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389/fixed.c", "function": "rsa_cms_decrypt", "id": "openssl-cve-2026-28389:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28389", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_rsa.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "null pointer dereference", "commit": "72ec3e38c87f71f5c50ae3b16cc34d8371c71bb9", "commit_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389-dh_cms_set_shared_info/vuln.c", "function": "dh_cms_set_shared_info", "id": "openssl-cve-2026-28389-dh_cms_set_shared_info:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28389-dh_cms_set_shared_info", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_dh.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "null pointer dereference", "commit": "7b5274e812400cacb6f3be4c2df5340923fa807f", "commit_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389-dh_cms_set_shared_info/fixed.c", "function": "dh_cms_set_shared_info", "id": "openssl-cve-2026-28389-dh_cms_set_shared_info:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28389-dh_cms_set_shared_info", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_dh.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} -{"class": "null pointer dereference", "commit": "72ec3e38c87f71f5c50ae3b16cc34d8371c71bb9", "commit_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389-ecdh_cms_set_shared_info/vuln.c", "function": "ecdh_cms_set_shared_info", "id": "openssl-cve-2026-28389-ecdh_cms_set_shared_info:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28389-ecdh_cms_set_shared_info", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_ec.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "null pointer dereference", "commit": "7b5274e812400cacb6f3be4c2df5340923fa807f", "commit_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389-ecdh_cms_set_shared_info/fixed.c", "function": "ecdh_cms_set_shared_info", "id": "openssl-cve-2026-28389-ecdh_cms_set_shared_info:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28389-ecdh_cms_set_shared_info", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_ec.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "21d525dc846aed171fc886f3da614a6645948f13", "commit_url": "https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34", "cve": "CVE-2026-2673", "cwe": "CWE-119", "file": "openssl-cve-2026-2673/vuln.c", "function": "gid_cb", "id": "openssl-cve-2026-2673:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-2673", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "security fix", "commit": "85977e013f32ceb96aa034c0e741adddc1a05e34", "commit_url": "https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34", "cve": "CVE-2026-2673", "cwe": "CWE-119", "file": "openssl-cve-2026-2673/fixed.c", "function": "gid_cb", "id": "openssl-cve-2026-2673:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-2673", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2026} -{"class": "buffer overflow", "commit": "7565bb46fa2979511cb27aad1c2bd6b80adf7352", "commit_url": "https://github.com/openssl/openssl/commit/4191043c36f1a50c717a2d0075fc6f3b9bc0afc5", "cve": "CVE-2025-69419", "cwe": "CWE-119", "file": "openssl-cve-2025-69419/vuln.c", "function": "bmp_to_utf8", "id": "openssl-cve-2025-69419:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2025-69419", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_utl.c", "repo": "openssl/openssl", "split": "train", "year": 2025} -{"class": "buffer overflow", "commit": "4191043c36f1a50c717a2d0075fc6f3b9bc0afc5", "commit_url": "https://github.com/openssl/openssl/commit/4191043c36f1a50c717a2d0075fc6f3b9bc0afc5", "cve": "CVE-2025-69419", "cwe": "CWE-119", "file": "openssl-cve-2025-69419/fixed.c", "function": "bmp_to_utf8", "id": "openssl-cve-2025-69419:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2025-69419", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_utl.c", "repo": "openssl/openssl", "split": "train", "year": 2025} -{"class": "security fix", "commit": "475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6", "commit_url": "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347", "cve": "CVE-2025-69418", "cwe": "CWE-119", "file": "openssl-cve-2025-69418/vuln.c", "function": "CRYPTO_ocb128_encrypt", "id": "openssl-cve-2025-69418:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-69418", "project": "openssl", "provenance": "human", "relpath": "crypto/modes/ocb128.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} -{"class": "security fix", "commit": "52d23c86a54adab5ee9f80e48b242b52c4cc2347", "commit_url": "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347", "cve": "CVE-2025-69418", "cwe": "CWE-119", "file": "openssl-cve-2025-69418/fixed.c", "function": "CRYPTO_ocb128_encrypt", "id": "openssl-cve-2025-69418:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-69418", "project": "openssl", "provenance": "human", "relpath": "crypto/modes/ocb128.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} -{"class": "security fix", "commit": "384011202af92605d926fafe4a0bcd6b65d162ad", "commit_url": "https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4", "cve": "CVE-2025-66199", "cwe": "CWE-119", "file": "openssl-cve-2025-66199-tls13_process_compressed/vuln.c", "function": "tls13_process_compressed_certificate", "id": "openssl-cve-2025-66199-tls13_process_compressed:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-66199-tls13_process_compressed", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} -{"class": "security fix", "commit": "3ed1f75249932b155eef993a8e66a99cb98bfef4", "commit_url": "https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4", "cve": "CVE-2025-66199", "cwe": "CWE-119", "file": "openssl-cve-2025-66199-tls13_process_compressed/fixed.c", "function": "tls13_process_compressed_certificate", "id": "openssl-cve-2025-66199-tls13_process_compressed:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-66199-tls13_process_compressed", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} -{"class": "buffer overflow", "commit": "e0666f72294691a808443970b654412a6d92fa0f", "commit_url": "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6", "cve": "CVE-2025-68160", "cwe": "CWE-119", "file": "openssl-cve-2025-68160/vuln.c", "function": "linebuffer_write", "id": "openssl-cve-2025-68160:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2025-68160", "project": "openssl", "provenance": "human", "relpath": "crypto/bio/bf_lbuf.c", "repo": "openssl/openssl", "split": "train", "year": 2025} -{"class": "buffer overflow", "commit": "475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6", "commit_url": "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6", "cve": "CVE-2025-68160", "cwe": "CWE-119", "file": "openssl-cve-2025-68160/fixed.c", "function": "linebuffer_write", "id": "openssl-cve-2025-68160:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2025-68160", "project": "openssl", "provenance": "human", "relpath": "crypto/bio/bf_lbuf.c", "repo": "openssl/openssl", "split": "train", "year": 2025} -{"class": "security fix", "commit": "1f08e54bad32843044fe8a675948d65e3b4ece65", "commit_url": "https://github.com/openssl/openssl/commit/a7936fa4bd23c906e1955a16a0a0ab39a4953a61", "cve": "CVE-2025-15469", "cwe": "CWE-119", "file": "openssl-cve-2025-15469/vuln.c", "function": "do_fp_oneshot_sign", "id": "openssl-cve-2025-15469:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-15469", "project": "openssl", "provenance": "human", "relpath": "apps/dgst.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} -{"class": "security fix", "commit": "a7936fa4bd23c906e1955a16a0a0ab39a4953a61", "commit_url": "https://github.com/openssl/openssl/commit/a7936fa4bd23c906e1955a16a0a0ab39a4953a61", "cve": "CVE-2025-15469", "cwe": "CWE-119", "file": "openssl-cve-2025-15469/fixed.c", "function": "do_fp_oneshot_sign", "id": "openssl-cve-2025-15469:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-15469", "project": "openssl", "provenance": "human", "relpath": "apps/dgst.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} -{"class": "security fix", "commit": "3250efdfe99d2d7fe4fb05231add7fba864b7653", "commit_url": "https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e", "cve": "CVE-2025-15467", "cwe": "CWE-119", "file": "openssl-cve-2025-15467/vuln.c", "function": "evp_cipher_get_asn1_aead_params", "id": "openssl-cve-2025-15467:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-15467", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2025} -{"class": "security fix", "commit": "ce39170276daec87f55c39dad1f629b56344429e", "commit_url": "https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e", "cve": "CVE-2025-15467", "cwe": "CWE-119", "file": "openssl-cve-2025-15467/fixed.c", "function": "evp_cipher_get_asn1_aead_params", "id": "openssl-cve-2025-15467:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-15467", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2025} -{"class": "security fix", "commit": "b8654779e3b3b4eb0bda7623c0891d394e068187", "commit_url": "https://github.com/openssl/openssl/commit/205e3a55e16e4bd08c12fdbd3416ab829c0f6206", "cve": "CVE-2025-11187", "cwe": "CWE-119", "file": "openssl-cve-2025-11187/vuln.c", "function": "PBMAC1_PBKDF2_HMAC", "id": "openssl-cve-2025-11187:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-11187", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} -{"class": "security fix", "commit": "205e3a55e16e4bd08c12fdbd3416ab829c0f6206", "commit_url": "https://github.com/openssl/openssl/commit/205e3a55e16e4bd08c12fdbd3416ab829c0f6206", "cve": "CVE-2025-11187", "cwe": "CWE-119", "file": "openssl-cve-2025-11187/fixed.c", "function": "PBMAC1_PBKDF2_HMAC", "id": "openssl-cve-2025-11187:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-11187", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} -{"class": "security fix", "commit": "a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def", "commit_url": "https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b", "cve": "CVE-2025-9232", "cwe": "CWE-119", "file": "openssl-cve-2025-9232/vuln.c", "function": "use_proxy", "id": "openssl-cve-2025-9232:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-9232", "project": "openssl", "provenance": "human", "relpath": "crypto/http/http_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} -{"class": "security fix", "commit": "654dc11d23468a74fc8ea4672b702dd3feb7be4b", "commit_url": "https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b", "cve": "CVE-2025-9232", "cwe": "CWE-119", "file": "openssl-cve-2025-9232/fixed.c", "function": "use_proxy", "id": "openssl-cve-2025-9232:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-9232", "project": "openssl", "provenance": "human", "relpath": "crypto/http/http_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} -{"class": "buffer overflow", "commit": "7e0fc054a08706d194d3355aba4a06003cadfb29", "commit_url": "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def", "cve": "CVE-2025-9230", "cwe": "CWE-119", "file": "openssl-cve-2025-9230/vuln.c", "function": "kek_unwrap_key", "id": "openssl-cve-2025-9230:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2025-9230", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "split": "train", "year": 2025} -{"class": "buffer overflow", "commit": "a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def", "commit_url": "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def", "cve": "CVE-2025-9230", "cwe": "CWE-119", "file": "openssl-cve-2025-9230/fixed.c", "function": "kek_unwrap_key", "id": "openssl-cve-2025-9230:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2025-9230", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "split": "train", "year": 2025} -{"class": "security fix", "commit": "0db27ec7f8abd258d2e8849ac555ca26ba0cd8d6", "commit_url": "https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7", "cve": "CVE-2024-12797", "cwe": "CWE-119", "file": "openssl-cve-2024-12797/vuln.c", "function": "tls_post_process_server_rpk", "id": "openssl-cve-2024-12797:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-12797", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} -{"class": "security fix", "commit": "798779d43494549b611233f92652f0da5328fbe7", "commit_url": "https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7", "cve": "CVE-2024-12797", "cwe": "CWE-119", "file": "openssl-cve-2024-12797/fixed.c", "function": "tls_post_process_server_rpk", "id": "openssl-cve-2024-12797:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-12797", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} -{"class": "security fix", "commit": "643de602771f6b38ad7823e26d5a63c669eb185b", "commit_url": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844", "cve": "CVE-2024-13176", "cwe": "CWE-119", "file": "openssl-cve-2024-13176-ec_field_inverse_mod_ord/vuln.c", "function": "ec_field_inverse_mod_ord", "id": "openssl-cve-2024-13176-ec_field_inverse_mod_ord:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-13176-ec_field_inverse_mod_ord", "project": "openssl", "provenance": "human", "relpath": "crypto/ec/ec_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2024} -{"class": "security fix", "commit": "07272b05b04836a762b4baa874958af51d513844", "commit_url": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844", "cve": "CVE-2024-13176", "cwe": "CWE-119", "file": "openssl-cve-2024-13176-ec_field_inverse_mod_ord/fixed.c", "function": "ec_field_inverse_mod_ord", "id": "openssl-cve-2024-13176-ec_field_inverse_mod_ord:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-13176-ec_field_inverse_mod_ord", "project": "openssl", "provenance": "human", "relpath": "crypto/ec/ec_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2024} -{"class": "security fix", "commit": "9aae56395aa8e77c44a9df83fd395a644d016635", "commit_url": "https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6", "cve": "CVE-2024-6119", "cwe": "CWE-119", "file": "openssl-cve-2024-6119/vuln.c", "function": "do_x509_check", "id": "openssl-cve-2024-6119:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-6119", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "split": "train", "year": 2024} -{"class": "security fix", "commit": "06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6", "commit_url": "https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6", "cve": "CVE-2024-6119", "cwe": "CWE-119", "file": "openssl-cve-2024-6119/fixed.c", "function": "do_x509_check", "id": "openssl-cve-2024-6119:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-6119", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "split": "train", "year": 2024} -{"class": "security fix", "commit": "189a7ed3e380e34ea38fe4190a7c9396bace0fb7", "commit_url": "https://github.com/openssl/openssl/commit/4b375b998798dd516d367036773073e1b88e6433", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535/vuln.c", "function": "tls_parse_stoc_alpn", "id": "openssl-cve-2024-5535:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} -{"class": "security fix", "commit": "4b375b998798dd516d367036773073e1b88e6433", "commit_url": "https://github.com/openssl/openssl/commit/4b375b998798dd516d367036773073e1b88e6433", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535/fixed.c", "function": "tls_parse_stoc_alpn", "id": "openssl-cve-2024-5535:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} -{"class": "security fix", "commit": "72394c9a1a6a6b07edf43eb2ad7e95e1093ada1b", "commit_url": "https://github.com/openssl/openssl/commit/189a7ed3e380e34ea38fe4190a7c9396bace0fb7", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-tls_construct_stoc_next_/vuln.c", "function": "tls_construct_stoc_next_proto_neg", "id": "openssl-cve-2024-5535-tls_construct_stoc_next_:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-tls_construct_stoc_next_", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_srvr.c", "repo": "openssl/openssl", "split": "train", "year": 2024} -{"class": "security fix", "commit": "189a7ed3e380e34ea38fe4190a7c9396bace0fb7", "commit_url": "https://github.com/openssl/openssl/commit/189a7ed3e380e34ea38fe4190a7c9396bace0fb7", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-tls_construct_stoc_next_/fixed.c", "function": "tls_construct_stoc_next_proto_neg", "id": "openssl-cve-2024-5535-tls_construct_stoc_next_:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-tls_construct_stoc_next_", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_srvr.c", "repo": "openssl/openssl", "split": "train", "year": 2024} -{"class": "security fix", "commit": "cf6f91f6121f4db167405db2f0de410a456f260c", "commit_url": "https://github.com/openssl/openssl/commit/159921152fd4aa91e4c849fd281ad93ac0d0d0ba", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-tls_parse_stoc_npn/vuln.c", "function": "tls_parse_stoc_npn", "id": "openssl-cve-2024-5535-tls_parse_stoc_npn:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-tls_parse_stoc_npn", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} -{"class": "security fix", "commit": "159921152fd4aa91e4c849fd281ad93ac0d0d0ba", "commit_url": "https://github.com/openssl/openssl/commit/159921152fd4aa91e4c849fd281ad93ac0d0d0ba", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-tls_parse_stoc_npn/fixed.c", "function": "tls_parse_stoc_npn", "id": "openssl-cve-2024-5535-tls_parse_stoc_npn:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-tls_parse_stoc_npn", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} -{"class": "security fix", "commit": "a6facb1042adda2394dc5c98fbceb7625eef141a", "commit_url": "https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-ssl_select_next_proto/vuln.c", "function": "SSL_select_next_proto", "id": "openssl-cve-2024-5535-ssl_select_next_proto:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-ssl_select_next_proto", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} -{"class": "security fix", "commit": "cf6f91f6121f4db167405db2f0de410a456f260c", "commit_url": "https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-ssl_select_next_proto/fixed.c", "function": "SSL_select_next_proto", "id": "openssl-cve-2024-5535-ssl_select_next_proto:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-ssl_select_next_proto", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} -{"class": "security fix", "commit": "015255851371757d54c2560643eb3b3a88123cf1", "commit_url": "https://github.com/openssl/openssl/commit/6cc511826f09e513b4ec066d9b95acaf4f86d991", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-alpn_select_cb/vuln.c", "function": "alpn_select_cb", "id": "openssl-cve-2024-5535-alpn_select_cb:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-alpn_select_cb", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_tserver.c", "repo": "openssl/openssl", "split": "train", "year": 2024} -{"class": "security fix", "commit": "6cc511826f09e513b4ec066d9b95acaf4f86d991", "commit_url": "https://github.com/openssl/openssl/commit/6cc511826f09e513b4ec066d9b95acaf4f86d991", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-alpn_select_cb/fixed.c", "function": "alpn_select_cb", "id": "openssl-cve-2024-5535-alpn_select_cb:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-alpn_select_cb", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_tserver.c", "repo": "openssl/openssl", "split": "train", "year": 2024} -{"class": "use after free", "commit": "b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "commit_url": "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741/vuln.c", "function": "ssl3_read_n", "id": "openssl-cve-2024-4741:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2024-4741", "project": "openssl", "provenance": "human", "relpath": "ssl/record/rec_layer_s3.c", "repo": "openssl/openssl", "split": "train", "year": 2024} -{"class": "use after free", "commit": "2d05959073c4bf8803401668b9df85931a08e020", "commit_url": "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741/fixed.c", "function": "ssl3_read_n", "id": "openssl-cve-2024-4741:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2024-4741", "project": "openssl", "provenance": "human", "relpath": "ssl/record/rec_layer_s3.c", "repo": "openssl/openssl", "split": "train", "year": 2024} -{"class": "use after free", "commit": "b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "commit_url": "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741-ssl3_release_read_buffer/vuln.c", "function": "ssl3_release_read_buffer", "id": "openssl-cve-2024-4741-ssl3_release_read_buffer:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2024-4741-ssl3_release_read_buffer", "project": "openssl", "provenance": "human", "relpath": "ssl/record/ssl3_buffer.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} -{"class": "use after free", "commit": "2d05959073c4bf8803401668b9df85931a08e020", "commit_url": "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741-ssl3_release_read_buffer/fixed.c", "function": "ssl3_release_read_buffer", "id": "openssl-cve-2024-4741-ssl3_release_read_buffer:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2024-4741-ssl3_release_read_buffer", "project": "openssl", "provenance": "human", "relpath": "ssl/record/ssl3_buffer.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} -{"class": "security fix", "commit": "ec559c2a6cca3fd4cedae5c47f2dfa38e5e24865", "commit_url": "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "cve": "CVE-2024-4741", "cwe": "CWE-119", "file": "openssl-cve-2024-4741-ssl_free_buffers/vuln.c", "function": "SSL_free_buffers", "id": "openssl-cve-2024-4741-ssl_free_buffers:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-4741-ssl_free_buffers", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2024} -{"class": "security fix", "commit": "b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "commit_url": "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "cve": "CVE-2024-4741", "cwe": "CWE-119", "file": "openssl-cve-2024-4741-ssl_free_buffers/fixed.c", "function": "SSL_free_buffers", "id": "openssl-cve-2024-4741-ssl_free_buffers:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-4741-ssl_free_buffers", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2024} -{"class": "use after free", "commit": "c88c3de51020c37e8706bf7a682a162593053aac", "commit_url": "https://github.com/openssl/openssl/commit/10171e5b511b700c5ecd4fd3e1086b19c34b1ae3", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741-tls_release_read_buffer/vuln.c", "function": "tls_release_read_buffer", "id": "openssl-cve-2024-4741-tls_release_read_buffer:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2024-4741-tls_release_read_buffer", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "split": "train", "year": 2024} -{"class": "use after free", "commit": "10171e5b511b700c5ecd4fd3e1086b19c34b1ae3", "commit_url": "https://github.com/openssl/openssl/commit/10171e5b511b700c5ecd4fd3e1086b19c34b1ae3", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741-tls_release_read_buffer/fixed.c", "function": "tls_release_read_buffer", "id": "openssl-cve-2024-4741-tls_release_read_buffer:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2024-4741-tls_release_read_buffer", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "split": "train", "year": 2024} -{"class": "security fix", "commit": "17765d9cefed8b4ada6548719beb98e22672a9bd", "commit_url": "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac", "cve": "CVE-2024-4741", "cwe": "CWE-119", "file": "openssl-cve-2024-4741-tls_free_buffers/vuln.c", "function": "tls_free_buffers", "id": "openssl-cve-2024-4741-tls_free_buffers:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-4741-tls_free_buffers", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} -{"class": "security fix", "commit": "c88c3de51020c37e8706bf7a682a162593053aac", "commit_url": "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac", "cve": "CVE-2024-4741", "cwe": "CWE-119", "file": "openssl-cve-2024-4741-tls_free_buffers/fixed.c", "function": "tls_free_buffers", "id": "openssl-cve-2024-4741-tls_free_buffers:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-4741-tls_free_buffers", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} -{"class": "security fix", "commit": "d4b119c567cb5dcaf83add7ca2ea1d646eb3ef9f", "commit_url": "https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397", "cve": "CVE-2024-4603", "cwe": "CWE-119", "file": "openssl-cve-2024-4603/vuln.c", "function": "ossl_dsa_check_params", "id": "openssl-cve-2024-4603:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-4603", "project": "openssl", "provenance": "human", "relpath": "crypto/dsa/dsa_check.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} -{"class": "security fix", "commit": "3559e868e58005d15c6013a0c1fd832e51c73397", "commit_url": "https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397", "cve": "CVE-2024-4603", "cwe": "CWE-119", "file": "openssl-cve-2024-4603/fixed.c", "function": "ossl_dsa_check_params", "id": "openssl-cve-2024-4603:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-4603", "project": "openssl", "provenance": "human", "relpath": "crypto/dsa/dsa_check.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} -{"class": "security fix", "commit": "c1e462ee4bd61867ee391fc13110ca41e4889535", "commit_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "cve": "CVE-2024-2511", "cwe": "CWE-119", "file": "openssl-cve-2024-2511/vuln.c", "function": "ssl_update_cache", "id": "openssl-cve-2024-2511:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-2511", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} -{"class": "security fix", "commit": "b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "commit_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "cve": "CVE-2024-2511", "cwe": "CWE-119", "file": "openssl-cve-2024-2511/fixed.c", "function": "ssl_update_cache", "id": "openssl-cve-2024-2511:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-2511", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} -{"class": "security fix", "commit": "c1e462ee4bd61867ee391fc13110ca41e4889535", "commit_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "cve": "CVE-2024-2511", "cwe": "CWE-119", "file": "openssl-cve-2024-2511-tls_construct_server_hel/vuln.c", "function": "tls_construct_server_hello", "id": "openssl-cve-2024-2511-tls_construct_server_hel:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-2511-tls_construct_server_hel", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_srvr.c", "repo": "openssl/openssl", "split": "train", "year": 2024} -{"class": "security fix", "commit": "b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "commit_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "cve": "CVE-2024-2511", "cwe": "CWE-119", "file": "openssl-cve-2024-2511-tls_construct_server_hel/fixed.c", "function": "tls_construct_server_hello", "id": "openssl-cve-2024-2511-tls_construct_server_hel:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-2511-tls_construct_server_hel", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_srvr.c", "repo": "openssl/openssl", "split": "train", "year": 2024} -{"class": "null pointer dereference", "commit": "6c70934a46eaa1734c2efbe9d7baac51c607062e", "commit_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "cve": "CVE-2024-0727", "cwe": "CWE-476", "file": "openssl-cve-2024-0727/vuln.c", "function": "pkcs12_gen_mac", "id": "openssl-cve-2024-0727:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2024-0727", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} -{"class": "null pointer dereference", "commit": "09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "commit_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "cve": "CVE-2024-0727", "cwe": "CWE-476", "file": "openssl-cve-2024-0727/fixed.c", "function": "pkcs12_gen_mac", "id": "openssl-cve-2024-0727:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2024-0727", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} -{"class": "null pointer dereference", "commit": "6c70934a46eaa1734c2efbe9d7baac51c607062e", "commit_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "cve": "CVE-2024-0727", "cwe": "CWE-476", "file": "openssl-cve-2024-0727-smime_write_pkcs7/vuln.c", "function": "SMIME_write_PKCS7", "id": "openssl-cve-2024-0727-smime_write_pkcs7:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2024-0727-smime_write_pkcs7", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_mime.c", "repo": "openssl/openssl", "split": "train", "year": 2024} -{"class": "null pointer dereference", "commit": "09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "commit_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "cve": "CVE-2024-0727", "cwe": "CWE-476", "file": "openssl-cve-2024-0727-smime_write_pkcs7/fixed.c", "function": "SMIME_write_PKCS7", "id": "openssl-cve-2024-0727-smime_write_pkcs7:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2024-0727-smime_write_pkcs7", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_mime.c", "repo": "openssl/openssl", "split": "train", "year": 2024} -{"class": "security fix", "commit": "23d21359e35536a4ee8f7be0b245ddbfac909bff", "commit_url": "https://github.com/openssl/openssl/commit/0df40630850fb2740e6be6890bb905d3fc623b2d", "cve": "CVE-2023-5363", "cwe": "CWE-119", "file": "openssl-cve-2023-5363/vuln.c", "function": "evp_cipher_init_internal", "id": "openssl-cve-2023-5363:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-5363", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "split": "train", "year": 2023} -{"class": "security fix", "commit": "0df40630850fb2740e6be6890bb905d3fc623b2d", "commit_url": "https://github.com/openssl/openssl/commit/0df40630850fb2740e6be6890bb905d3fc623b2d", "cve": "CVE-2023-5363", "cwe": "CWE-119", "file": "openssl-cve-2023-5363/fixed.c", "function": "evp_cipher_init_internal", "id": "openssl-cve-2023-5363:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-5363", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "split": "train", "year": 2023} -{"class": "security fix", "commit": "e648db50d9a63f71cab5cb78424c2932d019a744", "commit_url": "https://github.com/openssl/openssl/commit/9002fd07327a91f35ba6c1307e71fa6fd4409b7f", "cve": "CVE-2023-3817", "cwe": "CWE-119", "file": "openssl-cve-2023-3817-dh_check/vuln.c", "function": "DH_check", "id": "openssl-cve-2023-3817-dh_check:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-3817-dh_check", "project": "openssl", "provenance": "human", "relpath": "crypto/dh/dh_check.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} -{"class": "security fix", "commit": "9002fd07327a91f35ba6c1307e71fa6fd4409b7f", "commit_url": "https://github.com/openssl/openssl/commit/9002fd07327a91f35ba6c1307e71fa6fd4409b7f", "cve": "CVE-2023-3817", "cwe": "CWE-119", "file": "openssl-cve-2023-3817-dh_check/fixed.c", "function": "DH_check", "id": "openssl-cve-2023-3817-dh_check:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-3817-dh_check", "project": "openssl", "provenance": "human", "relpath": "crypto/dh/dh_check.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} -{"class": "security fix", "commit": "fe824ce0c5d51e7e7cf36c31db6c49c1c0c04a25", "commit_url": "https://github.com/openssl/openssl/commit/8780a896543a654e757db1b9396383f9d8095528", "cve": "CVE-2023-3446", "cwe": "CWE-119", "file": "openssl-cve-2023-3446/vuln.c", "function": "DH_check", "id": "openssl-cve-2023-3446:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-3446", "project": "openssl", "provenance": "human", "relpath": "crypto/dh/dh_check.c", "repo": "openssl/openssl", "split": "train", "year": 2023} -{"class": "security fix", "commit": "8780a896543a654e757db1b9396383f9d8095528", "commit_url": "https://github.com/openssl/openssl/commit/8780a896543a654e757db1b9396383f9d8095528", "cve": "CVE-2023-3446", "cwe": "CWE-119", "file": "openssl-cve-2023-3446/fixed.c", "function": "DH_check", "id": "openssl-cve-2023-3446:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-3446", "project": "openssl", "provenance": "human", "relpath": "crypto/dh/dh_check.c", "repo": "openssl/openssl", "split": "train", "year": 2023} -{"class": "security fix", "commit": "175fa8469fc78f6cf35dfb87d26899e60e9ff1d4", "commit_url": "https://github.com/openssl/openssl/commit/00e2f5eea29994d19293ec4e8c8775ba73678598", "cve": "CVE-2023-2975", "cwe": "CWE-119", "file": "openssl-cve-2023-2975/vuln.c", "function": "siv_cipher", "id": "openssl-cve-2023-2975:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-2975", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_siv.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} -{"class": "security fix", "commit": "00e2f5eea29994d19293ec4e8c8775ba73678598", "commit_url": "https://github.com/openssl/openssl/commit/00e2f5eea29994d19293ec4e8c8775ba73678598", "cve": "CVE-2023-2975", "cwe": "CWE-119", "file": "openssl-cve-2023-2975/fixed.c", "function": "siv_cipher", "id": "openssl-cve-2023-2975:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-2975", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_siv.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} -{"class": "security fix", "commit": "3ca28c9e81fae36b0b44dc39beecd2b5a7561975", "commit_url": "https://github.com/openssl/openssl/commit/d63b3e7959e79f98d60760a739f7876dc5adc838", "cve": "CVE-2023-2650", "cwe": "CWE-119", "file": "openssl-cve-2023-2650/vuln.c", "function": "OBJ_obj2txt", "id": "openssl-cve-2023-2650:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-2650", "project": "openssl", "provenance": "human", "relpath": "crypto/objects/obj_dat.c", "repo": "openssl/openssl", "split": "train", "year": 2023} -{"class": "security fix", "commit": "d63b3e7959e79f98d60760a739f7876dc5adc838", "commit_url": "https://github.com/openssl/openssl/commit/d63b3e7959e79f98d60760a739f7876dc5adc838", "cve": "CVE-2023-2650", "cwe": "CWE-119", "file": "openssl-cve-2023-2650/fixed.c", "function": "OBJ_obj2txt", "id": "openssl-cve-2023-2650:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-2650", "project": "openssl", "provenance": "human", "relpath": "crypto/objects/obj_dat.c", "repo": "openssl/openssl", "split": "train", "year": 2023} -{"class": "buffer overflow", "commit": "5d6f13d90d5c4212737002bcd54871cf236a1220", "commit_url": "https://github.com/openssl/openssl/commit/d12cde7fc5561d463badcd8a73079cf92864c31e", "cve": "CVE-2022-37454", "cwe": "CWE-119", "file": "openssl-cve-2022-37454/vuln.c", "function": "HKDF_Expand", "id": "openssl-cve-2022-37454:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-37454", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/kdfs/hkdf.c", "repo": "openssl/openssl", "split": "train", "year": 2022} -{"class": "buffer overflow", "commit": "d12cde7fc5561d463badcd8a73079cf92864c31e", "commit_url": "https://github.com/openssl/openssl/commit/d12cde7fc5561d463badcd8a73079cf92864c31e", "cve": "CVE-2022-37454", "cwe": "CWE-119", "file": "openssl-cve-2022-37454/fixed.c", "function": "HKDF_Expand", "id": "openssl-cve-2022-37454:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-37454", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/kdfs/hkdf.c", "repo": "openssl/openssl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "908eaceb62624f5b5c505b286d904bd3a4e8a64a", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304/vuln.c", "function": "bn_sub_words", "id": "openssl-cve-2022-4304:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304", "project": "openssl", "provenance": "human", "relpath": "crypto/bn/bn_asm.c", "repo": "openssl/openssl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "a00d757d9ca212994625d1a02c81cc5edd27e13b", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304/fixed.c", "function": "bn_sub_words", "id": "openssl-cve-2022-4304:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304", "project": "openssl", "provenance": "human", "relpath": "crypto/bn/bn_asm.c", "repo": "openssl/openssl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "908eaceb62624f5b5c505b286d904bd3a4e8a64a", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-bn_blinding_invert_ex/vuln.c", "function": "BN_BLINDING_invert_ex", "id": "openssl-cve-2022-4304-bn_blinding_invert_ex:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304-bn_blinding_invert_ex", "project": "openssl", "provenance": "human", "relpath": "crypto/bn/bn_blind.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "a00d757d9ca212994625d1a02c81cc5edd27e13b", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-bn_blinding_invert_ex/fixed.c", "function": "BN_BLINDING_invert_ex", "id": "openssl-cve-2022-4304-bn_blinding_invert_ex:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304-bn_blinding_invert_ex", "project": "openssl", "provenance": "human", "relpath": "crypto/bn/bn_blind.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "908eaceb62624f5b5c505b286d904bd3a4e8a64a", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-rsa_blinding_invert/vuln.c", "function": "rsa_blinding_invert", "id": "openssl-cve-2022-4304-rsa_blinding_invert:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304-rsa_blinding_invert", "project": "openssl", "provenance": "human", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "a00d757d9ca212994625d1a02c81cc5edd27e13b", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-rsa_blinding_invert/fixed.c", "function": "rsa_blinding_invert", "id": "openssl-cve-2022-4304-rsa_blinding_invert:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304-rsa_blinding_invert", "project": "openssl", "provenance": "human", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "f675d164e5d9648c3537a0f5efe1cc2fd232b4a9", "commit_url": "https://github.com/openssl/openssl/commit/b013765abfa80036dc779dd0e50602c57bb3bf95", "cve": "CVE-2023-0465", "cwe": "CWE-119", "file": "openssl-cve-2023-0465/vuln.c", "function": "check_policy", "id": "openssl-cve-2023-0465:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0465", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} -{"class": "security fix", "commit": "b013765abfa80036dc779dd0e50602c57bb3bf95", "commit_url": "https://github.com/openssl/openssl/commit/b013765abfa80036dc779dd0e50602c57bb3bf95", "cve": "CVE-2023-0465", "cwe": "CWE-119", "file": "openssl-cve-2023-0465/fixed.c", "function": "check_policy", "id": "openssl-cve-2023-0465:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0465", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} -{"class": "security fix", "commit": "969327390220aee7515a4054d5189186402d6687", "commit_url": "https://github.com/openssl/openssl/commit/879f7080d7e141f415c79eaa3a8ac4a3dad0348b", "cve": "CVE-2023-0464", "cwe": "CWE-119", "file": "openssl-cve-2023-0464/vuln.c", "function": "tree_init", "id": "openssl-cve-2023-0464:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0464", "project": "openssl", "provenance": "human", "relpath": "crypto/x509v3/pcy_tree.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} -{"class": "security fix", "commit": "879f7080d7e141f415c79eaa3a8ac4a3dad0348b", "commit_url": "https://github.com/openssl/openssl/commit/879f7080d7e141f415c79eaa3a8ac4a3dad0348b", "cve": "CVE-2023-0464", "cwe": "CWE-119", "file": "openssl-cve-2023-0464/fixed.c", "function": "tree_init", "id": "openssl-cve-2023-0464:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0464", "project": "openssl", "provenance": "human", "relpath": "crypto/x509v3/pcy_tree.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} -{"class": "security fix", "commit": "c309c4dce742c3eeb393a0f03f9c567d0e368ccc", "commit_url": "https://github.com/openssl/openssl/commit/959c59c7a0164117e7f8366466a32bb1f8d77ff1", "cve": "CVE-2023-0464", "cwe": "CWE-119", "file": "openssl-cve-2023-0464-tree_init/vuln.c", "function": "tree_init", "id": "openssl-cve-2023-0464-tree_init:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0464-tree_init", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/pcy_tree.c", "repo": "openssl/openssl", "split": "train", "year": 2023} -{"class": "security fix", "commit": "959c59c7a0164117e7f8366466a32bb1f8d77ff1", "commit_url": "https://github.com/openssl/openssl/commit/959c59c7a0164117e7f8366466a32bb1f8d77ff1", "cve": "CVE-2023-0464", "cwe": "CWE-119", "file": "openssl-cve-2023-0464-tree_init/fixed.c", "function": "tree_init", "id": "openssl-cve-2023-0464-tree_init:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0464-tree_init", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/pcy_tree.c", "repo": "openssl/openssl", "split": "train", "year": 2023} -{"class": "security fix", "commit": "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449/vuln.c", "function": "tls_get_more_records", "id": "openssl-cve-2021-3449:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "2b9e2afc382490592078cdb69d06f54f0fefd4c6", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449/fixed.c", "function": "tls_get_more_records", "id": "openssl-cve-2021-3449:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-def_generate_session_id/vuln.c", "function": "def_generate_session_id", "id": "openssl-cve-2021-3449-def_generate_session_id:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-def_generate_session_id", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_sess.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "2b9e2afc382490592078cdb69d06f54f0fefd4c6", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-def_generate_session_id/fixed.c", "function": "def_generate_session_id", "id": "openssl-cve-2021-3449-def_generate_session_id:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-def_generate_session_id", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_sess.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_parse_ctos_renegotia/vuln.c", "function": "tls_parse_ctos_renegotiate", "id": "openssl-cve-2021-3449-tls_parse_ctos_renegotia:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_parse_ctos_renegotia", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_srvr.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "2b9e2afc382490592078cdb69d06f54f0fefd4c6", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_parse_ctos_renegotia/fixed.c", "function": "tls_parse_ctos_renegotiate", "id": "openssl-cve-2021-3449-tls_parse_ctos_renegotia:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_parse_ctos_renegotia", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_srvr.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_process_finished/vuln.c", "function": "tls_process_finished", "id": "openssl-cve-2021-3449-tls_process_finished:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_process_finished", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "2b9e2afc382490592078cdb69d06f54f0fefd4c6", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_process_finished/fixed.c", "function": "tls_process_finished", "id": "openssl-cve-2021-3449-tls_process_finished:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_process_finished", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "7880536fe17c2b5450e279155bedd51771d28c9f", "commit_url": "https://github.com/openssl/openssl/commit/6eebe6c0238178356114a96a7858f36b24172847", "cve": "CVE-2023-0401", "cwe": "CWE-119", "file": "openssl-cve-2023-0401/vuln.c", "function": "pkcs7_bio_add_digest", "id": "openssl-cve-2023-0401:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0401", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_doit.c", "repo": "openssl/openssl", "split": "train", "year": 2023} -{"class": "security fix", "commit": "6eebe6c0238178356114a96a7858f36b24172847", "commit_url": "https://github.com/openssl/openssl/commit/6eebe6c0238178356114a96a7858f36b24172847", "cve": "CVE-2023-0401", "cwe": "CWE-119", "file": "openssl-cve-2023-0401/fixed.c", "function": "pkcs7_bio_add_digest", "id": "openssl-cve-2023-0401:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0401", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_doit.c", "repo": "openssl/openssl", "split": "train", "year": 2023} -{"class": "security fix", "commit": "adf77d6657e836fc87391fad53d857927a764297", "commit_url": "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f", "cve": "CVE-2023-0286", "cwe": "CWE-119", "file": "openssl-cve-2023-0286-general_name_cmp/vuln.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2023-0286-general_name_cmp:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0286-general_name_cmp", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} -{"class": "security fix", "commit": "7880536fe17c2b5450e279155bedd51771d28c9f", "commit_url": "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f", "cve": "CVE-2023-0286", "cwe": "CWE-119", "file": "openssl-cve-2023-0286-general_name_cmp/fixed.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2023-0286-general_name_cmp:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0286-general_name_cmp", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} -{"class": "security fix", "commit": "3436f9c24ab90c1661e4798e7944f028d5d251ce", "commit_url": "https://github.com/openssl/openssl/commit/bcec03c33cc00a7b5eb89ebeeee59e604570a86a", "cve": "CVE-2023-0217", "cwe": "CWE-119", "file": "openssl-cve-2023-0217/vuln.c", "function": "ossl_ffc_validate_public_key_partial", "id": "openssl-cve-2023-0217:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0217", "project": "openssl", "provenance": "human", "relpath": "crypto/ffc/ffc_key_validate.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} -{"class": "security fix", "commit": "bcec03c33cc00a7b5eb89ebeeee59e604570a86a", "commit_url": "https://github.com/openssl/openssl/commit/bcec03c33cc00a7b5eb89ebeeee59e604570a86a", "cve": "CVE-2023-0217", "cwe": "CWE-119", "file": "openssl-cve-2023-0217/fixed.c", "function": "ossl_ffc_validate_public_key_partial", "id": "openssl-cve-2023-0217:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0217", "project": "openssl", "provenance": "human", "relpath": "crypto/ffc/ffc_key_validate.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} -{"class": "security fix", "commit": "625faca931957719c76fb16094cf5b6e0debe23f", "commit_url": "https://github.com/openssl/openssl/commit/80253dbdc92bec584f4a9866b43f8674156d838a", "cve": "CVE-2023-0216", "cwe": "CWE-119", "file": "openssl-cve-2023-0216/vuln.c", "function": "STACK_OF", "id": "openssl-cve-2023-0216:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0216", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2023} -{"class": "security fix", "commit": "80253dbdc92bec584f4a9866b43f8674156d838a", "commit_url": "https://github.com/openssl/openssl/commit/80253dbdc92bec584f4a9866b43f8674156d838a", "cve": "CVE-2023-0216", "cwe": "CWE-119", "file": "openssl-cve-2023-0216/fixed.c", "function": "STACK_OF", "id": "openssl-cve-2023-0216:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0216", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2023} -{"class": "security fix", "commit": "e2d0a3b5f559e23f11e4d4687b2889b483afb22a", "commit_url": "https://github.com/openssl/openssl/commit/8022a4799fe884b3bf8d538e2b4c4ec323663118", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-rsa_ossl_private_decrypt/vuln.c", "function": "rsa_ossl_private_decrypt", "id": "openssl-cve-2022-4304-rsa_ossl_private_decrypt:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304-rsa_ossl_private_decrypt", "project": "openssl", "provenance": "human", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "8022a4799fe884b3bf8d538e2b4c4ec323663118", "commit_url": "https://github.com/openssl/openssl/commit/8022a4799fe884b3bf8d538e2b4c4ec323663118", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-rsa_ossl_private_decrypt/fixed.c", "function": "rsa_ossl_private_decrypt", "id": "openssl-cve-2022-4304-rsa_ossl_private_decrypt:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304-rsa_ossl_private_decrypt", "project": "openssl", "provenance": "human", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "1ca61aa56090356bbdbb16cf48916fbd9886c78d", "commit_url": "https://github.com/openssl/openssl/commit/7fc67e0a33102aa47bbaa56533eeecb98c0450f7", "cve": "CVE-2020-25659", "cwe": "CWE-119", "file": "openssl-cve-2020-25659/vuln.c", "function": "rsa_ossl_private_decrypt", "id": "openssl-cve-2020-25659:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2020-25659", "project": "openssl", "provenance": "human", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "split": "holdout", "year": 2020} -{"class": "security fix", "commit": "7fc67e0a33102aa47bbaa56533eeecb98c0450f7", "commit_url": "https://github.com/openssl/openssl/commit/7fc67e0a33102aa47bbaa56533eeecb98c0450f7", "cve": "CVE-2020-25659", "cwe": "CWE-119", "file": "openssl-cve-2020-25659/fixed.c", "function": "rsa_ossl_private_decrypt", "id": "openssl-cve-2020-25659:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2020-25659", "project": "openssl", "provenance": "human", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "split": "holdout", "year": 2020} -{"class": "security fix", "commit": "9a5c884999a55595e376083b3a165515c8123049", "commit_url": "https://github.com/openssl/openssl/commit/7725e7bfe6f2ce8146b6552b44e0d226be7638e7", "cve": "CVE-2022-3996", "cwe": "CWE-119", "file": "openssl-cve-2022-3996/vuln.c", "function": "ossl_policy_cache_set_mapping", "id": "openssl-cve-2022-3996:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-3996", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/pcy_map.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "7725e7bfe6f2ce8146b6552b44e0d226be7638e7", "commit_url": "https://github.com/openssl/openssl/commit/7725e7bfe6f2ce8146b6552b44e0d226be7638e7", "cve": "CVE-2022-3996", "cwe": "CWE-119", "file": "openssl-cve-2022-3996/fixed.c", "function": "ossl_policy_cache_set_mapping", "id": "openssl-cve-2022-3996:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-3996", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/pcy_map.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} -{"class": "buffer overflow", "commit": "3b421ebc64c7b52f1b9feb3812bdc7781c784332", "commit_url": "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "cve": "CVE-2022-3786", "cwe": "CWE-119", "file": "openssl-cve-2022-3786-ossl_punycode_decode/vuln.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3786-ossl_punycode_decode:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-3786-ossl_punycode_decode", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "split": "train", "year": 2022} -{"class": "buffer overflow", "commit": "680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "commit_url": "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "cve": "CVE-2022-3786", "cwe": "CWE-119", "file": "openssl-cve-2022-3786-ossl_punycode_decode/fixed.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3786-ossl_punycode_decode:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-3786-ossl_punycode_decode", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "89d72311327735ef15c804d2adea84a0fb1bfa0a", "commit_url": "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332", "cve": "CVE-2022-3602", "cwe": "CWE-119", "file": "openssl-cve-2022-3602-ossl_punycode_decode/vuln.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3602-ossl_punycode_decode:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-3602-ossl_punycode_decode", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "3b421ebc64c7b52f1b9feb3812bdc7781c784332", "commit_url": "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332", "cve": "CVE-2022-3602", "cwe": "CWE-119", "file": "openssl-cve-2022-3602-ossl_punycode_decode/fixed.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3602-ossl_punycode_decode:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-3602-ossl_punycode_decode", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} -{"class": "null pointer dereference", "commit": "9f0867da4cbf77ed642717b5e703e09ab2c087a0", "commit_url": "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "cve": "CVE-2022-3358", "cwe": "CWE-476", "file": "openssl-cve-2022-3358/vuln.c", "function": "evp_md_init_internal", "id": "openssl-cve-2022-3358:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2022-3358", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/digest.c", "repo": "openssl/openssl", "split": "train", "year": 2022} -{"class": "null pointer dereference", "commit": "5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "commit_url": "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "cve": "CVE-2022-3358", "cwe": "CWE-476", "file": "openssl-cve-2022-3358/fixed.c", "function": "evp_md_init_internal", "id": "openssl-cve-2022-3358:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2022-3358", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/digest.c", "repo": "openssl/openssl", "split": "train", "year": 2022} -{"class": "null pointer dereference", "commit": "9f0867da4cbf77ed642717b5e703e09ab2c087a0", "commit_url": "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "cve": "CVE-2022-3358", "cwe": "CWE-476", "file": "openssl-cve-2022-3358-evp_cipher_init_internal/vuln.c", "function": "evp_cipher_init_internal", "id": "openssl-cve-2022-3358-evp_cipher_init_internal:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2022-3358-evp_cipher_init_internal", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} -{"class": "null pointer dereference", "commit": "5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "commit_url": "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "cve": "CVE-2022-3358", "cwe": "CWE-476", "file": "openssl-cve-2022-3358-evp_cipher_init_internal/fixed.c", "function": "evp_cipher_init_internal", "id": "openssl-cve-2022-3358-evp_cipher_init_internal:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2022-3358-evp_cipher_init_internal", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "abebcec7b1a30fbb1fd5c5cbbe8817690c139163", "commit_url": "https://github.com/openssl/openssl/commit/2c9c35870601b4a44d86ddbf512b38df38285cfa", "cve": "CVE-2022-2068", "cwe": "CWE-119", "file": "openssl-cve-2022-2068-hash_dir/vuln.in", "function": "hash_dir", "id": "openssl-cve-2022-2068-hash_dir:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-2068-hash_dir", "project": "openssl", "provenance": "human", "relpath": "tools/c_rehash.in", "repo": "openssl/openssl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "2c9c35870601b4a44d86ddbf512b38df38285cfa", "commit_url": "https://github.com/openssl/openssl/commit/2c9c35870601b4a44d86ddbf512b38df38285cfa", "cve": "CVE-2022-2068", "cwe": "CWE-119", "file": "openssl-cve-2022-2068-hash_dir/fixed.in", "function": "hash_dir", "id": "openssl-cve-2022-2068-hash_dir:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-2068-hash_dir", "project": "openssl", "provenance": "human", "relpath": "tools/c_rehash.in", "repo": "openssl/openssl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "3be529cd2eb4eb3eaaa7913af619fb9c918d4581", "commit_url": "https://github.com/openssl/openssl/commit/373de40f3f76c63e4f2684abd86706f3863347ca", "cve": "CVE-2022-29242", "cwe": "CWE-119", "file": "openssl-cve-2022-29242/vuln.c", "function": "tls_construct_cke_gost18", "id": "openssl-cve-2022-29242:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-29242", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "373de40f3f76c63e4f2684abd86706f3863347ca", "commit_url": "https://github.com/openssl/openssl/commit/373de40f3f76c63e4f2684abd86706f3863347ca", "cve": "CVE-2022-29242", "cwe": "CWE-119", "file": "openssl-cve-2022-29242/fixed.c", "function": "tls_construct_cke_gost18", "id": "openssl-cve-2022-29242:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-29242", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "55c80c222293a972587004c185dc5653ae207a0e", "commit_url": "https://github.com/openssl/openssl/commit/7d56a74a96828985db7354a55227a511615f732b", "cve": "CVE-2022-1434", "cwe": "CWE-119", "file": "openssl-cve-2022-1434/vuln.c", "function": "rc4_hmac_md5_set_ctx_params", "id": "openssl-cve-2022-1434:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-1434", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_rc4_hmac_md5.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "7d56a74a96828985db7354a55227a511615f732b", "commit_url": "https://github.com/openssl/openssl/commit/7d56a74a96828985db7354a55227a511615f732b", "cve": "CVE-2022-1434", "cwe": "CWE-119", "file": "openssl-cve-2022-1434/fixed.c", "function": "rc4_hmac_md5_set_ctx_params", "id": "openssl-cve-2022-1434:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-1434", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_rc4_hmac_md5.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "ae3ece03a61e8822fd7ea58f44812871efba82d1", "commit_url": "https://github.com/openssl/openssl/commit/2eda98790c5c2741d76d23cc1e74b0dc4f4b391a", "cve": "CVE-2022-1343", "cwe": "CWE-119", "file": "openssl-cve-2022-1343/vuln.c", "function": "ocsp_verify_signer", "id": "openssl-cve-2022-1343:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-1343", "project": "openssl", "provenance": "human", "relpath": "crypto/ocsp/ocsp_vfy.c", "repo": "openssl/openssl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "2eda98790c5c2741d76d23cc1e74b0dc4f4b391a", "commit_url": "https://github.com/openssl/openssl/commit/2eda98790c5c2741d76d23cc1e74b0dc4f4b391a", "cve": "CVE-2022-1343", "cwe": "CWE-119", "file": "openssl-cve-2022-1343/fixed.c", "function": "ocsp_verify_signer", "id": "openssl-cve-2022-1343:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-1343", "project": "openssl", "provenance": "human", "relpath": "crypto/ocsp/ocsp_vfy.c", "repo": "openssl/openssl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "758754966791c537ea95241438454aa86f91f256", "commit_url": "https://github.com/openssl/openssl/commit/d69ae8a93bfc0f2489c008fcf303a98d77a6df4d", "cve": "CVE-2021-4044", "cwe": "CWE-119", "file": "openssl-cve-2021-4044/vuln.c", "function": "has_san_id", "id": "openssl-cve-2021-4044:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-4044", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "d69ae8a93bfc0f2489c008fcf303a98d77a6df4d", "commit_url": "https://github.com/openssl/openssl/commit/d69ae8a93bfc0f2489c008fcf303a98d77a6df4d", "cve": "CVE-2021-4044", "cwe": "CWE-119", "file": "openssl-cve-2021-4044/fixed.c", "function": "has_san_id", "id": "openssl-cve-2021-4044:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-4044", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "8e78289c4e6f4c9f2fec073b78443736e689854d", "commit_url": "https://github.com/openssl/openssl/commit/758754966791c537ea95241438454aa86f91f256", "cve": "CVE-2021-4044", "cwe": "CWE-119", "file": "openssl-cve-2021-4044-tls_post_process_server_/vuln.c", "function": "tls_post_process_server_certificate", "id": "openssl-cve-2021-4044-tls_post_process_server_:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-4044-tls_post_process_server_", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "758754966791c537ea95241438454aa86f91f256", "commit_url": "https://github.com/openssl/openssl/commit/758754966791c537ea95241438454aa86f91f256", "cve": "CVE-2021-4044", "cwe": "CWE-119", "file": "openssl-cve-2021-4044-tls_post_process_server_/fixed.c", "function": "tls_post_process_server_certificate", "id": "openssl-cve-2021-4044-tls_post_process_server_:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-4044-tls_post_process_server_", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "4b8a8bb75229b64d1c7598d845fdc3c7e7d7eee2", "commit_url": "https://github.com/openssl/openssl/commit/36cf45ef3ba71e44a8be06ee81cb31aa02cb0010", "cve": "CVE-2021-3711", "cwe": "CWE-119", "file": "openssl-cve-2021-3711-sm2_asym_decrypt/vuln.c", "function": "sm2_asym_decrypt", "id": "openssl-cve-2021-3711-sm2_asym_decrypt:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3711-sm2_asym_decrypt", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/asymciphers/sm2_enc.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "36cf45ef3ba71e44a8be06ee81cb31aa02cb0010", "commit_url": "https://github.com/openssl/openssl/commit/36cf45ef3ba71e44a8be06ee81cb31aa02cb0010", "cve": "CVE-2021-3711", "cwe": "CWE-119", "file": "openssl-cve-2021-3711-sm2_asym_decrypt/fixed.c", "function": "sm2_asym_decrypt", "id": "openssl-cve-2021-3711-sm2_asym_decrypt:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3711-sm2_asym_decrypt", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/asymciphers/sm2_enc.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "98624776c4d501c8badd6f772ab7048ac9191cb9", "commit_url": "https://github.com/openssl/openssl/commit/7c038a6bcd98d4bbfd2c2892a87a1138d2f7c5f3", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-netscape_spki_print/vuln.c", "function": "NETSCAPE_SPKI_print", "id": "openssl-cve-2021-3712-netscape_spki_print:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-netscape_spki_print", "project": "openssl", "provenance": "human", "relpath": "crypto/asn1/t_spki.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "7c038a6bcd98d4bbfd2c2892a87a1138d2f7c5f3", "commit_url": "https://github.com/openssl/openssl/commit/7c038a6bcd98d4bbfd2c2892a87a1138d2f7c5f3", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-netscape_spki_print/fixed.c", "function": "NETSCAPE_SPKI_print", "id": "openssl-cve-2021-3712-netscape_spki_print:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-netscape_spki_print", "project": "openssl", "provenance": "human", "relpath": "crypto/asn1/t_spki.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "1f365708a3318a5f1a395f90c38b584a58d37fb9", "commit_url": "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-append_ia5/vuln.c", "function": "append_ia5", "id": "openssl-cve-2021-3712-append_ia5:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-append_ia5", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "98624776c4d501c8badd6f772ab7048ac9191cb9", "commit_url": "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-append_ia5/fixed.c", "function": "append_ia5", "id": "openssl-cve-2021-3712-append_ia5:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-append_ia5", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "d2015a783e64613d8e4a142fa05048d1863df944", "commit_url": "https://github.com/openssl/openssl/commit/95f8c1e142df835d03b5b62521383a462fc5470d", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet/vuln.c", "function": "ossl_cmp_hdr_push1_freeText", "id": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_hdr.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "95f8c1e142df835d03b5b62521383a462fc5470d", "commit_url": "https://github.com/openssl/openssl/commit/95f8c1e142df835d03b5b62521383a462fc5470d", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet/fixed.c", "function": "ossl_cmp_hdr_push1_freeText", "id": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_hdr.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "918430ba80d94ec8f05383b43b1872b1ebb13e1a", "commit_url": "https://github.com/openssl/openssl/commit/d2015a783e64613d8e4a142fa05048d1863df944", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-ia5ncasecmp/vuln.c", "function": "ia5ncasecmp", "id": "openssl-cve-2021-3712-ia5ncasecmp:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-ia5ncasecmp", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_ncons.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "d2015a783e64613d8e4a142fa05048d1863df944", "commit_url": "https://github.com/openssl/openssl/commit/d2015a783e64613d8e4a142fa05048d1863df944", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-ia5ncasecmp/fixed.c", "function": "ia5ncasecmp", "id": "openssl-cve-2021-3712-ia5ncasecmp:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-ia5ncasecmp", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_ncons.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd", "commit_url": "https://github.com/openssl/openssl/commit/918430ba80d94ec8f05383b43b1872b1ebb13e1a", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-i2r_pci/vuln.c", "function": "i2r_pci", "id": "openssl-cve-2021-3712-i2r_pci:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-i2r_pci", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_pci.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "918430ba80d94ec8f05383b43b1872b1ebb13e1a", "commit_url": "https://github.com/openssl/openssl/commit/918430ba80d94ec8f05383b43b1872b1ebb13e1a", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-i2r_pci/fixed.c", "function": "i2r_pci", "id": "openssl-cve-2021-3712-i2r_pci:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-i2r_pci", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_pci.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "1747d4658b3830951068a6a6c1fa2b45c4731fb3", "commit_url": "https://github.com/openssl/openssl/commit/b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-general_name_print/vuln.c", "function": "GENERAL_NAME_print", "id": "openssl-cve-2021-3712-general_name_print:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-general_name_print", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_san.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd", "commit_url": "https://github.com/openssl/openssl/commit/b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-general_name_print/fixed.c", "function": "GENERAL_NAME_print", "id": "openssl-cve-2021-3712-general_name_print:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-general_name_print", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_san.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "ad6ac17489241574136b7d035f01f6175dd9c941", "commit_url": "https://github.com/openssl/openssl/commit/1747d4658b3830951068a6a6c1fa2b45c4731fb3", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-print_qualifiers/vuln.c", "function": "print_qualifiers", "id": "openssl-cve-2021-3712-print_qualifiers:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-print_qualifiers", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_cpols.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "1747d4658b3830951068a6a6c1fa2b45c4731fb3", "commit_url": "https://github.com/openssl/openssl/commit/1747d4658b3830951068a6a6c1fa2b45c4731fb3", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-print_qualifiers/fixed.c", "function": "print_qualifiers", "id": "openssl-cve-2021-3712-print_qualifiers:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-print_qualifiers", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_cpols.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "8c74c9d1ade0fbdab5b815ddb747351b8b839641", "commit_url": "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "cve": "CVE-2021-3711", "cwe": "CWE-119", "file": "openssl-cve-2021-3711-pkey_sm2_decrypt/vuln.c", "function": "pkey_sm2_decrypt", "id": "openssl-cve-2021-3711-pkey_sm2_decrypt:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3711-pkey_sm2_decrypt", "project": "openssl", "provenance": "human", "relpath": "crypto/sm2/sm2_pmeth.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "commit_url": "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "cve": "CVE-2021-3711", "cwe": "CWE-119", "file": "openssl-cve-2021-3711-pkey_sm2_decrypt/fixed.c", "function": "pkey_sm2_decrypt", "id": "openssl-cve-2021-3711-pkey_sm2_decrypt:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3711-pkey_sm2_decrypt", "project": "openssl", "provenance": "human", "relpath": "crypto/sm2/sm2_pmeth.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-ssl_generate_master_secr/vuln.c", "function": "ssl_generate_master_secret", "id": "openssl-cve-2021-3449-ssl_generate_master_secr:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-ssl_generate_master_secr", "project": "openssl", "provenance": "human", "relpath": "ssl/s3_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-ssl_generate_master_secr/fixed.c", "function": "ssl_generate_master_secret", "id": "openssl-cve-2021-3449-ssl_generate_master_secr:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-ssl_generate_master_secr", "project": "openssl", "provenance": "human", "relpath": "ssl/s3_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos/vuln.c", "function": "SSL_CTX_set_alpn_protos", "id": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos/fixed.c", "function": "SSL_CTX_set_alpn_protos", "id": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-init_sig_algs_cert/vuln.c", "function": "init_sig_algs_cert", "id": "openssl-cve-2021-3449-init_sig_algs_cert:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-init_sig_algs_cert", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-init_sig_algs_cert/fixed.c", "function": "init_sig_algs_cert", "id": "openssl-cve-2021-3449-init_sig_algs_cert:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-init_sig_algs_cert", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_construct_ctos_early/vuln.c", "function": "tls_construct_ctos_early_data", "id": "openssl-cve-2021-3449-tls_construct_ctos_early:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_construct_ctos_early", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_construct_ctos_early/fixed.c", "function": "tls_construct_ctos_early_data", "id": "openssl-cve-2021-3449-tls_construct_ctos_early:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_construct_ctos_early", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_process_certificate_/vuln.c", "function": "tls_process_certificate_request", "id": "openssl-cve-2021-3449-tls_process_certificate_:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_process_certificate_", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_process_certificate_/fixed.c", "function": "tls_process_certificate_request", "id": "openssl-cve-2021-3449-tls_process_certificate_:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_process_certificate_", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_handle_alpn/vuln.c", "function": "tls_handle_alpn", "id": "openssl-cve-2021-3449-tls_handle_alpn:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_handle_alpn", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_srvr.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_handle_alpn/fixed.c", "function": "tls_handle_alpn", "id": "openssl-cve-2021-3449-tls_handle_alpn:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_handle_alpn", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_srvr.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "null pointer dereference", "commit": "112580c27b829b0ac0874d5c5787195f27c7952c", "commit_url": "https://github.com/openssl/openssl/commit/02b1636fe3db274497304a3e95a4e32ced7e841b", "cve": "CVE-2021-3449", "cwe": "CWE-476", "file": "openssl-cve-2021-3449-init_sig_algs/vuln.c", "function": "init_sig_algs", "id": "openssl-cve-2021-3449-init_sig_algs:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2021-3449-init_sig_algs", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "null pointer dereference", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/02b1636fe3db274497304a3e95a4e32ced7e841b", "cve": "CVE-2021-3449", "cwe": "CWE-476", "file": "openssl-cve-2021-3449-init_sig_algs/fixed.c", "function": "init_sig_algs", "id": "openssl-cve-2021-3449-init_sig_algs:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2021-3449-init_sig_algs", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "cfd74383d9b06f85cb1e166180346115a3f9a452", "commit_url": "https://github.com/openssl/openssl/commit/2a40b7bc7b94dd7de897a74571e7024f0cf0d63b", "cve": "CVE-2021-3450", "cwe": "CWE-119", "file": "openssl-cve-2021-3450/vuln.c", "function": "check_chain_extensions", "id": "openssl-cve-2021-3450:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3450", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "2a40b7bc7b94dd7de897a74571e7024f0cf0d63b", "commit_url": "https://github.com/openssl/openssl/commit/2a40b7bc7b94dd7de897a74571e7024f0cf0d63b", "cve": "CVE-2021-3450", "cwe": "CWE-119", "file": "openssl-cve-2021-3450/fixed.c", "function": "check_chain_extensions", "id": "openssl-cve-2021-3450:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3450", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "buffer overflow", "commit": "481a88f13c44996a008195791ea0dc076b968774", "commit_url": "https://github.com/openssl/openssl/commit/6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1", "cve": "CVE-2021-23840", "cwe": "CWE-119", "file": "openssl-cve-2021-23840-evp_encryptdecryptupdate/vuln.c", "function": "evp_EncryptDecryptUpdate", "id": "openssl-cve-2021-23840-evp_encryptdecryptupdate:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2021-23840-evp_encryptdecryptupdate", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "buffer overflow", "commit": "6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1", "commit_url": "https://github.com/openssl/openssl/commit/6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1", "cve": "CVE-2021-23840", "cwe": "CWE-119", "file": "openssl-cve-2021-23840-evp_encryptdecryptupdate/fixed.c", "function": "evp_EncryptDecryptUpdate", "id": "openssl-cve-2021-23840-evp_encryptdecryptupdate:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2021-23840-evp_encryptdecryptupdate", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} -{"class": "null pointer dereference", "commit": "c8c6e7438c03b2fc24e7ead460feeaef04911fb4", "commit_url": "https://github.com/openssl/openssl/commit/122a19ab48091c657f7cb1fb3af9fc07bd557bbf", "cve": "CVE-2021-23841", "cwe": "CWE-476", "file": "openssl-cve-2021-23841/vuln.c", "function": "X509_issuer_and_serial_hash", "id": "openssl-cve-2021-23841:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2021-23841", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_cmp.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "null pointer dereference", "commit": "122a19ab48091c657f7cb1fb3af9fc07bd557bbf", "commit_url": "https://github.com/openssl/openssl/commit/122a19ab48091c657f7cb1fb3af9fc07bd557bbf", "cve": "CVE-2021-23841", "cwe": "CWE-476", "file": "openssl-cve-2021-23841/fixed.c", "function": "X509_issuer_and_serial_hash", "id": "openssl-cve-2021-23841:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2021-23841", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_cmp.c", "repo": "openssl/openssl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "aa0ad2011d3e7ad8a611da274ef7d9c7706e289b", "commit_url": "https://github.com/openssl/openssl/commit/f960d81215ebf3f65e03d4d5d857fb9b666d6920", "cve": "CVE-2020-1971", "cwe": "CWE-119", "file": "openssl-cve-2020-1971-general_name_cmp/vuln.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2020-1971-general_name_cmp:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2020-1971-general_name_cmp", "project": "openssl", "provenance": "human", "relpath": "crypto/x509v3/v3_genn.c", "repo": "openssl/openssl", "split": "train", "year": 2020} -{"class": "security fix", "commit": "f960d81215ebf3f65e03d4d5d857fb9b666d6920", "commit_url": "https://github.com/openssl/openssl/commit/f960d81215ebf3f65e03d4d5d857fb9b666d6920", "cve": "CVE-2020-1971", "cwe": "CWE-119", "file": "openssl-cve-2020-1971-general_name_cmp/fixed.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2020-1971-general_name_cmp:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2020-1971-general_name_cmp", "project": "openssl", "provenance": "human", "relpath": "crypto/x509v3/v3_genn.c", "repo": "openssl/openssl", "split": "train", "year": 2020} -{"class": "null pointer dereference", "commit": "3656c08ab4b1b892730cb5e808b6f4298b08a2e6", "commit_url": "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4", "cve": "CVE-2020-1967", "cwe": "CWE-476", "file": "openssl-cve-2020-1967-tls1_check_sig_alg/vuln.c", "function": "tls1_check_sig_alg", "id": "openssl-cve-2020-1967-tls1_check_sig_alg:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2020-1967-tls1_check_sig_alg", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2020} -{"class": "null pointer dereference", "commit": "a87f3fe01a5a894aa27ccd6a239155fd129988e4", "commit_url": "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4", "cve": "CVE-2020-1967", "cwe": "CWE-476", "file": "openssl-cve-2020-1967-tls1_check_sig_alg/fixed.c", "function": "tls1_check_sig_alg", "id": "openssl-cve-2020-1967-tls1_check_sig_alg:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2020-1967-tls1_check_sig_alg", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2020} -{"class": "security fix", "commit": "f746780a1e548b4b93790b58d70c3b22fde5360d", "commit_url": "https://github.com/curl/curl/commit/e9a2b0dc72dd3a9aa3a5210e89079a3b719475dc", "cve": "CVE-2026-9080", "cwe": "CWE-119", "file": "curl-cve-2026-9080/vuln.c", "function": "mev_forget_socket", "id": "curl-cve-2026-9080:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2026-9080", "project": "curl", "provenance": "human", "relpath": "lib/multi_ev.c", "repo": "curl/curl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "e9a2b0dc72dd3a9aa3a5210e89079a3b719475dc", "commit_url": "https://github.com/curl/curl/commit/e9a2b0dc72dd3a9aa3a5210e89079a3b719475dc", "cve": "CVE-2026-9080", "cwe": "CWE-119", "file": "curl-cve-2026-9080/fixed.c", "function": "mev_forget_socket", "id": "curl-cve-2026-9080:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2026-9080", "project": "curl", "provenance": "human", "relpath": "lib/multi_ev.c", "repo": "curl/curl", "split": "holdout", "year": 2026} -{"class": "security fix", "commit": "09e25b9d94f4106eac8ca3a43b221bdc66f405e4", "commit_url": "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147", "cve": "CVE-2023-38545", "cwe": "CWE-119", "file": "curl-cve-2023-38545-do_socks5/vuln.c", "function": "do_SOCKS5", "id": "curl-cve-2023-38545-do_socks5:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2023-38545-do_socks5", "project": "curl", "provenance": "human", "relpath": "lib/socks.c", "repo": "curl/curl", "split": "train", "year": 2023} -{"class": "security fix", "commit": "fb4415d8aee6c1045be932a34fe6107c2f5ed147", "commit_url": "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147", "cve": "CVE-2023-38545", "cwe": "CWE-119", "file": "curl-cve-2023-38545-do_socks5/fixed.c", "function": "do_SOCKS5", "id": "curl-cve-2023-38545-do_socks5:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2023-38545-do_socks5", "project": "curl", "provenance": "human", "relpath": "lib/socks.c", "repo": "curl/curl", "split": "train", "year": 2023} -{"class": "security fix", "commit": "46f8911d3942dc06fdd67e9f6f3908982e5d2fb4", "commit_url": "https://github.com/curl/curl/commit/20f9dd6bae50b7223171b17ba7798946e74f877f", "cve": "CVE-2022-32207", "cwe": "CWE-119", "file": "curl-cve-2022-32207/vuln.c", "function": "cookie_output", "id": "curl-cve-2022-32207:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-32207", "project": "curl", "provenance": "human", "relpath": "lib/cookie.c", "repo": "curl/curl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "20f9dd6bae50b7223171b17ba7798946e74f877f", "commit_url": "https://github.com/curl/curl/commit/20f9dd6bae50b7223171b17ba7798946e74f877f", "cve": "CVE-2022-32207", "cwe": "CWE-119", "file": "curl-cve-2022-32207/fixed.c", "function": "cookie_output", "id": "curl-cve-2022-32207:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-32207", "project": "curl", "provenance": "human", "relpath": "lib/cookie.c", "repo": "curl/curl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "6ecdf5136b52af747e7bda08db9a748256b1cd09", "commit_url": "https://github.com/curl/curl/commit/3a09fbb7f264c67c438d01a30669ce325aa508e2", "cve": "CVE-2022-32206", "cwe": "CWE-119", "file": "curl-cve-2022-32206/vuln.c", "function": "Curl_build_unencoding_stack", "id": "curl-cve-2022-32206:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-32206", "project": "curl", "provenance": "human", "relpath": "lib/content_encoding.c", "repo": "curl/curl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "3a09fbb7f264c67c438d01a30669ce325aa508e2", "commit_url": "https://github.com/curl/curl/commit/3a09fbb7f264c67c438d01a30669ce325aa508e2", "cve": "CVE-2022-32206", "cwe": "CWE-119", "file": "curl-cve-2022-32206/fixed.c", "function": "Curl_build_unencoding_stack", "id": "curl-cve-2022-32206:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-32206", "project": "curl", "provenance": "human", "relpath": "lib/content_encoding.c", "repo": "curl/curl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "2b67a0a1129b20a56ed04859fec8999f5c0c4280", "commit_url": "https://github.com/curl/curl/commit/6ecdf5136b52af747e7bda08db9a748256b1cd09", "cve": "CVE-2022-32208", "cwe": "CWE-119", "file": "curl-cve-2022-32208/vuln.c", "function": "read_data", "id": "curl-cve-2022-32208:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-32208", "project": "curl", "provenance": "human", "relpath": "lib/krb5.c", "repo": "curl/curl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "6ecdf5136b52af747e7bda08db9a748256b1cd09", "commit_url": "https://github.com/curl/curl/commit/6ecdf5136b52af747e7bda08db9a748256b1cd09", "cve": "CVE-2022-32208", "cwe": "CWE-119", "file": "curl-cve-2022-32208/fixed.c", "function": "read_data", "id": "curl-cve-2022-32208:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-32208", "project": "curl", "provenance": "human", "relpath": "lib/krb5.c", "repo": "curl/curl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "7e92d12b4e6911f424678a133b19de670e183a59", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-curl_init_userdefined/vuln.c", "function": "Curl_init_userdefined", "id": "curl-cve-2022-27782-curl_init_userdefined:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-curl_init_userdefined", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "f18af4f874cecab82a9797e8c7541e0990c7a64c", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-curl_init_userdefined/fixed.c", "function": "Curl_init_userdefined", "id": "curl-cve-2022-27782-curl_init_userdefined:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-curl_init_userdefined", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "7e92d12b4e6911f424678a133b19de670e183a59", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-gtls_shutdown/vuln.c", "function": "gtls_shutdown", "id": "curl-cve-2022-27782-gtls_shutdown:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-gtls_shutdown", "project": "curl", "provenance": "human", "relpath": "lib/vtls/gtls.c", "repo": "curl/curl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "f18af4f874cecab82a9797e8c7541e0990c7a64c", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-gtls_shutdown/fixed.c", "function": "gtls_shutdown", "id": "curl-cve-2022-27782-gtls_shutdown:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-gtls_shutdown", "project": "curl", "provenance": "human", "relpath": "lib/vtls/gtls.c", "repo": "curl/curl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "7e92d12b4e6911f424678a133b19de670e183a59", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-nss_setup_connect/vuln.c", "function": "nss_setup_connect", "id": "curl-cve-2022-27782-nss_setup_connect:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-nss_setup_connect", "project": "curl", "provenance": "human", "relpath": "lib/vtls/nss.c", "repo": "curl/curl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "f18af4f874cecab82a9797e8c7541e0990c7a64c", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-nss_setup_connect/fixed.c", "function": "nss_setup_connect", "id": "curl-cve-2022-27782-nss_setup_connect:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-nss_setup_connect", "project": "curl", "provenance": "human", "relpath": "lib/vtls/nss.c", "repo": "curl/curl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "7e92d12b4e6911f424678a133b19de670e183a59", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-ossl_connect_step1/vuln.c", "function": "ossl_connect_step1", "id": "curl-cve-2022-27782-ossl_connect_step1:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-ossl_connect_step1", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "f18af4f874cecab82a9797e8c7541e0990c7a64c", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-ossl_connect_step1/fixed.c", "function": "ossl_connect_step1", "id": "curl-cve-2022-27782-ossl_connect_step1:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-ossl_connect_step1", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "7e92d12b4e6911f424678a133b19de670e183a59", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-curl_free_primary_ssl_co/vuln.c", "function": "Curl_free_primary_ssl_config", "id": "curl-cve-2022-27782-curl_free_primary_ssl_co:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-curl_free_primary_ssl_co", "project": "curl", "provenance": "human", "relpath": "lib/vtls/vtls.c", "repo": "curl/curl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "f18af4f874cecab82a9797e8c7541e0990c7a64c", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-curl_free_primary_ssl_co/fixed.c", "function": "Curl_free_primary_ssl_config", "id": "curl-cve-2022-27782-curl_free_primary_ssl_co:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-curl_free_primary_ssl_co", "project": "curl", "provenance": "human", "relpath": "lib/vtls/vtls.c", "repo": "curl/curl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "fae6fea209a2d4db1582f608bd8cc8000721733a", "commit_url": "https://github.com/curl/curl/commit/8c7ee9083d0d719d0a77ab20d9cc2ae84eeea7f3", "cve": "CVE-2022-27778", "cwe": "CWE-119", "file": "curl-cve-2022-27778/vuln.c", "function": "post_per_transfer", "id": "curl-cve-2022-27778:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27778", "project": "curl", "provenance": "human", "relpath": "src/tool_operate.c", "repo": "curl/curl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "8c7ee9083d0d719d0a77ab20d9cc2ae84eeea7f3", "commit_url": "https://github.com/curl/curl/commit/8c7ee9083d0d719d0a77ab20d9cc2ae84eeea7f3", "cve": "CVE-2022-27778", "cwe": "CWE-119", "file": "curl-cve-2022-27778/fixed.c", "function": "post_per_transfer", "id": "curl-cve-2022-27778:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27778", "project": "curl", "provenance": "human", "relpath": "src/tool_operate.c", "repo": "curl/curl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "ff3ee510c328db03bf171cae6179bb9463fb054f", "commit_url": "https://github.com/curl/curl/commit/fae6fea209a2d4db1582f608bd8cc8000721733a", "cve": "CVE-2022-30115", "cwe": "CWE-119", "file": "curl-cve-2022-30115/vuln.c", "function": "hsts_create", "id": "curl-cve-2022-30115:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-30115", "project": "curl", "provenance": "human", "relpath": "lib/hsts.c", "repo": "curl/curl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "fae6fea209a2d4db1582f608bd8cc8000721733a", "commit_url": "https://github.com/curl/curl/commit/fae6fea209a2d4db1582f608bd8cc8000721733a", "cve": "CVE-2022-30115", "cwe": "CWE-119", "file": "curl-cve-2022-30115/fixed.c", "function": "hsts_create", "id": "curl-cve-2022-30115:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-30115", "project": "curl", "provenance": "human", "relpath": "lib/hsts.c", "repo": "curl/curl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "5c7da89d404bf59c8dd82a001119a16d18365917", "commit_url": "https://github.com/curl/curl/commit/914aaab9153764ef8fa4178215b8ad89d3ac263a", "cve": "CVE-2022-27780", "cwe": "CWE-119", "file": "curl-cve-2022-27780/vuln.c", "function": "hostname_check", "id": "curl-cve-2022-27780:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27780", "project": "curl", "provenance": "human", "relpath": "lib/urlapi.c", "repo": "curl/curl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "914aaab9153764ef8fa4178215b8ad89d3ac263a", "commit_url": "https://github.com/curl/curl/commit/914aaab9153764ef8fa4178215b8ad89d3ac263a", "cve": "CVE-2022-27780", "cwe": "CWE-119", "file": "curl-cve-2022-27780/fixed.c", "function": "hostname_check", "id": "curl-cve-2022-27780:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27780", "project": "curl", "provenance": "human", "relpath": "lib/urlapi.c", "repo": "curl/curl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "08b8ef4e726ba10f45081ecda5b3cea788d3c839", "commit_url": "https://github.com/curl/curl/commit/620ea21410030a9977396b4661806bc187231b79", "cve": "CVE-2022-27774", "cwe": "CWE-119", "file": "curl-cve-2022-27774/vuln.c", "function": "Curl_follow", "id": "curl-cve-2022-27774:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27774", "project": "curl", "provenance": "human", "relpath": "lib/transfer.c", "repo": "curl/curl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "620ea21410030a9977396b4661806bc187231b79", "commit_url": "https://github.com/curl/curl/commit/620ea21410030a9977396b4661806bc187231b79", "cve": "CVE-2022-27774", "cwe": "CWE-119", "file": "curl-cve-2022-27774/fixed.c", "function": "Curl_follow", "id": "curl-cve-2022-27774:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27774", "project": "curl", "provenance": "human", "relpath": "lib/transfer.c", "repo": "curl/curl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "8f2079154f80561ccffcaa954268798b658e66b6", "commit_url": "https://github.com/curl/curl/commit/6e659993952aa5f90f48864be84a1bbb047fc258", "cve": "CVE-2022-27776", "cwe": "CWE-119", "file": "curl-cve-2022-27776/vuln.c", "function": "Curl_add_custom_headers", "id": "curl-cve-2022-27776:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27776", "project": "curl", "provenance": "human", "relpath": "lib/http.c", "repo": "curl/curl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "6e659993952aa5f90f48864be84a1bbb047fc258", "commit_url": "https://github.com/curl/curl/commit/6e659993952aa5f90f48864be84a1bbb047fc258", "cve": "CVE-2022-27776", "cwe": "CWE-119", "file": "curl-cve-2022-27776/fixed.c", "function": "Curl_add_custom_headers", "id": "curl-cve-2022-27776:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27776", "project": "curl", "provenance": "human", "relpath": "lib/http.c", "repo": "curl/curl", "split": "holdout", "year": 2022} -{"class": "security fix", "commit": "852aa5ad351ea53e5f01d2f44b5b4370c2bf5425", "commit_url": "https://github.com/curl/curl/commit/058f98dc3fe595f21dc26a5b9b1699e519ba5705", "cve": "CVE-2022-27775", "cwe": "CWE-119", "file": "curl-cve-2022-27775/vuln.c", "function": "hashkey", "id": "curl-cve-2022-27775:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27775", "project": "curl", "provenance": "human", "relpath": "lib/conncache.c", "repo": "curl/curl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "058f98dc3fe595f21dc26a5b9b1699e519ba5705", "commit_url": "https://github.com/curl/curl/commit/058f98dc3fe595f21dc26a5b9b1699e519ba5705", "cve": "CVE-2022-27775", "cwe": "CWE-119", "file": "curl-cve-2022-27775/fixed.c", "function": "hashkey", "id": "curl-cve-2022-27775:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27775", "project": "curl", "provenance": "human", "relpath": "lib/conncache.c", "repo": "curl/curl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "ff2f3e836702daa82e2356195482fcc95f4257dc", "commit_url": "https://github.com/curl/curl/commit/852aa5ad351ea53e5f01d2f44b5b4370c2bf5425", "cve": "CVE-2022-22576", "cwe": "CWE-119", "file": "curl-cve-2022-22576-conn_free/vuln.c", "function": "conn_free", "id": "curl-cve-2022-22576-conn_free:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-22576-conn_free", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "852aa5ad351ea53e5f01d2f44b5b4370c2bf5425", "commit_url": "https://github.com/curl/curl/commit/852aa5ad351ea53e5f01d2f44b5b4370c2bf5425", "cve": "CVE-2022-22576", "cwe": "CWE-119", "file": "curl-cve-2022-22576-conn_free/fixed.c", "function": "conn_free", "id": "curl-cve-2022-22576-conn_free:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-22576-conn_free", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "split": "train", "year": 2022} -{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947/vuln.c", "function": "ftp_statemachine", "id": "curl-cve-2021-22947:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947", "project": "curl", "provenance": "human", "relpath": "lib/ftp.c", "repo": "curl/curl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "8ef147c43646e91fdaad5d0e7b60351f842e5c68", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947/fixed.c", "function": "ftp_statemachine", "id": "curl-cve-2021-22947:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947", "project": "curl", "provenance": "human", "relpath": "lib/ftp.c", "repo": "curl/curl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-imap_state_starttls_resp/vuln.c", "function": "imap_state_starttls_resp", "id": "curl-cve-2021-22947-imap_state_starttls_resp:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947-imap_state_starttls_resp", "project": "curl", "provenance": "human", "relpath": "lib/imap.c", "repo": "curl/curl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "8ef147c43646e91fdaad5d0e7b60351f842e5c68", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-imap_state_starttls_resp/fixed.c", "function": "imap_state_starttls_resp", "id": "curl-cve-2021-22947-imap_state_starttls_resp:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947-imap_state_starttls_resp", "project": "curl", "provenance": "human", "relpath": "lib/imap.c", "repo": "curl/curl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-pop3_state_starttls_resp/vuln.c", "function": "pop3_state_starttls_resp", "id": "curl-cve-2021-22947-pop3_state_starttls_resp:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947-pop3_state_starttls_resp", "project": "curl", "provenance": "human", "relpath": "lib/pop3.c", "repo": "curl/curl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "8ef147c43646e91fdaad5d0e7b60351f842e5c68", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-pop3_state_starttls_resp/fixed.c", "function": "pop3_state_starttls_resp", "id": "curl-cve-2021-22947-pop3_state_starttls_resp:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947-pop3_state_starttls_resp", "project": "curl", "provenance": "human", "relpath": "lib/pop3.c", "repo": "curl/curl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-smtp_state_starttls_resp/vuln.c", "function": "smtp_state_starttls_resp", "id": "curl-cve-2021-22947-smtp_state_starttls_resp:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947-smtp_state_starttls_resp", "project": "curl", "provenance": "human", "relpath": "lib/smtp.c", "repo": "curl/curl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "8ef147c43646e91fdaad5d0e7b60351f842e5c68", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-smtp_state_starttls_resp/fixed.c", "function": "smtp_state_starttls_resp", "id": "curl-cve-2021-22947-smtp_state_starttls_resp:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947-smtp_state_starttls_resp", "project": "curl", "provenance": "human", "relpath": "lib/smtp.c", "repo": "curl/curl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "43157490a5054bd24256fe12876931e8abc9df49", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946/vuln.c", "function": "ftp_statemachine", "id": "curl-cve-2021-22946:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22946", "project": "curl", "provenance": "human", "relpath": "lib/ftp.c", "repo": "curl/curl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946/fixed.c", "function": "ftp_statemachine", "id": "curl-cve-2021-22946:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22946", "project": "curl", "provenance": "human", "relpath": "lib/ftp.c", "repo": "curl/curl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "43157490a5054bd24256fe12876931e8abc9df49", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946-imap_state_capability_re/vuln.c", "function": "imap_state_capability_resp", "id": "curl-cve-2021-22946-imap_state_capability_re:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22946-imap_state_capability_re", "project": "curl", "provenance": "human", "relpath": "lib/imap.c", "repo": "curl/curl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946-imap_state_capability_re/fixed.c", "function": "imap_state_capability_resp", "id": "curl-cve-2021-22946-imap_state_capability_re:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22946-imap_state_capability_re", "project": "curl", "provenance": "human", "relpath": "lib/imap.c", "repo": "curl/curl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "43157490a5054bd24256fe12876931e8abc9df49", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946-pop3_state_capa_resp/vuln.c", "function": "pop3_state_capa_resp", "id": "curl-cve-2021-22946-pop3_state_capa_resp:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22946-pop3_state_capa_resp", "project": "curl", "provenance": "human", "relpath": "lib/pop3.c", "repo": "curl/curl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946-pop3_state_capa_resp/fixed.c", "function": "pop3_state_capa_resp", "id": "curl-cve-2021-22946-pop3_state_capa_resp:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22946-pop3_state_capa_resp", "project": "curl", "provenance": "human", "relpath": "lib/pop3.c", "repo": "curl/curl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "409a4412409371db00af0a3fe987e517bfab3d19", "commit_url": "https://github.com/curl/curl/commit/43157490a5054bd24256fe12876931e8abc9df49", "cve": "CVE-2021-22945", "cwe": "CWE-119", "file": "curl-cve-2021-22945/vuln.c", "function": "mqtt_send", "id": "curl-cve-2021-22945:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22945", "project": "curl", "provenance": "human", "relpath": "lib/mqtt.c", "repo": "curl/curl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "43157490a5054bd24256fe12876931e8abc9df49", "commit_url": "https://github.com/curl/curl/commit/43157490a5054bd24256fe12876931e8abc9df49", "cve": "CVE-2021-22945", "cwe": "CWE-119", "file": "curl-cve-2021-22945/fixed.c", "function": "mqtt_send", "id": "curl-cve-2021-22945:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22945", "project": "curl", "provenance": "human", "relpath": "lib/mqtt.c", "repo": "curl/curl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "fd9b40bf8dfd43edcbc0d254d613d95a11061c05", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924/vuln.c", "function": "create_conn", "id": "curl-cve-2021-22924:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22924", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "5ea3145850ebff1dc2b13d17440300a01ca38161", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924/fixed.c", "function": "create_conn", "id": "curl-cve-2021-22924:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22924", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "fd9b40bf8dfd43edcbc0d254d613d95a11061c05", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924-nss_do_connect/vuln.c", "function": "nss_do_connect", "id": "curl-cve-2021-22924-nss_do_connect:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22924-nss_do_connect", "project": "curl", "provenance": "human", "relpath": "lib/vtls/nss.c", "repo": "curl/curl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "5ea3145850ebff1dc2b13d17440300a01ca38161", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924-nss_do_connect/fixed.c", "function": "nss_do_connect", "id": "curl-cve-2021-22924-nss_do_connect:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22924-nss_do_connect", "project": "curl", "provenance": "human", "relpath": "lib/vtls/nss.c", "repo": "curl/curl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "fd9b40bf8dfd43edcbc0d254d613d95a11061c05", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924-servercert/vuln.c", "function": "servercert", "id": "curl-cve-2021-22924-servercert:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22924-servercert", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "5ea3145850ebff1dc2b13d17440300a01ca38161", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924-servercert/fixed.c", "function": "servercert", "id": "curl-cve-2021-22924-servercert:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22924-servercert", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "12284e008bad5156b67d0ac253331a96d77201d1", "commit_url": "https://github.com/curl/curl/commit/894f6ec730597eb243618d33cc84d71add8d6a8a", "cve": "CVE-2021-22925", "cwe": "CWE-119", "file": "curl-cve-2021-22925/vuln.c", "function": "suboption", "id": "curl-cve-2021-22925:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22925", "project": "curl", "provenance": "human", "relpath": "lib/telnet.c", "repo": "curl/curl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "894f6ec730597eb243618d33cc84d71add8d6a8a", "commit_url": "https://github.com/curl/curl/commit/894f6ec730597eb243618d33cc84d71add8d6a8a", "cve": "CVE-2021-22925", "cwe": "CWE-119", "file": "curl-cve-2021-22925/fixed.c", "function": "suboption", "id": "curl-cve-2021-22925:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22925", "project": "curl", "provenance": "human", "relpath": "lib/telnet.c", "repo": "curl/curl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "39ce47f219b09c380b81f89fe54ac586c8db6bde", "commit_url": "https://github.com/curl/curl/commit/7f4a9a9b2a49547eae24d2e19bc5c346e9026479", "cve": "CVE-2021-22901", "cwe": "CWE-119", "file": "curl-cve-2021-22901-ossl_connect_step1/vuln.c", "function": "ossl_connect_step1", "id": "curl-cve-2021-22901-ossl_connect_step1:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22901-ossl_connect_step1", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "7f4a9a9b2a49547eae24d2e19bc5c346e9026479", "commit_url": "https://github.com/curl/curl/commit/7f4a9a9b2a49547eae24d2e19bc5c346e9026479", "cve": "CVE-2021-22901", "cwe": "CWE-119", "file": "curl-cve-2021-22901-ossl_connect_step1/fixed.c", "function": "ossl_connect_step1", "id": "curl-cve-2021-22901-ossl_connect_step1:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22901-ossl_connect_step1", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "bbb71507b7bab52002f9b1e0880bed6a32834511", "commit_url": "https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde", "cve": "CVE-2021-22898", "cwe": "CWE-119", "file": "curl-cve-2021-22898/vuln.c", "function": "suboption", "id": "curl-cve-2021-22898:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22898", "project": "curl", "provenance": "human", "relpath": "lib/telnet.c", "repo": "curl/curl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "39ce47f219b09c380b81f89fe54ac586c8db6bde", "commit_url": "https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde", "cve": "CVE-2021-22898", "cwe": "CWE-119", "file": "curl-cve-2021-22898/fixed.c", "function": "suboption", "id": "curl-cve-2021-22898:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22898", "project": "curl", "provenance": "human", "relpath": "lib/telnet.c", "repo": "curl/curl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "7214288898f5625a6cc196e22a74232eada7861c", "commit_url": "https://github.com/curl/curl/commit/b09c8ee15771c614c4bf3ddac893cdb12187c844", "cve": "CVE-2021-22890", "cwe": "CWE-119", "file": "curl-cve-2021-22890/vuln.c", "function": "bearssl_connect_step1", "id": "curl-cve-2021-22890:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22890", "project": "curl", "provenance": "human", "relpath": "lib/vtls/bearssl.c", "repo": "curl/curl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "b09c8ee15771c614c4bf3ddac893cdb12187c844", "commit_url": "https://github.com/curl/curl/commit/b09c8ee15771c614c4bf3ddac893cdb12187c844", "cve": "CVE-2021-22890", "cwe": "CWE-119", "file": "curl-cve-2021-22890/fixed.c", "function": "bearssl_connect_step1", "id": "curl-cve-2021-22890:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22890", "project": "curl", "provenance": "human", "relpath": "lib/vtls/bearssl.c", "repo": "curl/curl", "split": "holdout", "year": 2021} -{"class": "security fix", "commit": "184ffc0bdfcab17eb96d1dd64f9c0cecc139e3e9", "commit_url": "https://github.com/curl/curl/commit/7214288898f5625a6cc196e22a74232eada7861c", "cve": "CVE-2021-22876", "cwe": "CWE-119", "file": "curl-cve-2021-22876/vuln.c", "function": "Curl_follow", "id": "curl-cve-2021-22876:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22876", "project": "curl", "provenance": "human", "relpath": "lib/transfer.c", "repo": "curl/curl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "7214288898f5625a6cc196e22a74232eada7861c", "commit_url": "https://github.com/curl/curl/commit/7214288898f5625a6cc196e22a74232eada7861c", "cve": "CVE-2021-22876", "cwe": "CWE-119", "file": "curl-cve-2021-22876/fixed.c", "function": "Curl_follow", "id": "curl-cve-2021-22876:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22876", "project": "curl", "provenance": "human", "relpath": "lib/transfer.c", "repo": "curl/curl", "split": "train", "year": 2021} -{"class": "security fix", "commit": "69a358f2186e04cf44698b5100332cbf1ee7f01d", "commit_url": "https://github.com/curl/curl/commit/d9d01672785b8ac04aab1abb6de95fe3072ae199", "cve": "CVE-2020-8286", "cwe": "CWE-119", "file": "curl-cve-2020-8286/vuln.c", "function": "verifystatus", "id": "curl-cve-2020-8286:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8286", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "split": "holdout", "year": 2020} -{"class": "security fix", "commit": "d9d01672785b8ac04aab1abb6de95fe3072ae199", "commit_url": "https://github.com/curl/curl/commit/d9d01672785b8ac04aab1abb6de95fe3072ae199", "cve": "CVE-2020-8286", "cwe": "CWE-119", "file": "curl-cve-2020-8286/fixed.c", "function": "verifystatus", "id": "curl-cve-2020-8286:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8286", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "split": "holdout", "year": 2020} -{"class": "security fix", "commit": "abd846c374c5269809ce11740754bc6f00a0b193", "commit_url": "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "cve": "CVE-2020-8284", "cwe": "CWE-119", "file": "curl-cve-2020-8284/vuln.c", "function": "Curl_init_userdefined", "id": "curl-cve-2020-8284:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8284", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "split": "holdout", "year": 2020} -{"class": "security fix", "commit": "ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "commit_url": "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "cve": "CVE-2020-8284", "cwe": "CWE-119", "file": "curl-cve-2020-8284/fixed.c", "function": "Curl_init_userdefined", "id": "curl-cve-2020-8284:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8284", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "split": "holdout", "year": 2020} -{"class": "security fix", "commit": "abd846c374c5269809ce11740754bc6f00a0b193", "commit_url": "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "cve": "CVE-2020-8284", "cwe": "CWE-119", "file": "curl-cve-2020-8284-config_init/vuln.c", "function": "config_init", "id": "curl-cve-2020-8284-config_init:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8284-config_init", "project": "curl", "provenance": "human", "relpath": "src/tool_cfgable.c", "repo": "curl/curl", "split": "train", "year": 2020} -{"class": "security fix", "commit": "ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "commit_url": "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "cve": "CVE-2020-8284", "cwe": "CWE-119", "file": "curl-cve-2020-8284-config_init/fixed.c", "function": "config_init", "id": "curl-cve-2020-8284-config_init:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8284-config_init", "project": "curl", "provenance": "human", "relpath": "src/tool_cfgable.c", "repo": "curl/curl", "split": "train", "year": 2020} -{"class": "security fix", "commit": "687908c6e6332b2bf4ba74b271e795f9c65a5a61", "commit_url": "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22", "cve": "CVE-2020-8231", "cwe": "CWE-119", "file": "curl-cve-2020-8231-curl_multi_add_handle/vuln.c", "function": "curl_multi_add_handle", "id": "curl-cve-2020-8231-curl_multi_add_handle:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8231-curl_multi_add_handle", "project": "curl", "provenance": "human", "relpath": "lib/multi.c", "repo": "curl/curl", "split": "holdout", "year": 2020} -{"class": "security fix", "commit": "3c9e021f86872baae412a427e807fbfa2f3e8a22", "commit_url": "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22", "cve": "CVE-2020-8231", "cwe": "CWE-119", "file": "curl-cve-2020-8231-curl_multi_add_handle/fixed.c", "function": "curl_multi_add_handle", "id": "curl-cve-2020-8231-curl_multi_add_handle:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8231-curl_multi_add_handle", "project": "curl", "provenance": "human", "relpath": "lib/multi.c", "repo": "curl/curl", "split": "holdout", "year": 2020} -{"class": "security fix", "commit": "687908c6e6332b2bf4ba74b271e795f9c65a5a61", "commit_url": "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22", "cve": "CVE-2020-8231", "cwe": "CWE-119", "file": "curl-cve-2020-8231-curl_open/vuln.c", "function": "Curl_open", "id": "curl-cve-2020-8231-curl_open:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8231-curl_open", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "split": "train", "year": 2020} -{"class": "security fix", "commit": "3c9e021f86872baae412a427e807fbfa2f3e8a22", "commit_url": "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22", "cve": "CVE-2020-8231", "cwe": "CWE-119", "file": "curl-cve-2020-8231-curl_open/fixed.c", "function": "Curl_open", "id": "curl-cve-2020-8231-curl_open:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8231-curl_open", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "split": "train", "year": 2020} -{"class": "security fix", "commit": "26d2755d7c3181e90e46014778941bff53d2309f", "commit_url": "https://github.com/curl/curl/commit/8236aba58542c5f89f1d41ca09d84579efb05e22", "cve": "CVE-2020-8177", "cwe": "CWE-119", "file": "curl-cve-2020-8177/vuln.c", "function": "tool_header_cb", "id": "curl-cve-2020-8177:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8177", "project": "curl", "provenance": "human", "relpath": "src/tool_cb_hdr.c", "repo": "curl/curl", "split": "train", "year": 2020} -{"class": "security fix", "commit": "8236aba58542c5f89f1d41ca09d84579efb05e22", "commit_url": "https://github.com/curl/curl/commit/8236aba58542c5f89f1d41ca09d84579efb05e22", "cve": "CVE-2020-8177", "cwe": "CWE-119", "file": "curl-cve-2020-8177/fixed.c", "function": "tool_header_cb", "id": "curl-cve-2020-8177:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8177", "project": "curl", "provenance": "human", "relpath": "src/tool_cb_hdr.c", "repo": "curl/curl", "split": "train", "year": 2020} +{"class": "buffer over-read", "commit": "0d7717fc9c83dafab8153cbd5e2180e6e04cc802", "commit_url": "https://github.com/openssl/openssl/commit/96db9023b881d7cd9f379b0c154650d6c108e9a3", "cve": "CVE-2014-0160", "cwe": "CWE-126", "file": "openssl-cve-2014-0160/vuln.c", "function": "tls1_process_heartbeat", "id": "openssl-cve-2014-0160:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2014-0160", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2014} +{"class": "buffer over-read", "commit": "96db9023b881d7cd9f379b0c154650d6c108e9a3", "commit_url": "https://github.com/openssl/openssl/commit/96db9023b881d7cd9f379b0c154650d6c108e9a3", "cve": "CVE-2014-0160", "cwe": "CWE-126", "file": "openssl-cve-2014-0160/fixed.c", "function": "tls1_process_heartbeat", "id": "openssl-cve-2014-0160:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2014-0160", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2014} +{"class": "buffer overflow", "commit": "0c0f777161a9499dd149853ff62d356f75d16c2a", "commit_url": "https://hg.mozilla.org/mozilla-central/rev/b79b6cc78248eea7fda10bfb76aa273c19c9fa65", "cve": "CVE-2020-15667", "cwe": "CWE-119", "file": "firefox-cve-2020-15667/vuln.c", "function": "mar_insert_item", "id": "firefox-cve-2020-15667:vuln", "label": "vuln", "license": "MPL-2.0", "mechanism": "unchecked_length_copy", "pair": "firefox-cve-2020-15667", "project": "firefox", "provenance": "human", "relpath": "modules/libmar/src/mar_read.c", "repo": "mozilla-central", "review_tier": "advisory", "split": "holdout", "year": 2020} +{"class": "buffer overflow", "commit": "b79b6cc78248eea7fda10bfb76aa273c19c9fa65", "commit_url": "https://hg.mozilla.org/mozilla-central/rev/b79b6cc78248eea7fda10bfb76aa273c19c9fa65", "cve": "CVE-2020-15667", "cwe": "CWE-119", "file": "firefox-cve-2020-15667/fixed.c", "function": "mar_insert_item", "id": "firefox-cve-2020-15667:fixed", "label": "fixed", "license": "MPL-2.0", "mechanism": "unchecked_length_copy", "pair": "firefox-cve-2020-15667", "project": "firefox", "provenance": "human", "relpath": "modules/libmar/src/mar_read.c", "repo": "mozilla-central", "review_tier": "advisory", "split": "holdout", "year": 2020} +{"class": "use after free", "commit": "9f3fccdba567f30ea39b08f57d8d5b49cd832b4a", "commit_url": "https://github.com/chromium/chromium/commit/ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449", "cve": "CVE-2019-5786", "cwe": "CWE-416", "file": "chromium-cve-2019-5786/vuln.cc", "function": "ArrayBufferResult", "id": "chromium-cve-2019-5786:vuln", "label": "vuln", "license": "BSD-3-Clause", "mechanism": "uaf", "pair": "chromium-cve-2019-5786", "project": "chromium", "provenance": "human", "relpath": "third_party/blink/renderer/core/fileapi/file_reader_loader.cc", "repo": "chromium/chromium", "review_tier": "advisory", "split": "train", "year": 2019} +{"class": "use after free", "commit": "ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449", "commit_url": "https://github.com/chromium/chromium/commit/ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449", "cve": "CVE-2019-5786", "cwe": "CWE-416", "file": "chromium-cve-2019-5786/fixed.cc", "function": "ArrayBufferResult", "id": "chromium-cve-2019-5786:fixed", "label": "fixed", "license": "BSD-3-Clause", "mechanism": "uaf", "pair": "chromium-cve-2019-5786", "project": "chromium", "provenance": "human", "relpath": "third_party/blink/renderer/core/fileapi/file_reader_loader.cc", "repo": "chromium/chromium", "review_tier": "advisory", "split": "train", "year": 2019} +{"class": "null pointer dereference", "commit": "3656c08ab4b1b892730cb5e808b6f4298b08a2e6", "commit_url": "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4", "cve": "CVE-2020-1967", "cwe": "CWE-476", "file": "openssl-cve-2020-1967/vuln.c", "function": "tls1_check_sig_alg", "id": "openssl-cve-2020-1967:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2020-1967", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2020} +{"class": "null pointer dereference", "commit": "a87f3fe01a5a894aa27ccd6a239155fd129988e4", "commit_url": "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4", "cve": "CVE-2020-1967", "cwe": "CWE-476", "file": "openssl-cve-2020-1967/fixed.c", "function": "tls1_check_sig_alg", "id": "openssl-cve-2020-1967:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2020-1967", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2020} +{"class": "null pointer dereference", "commit": "198b11683568452282bd48828fcf60d4835bf327", "commit_url": "https://github.com/openssl/openssl/commit/b33c48b75aaf33c93aeda42d7138616b9e6a64cb", "cve": "CVE-2020-1971", "cwe": "CWE-476", "file": "openssl-cve-2020-1971/vuln.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2020-1971:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2020-1971", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2020} +{"class": "null pointer dereference", "commit": "b33c48b75aaf33c93aeda42d7138616b9e6a64cb", "commit_url": "https://github.com/openssl/openssl/commit/b33c48b75aaf33c93aeda42d7138616b9e6a64cb", "cve": "CVE-2020-1971", "cwe": "CWE-476", "file": "openssl-cve-2020-1971/fixed.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2020-1971:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2020-1971", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2020} +{"class": "integer overflow", "commit": "c1ddd392cf9737c09c1f9bf690adfbe596403c5e", "commit_url": "https://github.com/openssl/openssl/commit/c9fb704cf3af5524eb8e79961e31b60eee8c3c47", "cve": "CVE-2021-23840", "cwe": "CWE-190", "file": "openssl-cve-2021-23840/vuln.c", "function": "evp_EncryptDecryptUpdate", "id": "openssl-cve-2021-23840:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "signed_size_operand", "pair": "openssl-cve-2021-23840", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "integer overflow", "commit": "c9fb704cf3af5524eb8e79961e31b60eee8c3c47", "commit_url": "https://github.com/openssl/openssl/commit/c9fb704cf3af5524eb8e79961e31b60eee8c3c47", "cve": "CVE-2021-23840", "cwe": "CWE-190", "file": "openssl-cve-2021-23840/fixed.c", "function": "evp_EncryptDecryptUpdate", "id": "openssl-cve-2021-23840:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "signed_size_operand", "pair": "openssl-cve-2021-23840", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "buffer overflow", "commit": "8c74c9d1ade0fbdab5b815ddb747351b8b839641", "commit_url": "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "cve": "CVE-2021-3711", "cwe": "CWE-120", "file": "openssl-cve-2021-3711/vuln.c", "function": "sm2_plaintext_size", "id": "openssl-cve-2021-3711:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2021-3711", "project": "openssl", "provenance": "human", "relpath": "crypto/sm2/sm2_crypt.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "buffer overflow", "commit": "59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "commit_url": "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "cve": "CVE-2021-3711", "cwe": "CWE-120", "file": "openssl-cve-2021-3711/fixed.c", "function": "sm2_plaintext_size", "id": "openssl-cve-2021-3711:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2021-3711", "project": "openssl", "provenance": "human", "relpath": "crypto/sm2/sm2_crypt.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "buffer over-read", "commit": "1f365708a3318a5f1a395f90c38b584a58d37fb9", "commit_url": "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9", "cve": "CVE-2021-3712", "cwe": "CWE-125", "file": "openssl-cve-2021-3712/vuln.c", "function": "append_ia5", "id": "openssl-cve-2021-3712:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2021-3712", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "buffer over-read", "commit": "98624776c4d501c8badd6f772ab7048ac9191cb9", "commit_url": "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9", "cve": "CVE-2021-3712", "cwe": "CWE-125", "file": "openssl-cve-2021-3712/fixed.c", "function": "append_ia5", "id": "openssl-cve-2021-3712:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2021-3712", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "infinite loop", "commit": "1832bb0f02e519a48f06a10467c7ce5f7f3feeeb", "commit_url": "https://github.com/openssl/openssl/commit/9eafb53614bf65797db25f467946e735e1b43dc9", "cve": "CVE-2022-0778", "cwe": "CWE-835", "file": "openssl-cve-2022-0778/vuln.c", "function": "BN_mod_sqrt", "id": "openssl-cve-2022-0778:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-0778", "project": "openssl", "provenance": "human", "relpath": "crypto/bn/bn_sqrt.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "infinite loop", "commit": "9eafb53614bf65797db25f467946e735e1b43dc9", "commit_url": "https://github.com/openssl/openssl/commit/9eafb53614bf65797db25f467946e735e1b43dc9", "cve": "CVE-2022-0778", "cwe": "CWE-835", "file": "openssl-cve-2022-0778/fixed.c", "function": "BN_mod_sqrt", "id": "openssl-cve-2022-0778:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-0778", "project": "openssl", "provenance": "human", "relpath": "crypto/bn/bn_sqrt.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "command injection", "commit": "7d56a74a96828985db7354a55227a511615f732b", "commit_url": "https://github.com/openssl/openssl/commit/1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2", "cve": "CVE-2022-1292", "cwe": "CWE-78", "file": "openssl-cve-2022-1292/vuln.in", "function": "link_hash_cert", "id": "openssl-cve-2022-1292:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "source_reaches_sink", "pair": "openssl-cve-2022-1292", "project": "openssl", "provenance": "human", "relpath": "tools/c_rehash.in", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "command injection", "commit": "1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2", "commit_url": "https://github.com/openssl/openssl/commit/1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2", "cve": "CVE-2022-1292", "cwe": "CWE-78", "file": "openssl-cve-2022-1292/fixed.in", "function": "link_hash_cert", "id": "openssl-cve-2022-1292:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "source_reaches_sink", "pair": "openssl-cve-2022-1292", "project": "openssl", "provenance": "human", "relpath": "tools/c_rehash.in", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "buffer overflow", "commit": "89d72311327735ef15c804d2adea84a0fb1bfa0a", "commit_url": "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332", "cve": "CVE-2022-3602", "cwe": "CWE-787", "file": "openssl-cve-2022-3602/vuln.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3602:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-3602", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "buffer overflow", "commit": "3b421ebc64c7b52f1b9feb3812bdc7781c784332", "commit_url": "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332", "cve": "CVE-2022-3602", "cwe": "CWE-787", "file": "openssl-cve-2022-3602/fixed.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3602:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-3602", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "buffer overflow", "commit": "3b421ebc64c7b52f1b9feb3812bdc7781c784332", "commit_url": "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "cve": "CVE-2022-3786", "cwe": "CWE-787", "file": "openssl-cve-2022-3786/vuln.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3786:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-3786", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "buffer overflow", "commit": "680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "commit_url": "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "cve": "CVE-2022-3786", "cwe": "CWE-787", "file": "openssl-cve-2022-3786/fixed.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3786:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-3786", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "type confusion", "commit": "adf77d6657e836fc87391fad53d857927a764297", "commit_url": "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f", "cve": "CVE-2023-0286", "cwe": "CWE-843", "file": "openssl-cve-2023-0286/vuln.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2023-0286:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "type_confusion", "pair": "openssl-cve-2023-0286", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2023} +{"class": "type confusion", "commit": "7880536fe17c2b5450e279155bedd51771d28c9f", "commit_url": "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f", "cve": "CVE-2023-0286", "cwe": "CWE-843", "file": "openssl-cve-2023-0286/fixed.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2023-0286:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "type_confusion", "pair": "openssl-cve-2023-0286", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2023} +{"class": "heap buffer overflow", "commit": "09e25b9d94f4106eac8ca3a43b221bdc66f405e4", "commit_url": "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147", "cve": "CVE-2023-38545", "cwe": "CWE-122", "file": "curl-cve-2023-38545/vuln.c", "function": "do_SOCKS5", "id": "curl-cve-2023-38545:vuln", "label": "vuln", "license": "curl", "mechanism": "unchecked_length_copy", "pair": "curl-cve-2023-38545", "project": "curl", "provenance": "human", "relpath": "lib/socks.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2023} +{"class": "heap buffer overflow", "commit": "fb4415d8aee6c1045be932a34fe6107c2f5ed147", "commit_url": "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147", "cve": "CVE-2023-38545", "cwe": "CWE-122", "file": "curl-cve-2023-38545/fixed.c", "function": "do_SOCKS5", "id": "curl-cve-2023-38545:fixed", "label": "fixed", "license": "curl", "mechanism": "unchecked_length_copy", "pair": "curl-cve-2023-38545", "project": "curl", "provenance": "human", "relpath": "lib/socks.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2023} +{"class": "insufficient input validation", "commit": "a07d0ae0a7dc68686adca10dcf11138cb2f4ab6d", "commit_url": "https://github.com/chromium/chromium/commit/22c61cfae5d1b37c773e638d342488ae11118b51", "cve": "CVE-2022-2162", "cwe": "CWE-20", "file": "chromium-cve-2022-2162/vuln.cc", "function": "IsShellIntegratedExtension", "id": "chromium-cve-2022-2162:vuln", "label": "vuln", "license": "BSD-3-Clause", "mechanism": "validation_strength", "pair": "chromium-cve-2022-2162", "project": "chromium", "provenance": "human", "relpath": "content/browser/file_system_access/file_system_chooser.cc", "repo": "chromium/chromium", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "insufficient input validation", "commit": "22c61cfae5d1b37c773e638d342488ae11118b51", "commit_url": "https://github.com/chromium/chromium/commit/22c61cfae5d1b37c773e638d342488ae11118b51", "cve": "CVE-2022-2162", "cwe": "CWE-20", "file": "chromium-cve-2022-2162/fixed.cc", "function": "IsShellIntegratedExtension", "id": "chromium-cve-2022-2162:fixed", "label": "fixed", "license": "BSD-3-Clause", "mechanism": "validation_strength", "pair": "chromium-cve-2022-2162", "project": "chromium", "provenance": "human", "relpath": "content/browser/file_system_access/file_system_chooser.cc", "repo": "chromium/chromium", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "null pointer dereference", "commit": "ea8fc4c345fbd749048809c9f7c881ea656b0b94", "commit_url": "https://github.com/openssl/openssl/commit/2c13bf15286328641a805eb3b7c97e27d42881fb", "cve": "CVE-2025-69421", "cwe": "CWE-476", "file": "openssl-cve-2025-69421/vuln.c", "function": "PKCS12_item_decrypt_d2i_ex", "id": "openssl-cve-2025-69421:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2025-69421", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_decr.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2025} +{"class": "null pointer dereference", "commit": "2c13bf15286328641a805eb3b7c97e27d42881fb", "commit_url": "https://github.com/openssl/openssl/commit/2c13bf15286328641a805eb3b7c97e27d42881fb", "cve": "CVE-2025-69421", "cwe": "CWE-476", "file": "openssl-cve-2025-69421/fixed.c", "function": "PKCS12_item_decrypt_d2i_ex", "id": "openssl-cve-2025-69421:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2025-69421", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_decr.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2025} +{"class": "uncontrolled allocation", "commit": "b21663c35a6f0ed4c8de06855bdc7a6a21f00c2f", "commit_url": "https://github.com/openssl/openssl/commit/84f73f79af9f69c1527a9a372b7a9e771a394c2a", "cve": "CVE-2025-66199", "cwe": "CWE-770", "file": "openssl-cve-2025-66199/vuln.c", "function": "tls13_process_compressed_certificate", "id": "openssl-cve-2025-66199:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_alloc_size", "pair": "openssl-cve-2025-66199", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2025} +{"class": "uncontrolled allocation", "commit": "84f73f79af9f69c1527a9a372b7a9e771a394c2a", "commit_url": "https://github.com/openssl/openssl/commit/84f73f79af9f69c1527a9a372b7a9e771a394c2a", "cve": "CVE-2025-66199", "cwe": "CWE-770", "file": "openssl-cve-2025-66199/fixed.c", "function": "tls13_process_compressed_certificate", "id": "openssl-cve-2025-66199:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_alloc_size", "pair": "openssl-cve-2025-66199", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2025} +{"class": "uncontrolled allocation", "commit": "eed0931f85474d0db6e2326dfd9718c6bf1cd418", "commit_url": "https://github.com/mozilla-firefox/firefox/commit/e46f28da1cd3a5d46a2680b3d87361e9e8de4ae6", "cve": "BUG-2058173", "cwe": "CWE-770", "file": "firefox-bug-2058173/vuln.c", "function": "mar_read_index", "id": "firefox-bug-2058173:vuln", "label": "vuln", "license": "MPL-2.0", "mechanism": "unchecked_alloc_size", "pair": "firefox-bug-2058173", "project": "firefox", "provenance": "human", "relpath": "modules/libmar/src/mar_read.c", "repo": "mozilla-firefox/firefox", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "uncontrolled allocation", "commit": "e46f28da1cd3a5d46a2680b3d87361e9e8de4ae6", "commit_url": "https://github.com/mozilla-firefox/firefox/commit/e46f28da1cd3a5d46a2680b3d87361e9e8de4ae6", "cve": "BUG-2058173", "cwe": "CWE-770", "file": "firefox-bug-2058173/fixed.c", "function": "mar_read_index", "id": "firefox-bug-2058173:fixed", "label": "fixed", "license": "MPL-2.0", "mechanism": "unchecked_alloc_size", "pair": "firefox-bug-2058173", "project": "firefox", "provenance": "human", "relpath": "modules/libmar/src/mar_read.c", "repo": "mozilla-firefox/firefox", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "48f5785425ee6b5316f8e5f921978397ba632cc6", "commit_url": "https://github.com/openssl/openssl/commit/70cebd74d3592f5272945501b58a60374c4e13af", "cve": "CVE-2026-18798", "cwe": "CWE-119", "file": "openssl-cve-2026-18798/vuln.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-18798:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-18798", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "70cebd74d3592f5272945501b58a60374c4e13af", "commit_url": "https://github.com/openssl/openssl/commit/70cebd74d3592f5272945501b58a60374c4e13af", "cve": "CVE-2026-18798", "cwe": "CWE-119", "file": "openssl-cve-2026-18798/fixed.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-18798:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-18798", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "a0c8ec557d9cac078f032d76cdf684fe743eb382", "commit_url": "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874/vuln.c", "function": "DTLS_RECORD_LAYER_clear", "id": "openssl-cve-2026-54874:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-54874", "project": "openssl", "provenance": "human", "relpath": "ssl/record/rec_layer_d1.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "commit_url": "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874/fixed.c", "function": "DTLS_RECORD_LAYER_clear", "id": "openssl-cve-2026-54874:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-54874", "project": "openssl", "provenance": "human", "relpath": "ssl/record/rec_layer_d1.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "a0c8ec557d9cac078f032d76cdf684fe743eb382", "commit_url": "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874-dtls1_process_record/vuln.c", "function": "dtls1_process_record", "id": "openssl-cve-2026-54874-dtls1_process_record:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-54874-dtls1_process_record", "project": "openssl", "provenance": "human", "relpath": "ssl/record/ssl3_record.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "commit_url": "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874-dtls1_process_record/fixed.c", "function": "dtls1_process_record", "id": "openssl-cve-2026-54874-dtls1_process_record:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-54874-dtls1_process_record", "project": "openssl", "provenance": "human", "relpath": "ssl/record/ssl3_record.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "9ec2f6d2ae2bcad907cf7ee38584855bafe4979a", "commit_url": "https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor/vuln.c", "function": "dtls_rlayer_buffer_record", "id": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/dtls_meth.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "7110cb2f75806d0bf809eb2f90790d477900be40", "commit_url": "https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor/fixed.c", "function": "dtls_rlayer_buffer_record", "id": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/dtls_meth.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "buffer overflow", "commit": "d307f61f1b341b6eb7d5d07bd6902a939c709bc6", "commit_url": "https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382", "cve": "CVE-2026-63072", "cwe": "CWE-119", "file": "openssl-cve-2026-63072/vuln.c", "function": "cms_kek_cipher", "id": "openssl-cve-2026-63072:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-63072", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_kari.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "buffer overflow", "commit": "a0c8ec557d9cac078f032d76cdf684fe743eb382", "commit_url": "https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382", "cve": "CVE-2026-63072", "cwe": "CWE-119", "file": "openssl-cve-2026-63072/fixed.c", "function": "cms_kek_cipher", "id": "openssl-cve-2026-63072:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-63072", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_kari.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "buffer overflow", "commit": "1951c3cbd9d5101e027a1eb126f26c3c758f6cc0", "commit_url": "https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756", "cve": "CVE-2026-63072", "cwe": "CWE-119", "file": "openssl-cve-2026-63072-cms_kek_cipher/vuln.c", "function": "cms_kek_cipher", "id": "openssl-cve-2026-63072-cms_kek_cipher:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-63072-cms_kek_cipher", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_kemri.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "buffer overflow", "commit": "2a3dac874c8057c1f0186849bf1ede1ae7b6b756", "commit_url": "https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756", "cve": "CVE-2026-63072", "cwe": "CWE-119", "file": "openssl-cve-2026-63072-cms_kek_cipher/fixed.c", "function": "cms_kek_cipher", "id": "openssl-cve-2026-63072-cms_kek_cipher:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-63072-cms_kek_cipher", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_kemri.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "1e8c398db67404babd3e5af999bb6bd86f720c76", "commit_url": "https://github.com/openssl/openssl/commit/a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4", "cve": "CVE-2026-63073", "cwe": "CWE-119", "file": "openssl-cve-2026-63073/vuln.c", "function": "ossl_cmp_msg_check_update", "id": "openssl-cve-2026-63073:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-63073", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_vfy.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4", "commit_url": "https://github.com/openssl/openssl/commit/a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4", "cve": "CVE-2026-63073", "cwe": "CWE-119", "file": "openssl-cve-2026-63073/fixed.c", "function": "ossl_cmp_msg_check_update", "id": "openssl-cve-2026-63073:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-63073", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_vfy.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "f636f9ca0fa1bae5b42f9e787f025c96fb09c43a", "commit_url": "https://github.com/openssl/openssl/commit/1e8c398db67404babd3e5af999bb6bd86f720c76", "cve": "CVE-2026-14457", "cwe": "CWE-119", "file": "openssl-cve-2026-14457/vuln.c", "function": "check_cert_usable", "id": "openssl-cve-2026-14457:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-14457", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "1e8c398db67404babd3e5af999bb6bd86f720c76", "commit_url": "https://github.com/openssl/openssl/commit/1e8c398db67404babd3e5af999bb6bd86f720c76", "cve": "CVE-2026-14457", "cwe": "CWE-119", "file": "openssl-cve-2026-14457/fixed.c", "function": "check_cert_usable", "id": "openssl-cve-2026-14457:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-14457", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "9f2b8522d39ff869fac2ff7c3f20609b54843188", "commit_url": "https://github.com/openssl/openssl/commit/21a5d9658b0c66daace60e10ea18ff32a448de9f", "cve": "CVE-2026-63074", "cwe": "CWE-119", "file": "openssl-cve-2026-63074/vuln.c", "function": "ossl_cmp_msg_check_update", "id": "openssl-cve-2026-63074:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-63074", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_vfy.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "21a5d9658b0c66daace60e10ea18ff32a448de9f", "commit_url": "https://github.com/openssl/openssl/commit/21a5d9658b0c66daace60e10ea18ff32a448de9f", "cve": "CVE-2026-63074", "cwe": "CWE-119", "file": "openssl-cve-2026-63074/fixed.c", "function": "ossl_cmp_msg_check_update", "id": "openssl-cve-2026-63074:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-63074", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_vfy.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "a1f348ccb328c3afbd4ba6883f9b7c813c043259", "commit_url": "https://github.com/openssl/openssl/commit/c902e5f16d6a9e130e96d3ca6d8f64d71652e393", "cve": "CVE-2026-63075", "cwe": "CWE-119", "file": "openssl-cve-2026-63075-txp_pkt_commit/vuln.c", "function": "txp_pkt_commit", "id": "openssl-cve-2026-63075-txp_pkt_commit:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-63075-txp_pkt_commit", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_txp.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "c902e5f16d6a9e130e96d3ca6d8f64d71652e393", "commit_url": "https://github.com/openssl/openssl/commit/c902e5f16d6a9e130e96d3ca6d8f64d71652e393", "cve": "CVE-2026-63075", "cwe": "CWE-119", "file": "openssl-cve-2026-63075-txp_pkt_commit/fixed.c", "function": "txp_pkt_commit", "id": "openssl-cve-2026-63075-txp_pkt_commit:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-63075-txp_pkt_commit", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_txp.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "39488cb863074d5b8ece833905f7ad2b357d44fe", "commit_url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803/vuln.c", "function": "aes_ocb_cipher", "id": "openssl-cve-2026-75803:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-75803", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_ocb.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "119ab9555dc62275bbd71f6f49529b1a44feba42", "commit_url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803/fixed.c", "function": "aes_ocb_cipher", "id": "openssl-cve-2026-75803:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-75803", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_ocb.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "39488cb863074d5b8ece833905f7ad2b357d44fe", "commit_url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803-chacha20_poly1305_cipher/vuln.c", "function": "chacha20_poly1305_cipher", "id": "openssl-cve-2026-75803-chacha20_poly1305_cipher:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-75803-chacha20_poly1305_cipher", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_chacha20_poly1305.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "119ab9555dc62275bbd71f6f49529b1a44feba42", "commit_url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803-chacha20_poly1305_cipher/fixed.c", "function": "chacha20_poly1305_cipher", "id": "openssl-cve-2026-75803-chacha20_poly1305_cipher:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-75803-chacha20_poly1305_cipher", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_chacha20_poly1305.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "de7d1871087fc1fa3e2c1db4b11275b68d72f416", "commit_url": "https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803-aes_gcm_siv_finish/vuln.c", "function": "aes_gcm_siv_finish", "id": "openssl-cve-2026-75803-aes_gcm_siv_finish:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-75803-aes_gcm_siv_finish", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "bf95f5f772e9362f87b25cfa2f8cb15d984865b9", "commit_url": "https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803-aes_gcm_siv_finish/fixed.c", "function": "aes_gcm_siv_finish", "id": "openssl-cve-2026-75803-aes_gcm_siv_finish:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-75803-aes_gcm_siv_finish", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "2dacccc943b47b8dc1ce8f7109c9852391b5a0d8", "commit_url": "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9", "cve": "CVE-2026-14456", "cwe": "CWE-119", "file": "openssl-cve-2026-14456-port_default_packet_hand/vuln.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-14456-port_default_packet_hand:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-14456-port_default_packet_hand", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "08e7756c3900bcfd77a720e7b74e27d6e4ed01a9", "commit_url": "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9", "cve": "CVE-2026-14456", "cwe": "CWE-119", "file": "openssl-cve-2026-14456-port_default_packet_hand/fixed.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-14456-port_default_packet_hand:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-14456-port_default_packet_hand", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "2c9a078b6030444ed868a3943991f42b35cd49dc", "commit_url": "https://github.com/openssl/openssl/commit/9416706d408bb84deb7cee4647bff3045d2dc7ba", "cve": "CVE-2026-14456", "cwe": "CWE-119", "file": "openssl-cve-2026-14456-expect_quic_for_value/vuln.c", "function": "expect_quic_for_value", "id": "openssl-cve-2026-14456-expect_quic_for_value:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-14456-expect_quic_for_value", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_impl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "9416706d408bb84deb7cee4647bff3045d2dc7ba", "commit_url": "https://github.com/openssl/openssl/commit/9416706d408bb84deb7cee4647bff3045d2dc7ba", "cve": "CVE-2026-14456", "cwe": "CWE-119", "file": "openssl-cve-2026-14456-expect_quic_for_value/fixed.c", "function": "expect_quic_for_value", "id": "openssl-cve-2026-14456-expect_quic_for_value:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-14456-expect_quic_for_value", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_impl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "use after free", "commit": "609bcb24866d64f1fc49d38b852edbb39057d721", "commit_url": "https://github.com/openssl/openssl/commit/f4129fbe3cde786d363510069fe297234f99be8f", "cve": "CVE-2026-45447", "cwe": "CWE-416", "file": "openssl-cve-2026-45447/vuln.c", "function": "PKCS7_verify", "id": "openssl-cve-2026-45447:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2026-45447", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_smime.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "use after free", "commit": "f4129fbe3cde786d363510069fe297234f99be8f", "commit_url": "https://github.com/openssl/openssl/commit/f4129fbe3cde786d363510069fe297234f99be8f", "cve": "CVE-2026-45447", "cwe": "CWE-416", "file": "openssl-cve-2026-45447/fixed.c", "function": "PKCS7_verify", "id": "openssl-cve-2026-45447:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2026-45447", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_smime.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "f87f0b6a8e04bcdeb98afc82b0da06a2d537f399", "commit_url": "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721", "cve": "CVE-2026-45446", "cwe": "CWE-119", "file": "openssl-cve-2026-45446/vuln.c", "function": "aes_gcm_siv_initkey", "id": "openssl-cve-2026-45446:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-45446", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "609bcb24866d64f1fc49d38b852edbb39057d721", "commit_url": "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721", "cve": "CVE-2026-45446", "cwe": "CWE-119", "file": "openssl-cve-2026-45446/fixed.c", "function": "aes_gcm_siv_initkey", "id": "openssl-cve-2026-45446:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-45446", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "f87f0b6a8e04bcdeb98afc82b0da06a2d537f399", "commit_url": "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721", "cve": "CVE-2026-45446", "cwe": "CWE-119", "file": "openssl-cve-2026-45446-aes_siv_set_ctx_params/vuln.c", "function": "aes_siv_set_ctx_params", "id": "openssl-cve-2026-45446-aes_siv_set_ctx_params:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-45446-aes_siv_set_ctx_params", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_siv.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "609bcb24866d64f1fc49d38b852edbb39057d721", "commit_url": "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721", "cve": "CVE-2026-45446", "cwe": "CWE-119", "file": "openssl-cve-2026-45446-aes_siv_set_ctx_params/fixed.c", "function": "aes_siv_set_ctx_params", "id": "openssl-cve-2026-45446-aes_siv_set_ctx_params:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-45446-aes_siv_set_ctx_params", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_siv.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "5f489043b662fed32fbf7eb7442c479568eb43fd", "commit_url": "https://github.com/openssl/openssl/commit/f87f0b6a8e04bcdeb98afc82b0da06a2d537f399", "cve": "CVE-2026-45445", "cwe": "CWE-119", "file": "openssl-cve-2026-45445/vuln.c", "function": "aes_ocb_cipher", "id": "openssl-cve-2026-45445:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-45445", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_ocb.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "f87f0b6a8e04bcdeb98afc82b0da06a2d537f399", "commit_url": "https://github.com/openssl/openssl/commit/f87f0b6a8e04bcdeb98afc82b0da06a2d537f399", "cve": "CVE-2026-45445", "cwe": "CWE-119", "file": "openssl-cve-2026-45445/fixed.c", "function": "aes_ocb_cipher", "id": "openssl-cve-2026-45445:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-45445", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_ocb.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "0f3fab2eccc7c3417093a8243dd15d95b6cb472d", "commit_url": "https://github.com/openssl/openssl/commit/b3a555a0a7aa0028887149f6f973af89a4937bea", "cve": "CVE-2026-42771", "cwe": "CWE-119", "file": "openssl-cve-2026-42771/vuln.c", "function": "validate_hostname_part", "id": "openssl-cve-2026-42771:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-42771", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vpm.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "b3a555a0a7aa0028887149f6f973af89a4937bea", "commit_url": "https://github.com/openssl/openssl/commit/b3a555a0a7aa0028887149f6f973af89a4937bea", "cve": "CVE-2026-42771", "cwe": "CWE-119", "file": "openssl-cve-2026-42771/fixed.c", "function": "validate_hostname_part", "id": "openssl-cve-2026-42771:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-42771", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vpm.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "null pointer dereference", "commit": "d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "commit_url": "https://github.com/openssl/openssl/commit/c2765d53c2649b56bc1ca1bb799e42002953056a", "cve": "CVE-2026-42769", "cwe": "CWE-476", "file": "openssl-cve-2026-42769/vuln.c", "function": "selfsigned_verify_cb", "id": "openssl-cve-2026-42769:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42769", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_genm.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "null pointer dereference", "commit": "c2765d53c2649b56bc1ca1bb799e42002953056a", "commit_url": "https://github.com/openssl/openssl/commit/c2765d53c2649b56bc1ca1bb799e42002953056a", "cve": "CVE-2026-42769", "cwe": "CWE-476", "file": "openssl-cve-2026-42769/fixed.c", "function": "selfsigned_verify_cb", "id": "openssl-cve-2026-42769:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42769", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_genm.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "f04d65692dd8109be9f387ce2ddd9fb1ab612b6b", "commit_url": "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "cve": "CVE-2026-42768", "cwe": "CWE-119", "file": "openssl-cve-2026-42768/vuln.c", "function": "cms_RecipientInfo_ktri_decrypt", "id": "openssl-cve-2026-42768:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-42768", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_env.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "commit_url": "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "cve": "CVE-2026-42768", "cwe": "CWE-119", "file": "openssl-cve-2026-42768/fixed.c", "function": "cms_RecipientInfo_ktri_decrypt", "id": "openssl-cve-2026-42768:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-42768", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_env.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "f04d65692dd8109be9f387ce2ddd9fb1ab612b6b", "commit_url": "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "cve": "CVE-2026-42768", "cwe": "CWE-119", "file": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo/vuln.c", "function": "pkcs7_decrypt_rinfo", "id": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_doit.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "commit_url": "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "cve": "CVE-2026-42768", "cwe": "CWE-119", "file": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo/fixed.c", "function": "pkcs7_decrypt_rinfo", "id": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_doit.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "null pointer dereference", "commit": "a9af3442290e8a04706a3cd5f284ffd5b486e3f6", "commit_url": "https://github.com/openssl/openssl/commit/74245170b5a64b234ac4af27c86a25ec251c8b2a", "cve": "CVE-2026-42766", "cwe": "CWE-476", "file": "openssl-cve-2026-42766/vuln.c", "function": "ossl_cms_RecipientInfo_pwri_crypt", "id": "openssl-cve-2026-42766:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42766", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "null pointer dereference", "commit": "74245170b5a64b234ac4af27c86a25ec251c8b2a", "commit_url": "https://github.com/openssl/openssl/commit/74245170b5a64b234ac4af27c86a25ec251c8b2a", "cve": "CVE-2026-42766", "cwe": "CWE-476", "file": "openssl-cve-2026-42766/fixed.c", "function": "ossl_cms_RecipientInfo_pwri_crypt", "id": "openssl-cve-2026-42766:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42766", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "null pointer dereference", "commit": "5097ec4dae239112498abb722e255ea60ef7ac48", "commit_url": "https://github.com/openssl/openssl/commit/a9af3442290e8a04706a3cd5f284ffd5b486e3f6", "cve": "CVE-2026-42765", "cwe": "CWE-476", "file": "openssl-cve-2026-42765/vuln.c", "function": "check_revocation", "id": "openssl-cve-2026-42765:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42765", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "null pointer dereference", "commit": "a9af3442290e8a04706a3cd5f284ffd5b486e3f6", "commit_url": "https://github.com/openssl/openssl/commit/a9af3442290e8a04706a3cd5f284ffd5b486e3f6", "cve": "CVE-2026-42765", "cwe": "CWE-476", "file": "openssl-cve-2026-42765/fixed.c", "function": "check_revocation", "id": "openssl-cve-2026-42765:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42765", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "null pointer dereference", "commit": "58633b658fe74095c8cdde191e4ce1bf94f8c5f9", "commit_url": "https://github.com/openssl/openssl/commit/5097ec4dae239112498abb722e255ea60ef7ac48", "cve": "CVE-2026-42764", "cwe": "CWE-476", "file": "openssl-cve-2026-42764/vuln.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-42764:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42764", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "null pointer dereference", "commit": "5097ec4dae239112498abb722e255ea60ef7ac48", "commit_url": "https://github.com/openssl/openssl/commit/5097ec4dae239112498abb722e255ea60ef7ac48", "cve": "CVE-2026-42764", "cwe": "CWE-476", "file": "openssl-cve-2026-42764/fixed.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-42764:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42764", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "68ef88913e321bdb47eee88118ceba18ed2388cd", "commit_url": "https://github.com/openssl/openssl/commit/58633b658fe74095c8cdde191e4ce1bf94f8c5f9", "cve": "CVE-2026-35188", "cwe": "CWE-119", "file": "openssl-cve-2026-35188/vuln.c", "function": "check_cert_ocsp_resp", "id": "openssl-cve-2026-35188:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-35188", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "58633b658fe74095c8cdde191e4ce1bf94f8c5f9", "commit_url": "https://github.com/openssl/openssl/commit/58633b658fe74095c8cdde191e4ce1bf94f8c5f9", "cve": "CVE-2026-35188", "cwe": "CWE-119", "file": "openssl-cve-2026-35188/fixed.c", "function": "check_cert_ocsp_resp", "id": "openssl-cve-2026-35188:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-35188", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "fcb23806047f5afbe55d5d601a527fc24bf7ca2c", "commit_url": "https://github.com/openssl/openssl/commit/5a0230b6cc95a576b0c2b7b5b2ba7c74232e7b7c", "cve": "CVE-2026-34181", "cwe": "CWE-119", "file": "openssl-cve-2026-34181/vuln.c", "function": "PBMAC1_PBKDF2_HMAC", "id": "openssl-cve-2026-34181:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-34181", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "5a0230b6cc95a576b0c2b7b5b2ba7c74232e7b7c", "commit_url": "https://github.com/openssl/openssl/commit/5a0230b6cc95a576b0c2b7b5b2ba7c74232e7b7c", "cve": "CVE-2026-34181", "cwe": "CWE-119", "file": "openssl-cve-2026-34181/fixed.c", "function": "PBMAC1_PBKDF2_HMAC", "id": "openssl-cve-2026-34181:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-34181", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "buffer overflow", "commit": "97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9", "commit_url": "https://github.com/openssl/openssl/commit/51d1800e95283a8beec85152e35e3634dab8dd82", "cve": "CVE-2026-9076", "cwe": "CWE-119", "file": "openssl-cve-2026-9076/vuln.c", "function": "kek_unwrap_key", "id": "openssl-cve-2026-9076:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-9076", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "buffer overflow", "commit": "51d1800e95283a8beec85152e35e3634dab8dd82", "commit_url": "https://github.com/openssl/openssl/commit/51d1800e95283a8beec85152e35e3634dab8dd82", "cve": "CVE-2026-9076", "cwe": "CWE-119", "file": "openssl-cve-2026-9076/fixed.c", "function": "kek_unwrap_key", "id": "openssl-cve-2026-9076:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-9076", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "cb005ceaaf1fb50722e0101762a3e266338c5bf9", "commit_url": "https://github.com/openssl/openssl/commit/97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9", "cve": "CVE-2026-7383", "cwe": "CWE-119", "file": "openssl-cve-2026-7383/vuln.c", "function": "ASN1_mbstring_ncopy", "id": "openssl-cve-2026-7383:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-7383", "project": "openssl", "provenance": "human", "relpath": "crypto/asn1/a_mbstr.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9", "commit_url": "https://github.com/openssl/openssl/commit/97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9", "cve": "CVE-2026-7383", "cwe": "CWE-119", "file": "openssl-cve-2026-7383/fixed.c", "function": "ASN1_mbstring_ncopy", "id": "openssl-cve-2026-7383:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-7383", "project": "openssl", "provenance": "human", "relpath": "crypto/asn1/a_mbstr.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "a91e537d16d74050dbde50bb0dfb1fe9930f0521", "commit_url": "https://github.com/openssl/openssl/commit/eed200f58cd8645ed77e46b7e9f764e284df379e", "cve": "CVE-2026-31790", "cwe": "CWE-119", "file": "openssl-cve-2026-31790/vuln.c", "function": "rsasve_generate", "id": "openssl-cve-2026-31790:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-31790", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/kem/rsa_kem.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "eed200f58cd8645ed77e46b7e9f764e284df379e", "commit_url": "https://github.com/openssl/openssl/commit/eed200f58cd8645ed77e46b7e9f764e284df379e", "cve": "CVE-2026-31790", "cwe": "CWE-119", "file": "openssl-cve-2026-31790/fixed.c", "function": "rsasve_generate", "id": "openssl-cve-2026-31790:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-31790", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/kem/rsa_kem.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "commit_url": "https://github.com/openssl/openssl/commit/abd8b2eec7e3f3fda60ecfb68498b246b52af482", "cve": "CVE-2026-31790", "cwe": "CWE-119", "file": "openssl-cve-2026-31790-rsasve_generate/vuln.in", "function": "rsasve_generate", "id": "openssl-cve-2026-31790-rsasve_generate:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-31790-rsasve_generate", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/kem/rsa_kem.c.in", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "abd8b2eec7e3f3fda60ecfb68498b246b52af482", "commit_url": "https://github.com/openssl/openssl/commit/abd8b2eec7e3f3fda60ecfb68498b246b52af482", "cve": "CVE-2026-31790", "cwe": "CWE-119", "file": "openssl-cve-2026-31790-rsasve_generate/fixed.in", "function": "rsasve_generate", "id": "openssl-cve-2026-31790-rsasve_generate:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-31790-rsasve_generate", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/kem/rsa_kem.c.in", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "buffer overflow", "commit": "b7ae7a093997b5cd549bc21cccd715510fef86c0", "commit_url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "cve": "CVE-2026-31789", "cwe": "CWE-119", "file": "openssl-cve-2026-31789/vuln.c", "function": "buf2hexstr_sep", "id": "openssl-cve-2026-31789:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-31789", "project": "openssl", "provenance": "human", "relpath": "crypto/o_str.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "buffer overflow", "commit": "a91e537d16d74050dbde50bb0dfb1fe9930f0521", "commit_url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "cve": "CVE-2026-31789", "cwe": "CWE-119", "file": "openssl-cve-2026-31789/fixed.c", "function": "buf2hexstr_sep", "id": "openssl-cve-2026-31789:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-31789", "project": "openssl", "provenance": "human", "relpath": "crypto/o_str.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "null pointer dereference", "commit": "d044f9252fe9a54001986fb4eb4e32076a056527", "commit_url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "cve": "CVE-2026-28388", "cwe": "CWE-476", "file": "openssl-cve-2026-28388/vuln.c", "function": "check_delta_base", "id": "openssl-cve-2026-28388:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28388", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "null pointer dereference", "commit": "59c3b3158553ab53275bbbccca5cb305d591cf2e", "commit_url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "cve": "CVE-2026-28388", "cwe": "CWE-476", "file": "openssl-cve-2026-28388/fixed.c", "function": "check_delta_base", "id": "openssl-cve-2026-28388:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28388", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "null pointer dereference", "commit": "6e74b1275cbc1fd1cf7ba32f662602d68501f6ca", "commit_url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389/vuln.c", "function": "rsa_cms_decrypt", "id": "openssl-cve-2026-28389:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28389", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_rsa.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "null pointer dereference", "commit": "af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "commit_url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389/fixed.c", "function": "rsa_cms_decrypt", "id": "openssl-cve-2026-28389:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28389", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_rsa.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "null pointer dereference", "commit": "72ec3e38c87f71f5c50ae3b16cc34d8371c71bb9", "commit_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389-dh_cms_set_shared_info/vuln.c", "function": "dh_cms_set_shared_info", "id": "openssl-cve-2026-28389-dh_cms_set_shared_info:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28389-dh_cms_set_shared_info", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_dh.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "null pointer dereference", "commit": "7b5274e812400cacb6f3be4c2df5340923fa807f", "commit_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389-dh_cms_set_shared_info/fixed.c", "function": "dh_cms_set_shared_info", "id": "openssl-cve-2026-28389-dh_cms_set_shared_info:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28389-dh_cms_set_shared_info", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_dh.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "null pointer dereference", "commit": "72ec3e38c87f71f5c50ae3b16cc34d8371c71bb9", "commit_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389-ecdh_cms_set_shared_info/vuln.c", "function": "ecdh_cms_set_shared_info", "id": "openssl-cve-2026-28389-ecdh_cms_set_shared_info:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28389-ecdh_cms_set_shared_info", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_ec.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "null pointer dereference", "commit": "7b5274e812400cacb6f3be4c2df5340923fa807f", "commit_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389-ecdh_cms_set_shared_info/fixed.c", "function": "ecdh_cms_set_shared_info", "id": "openssl-cve-2026-28389-ecdh_cms_set_shared_info:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28389-ecdh_cms_set_shared_info", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_ec.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "21d525dc846aed171fc886f3da614a6645948f13", "commit_url": "https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34", "cve": "CVE-2026-2673", "cwe": "CWE-119", "file": "openssl-cve-2026-2673/vuln.c", "function": "gid_cb", "id": "openssl-cve-2026-2673:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-2673", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "security fix", "commit": "85977e013f32ceb96aa034c0e741adddc1a05e34", "commit_url": "https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34", "cve": "CVE-2026-2673", "cwe": "CWE-119", "file": "openssl-cve-2026-2673/fixed.c", "function": "gid_cb", "id": "openssl-cve-2026-2673:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-2673", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2026} +{"class": "buffer overflow", "commit": "7565bb46fa2979511cb27aad1c2bd6b80adf7352", "commit_url": "https://github.com/openssl/openssl/commit/4191043c36f1a50c717a2d0075fc6f3b9bc0afc5", "cve": "CVE-2025-69419", "cwe": "CWE-119", "file": "openssl-cve-2025-69419/vuln.c", "function": "bmp_to_utf8", "id": "openssl-cve-2025-69419:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2025-69419", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_utl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2025} +{"class": "buffer overflow", "commit": "4191043c36f1a50c717a2d0075fc6f3b9bc0afc5", "commit_url": "https://github.com/openssl/openssl/commit/4191043c36f1a50c717a2d0075fc6f3b9bc0afc5", "cve": "CVE-2025-69419", "cwe": "CWE-119", "file": "openssl-cve-2025-69419/fixed.c", "function": "bmp_to_utf8", "id": "openssl-cve-2025-69419:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2025-69419", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_utl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2025} +{"class": "security fix", "commit": "475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6", "commit_url": "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347", "cve": "CVE-2025-69418", "cwe": "CWE-119", "file": "openssl-cve-2025-69418/vuln.c", "function": "CRYPTO_ocb128_encrypt", "id": "openssl-cve-2025-69418:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-69418", "project": "openssl", "provenance": "human", "relpath": "crypto/modes/ocb128.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2025} +{"class": "security fix", "commit": "52d23c86a54adab5ee9f80e48b242b52c4cc2347", "commit_url": "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347", "cve": "CVE-2025-69418", "cwe": "CWE-119", "file": "openssl-cve-2025-69418/fixed.c", "function": "CRYPTO_ocb128_encrypt", "id": "openssl-cve-2025-69418:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-69418", "project": "openssl", "provenance": "human", "relpath": "crypto/modes/ocb128.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2025} +{"class": "security fix", "commit": "384011202af92605d926fafe4a0bcd6b65d162ad", "commit_url": "https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4", "cve": "CVE-2025-66199", "cwe": "CWE-119", "file": "openssl-cve-2025-66199-tls13_process_compressed/vuln.c", "function": "tls13_process_compressed_certificate", "id": "openssl-cve-2025-66199-tls13_process_compressed:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-66199-tls13_process_compressed", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2025} +{"class": "security fix", "commit": "3ed1f75249932b155eef993a8e66a99cb98bfef4", "commit_url": "https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4", "cve": "CVE-2025-66199", "cwe": "CWE-119", "file": "openssl-cve-2025-66199-tls13_process_compressed/fixed.c", "function": "tls13_process_compressed_certificate", "id": "openssl-cve-2025-66199-tls13_process_compressed:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-66199-tls13_process_compressed", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2025} +{"class": "buffer overflow", "commit": "e0666f72294691a808443970b654412a6d92fa0f", "commit_url": "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6", "cve": "CVE-2025-68160", "cwe": "CWE-119", "file": "openssl-cve-2025-68160/vuln.c", "function": "linebuffer_write", "id": "openssl-cve-2025-68160:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2025-68160", "project": "openssl", "provenance": "human", "relpath": "crypto/bio/bf_lbuf.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2025} +{"class": "buffer overflow", "commit": "475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6", "commit_url": "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6", "cve": "CVE-2025-68160", "cwe": "CWE-119", "file": "openssl-cve-2025-68160/fixed.c", "function": "linebuffer_write", "id": "openssl-cve-2025-68160:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2025-68160", "project": "openssl", "provenance": "human", "relpath": "crypto/bio/bf_lbuf.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2025} +{"class": "security fix", "commit": "1f08e54bad32843044fe8a675948d65e3b4ece65", "commit_url": "https://github.com/openssl/openssl/commit/a7936fa4bd23c906e1955a16a0a0ab39a4953a61", "cve": "CVE-2025-15469", "cwe": "CWE-119", "file": "openssl-cve-2025-15469/vuln.c", "function": "do_fp_oneshot_sign", "id": "openssl-cve-2025-15469:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-15469", "project": "openssl", "provenance": "human", "relpath": "apps/dgst.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2025} +{"class": "security fix", "commit": "a7936fa4bd23c906e1955a16a0a0ab39a4953a61", "commit_url": "https://github.com/openssl/openssl/commit/a7936fa4bd23c906e1955a16a0a0ab39a4953a61", "cve": "CVE-2025-15469", "cwe": "CWE-119", "file": "openssl-cve-2025-15469/fixed.c", "function": "do_fp_oneshot_sign", "id": "openssl-cve-2025-15469:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-15469", "project": "openssl", "provenance": "human", "relpath": "apps/dgst.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2025} +{"class": "security fix", "commit": "3250efdfe99d2d7fe4fb05231add7fba864b7653", "commit_url": "https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e", "cve": "CVE-2025-15467", "cwe": "CWE-119", "file": "openssl-cve-2025-15467/vuln.c", "function": "evp_cipher_get_asn1_aead_params", "id": "openssl-cve-2025-15467:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-15467", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2025} +{"class": "security fix", "commit": "ce39170276daec87f55c39dad1f629b56344429e", "commit_url": "https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e", "cve": "CVE-2025-15467", "cwe": "CWE-119", "file": "openssl-cve-2025-15467/fixed.c", "function": "evp_cipher_get_asn1_aead_params", "id": "openssl-cve-2025-15467:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-15467", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2025} +{"class": "security fix", "commit": "b8654779e3b3b4eb0bda7623c0891d394e068187", "commit_url": "https://github.com/openssl/openssl/commit/205e3a55e16e4bd08c12fdbd3416ab829c0f6206", "cve": "CVE-2025-11187", "cwe": "CWE-119", "file": "openssl-cve-2025-11187/vuln.c", "function": "PBMAC1_PBKDF2_HMAC", "id": "openssl-cve-2025-11187:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-11187", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2025} +{"class": "security fix", "commit": "205e3a55e16e4bd08c12fdbd3416ab829c0f6206", "commit_url": "https://github.com/openssl/openssl/commit/205e3a55e16e4bd08c12fdbd3416ab829c0f6206", "cve": "CVE-2025-11187", "cwe": "CWE-119", "file": "openssl-cve-2025-11187/fixed.c", "function": "PBMAC1_PBKDF2_HMAC", "id": "openssl-cve-2025-11187:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-11187", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2025} +{"class": "security fix", "commit": "a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def", "commit_url": "https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b", "cve": "CVE-2025-9232", "cwe": "CWE-119", "file": "openssl-cve-2025-9232/vuln.c", "function": "use_proxy", "id": "openssl-cve-2025-9232:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-9232", "project": "openssl", "provenance": "human", "relpath": "crypto/http/http_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2025} +{"class": "security fix", "commit": "654dc11d23468a74fc8ea4672b702dd3feb7be4b", "commit_url": "https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b", "cve": "CVE-2025-9232", "cwe": "CWE-119", "file": "openssl-cve-2025-9232/fixed.c", "function": "use_proxy", "id": "openssl-cve-2025-9232:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-9232", "project": "openssl", "provenance": "human", "relpath": "crypto/http/http_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2025} +{"class": "buffer overflow", "commit": "7e0fc054a08706d194d3355aba4a06003cadfb29", "commit_url": "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def", "cve": "CVE-2025-9230", "cwe": "CWE-119", "file": "openssl-cve-2025-9230/vuln.c", "function": "kek_unwrap_key", "id": "openssl-cve-2025-9230:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2025-9230", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2025} +{"class": "buffer overflow", "commit": "a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def", "commit_url": "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def", "cve": "CVE-2025-9230", "cwe": "CWE-119", "file": "openssl-cve-2025-9230/fixed.c", "function": "kek_unwrap_key", "id": "openssl-cve-2025-9230:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2025-9230", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2025} +{"class": "security fix", "commit": "0db27ec7f8abd258d2e8849ac555ca26ba0cd8d6", "commit_url": "https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7", "cve": "CVE-2024-12797", "cwe": "CWE-119", "file": "openssl-cve-2024-12797/vuln.c", "function": "tls_post_process_server_rpk", "id": "openssl-cve-2024-12797:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-12797", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "798779d43494549b611233f92652f0da5328fbe7", "commit_url": "https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7", "cve": "CVE-2024-12797", "cwe": "CWE-119", "file": "openssl-cve-2024-12797/fixed.c", "function": "tls_post_process_server_rpk", "id": "openssl-cve-2024-12797:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-12797", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "643de602771f6b38ad7823e26d5a63c669eb185b", "commit_url": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844", "cve": "CVE-2024-13176", "cwe": "CWE-119", "file": "openssl-cve-2024-13176-ec_field_inverse_mod_ord/vuln.c", "function": "ec_field_inverse_mod_ord", "id": "openssl-cve-2024-13176-ec_field_inverse_mod_ord:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-13176-ec_field_inverse_mod_ord", "project": "openssl", "provenance": "human", "relpath": "crypto/ec/ec_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2024} +{"class": "security fix", "commit": "07272b05b04836a762b4baa874958af51d513844", "commit_url": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844", "cve": "CVE-2024-13176", "cwe": "CWE-119", "file": "openssl-cve-2024-13176-ec_field_inverse_mod_ord/fixed.c", "function": "ec_field_inverse_mod_ord", "id": "openssl-cve-2024-13176-ec_field_inverse_mod_ord:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-13176-ec_field_inverse_mod_ord", "project": "openssl", "provenance": "human", "relpath": "crypto/ec/ec_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2024} +{"class": "security fix", "commit": "9aae56395aa8e77c44a9df83fd395a644d016635", "commit_url": "https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6", "cve": "CVE-2024-6119", "cwe": "CWE-119", "file": "openssl-cve-2024-6119/vuln.c", "function": "do_x509_check", "id": "openssl-cve-2024-6119:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-6119", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2024} +{"class": "security fix", "commit": "06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6", "commit_url": "https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6", "cve": "CVE-2024-6119", "cwe": "CWE-119", "file": "openssl-cve-2024-6119/fixed.c", "function": "do_x509_check", "id": "openssl-cve-2024-6119:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-6119", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2024} +{"class": "security fix", "commit": "189a7ed3e380e34ea38fe4190a7c9396bace0fb7", "commit_url": "https://github.com/openssl/openssl/commit/4b375b998798dd516d367036773073e1b88e6433", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535/vuln.c", "function": "tls_parse_stoc_alpn", "id": "openssl-cve-2024-5535:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "4b375b998798dd516d367036773073e1b88e6433", "commit_url": "https://github.com/openssl/openssl/commit/4b375b998798dd516d367036773073e1b88e6433", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535/fixed.c", "function": "tls_parse_stoc_alpn", "id": "openssl-cve-2024-5535:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "72394c9a1a6a6b07edf43eb2ad7e95e1093ada1b", "commit_url": "https://github.com/openssl/openssl/commit/189a7ed3e380e34ea38fe4190a7c9396bace0fb7", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-tls_construct_stoc_next_/vuln.c", "function": "tls_construct_stoc_next_proto_neg", "id": "openssl-cve-2024-5535-tls_construct_stoc_next_:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-tls_construct_stoc_next_", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_srvr.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2024} +{"class": "security fix", "commit": "189a7ed3e380e34ea38fe4190a7c9396bace0fb7", "commit_url": "https://github.com/openssl/openssl/commit/189a7ed3e380e34ea38fe4190a7c9396bace0fb7", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-tls_construct_stoc_next_/fixed.c", "function": "tls_construct_stoc_next_proto_neg", "id": "openssl-cve-2024-5535-tls_construct_stoc_next_:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-tls_construct_stoc_next_", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_srvr.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2024} +{"class": "security fix", "commit": "cf6f91f6121f4db167405db2f0de410a456f260c", "commit_url": "https://github.com/openssl/openssl/commit/159921152fd4aa91e4c849fd281ad93ac0d0d0ba", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-tls_parse_stoc_npn/vuln.c", "function": "tls_parse_stoc_npn", "id": "openssl-cve-2024-5535-tls_parse_stoc_npn:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-tls_parse_stoc_npn", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "159921152fd4aa91e4c849fd281ad93ac0d0d0ba", "commit_url": "https://github.com/openssl/openssl/commit/159921152fd4aa91e4c849fd281ad93ac0d0d0ba", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-tls_parse_stoc_npn/fixed.c", "function": "tls_parse_stoc_npn", "id": "openssl-cve-2024-5535-tls_parse_stoc_npn:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-tls_parse_stoc_npn", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "a6facb1042adda2394dc5c98fbceb7625eef141a", "commit_url": "https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-ssl_select_next_proto/vuln.c", "function": "SSL_select_next_proto", "id": "openssl-cve-2024-5535-ssl_select_next_proto:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-ssl_select_next_proto", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "cf6f91f6121f4db167405db2f0de410a456f260c", "commit_url": "https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-ssl_select_next_proto/fixed.c", "function": "SSL_select_next_proto", "id": "openssl-cve-2024-5535-ssl_select_next_proto:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-ssl_select_next_proto", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "015255851371757d54c2560643eb3b3a88123cf1", "commit_url": "https://github.com/openssl/openssl/commit/6cc511826f09e513b4ec066d9b95acaf4f86d991", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-alpn_select_cb/vuln.c", "function": "alpn_select_cb", "id": "openssl-cve-2024-5535-alpn_select_cb:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-alpn_select_cb", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_tserver.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2024} +{"class": "security fix", "commit": "6cc511826f09e513b4ec066d9b95acaf4f86d991", "commit_url": "https://github.com/openssl/openssl/commit/6cc511826f09e513b4ec066d9b95acaf4f86d991", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-alpn_select_cb/fixed.c", "function": "alpn_select_cb", "id": "openssl-cve-2024-5535-alpn_select_cb:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-alpn_select_cb", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_tserver.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2024} +{"class": "use after free", "commit": "b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "commit_url": "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741/vuln.c", "function": "ssl3_read_n", "id": "openssl-cve-2024-4741:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2024-4741", "project": "openssl", "provenance": "human", "relpath": "ssl/record/rec_layer_s3.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2024} +{"class": "use after free", "commit": "2d05959073c4bf8803401668b9df85931a08e020", "commit_url": "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741/fixed.c", "function": "ssl3_read_n", "id": "openssl-cve-2024-4741:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2024-4741", "project": "openssl", "provenance": "human", "relpath": "ssl/record/rec_layer_s3.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2024} +{"class": "use after free", "commit": "b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "commit_url": "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741-ssl3_release_read_buffer/vuln.c", "function": "ssl3_release_read_buffer", "id": "openssl-cve-2024-4741-ssl3_release_read_buffer:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2024-4741-ssl3_release_read_buffer", "project": "openssl", "provenance": "human", "relpath": "ssl/record/ssl3_buffer.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2024} +{"class": "use after free", "commit": "2d05959073c4bf8803401668b9df85931a08e020", "commit_url": "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741-ssl3_release_read_buffer/fixed.c", "function": "ssl3_release_read_buffer", "id": "openssl-cve-2024-4741-ssl3_release_read_buffer:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2024-4741-ssl3_release_read_buffer", "project": "openssl", "provenance": "human", "relpath": "ssl/record/ssl3_buffer.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "ec559c2a6cca3fd4cedae5c47f2dfa38e5e24865", "commit_url": "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "cve": "CVE-2024-4741", "cwe": "CWE-119", "file": "openssl-cve-2024-4741-ssl_free_buffers/vuln.c", "function": "SSL_free_buffers", "id": "openssl-cve-2024-4741-ssl_free_buffers:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-4741-ssl_free_buffers", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2024} +{"class": "security fix", "commit": "b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "commit_url": "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "cve": "CVE-2024-4741", "cwe": "CWE-119", "file": "openssl-cve-2024-4741-ssl_free_buffers/fixed.c", "function": "SSL_free_buffers", "id": "openssl-cve-2024-4741-ssl_free_buffers:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-4741-ssl_free_buffers", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2024} +{"class": "use after free", "commit": "c88c3de51020c37e8706bf7a682a162593053aac", "commit_url": "https://github.com/openssl/openssl/commit/10171e5b511b700c5ecd4fd3e1086b19c34b1ae3", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741-tls_release_read_buffer/vuln.c", "function": "tls_release_read_buffer", "id": "openssl-cve-2024-4741-tls_release_read_buffer:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2024-4741-tls_release_read_buffer", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2024} +{"class": "use after free", "commit": "10171e5b511b700c5ecd4fd3e1086b19c34b1ae3", "commit_url": "https://github.com/openssl/openssl/commit/10171e5b511b700c5ecd4fd3e1086b19c34b1ae3", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741-tls_release_read_buffer/fixed.c", "function": "tls_release_read_buffer", "id": "openssl-cve-2024-4741-tls_release_read_buffer:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2024-4741-tls_release_read_buffer", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2024} +{"class": "security fix", "commit": "17765d9cefed8b4ada6548719beb98e22672a9bd", "commit_url": "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac", "cve": "CVE-2024-4741", "cwe": "CWE-119", "file": "openssl-cve-2024-4741-tls_free_buffers/vuln.c", "function": "tls_free_buffers", "id": "openssl-cve-2024-4741-tls_free_buffers:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-4741-tls_free_buffers", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "c88c3de51020c37e8706bf7a682a162593053aac", "commit_url": "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac", "cve": "CVE-2024-4741", "cwe": "CWE-119", "file": "openssl-cve-2024-4741-tls_free_buffers/fixed.c", "function": "tls_free_buffers", "id": "openssl-cve-2024-4741-tls_free_buffers:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-4741-tls_free_buffers", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "d4b119c567cb5dcaf83add7ca2ea1d646eb3ef9f", "commit_url": "https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397", "cve": "CVE-2024-4603", "cwe": "CWE-119", "file": "openssl-cve-2024-4603/vuln.c", "function": "ossl_dsa_check_params", "id": "openssl-cve-2024-4603:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-4603", "project": "openssl", "provenance": "human", "relpath": "crypto/dsa/dsa_check.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "3559e868e58005d15c6013a0c1fd832e51c73397", "commit_url": "https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397", "cve": "CVE-2024-4603", "cwe": "CWE-119", "file": "openssl-cve-2024-4603/fixed.c", "function": "ossl_dsa_check_params", "id": "openssl-cve-2024-4603:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-4603", "project": "openssl", "provenance": "human", "relpath": "crypto/dsa/dsa_check.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "c1e462ee4bd61867ee391fc13110ca41e4889535", "commit_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "cve": "CVE-2024-2511", "cwe": "CWE-119", "file": "openssl-cve-2024-2511/vuln.c", "function": "ssl_update_cache", "id": "openssl-cve-2024-2511:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-2511", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "commit_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "cve": "CVE-2024-2511", "cwe": "CWE-119", "file": "openssl-cve-2024-2511/fixed.c", "function": "ssl_update_cache", "id": "openssl-cve-2024-2511:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-2511", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "c1e462ee4bd61867ee391fc13110ca41e4889535", "commit_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "cve": "CVE-2024-2511", "cwe": "CWE-119", "file": "openssl-cve-2024-2511-tls_construct_server_hel/vuln.c", "function": "tls_construct_server_hello", "id": "openssl-cve-2024-2511-tls_construct_server_hel:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-2511-tls_construct_server_hel", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_srvr.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2024} +{"class": "security fix", "commit": "b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "commit_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "cve": "CVE-2024-2511", "cwe": "CWE-119", "file": "openssl-cve-2024-2511-tls_construct_server_hel/fixed.c", "function": "tls_construct_server_hello", "id": "openssl-cve-2024-2511-tls_construct_server_hel:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-2511-tls_construct_server_hel", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_srvr.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2024} +{"class": "null pointer dereference", "commit": "6c70934a46eaa1734c2efbe9d7baac51c607062e", "commit_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "cve": "CVE-2024-0727", "cwe": "CWE-476", "file": "openssl-cve-2024-0727/vuln.c", "function": "pkcs12_gen_mac", "id": "openssl-cve-2024-0727:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2024-0727", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2024} +{"class": "null pointer dereference", "commit": "09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "commit_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "cve": "CVE-2024-0727", "cwe": "CWE-476", "file": "openssl-cve-2024-0727/fixed.c", "function": "pkcs12_gen_mac", "id": "openssl-cve-2024-0727:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2024-0727", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2024} +{"class": "null pointer dereference", "commit": "6c70934a46eaa1734c2efbe9d7baac51c607062e", "commit_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "cve": "CVE-2024-0727", "cwe": "CWE-476", "file": "openssl-cve-2024-0727-smime_write_pkcs7/vuln.c", "function": "SMIME_write_PKCS7", "id": "openssl-cve-2024-0727-smime_write_pkcs7:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2024-0727-smime_write_pkcs7", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_mime.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2024} +{"class": "null pointer dereference", "commit": "09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "commit_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "cve": "CVE-2024-0727", "cwe": "CWE-476", "file": "openssl-cve-2024-0727-smime_write_pkcs7/fixed.c", "function": "SMIME_write_PKCS7", "id": "openssl-cve-2024-0727-smime_write_pkcs7:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2024-0727-smime_write_pkcs7", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_mime.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2024} +{"class": "security fix", "commit": "23d21359e35536a4ee8f7be0b245ddbfac909bff", "commit_url": "https://github.com/openssl/openssl/commit/0df40630850fb2740e6be6890bb905d3fc623b2d", "cve": "CVE-2023-5363", "cwe": "CWE-119", "file": "openssl-cve-2023-5363/vuln.c", "function": "evp_cipher_init_internal", "id": "openssl-cve-2023-5363:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-5363", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2023} +{"class": "security fix", "commit": "0df40630850fb2740e6be6890bb905d3fc623b2d", "commit_url": "https://github.com/openssl/openssl/commit/0df40630850fb2740e6be6890bb905d3fc623b2d", "cve": "CVE-2023-5363", "cwe": "CWE-119", "file": "openssl-cve-2023-5363/fixed.c", "function": "evp_cipher_init_internal", "id": "openssl-cve-2023-5363:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-5363", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2023} +{"class": "security fix", "commit": "e648db50d9a63f71cab5cb78424c2932d019a744", "commit_url": "https://github.com/openssl/openssl/commit/9002fd07327a91f35ba6c1307e71fa6fd4409b7f", "cve": "CVE-2023-3817", "cwe": "CWE-119", "file": "openssl-cve-2023-3817-dh_check/vuln.c", "function": "DH_check", "id": "openssl-cve-2023-3817-dh_check:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-3817-dh_check", "project": "openssl", "provenance": "human", "relpath": "crypto/dh/dh_check.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "9002fd07327a91f35ba6c1307e71fa6fd4409b7f", "commit_url": "https://github.com/openssl/openssl/commit/9002fd07327a91f35ba6c1307e71fa6fd4409b7f", "cve": "CVE-2023-3817", "cwe": "CWE-119", "file": "openssl-cve-2023-3817-dh_check/fixed.c", "function": "DH_check", "id": "openssl-cve-2023-3817-dh_check:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-3817-dh_check", "project": "openssl", "provenance": "human", "relpath": "crypto/dh/dh_check.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "fe824ce0c5d51e7e7cf36c31db6c49c1c0c04a25", "commit_url": "https://github.com/openssl/openssl/commit/8780a896543a654e757db1b9396383f9d8095528", "cve": "CVE-2023-3446", "cwe": "CWE-119", "file": "openssl-cve-2023-3446/vuln.c", "function": "DH_check", "id": "openssl-cve-2023-3446:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-3446", "project": "openssl", "provenance": "human", "relpath": "crypto/dh/dh_check.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2023} +{"class": "security fix", "commit": "8780a896543a654e757db1b9396383f9d8095528", "commit_url": "https://github.com/openssl/openssl/commit/8780a896543a654e757db1b9396383f9d8095528", "cve": "CVE-2023-3446", "cwe": "CWE-119", "file": "openssl-cve-2023-3446/fixed.c", "function": "DH_check", "id": "openssl-cve-2023-3446:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-3446", "project": "openssl", "provenance": "human", "relpath": "crypto/dh/dh_check.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2023} +{"class": "security fix", "commit": "175fa8469fc78f6cf35dfb87d26899e60e9ff1d4", "commit_url": "https://github.com/openssl/openssl/commit/00e2f5eea29994d19293ec4e8c8775ba73678598", "cve": "CVE-2023-2975", "cwe": "CWE-119", "file": "openssl-cve-2023-2975/vuln.c", "function": "siv_cipher", "id": "openssl-cve-2023-2975:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-2975", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_siv.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "00e2f5eea29994d19293ec4e8c8775ba73678598", "commit_url": "https://github.com/openssl/openssl/commit/00e2f5eea29994d19293ec4e8c8775ba73678598", "cve": "CVE-2023-2975", "cwe": "CWE-119", "file": "openssl-cve-2023-2975/fixed.c", "function": "siv_cipher", "id": "openssl-cve-2023-2975:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-2975", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_siv.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "3ca28c9e81fae36b0b44dc39beecd2b5a7561975", "commit_url": "https://github.com/openssl/openssl/commit/d63b3e7959e79f98d60760a739f7876dc5adc838", "cve": "CVE-2023-2650", "cwe": "CWE-119", "file": "openssl-cve-2023-2650/vuln.c", "function": "OBJ_obj2txt", "id": "openssl-cve-2023-2650:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-2650", "project": "openssl", "provenance": "human", "relpath": "crypto/objects/obj_dat.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2023} +{"class": "security fix", "commit": "d63b3e7959e79f98d60760a739f7876dc5adc838", "commit_url": "https://github.com/openssl/openssl/commit/d63b3e7959e79f98d60760a739f7876dc5adc838", "cve": "CVE-2023-2650", "cwe": "CWE-119", "file": "openssl-cve-2023-2650/fixed.c", "function": "OBJ_obj2txt", "id": "openssl-cve-2023-2650:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-2650", "project": "openssl", "provenance": "human", "relpath": "crypto/objects/obj_dat.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2023} +{"class": "buffer overflow", "commit": "5d6f13d90d5c4212737002bcd54871cf236a1220", "commit_url": "https://github.com/openssl/openssl/commit/d12cde7fc5561d463badcd8a73079cf92864c31e", "cve": "CVE-2022-37454", "cwe": "CWE-119", "file": "openssl-cve-2022-37454/vuln.c", "function": "HKDF_Expand", "id": "openssl-cve-2022-37454:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-37454", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/kdfs/hkdf.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "buffer overflow", "commit": "d12cde7fc5561d463badcd8a73079cf92864c31e", "commit_url": "https://github.com/openssl/openssl/commit/d12cde7fc5561d463badcd8a73079cf92864c31e", "cve": "CVE-2022-37454", "cwe": "CWE-119", "file": "openssl-cve-2022-37454/fixed.c", "function": "HKDF_Expand", "id": "openssl-cve-2022-37454:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-37454", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/kdfs/hkdf.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "908eaceb62624f5b5c505b286d904bd3a4e8a64a", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304/vuln.c", "function": "bn_sub_words", "id": "openssl-cve-2022-4304:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304", "project": "openssl", "provenance": "human", "relpath": "crypto/bn/bn_asm.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "a00d757d9ca212994625d1a02c81cc5edd27e13b", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304/fixed.c", "function": "bn_sub_words", "id": "openssl-cve-2022-4304:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304", "project": "openssl", "provenance": "human", "relpath": "crypto/bn/bn_asm.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "908eaceb62624f5b5c505b286d904bd3a4e8a64a", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-bn_blinding_invert_ex/vuln.c", "function": "BN_BLINDING_invert_ex", "id": "openssl-cve-2022-4304-bn_blinding_invert_ex:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304-bn_blinding_invert_ex", "project": "openssl", "provenance": "human", "relpath": "crypto/bn/bn_blind.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "a00d757d9ca212994625d1a02c81cc5edd27e13b", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-bn_blinding_invert_ex/fixed.c", "function": "BN_BLINDING_invert_ex", "id": "openssl-cve-2022-4304-bn_blinding_invert_ex:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304-bn_blinding_invert_ex", "project": "openssl", "provenance": "human", "relpath": "crypto/bn/bn_blind.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "908eaceb62624f5b5c505b286d904bd3a4e8a64a", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-rsa_blinding_invert/vuln.c", "function": "rsa_blinding_invert", "id": "openssl-cve-2022-4304-rsa_blinding_invert:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304-rsa_blinding_invert", "project": "openssl", "provenance": "human", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "a00d757d9ca212994625d1a02c81cc5edd27e13b", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-rsa_blinding_invert/fixed.c", "function": "rsa_blinding_invert", "id": "openssl-cve-2022-4304-rsa_blinding_invert:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304-rsa_blinding_invert", "project": "openssl", "provenance": "human", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "f675d164e5d9648c3537a0f5efe1cc2fd232b4a9", "commit_url": "https://github.com/openssl/openssl/commit/b013765abfa80036dc779dd0e50602c57bb3bf95", "cve": "CVE-2023-0465", "cwe": "CWE-119", "file": "openssl-cve-2023-0465/vuln.c", "function": "check_policy", "id": "openssl-cve-2023-0465:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0465", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "b013765abfa80036dc779dd0e50602c57bb3bf95", "commit_url": "https://github.com/openssl/openssl/commit/b013765abfa80036dc779dd0e50602c57bb3bf95", "cve": "CVE-2023-0465", "cwe": "CWE-119", "file": "openssl-cve-2023-0465/fixed.c", "function": "check_policy", "id": "openssl-cve-2023-0465:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0465", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "969327390220aee7515a4054d5189186402d6687", "commit_url": "https://github.com/openssl/openssl/commit/879f7080d7e141f415c79eaa3a8ac4a3dad0348b", "cve": "CVE-2023-0464", "cwe": "CWE-119", "file": "openssl-cve-2023-0464/vuln.c", "function": "tree_init", "id": "openssl-cve-2023-0464:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0464", "project": "openssl", "provenance": "human", "relpath": "crypto/x509v3/pcy_tree.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "879f7080d7e141f415c79eaa3a8ac4a3dad0348b", "commit_url": "https://github.com/openssl/openssl/commit/879f7080d7e141f415c79eaa3a8ac4a3dad0348b", "cve": "CVE-2023-0464", "cwe": "CWE-119", "file": "openssl-cve-2023-0464/fixed.c", "function": "tree_init", "id": "openssl-cve-2023-0464:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0464", "project": "openssl", "provenance": "human", "relpath": "crypto/x509v3/pcy_tree.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "c309c4dce742c3eeb393a0f03f9c567d0e368ccc", "commit_url": "https://github.com/openssl/openssl/commit/959c59c7a0164117e7f8366466a32bb1f8d77ff1", "cve": "CVE-2023-0464", "cwe": "CWE-119", "file": "openssl-cve-2023-0464-tree_init/vuln.c", "function": "tree_init", "id": "openssl-cve-2023-0464-tree_init:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0464-tree_init", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/pcy_tree.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2023} +{"class": "security fix", "commit": "959c59c7a0164117e7f8366466a32bb1f8d77ff1", "commit_url": "https://github.com/openssl/openssl/commit/959c59c7a0164117e7f8366466a32bb1f8d77ff1", "cve": "CVE-2023-0464", "cwe": "CWE-119", "file": "openssl-cve-2023-0464-tree_init/fixed.c", "function": "tree_init", "id": "openssl-cve-2023-0464-tree_init:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0464-tree_init", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/pcy_tree.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2023} +{"class": "security fix", "commit": "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449/vuln.c", "function": "tls_get_more_records", "id": "openssl-cve-2021-3449:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "2b9e2afc382490592078cdb69d06f54f0fefd4c6", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449/fixed.c", "function": "tls_get_more_records", "id": "openssl-cve-2021-3449:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-def_generate_session_id/vuln.c", "function": "def_generate_session_id", "id": "openssl-cve-2021-3449-def_generate_session_id:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-def_generate_session_id", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_sess.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "2b9e2afc382490592078cdb69d06f54f0fefd4c6", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-def_generate_session_id/fixed.c", "function": "def_generate_session_id", "id": "openssl-cve-2021-3449-def_generate_session_id:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-def_generate_session_id", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_sess.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_parse_ctos_renegotia/vuln.c", "function": "tls_parse_ctos_renegotiate", "id": "openssl-cve-2021-3449-tls_parse_ctos_renegotia:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_parse_ctos_renegotia", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_srvr.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "2b9e2afc382490592078cdb69d06f54f0fefd4c6", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_parse_ctos_renegotia/fixed.c", "function": "tls_parse_ctos_renegotiate", "id": "openssl-cve-2021-3449-tls_parse_ctos_renegotia:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_parse_ctos_renegotia", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_srvr.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_process_finished/vuln.c", "function": "tls_process_finished", "id": "openssl-cve-2021-3449-tls_process_finished:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_process_finished", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "2b9e2afc382490592078cdb69d06f54f0fefd4c6", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_process_finished/fixed.c", "function": "tls_process_finished", "id": "openssl-cve-2021-3449-tls_process_finished:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_process_finished", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "7880536fe17c2b5450e279155bedd51771d28c9f", "commit_url": "https://github.com/openssl/openssl/commit/6eebe6c0238178356114a96a7858f36b24172847", "cve": "CVE-2023-0401", "cwe": "CWE-119", "file": "openssl-cve-2023-0401/vuln.c", "function": "pkcs7_bio_add_digest", "id": "openssl-cve-2023-0401:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0401", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_doit.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2023} +{"class": "security fix", "commit": "6eebe6c0238178356114a96a7858f36b24172847", "commit_url": "https://github.com/openssl/openssl/commit/6eebe6c0238178356114a96a7858f36b24172847", "cve": "CVE-2023-0401", "cwe": "CWE-119", "file": "openssl-cve-2023-0401/fixed.c", "function": "pkcs7_bio_add_digest", "id": "openssl-cve-2023-0401:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0401", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_doit.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2023} +{"class": "security fix", "commit": "adf77d6657e836fc87391fad53d857927a764297", "commit_url": "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f", "cve": "CVE-2023-0286", "cwe": "CWE-119", "file": "openssl-cve-2023-0286-general_name_cmp/vuln.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2023-0286-general_name_cmp:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0286-general_name_cmp", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "7880536fe17c2b5450e279155bedd51771d28c9f", "commit_url": "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f", "cve": "CVE-2023-0286", "cwe": "CWE-119", "file": "openssl-cve-2023-0286-general_name_cmp/fixed.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2023-0286-general_name_cmp:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0286-general_name_cmp", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "3436f9c24ab90c1661e4798e7944f028d5d251ce", "commit_url": "https://github.com/openssl/openssl/commit/bcec03c33cc00a7b5eb89ebeeee59e604570a86a", "cve": "CVE-2023-0217", "cwe": "CWE-119", "file": "openssl-cve-2023-0217/vuln.c", "function": "ossl_ffc_validate_public_key_partial", "id": "openssl-cve-2023-0217:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0217", "project": "openssl", "provenance": "human", "relpath": "crypto/ffc/ffc_key_validate.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "bcec03c33cc00a7b5eb89ebeeee59e604570a86a", "commit_url": "https://github.com/openssl/openssl/commit/bcec03c33cc00a7b5eb89ebeeee59e604570a86a", "cve": "CVE-2023-0217", "cwe": "CWE-119", "file": "openssl-cve-2023-0217/fixed.c", "function": "ossl_ffc_validate_public_key_partial", "id": "openssl-cve-2023-0217:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0217", "project": "openssl", "provenance": "human", "relpath": "crypto/ffc/ffc_key_validate.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "625faca931957719c76fb16094cf5b6e0debe23f", "commit_url": "https://github.com/openssl/openssl/commit/80253dbdc92bec584f4a9866b43f8674156d838a", "cve": "CVE-2023-0216", "cwe": "CWE-119", "file": "openssl-cve-2023-0216/vuln.c", "function": "STACK_OF", "id": "openssl-cve-2023-0216:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0216", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2023} +{"class": "security fix", "commit": "80253dbdc92bec584f4a9866b43f8674156d838a", "commit_url": "https://github.com/openssl/openssl/commit/80253dbdc92bec584f4a9866b43f8674156d838a", "cve": "CVE-2023-0216", "cwe": "CWE-119", "file": "openssl-cve-2023-0216/fixed.c", "function": "STACK_OF", "id": "openssl-cve-2023-0216:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0216", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2023} +{"class": "security fix", "commit": "e2d0a3b5f559e23f11e4d4687b2889b483afb22a", "commit_url": "https://github.com/openssl/openssl/commit/8022a4799fe884b3bf8d538e2b4c4ec323663118", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-rsa_ossl_private_decrypt/vuln.c", "function": "rsa_ossl_private_decrypt", "id": "openssl-cve-2022-4304-rsa_ossl_private_decrypt:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304-rsa_ossl_private_decrypt", "project": "openssl", "provenance": "human", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "8022a4799fe884b3bf8d538e2b4c4ec323663118", "commit_url": "https://github.com/openssl/openssl/commit/8022a4799fe884b3bf8d538e2b4c4ec323663118", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-rsa_ossl_private_decrypt/fixed.c", "function": "rsa_ossl_private_decrypt", "id": "openssl-cve-2022-4304-rsa_ossl_private_decrypt:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304-rsa_ossl_private_decrypt", "project": "openssl", "provenance": "human", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "1ca61aa56090356bbdbb16cf48916fbd9886c78d", "commit_url": "https://github.com/openssl/openssl/commit/7fc67e0a33102aa47bbaa56533eeecb98c0450f7", "cve": "CVE-2020-25659", "cwe": "CWE-119", "file": "openssl-cve-2020-25659/vuln.c", "function": "rsa_ossl_private_decrypt", "id": "openssl-cve-2020-25659:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2020-25659", "project": "openssl", "provenance": "human", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2020} +{"class": "security fix", "commit": "7fc67e0a33102aa47bbaa56533eeecb98c0450f7", "commit_url": "https://github.com/openssl/openssl/commit/7fc67e0a33102aa47bbaa56533eeecb98c0450f7", "cve": "CVE-2020-25659", "cwe": "CWE-119", "file": "openssl-cve-2020-25659/fixed.c", "function": "rsa_ossl_private_decrypt", "id": "openssl-cve-2020-25659:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2020-25659", "project": "openssl", "provenance": "human", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2020} +{"class": "security fix", "commit": "9a5c884999a55595e376083b3a165515c8123049", "commit_url": "https://github.com/openssl/openssl/commit/7725e7bfe6f2ce8146b6552b44e0d226be7638e7", "cve": "CVE-2022-3996", "cwe": "CWE-119", "file": "openssl-cve-2022-3996/vuln.c", "function": "ossl_policy_cache_set_mapping", "id": "openssl-cve-2022-3996:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-3996", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/pcy_map.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "7725e7bfe6f2ce8146b6552b44e0d226be7638e7", "commit_url": "https://github.com/openssl/openssl/commit/7725e7bfe6f2ce8146b6552b44e0d226be7638e7", "cve": "CVE-2022-3996", "cwe": "CWE-119", "file": "openssl-cve-2022-3996/fixed.c", "function": "ossl_policy_cache_set_mapping", "id": "openssl-cve-2022-3996:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-3996", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/pcy_map.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "buffer overflow", "commit": "3b421ebc64c7b52f1b9feb3812bdc7781c784332", "commit_url": "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "cve": "CVE-2022-3786", "cwe": "CWE-119", "file": "openssl-cve-2022-3786-ossl_punycode_decode/vuln.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3786-ossl_punycode_decode:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-3786-ossl_punycode_decode", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "buffer overflow", "commit": "680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "commit_url": "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "cve": "CVE-2022-3786", "cwe": "CWE-119", "file": "openssl-cve-2022-3786-ossl_punycode_decode/fixed.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3786-ossl_punycode_decode:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-3786-ossl_punycode_decode", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "89d72311327735ef15c804d2adea84a0fb1bfa0a", "commit_url": "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332", "cve": "CVE-2022-3602", "cwe": "CWE-119", "file": "openssl-cve-2022-3602-ossl_punycode_decode/vuln.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3602-ossl_punycode_decode:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-3602-ossl_punycode_decode", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "3b421ebc64c7b52f1b9feb3812bdc7781c784332", "commit_url": "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332", "cve": "CVE-2022-3602", "cwe": "CWE-119", "file": "openssl-cve-2022-3602-ossl_punycode_decode/fixed.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3602-ossl_punycode_decode:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-3602-ossl_punycode_decode", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "null pointer dereference", "commit": "9f0867da4cbf77ed642717b5e703e09ab2c087a0", "commit_url": "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "cve": "CVE-2022-3358", "cwe": "CWE-476", "file": "openssl-cve-2022-3358/vuln.c", "function": "evp_md_init_internal", "id": "openssl-cve-2022-3358:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2022-3358", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/digest.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "null pointer dereference", "commit": "5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "commit_url": "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "cve": "CVE-2022-3358", "cwe": "CWE-476", "file": "openssl-cve-2022-3358/fixed.c", "function": "evp_md_init_internal", "id": "openssl-cve-2022-3358:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2022-3358", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/digest.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "null pointer dereference", "commit": "9f0867da4cbf77ed642717b5e703e09ab2c087a0", "commit_url": "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "cve": "CVE-2022-3358", "cwe": "CWE-476", "file": "openssl-cve-2022-3358-evp_cipher_init_internal/vuln.c", "function": "evp_cipher_init_internal", "id": "openssl-cve-2022-3358-evp_cipher_init_internal:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2022-3358-evp_cipher_init_internal", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "null pointer dereference", "commit": "5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "commit_url": "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "cve": "CVE-2022-3358", "cwe": "CWE-476", "file": "openssl-cve-2022-3358-evp_cipher_init_internal/fixed.c", "function": "evp_cipher_init_internal", "id": "openssl-cve-2022-3358-evp_cipher_init_internal:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2022-3358-evp_cipher_init_internal", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "abebcec7b1a30fbb1fd5c5cbbe8817690c139163", "commit_url": "https://github.com/openssl/openssl/commit/2c9c35870601b4a44d86ddbf512b38df38285cfa", "cve": "CVE-2022-2068", "cwe": "CWE-119", "file": "openssl-cve-2022-2068-hash_dir/vuln.in", "function": "hash_dir", "id": "openssl-cve-2022-2068-hash_dir:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-2068-hash_dir", "project": "openssl", "provenance": "human", "relpath": "tools/c_rehash.in", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "2c9c35870601b4a44d86ddbf512b38df38285cfa", "commit_url": "https://github.com/openssl/openssl/commit/2c9c35870601b4a44d86ddbf512b38df38285cfa", "cve": "CVE-2022-2068", "cwe": "CWE-119", "file": "openssl-cve-2022-2068-hash_dir/fixed.in", "function": "hash_dir", "id": "openssl-cve-2022-2068-hash_dir:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-2068-hash_dir", "project": "openssl", "provenance": "human", "relpath": "tools/c_rehash.in", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "3be529cd2eb4eb3eaaa7913af619fb9c918d4581", "commit_url": "https://github.com/openssl/openssl/commit/373de40f3f76c63e4f2684abd86706f3863347ca", "cve": "CVE-2022-29242", "cwe": "CWE-119", "file": "openssl-cve-2022-29242/vuln.c", "function": "tls_construct_cke_gost18", "id": "openssl-cve-2022-29242:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-29242", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "373de40f3f76c63e4f2684abd86706f3863347ca", "commit_url": "https://github.com/openssl/openssl/commit/373de40f3f76c63e4f2684abd86706f3863347ca", "cve": "CVE-2022-29242", "cwe": "CWE-119", "file": "openssl-cve-2022-29242/fixed.c", "function": "tls_construct_cke_gost18", "id": "openssl-cve-2022-29242:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-29242", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "55c80c222293a972587004c185dc5653ae207a0e", "commit_url": "https://github.com/openssl/openssl/commit/7d56a74a96828985db7354a55227a511615f732b", "cve": "CVE-2022-1434", "cwe": "CWE-119", "file": "openssl-cve-2022-1434/vuln.c", "function": "rc4_hmac_md5_set_ctx_params", "id": "openssl-cve-2022-1434:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-1434", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_rc4_hmac_md5.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "7d56a74a96828985db7354a55227a511615f732b", "commit_url": "https://github.com/openssl/openssl/commit/7d56a74a96828985db7354a55227a511615f732b", "cve": "CVE-2022-1434", "cwe": "CWE-119", "file": "openssl-cve-2022-1434/fixed.c", "function": "rc4_hmac_md5_set_ctx_params", "id": "openssl-cve-2022-1434:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-1434", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_rc4_hmac_md5.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "ae3ece03a61e8822fd7ea58f44812871efba82d1", "commit_url": "https://github.com/openssl/openssl/commit/2eda98790c5c2741d76d23cc1e74b0dc4f4b391a", "cve": "CVE-2022-1343", "cwe": "CWE-119", "file": "openssl-cve-2022-1343/vuln.c", "function": "ocsp_verify_signer", "id": "openssl-cve-2022-1343:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-1343", "project": "openssl", "provenance": "human", "relpath": "crypto/ocsp/ocsp_vfy.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "2eda98790c5c2741d76d23cc1e74b0dc4f4b391a", "commit_url": "https://github.com/openssl/openssl/commit/2eda98790c5c2741d76d23cc1e74b0dc4f4b391a", "cve": "CVE-2022-1343", "cwe": "CWE-119", "file": "openssl-cve-2022-1343/fixed.c", "function": "ocsp_verify_signer", "id": "openssl-cve-2022-1343:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-1343", "project": "openssl", "provenance": "human", "relpath": "crypto/ocsp/ocsp_vfy.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "758754966791c537ea95241438454aa86f91f256", "commit_url": "https://github.com/openssl/openssl/commit/d69ae8a93bfc0f2489c008fcf303a98d77a6df4d", "cve": "CVE-2021-4044", "cwe": "CWE-119", "file": "openssl-cve-2021-4044/vuln.c", "function": "has_san_id", "id": "openssl-cve-2021-4044:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-4044", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "d69ae8a93bfc0f2489c008fcf303a98d77a6df4d", "commit_url": "https://github.com/openssl/openssl/commit/d69ae8a93bfc0f2489c008fcf303a98d77a6df4d", "cve": "CVE-2021-4044", "cwe": "CWE-119", "file": "openssl-cve-2021-4044/fixed.c", "function": "has_san_id", "id": "openssl-cve-2021-4044:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-4044", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "8e78289c4e6f4c9f2fec073b78443736e689854d", "commit_url": "https://github.com/openssl/openssl/commit/758754966791c537ea95241438454aa86f91f256", "cve": "CVE-2021-4044", "cwe": "CWE-119", "file": "openssl-cve-2021-4044-tls_post_process_server_/vuln.c", "function": "tls_post_process_server_certificate", "id": "openssl-cve-2021-4044-tls_post_process_server_:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-4044-tls_post_process_server_", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "758754966791c537ea95241438454aa86f91f256", "commit_url": "https://github.com/openssl/openssl/commit/758754966791c537ea95241438454aa86f91f256", "cve": "CVE-2021-4044", "cwe": "CWE-119", "file": "openssl-cve-2021-4044-tls_post_process_server_/fixed.c", "function": "tls_post_process_server_certificate", "id": "openssl-cve-2021-4044-tls_post_process_server_:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-4044-tls_post_process_server_", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "4b8a8bb75229b64d1c7598d845fdc3c7e7d7eee2", "commit_url": "https://github.com/openssl/openssl/commit/36cf45ef3ba71e44a8be06ee81cb31aa02cb0010", "cve": "CVE-2021-3711", "cwe": "CWE-119", "file": "openssl-cve-2021-3711-sm2_asym_decrypt/vuln.c", "function": "sm2_asym_decrypt", "id": "openssl-cve-2021-3711-sm2_asym_decrypt:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3711-sm2_asym_decrypt", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/asymciphers/sm2_enc.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "36cf45ef3ba71e44a8be06ee81cb31aa02cb0010", "commit_url": "https://github.com/openssl/openssl/commit/36cf45ef3ba71e44a8be06ee81cb31aa02cb0010", "cve": "CVE-2021-3711", "cwe": "CWE-119", "file": "openssl-cve-2021-3711-sm2_asym_decrypt/fixed.c", "function": "sm2_asym_decrypt", "id": "openssl-cve-2021-3711-sm2_asym_decrypt:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3711-sm2_asym_decrypt", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/asymciphers/sm2_enc.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "98624776c4d501c8badd6f772ab7048ac9191cb9", "commit_url": "https://github.com/openssl/openssl/commit/7c038a6bcd98d4bbfd2c2892a87a1138d2f7c5f3", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-netscape_spki_print/vuln.c", "function": "NETSCAPE_SPKI_print", "id": "openssl-cve-2021-3712-netscape_spki_print:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-netscape_spki_print", "project": "openssl", "provenance": "human", "relpath": "crypto/asn1/t_spki.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "7c038a6bcd98d4bbfd2c2892a87a1138d2f7c5f3", "commit_url": "https://github.com/openssl/openssl/commit/7c038a6bcd98d4bbfd2c2892a87a1138d2f7c5f3", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-netscape_spki_print/fixed.c", "function": "NETSCAPE_SPKI_print", "id": "openssl-cve-2021-3712-netscape_spki_print:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-netscape_spki_print", "project": "openssl", "provenance": "human", "relpath": "crypto/asn1/t_spki.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "1f365708a3318a5f1a395f90c38b584a58d37fb9", "commit_url": "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-append_ia5/vuln.c", "function": "append_ia5", "id": "openssl-cve-2021-3712-append_ia5:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-append_ia5", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "98624776c4d501c8badd6f772ab7048ac9191cb9", "commit_url": "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-append_ia5/fixed.c", "function": "append_ia5", "id": "openssl-cve-2021-3712-append_ia5:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-append_ia5", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "d2015a783e64613d8e4a142fa05048d1863df944", "commit_url": "https://github.com/openssl/openssl/commit/95f8c1e142df835d03b5b62521383a462fc5470d", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet/vuln.c", "function": "ossl_cmp_hdr_push1_freeText", "id": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_hdr.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "95f8c1e142df835d03b5b62521383a462fc5470d", "commit_url": "https://github.com/openssl/openssl/commit/95f8c1e142df835d03b5b62521383a462fc5470d", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet/fixed.c", "function": "ossl_cmp_hdr_push1_freeText", "id": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_hdr.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "918430ba80d94ec8f05383b43b1872b1ebb13e1a", "commit_url": "https://github.com/openssl/openssl/commit/d2015a783e64613d8e4a142fa05048d1863df944", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-ia5ncasecmp/vuln.c", "function": "ia5ncasecmp", "id": "openssl-cve-2021-3712-ia5ncasecmp:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-ia5ncasecmp", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_ncons.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "d2015a783e64613d8e4a142fa05048d1863df944", "commit_url": "https://github.com/openssl/openssl/commit/d2015a783e64613d8e4a142fa05048d1863df944", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-ia5ncasecmp/fixed.c", "function": "ia5ncasecmp", "id": "openssl-cve-2021-3712-ia5ncasecmp:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-ia5ncasecmp", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_ncons.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd", "commit_url": "https://github.com/openssl/openssl/commit/918430ba80d94ec8f05383b43b1872b1ebb13e1a", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-i2r_pci/vuln.c", "function": "i2r_pci", "id": "openssl-cve-2021-3712-i2r_pci:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-i2r_pci", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_pci.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "918430ba80d94ec8f05383b43b1872b1ebb13e1a", "commit_url": "https://github.com/openssl/openssl/commit/918430ba80d94ec8f05383b43b1872b1ebb13e1a", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-i2r_pci/fixed.c", "function": "i2r_pci", "id": "openssl-cve-2021-3712-i2r_pci:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-i2r_pci", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_pci.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "1747d4658b3830951068a6a6c1fa2b45c4731fb3", "commit_url": "https://github.com/openssl/openssl/commit/b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-general_name_print/vuln.c", "function": "GENERAL_NAME_print", "id": "openssl-cve-2021-3712-general_name_print:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-general_name_print", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_san.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd", "commit_url": "https://github.com/openssl/openssl/commit/b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-general_name_print/fixed.c", "function": "GENERAL_NAME_print", "id": "openssl-cve-2021-3712-general_name_print:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-general_name_print", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_san.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "ad6ac17489241574136b7d035f01f6175dd9c941", "commit_url": "https://github.com/openssl/openssl/commit/1747d4658b3830951068a6a6c1fa2b45c4731fb3", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-print_qualifiers/vuln.c", "function": "print_qualifiers", "id": "openssl-cve-2021-3712-print_qualifiers:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-print_qualifiers", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_cpols.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "1747d4658b3830951068a6a6c1fa2b45c4731fb3", "commit_url": "https://github.com/openssl/openssl/commit/1747d4658b3830951068a6a6c1fa2b45c4731fb3", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-print_qualifiers/fixed.c", "function": "print_qualifiers", "id": "openssl-cve-2021-3712-print_qualifiers:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-print_qualifiers", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_cpols.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "8c74c9d1ade0fbdab5b815ddb747351b8b839641", "commit_url": "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "cve": "CVE-2021-3711", "cwe": "CWE-119", "file": "openssl-cve-2021-3711-pkey_sm2_decrypt/vuln.c", "function": "pkey_sm2_decrypt", "id": "openssl-cve-2021-3711-pkey_sm2_decrypt:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3711-pkey_sm2_decrypt", "project": "openssl", "provenance": "human", "relpath": "crypto/sm2/sm2_pmeth.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "commit_url": "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "cve": "CVE-2021-3711", "cwe": "CWE-119", "file": "openssl-cve-2021-3711-pkey_sm2_decrypt/fixed.c", "function": "pkey_sm2_decrypt", "id": "openssl-cve-2021-3711-pkey_sm2_decrypt:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3711-pkey_sm2_decrypt", "project": "openssl", "provenance": "human", "relpath": "crypto/sm2/sm2_pmeth.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-ssl_generate_master_secr/vuln.c", "function": "ssl_generate_master_secret", "id": "openssl-cve-2021-3449-ssl_generate_master_secr:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-ssl_generate_master_secr", "project": "openssl", "provenance": "human", "relpath": "ssl/s3_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-ssl_generate_master_secr/fixed.c", "function": "ssl_generate_master_secret", "id": "openssl-cve-2021-3449-ssl_generate_master_secr:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-ssl_generate_master_secr", "project": "openssl", "provenance": "human", "relpath": "ssl/s3_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos/vuln.c", "function": "SSL_CTX_set_alpn_protos", "id": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos/fixed.c", "function": "SSL_CTX_set_alpn_protos", "id": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-init_sig_algs_cert/vuln.c", "function": "init_sig_algs_cert", "id": "openssl-cve-2021-3449-init_sig_algs_cert:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-init_sig_algs_cert", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-init_sig_algs_cert/fixed.c", "function": "init_sig_algs_cert", "id": "openssl-cve-2021-3449-init_sig_algs_cert:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-init_sig_algs_cert", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_construct_ctos_early/vuln.c", "function": "tls_construct_ctos_early_data", "id": "openssl-cve-2021-3449-tls_construct_ctos_early:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_construct_ctos_early", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_construct_ctos_early/fixed.c", "function": "tls_construct_ctos_early_data", "id": "openssl-cve-2021-3449-tls_construct_ctos_early:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_construct_ctos_early", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_process_certificate_/vuln.c", "function": "tls_process_certificate_request", "id": "openssl-cve-2021-3449-tls_process_certificate_:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_process_certificate_", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_process_certificate_/fixed.c", "function": "tls_process_certificate_request", "id": "openssl-cve-2021-3449-tls_process_certificate_:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_process_certificate_", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_handle_alpn/vuln.c", "function": "tls_handle_alpn", "id": "openssl-cve-2021-3449-tls_handle_alpn:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_handle_alpn", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_srvr.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_handle_alpn/fixed.c", "function": "tls_handle_alpn", "id": "openssl-cve-2021-3449-tls_handle_alpn:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_handle_alpn", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_srvr.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "null pointer dereference", "commit": "112580c27b829b0ac0874d5c5787195f27c7952c", "commit_url": "https://github.com/openssl/openssl/commit/02b1636fe3db274497304a3e95a4e32ced7e841b", "cve": "CVE-2021-3449", "cwe": "CWE-476", "file": "openssl-cve-2021-3449-init_sig_algs/vuln.c", "function": "init_sig_algs", "id": "openssl-cve-2021-3449-init_sig_algs:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2021-3449-init_sig_algs", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "null pointer dereference", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/02b1636fe3db274497304a3e95a4e32ced7e841b", "cve": "CVE-2021-3449", "cwe": "CWE-476", "file": "openssl-cve-2021-3449-init_sig_algs/fixed.c", "function": "init_sig_algs", "id": "openssl-cve-2021-3449-init_sig_algs:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2021-3449-init_sig_algs", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "cfd74383d9b06f85cb1e166180346115a3f9a452", "commit_url": "https://github.com/openssl/openssl/commit/2a40b7bc7b94dd7de897a74571e7024f0cf0d63b", "cve": "CVE-2021-3450", "cwe": "CWE-119", "file": "openssl-cve-2021-3450/vuln.c", "function": "check_chain_extensions", "id": "openssl-cve-2021-3450:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3450", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "2a40b7bc7b94dd7de897a74571e7024f0cf0d63b", "commit_url": "https://github.com/openssl/openssl/commit/2a40b7bc7b94dd7de897a74571e7024f0cf0d63b", "cve": "CVE-2021-3450", "cwe": "CWE-119", "file": "openssl-cve-2021-3450/fixed.c", "function": "check_chain_extensions", "id": "openssl-cve-2021-3450:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3450", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "buffer overflow", "commit": "481a88f13c44996a008195791ea0dc076b968774", "commit_url": "https://github.com/openssl/openssl/commit/6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1", "cve": "CVE-2021-23840", "cwe": "CWE-119", "file": "openssl-cve-2021-23840-evp_encryptdecryptupdate/vuln.c", "function": "evp_EncryptDecryptUpdate", "id": "openssl-cve-2021-23840-evp_encryptdecryptupdate:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2021-23840-evp_encryptdecryptupdate", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "buffer overflow", "commit": "6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1", "commit_url": "https://github.com/openssl/openssl/commit/6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1", "cve": "CVE-2021-23840", "cwe": "CWE-119", "file": "openssl-cve-2021-23840-evp_encryptdecryptupdate/fixed.c", "function": "evp_EncryptDecryptUpdate", "id": "openssl-cve-2021-23840-evp_encryptdecryptupdate:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2021-23840-evp_encryptdecryptupdate", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "null pointer dereference", "commit": "c8c6e7438c03b2fc24e7ead460feeaef04911fb4", "commit_url": "https://github.com/openssl/openssl/commit/122a19ab48091c657f7cb1fb3af9fc07bd557bbf", "cve": "CVE-2021-23841", "cwe": "CWE-476", "file": "openssl-cve-2021-23841/vuln.c", "function": "X509_issuer_and_serial_hash", "id": "openssl-cve-2021-23841:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2021-23841", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_cmp.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "null pointer dereference", "commit": "122a19ab48091c657f7cb1fb3af9fc07bd557bbf", "commit_url": "https://github.com/openssl/openssl/commit/122a19ab48091c657f7cb1fb3af9fc07bd557bbf", "cve": "CVE-2021-23841", "cwe": "CWE-476", "file": "openssl-cve-2021-23841/fixed.c", "function": "X509_issuer_and_serial_hash", "id": "openssl-cve-2021-23841:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2021-23841", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_cmp.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "aa0ad2011d3e7ad8a611da274ef7d9c7706e289b", "commit_url": "https://github.com/openssl/openssl/commit/f960d81215ebf3f65e03d4d5d857fb9b666d6920", "cve": "CVE-2020-1971", "cwe": "CWE-119", "file": "openssl-cve-2020-1971-general_name_cmp/vuln.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2020-1971-general_name_cmp:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2020-1971-general_name_cmp", "project": "openssl", "provenance": "human", "relpath": "crypto/x509v3/v3_genn.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2020} +{"class": "security fix", "commit": "f960d81215ebf3f65e03d4d5d857fb9b666d6920", "commit_url": "https://github.com/openssl/openssl/commit/f960d81215ebf3f65e03d4d5d857fb9b666d6920", "cve": "CVE-2020-1971", "cwe": "CWE-119", "file": "openssl-cve-2020-1971-general_name_cmp/fixed.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2020-1971-general_name_cmp:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2020-1971-general_name_cmp", "project": "openssl", "provenance": "human", "relpath": "crypto/x509v3/v3_genn.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2020} +{"class": "null pointer dereference", "commit": "3656c08ab4b1b892730cb5e808b6f4298b08a2e6", "commit_url": "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4", "cve": "CVE-2020-1967", "cwe": "CWE-476", "file": "openssl-cve-2020-1967-tls1_check_sig_alg/vuln.c", "function": "tls1_check_sig_alg", "id": "openssl-cve-2020-1967-tls1_check_sig_alg:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2020-1967-tls1_check_sig_alg", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2020} +{"class": "null pointer dereference", "commit": "a87f3fe01a5a894aa27ccd6a239155fd129988e4", "commit_url": "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4", "cve": "CVE-2020-1967", "cwe": "CWE-476", "file": "openssl-cve-2020-1967-tls1_check_sig_alg/fixed.c", "function": "tls1_check_sig_alg", "id": "openssl-cve-2020-1967-tls1_check_sig_alg:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2020-1967-tls1_check_sig_alg", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "review_tier": "advisory", "split": "train", "year": 2020} +{"class": "security fix", "commit": "f746780a1e548b4b93790b58d70c3b22fde5360d", "commit_url": "https://github.com/curl/curl/commit/e9a2b0dc72dd3a9aa3a5210e89079a3b719475dc", "cve": "CVE-2026-9080", "cwe": "CWE-119", "file": "curl-cve-2026-9080/vuln.c", "function": "mev_forget_socket", "id": "curl-cve-2026-9080:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2026-9080", "project": "curl", "provenance": "human", "relpath": "lib/multi_ev.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "e9a2b0dc72dd3a9aa3a5210e89079a3b719475dc", "commit_url": "https://github.com/curl/curl/commit/e9a2b0dc72dd3a9aa3a5210e89079a3b719475dc", "cve": "CVE-2026-9080", "cwe": "CWE-119", "file": "curl-cve-2026-9080/fixed.c", "function": "mev_forget_socket", "id": "curl-cve-2026-9080:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2026-9080", "project": "curl", "provenance": "human", "relpath": "lib/multi_ev.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "09e25b9d94f4106eac8ca3a43b221bdc66f405e4", "commit_url": "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147", "cve": "CVE-2023-38545", "cwe": "CWE-119", "file": "curl-cve-2023-38545-do_socks5/vuln.c", "function": "do_SOCKS5", "id": "curl-cve-2023-38545-do_socks5:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2023-38545-do_socks5", "project": "curl", "provenance": "human", "relpath": "lib/socks.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2023} +{"class": "security fix", "commit": "fb4415d8aee6c1045be932a34fe6107c2f5ed147", "commit_url": "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147", "cve": "CVE-2023-38545", "cwe": "CWE-119", "file": "curl-cve-2023-38545-do_socks5/fixed.c", "function": "do_SOCKS5", "id": "curl-cve-2023-38545-do_socks5:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2023-38545-do_socks5", "project": "curl", "provenance": "human", "relpath": "lib/socks.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2023} +{"class": "security fix", "commit": "46f8911d3942dc06fdd67e9f6f3908982e5d2fb4", "commit_url": "https://github.com/curl/curl/commit/20f9dd6bae50b7223171b17ba7798946e74f877f", "cve": "CVE-2022-32207", "cwe": "CWE-119", "file": "curl-cve-2022-32207/vuln.c", "function": "cookie_output", "id": "curl-cve-2022-32207:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-32207", "project": "curl", "provenance": "human", "relpath": "lib/cookie.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "20f9dd6bae50b7223171b17ba7798946e74f877f", "commit_url": "https://github.com/curl/curl/commit/20f9dd6bae50b7223171b17ba7798946e74f877f", "cve": "CVE-2022-32207", "cwe": "CWE-119", "file": "curl-cve-2022-32207/fixed.c", "function": "cookie_output", "id": "curl-cve-2022-32207:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-32207", "project": "curl", "provenance": "human", "relpath": "lib/cookie.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "6ecdf5136b52af747e7bda08db9a748256b1cd09", "commit_url": "https://github.com/curl/curl/commit/3a09fbb7f264c67c438d01a30669ce325aa508e2", "cve": "CVE-2022-32206", "cwe": "CWE-119", "file": "curl-cve-2022-32206/vuln.c", "function": "Curl_build_unencoding_stack", "id": "curl-cve-2022-32206:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-32206", "project": "curl", "provenance": "human", "relpath": "lib/content_encoding.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "3a09fbb7f264c67c438d01a30669ce325aa508e2", "commit_url": "https://github.com/curl/curl/commit/3a09fbb7f264c67c438d01a30669ce325aa508e2", "cve": "CVE-2022-32206", "cwe": "CWE-119", "file": "curl-cve-2022-32206/fixed.c", "function": "Curl_build_unencoding_stack", "id": "curl-cve-2022-32206:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-32206", "project": "curl", "provenance": "human", "relpath": "lib/content_encoding.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "2b67a0a1129b20a56ed04859fec8999f5c0c4280", "commit_url": "https://github.com/curl/curl/commit/6ecdf5136b52af747e7bda08db9a748256b1cd09", "cve": "CVE-2022-32208", "cwe": "CWE-119", "file": "curl-cve-2022-32208/vuln.c", "function": "read_data", "id": "curl-cve-2022-32208:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-32208", "project": "curl", "provenance": "human", "relpath": "lib/krb5.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "6ecdf5136b52af747e7bda08db9a748256b1cd09", "commit_url": "https://github.com/curl/curl/commit/6ecdf5136b52af747e7bda08db9a748256b1cd09", "cve": "CVE-2022-32208", "cwe": "CWE-119", "file": "curl-cve-2022-32208/fixed.c", "function": "read_data", "id": "curl-cve-2022-32208:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-32208", "project": "curl", "provenance": "human", "relpath": "lib/krb5.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "7e92d12b4e6911f424678a133b19de670e183a59", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-curl_init_userdefined/vuln.c", "function": "Curl_init_userdefined", "id": "curl-cve-2022-27782-curl_init_userdefined:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-curl_init_userdefined", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "f18af4f874cecab82a9797e8c7541e0990c7a64c", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-curl_init_userdefined/fixed.c", "function": "Curl_init_userdefined", "id": "curl-cve-2022-27782-curl_init_userdefined:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-curl_init_userdefined", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "7e92d12b4e6911f424678a133b19de670e183a59", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-gtls_shutdown/vuln.c", "function": "gtls_shutdown", "id": "curl-cve-2022-27782-gtls_shutdown:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-gtls_shutdown", "project": "curl", "provenance": "human", "relpath": "lib/vtls/gtls.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "f18af4f874cecab82a9797e8c7541e0990c7a64c", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-gtls_shutdown/fixed.c", "function": "gtls_shutdown", "id": "curl-cve-2022-27782-gtls_shutdown:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-gtls_shutdown", "project": "curl", "provenance": "human", "relpath": "lib/vtls/gtls.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "7e92d12b4e6911f424678a133b19de670e183a59", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-nss_setup_connect/vuln.c", "function": "nss_setup_connect", "id": "curl-cve-2022-27782-nss_setup_connect:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-nss_setup_connect", "project": "curl", "provenance": "human", "relpath": "lib/vtls/nss.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "f18af4f874cecab82a9797e8c7541e0990c7a64c", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-nss_setup_connect/fixed.c", "function": "nss_setup_connect", "id": "curl-cve-2022-27782-nss_setup_connect:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-nss_setup_connect", "project": "curl", "provenance": "human", "relpath": "lib/vtls/nss.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "7e92d12b4e6911f424678a133b19de670e183a59", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-ossl_connect_step1/vuln.c", "function": "ossl_connect_step1", "id": "curl-cve-2022-27782-ossl_connect_step1:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-ossl_connect_step1", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "f18af4f874cecab82a9797e8c7541e0990c7a64c", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-ossl_connect_step1/fixed.c", "function": "ossl_connect_step1", "id": "curl-cve-2022-27782-ossl_connect_step1:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-ossl_connect_step1", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "7e92d12b4e6911f424678a133b19de670e183a59", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-curl_free_primary_ssl_co/vuln.c", "function": "Curl_free_primary_ssl_config", "id": "curl-cve-2022-27782-curl_free_primary_ssl_co:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-curl_free_primary_ssl_co", "project": "curl", "provenance": "human", "relpath": "lib/vtls/vtls.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "f18af4f874cecab82a9797e8c7541e0990c7a64c", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-curl_free_primary_ssl_co/fixed.c", "function": "Curl_free_primary_ssl_config", "id": "curl-cve-2022-27782-curl_free_primary_ssl_co:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-curl_free_primary_ssl_co", "project": "curl", "provenance": "human", "relpath": "lib/vtls/vtls.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "fae6fea209a2d4db1582f608bd8cc8000721733a", "commit_url": "https://github.com/curl/curl/commit/8c7ee9083d0d719d0a77ab20d9cc2ae84eeea7f3", "cve": "CVE-2022-27778", "cwe": "CWE-119", "file": "curl-cve-2022-27778/vuln.c", "function": "post_per_transfer", "id": "curl-cve-2022-27778:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27778", "project": "curl", "provenance": "human", "relpath": "src/tool_operate.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "8c7ee9083d0d719d0a77ab20d9cc2ae84eeea7f3", "commit_url": "https://github.com/curl/curl/commit/8c7ee9083d0d719d0a77ab20d9cc2ae84eeea7f3", "cve": "CVE-2022-27778", "cwe": "CWE-119", "file": "curl-cve-2022-27778/fixed.c", "function": "post_per_transfer", "id": "curl-cve-2022-27778:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27778", "project": "curl", "provenance": "human", "relpath": "src/tool_operate.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "ff3ee510c328db03bf171cae6179bb9463fb054f", "commit_url": "https://github.com/curl/curl/commit/fae6fea209a2d4db1582f608bd8cc8000721733a", "cve": "CVE-2022-30115", "cwe": "CWE-119", "file": "curl-cve-2022-30115/vuln.c", "function": "hsts_create", "id": "curl-cve-2022-30115:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-30115", "project": "curl", "provenance": "human", "relpath": "lib/hsts.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "fae6fea209a2d4db1582f608bd8cc8000721733a", "commit_url": "https://github.com/curl/curl/commit/fae6fea209a2d4db1582f608bd8cc8000721733a", "cve": "CVE-2022-30115", "cwe": "CWE-119", "file": "curl-cve-2022-30115/fixed.c", "function": "hsts_create", "id": "curl-cve-2022-30115:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-30115", "project": "curl", "provenance": "human", "relpath": "lib/hsts.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "5c7da89d404bf59c8dd82a001119a16d18365917", "commit_url": "https://github.com/curl/curl/commit/914aaab9153764ef8fa4178215b8ad89d3ac263a", "cve": "CVE-2022-27780", "cwe": "CWE-119", "file": "curl-cve-2022-27780/vuln.c", "function": "hostname_check", "id": "curl-cve-2022-27780:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27780", "project": "curl", "provenance": "human", "relpath": "lib/urlapi.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "914aaab9153764ef8fa4178215b8ad89d3ac263a", "commit_url": "https://github.com/curl/curl/commit/914aaab9153764ef8fa4178215b8ad89d3ac263a", "cve": "CVE-2022-27780", "cwe": "CWE-119", "file": "curl-cve-2022-27780/fixed.c", "function": "hostname_check", "id": "curl-cve-2022-27780:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27780", "project": "curl", "provenance": "human", "relpath": "lib/urlapi.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "08b8ef4e726ba10f45081ecda5b3cea788d3c839", "commit_url": "https://github.com/curl/curl/commit/620ea21410030a9977396b4661806bc187231b79", "cve": "CVE-2022-27774", "cwe": "CWE-119", "file": "curl-cve-2022-27774/vuln.c", "function": "Curl_follow", "id": "curl-cve-2022-27774:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27774", "project": "curl", "provenance": "human", "relpath": "lib/transfer.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "620ea21410030a9977396b4661806bc187231b79", "commit_url": "https://github.com/curl/curl/commit/620ea21410030a9977396b4661806bc187231b79", "cve": "CVE-2022-27774", "cwe": "CWE-119", "file": "curl-cve-2022-27774/fixed.c", "function": "Curl_follow", "id": "curl-cve-2022-27774:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27774", "project": "curl", "provenance": "human", "relpath": "lib/transfer.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "8f2079154f80561ccffcaa954268798b658e66b6", "commit_url": "https://github.com/curl/curl/commit/6e659993952aa5f90f48864be84a1bbb047fc258", "cve": "CVE-2022-27776", "cwe": "CWE-119", "file": "curl-cve-2022-27776/vuln.c", "function": "Curl_add_custom_headers", "id": "curl-cve-2022-27776:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27776", "project": "curl", "provenance": "human", "relpath": "lib/http.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "6e659993952aa5f90f48864be84a1bbb047fc258", "commit_url": "https://github.com/curl/curl/commit/6e659993952aa5f90f48864be84a1bbb047fc258", "cve": "CVE-2022-27776", "cwe": "CWE-119", "file": "curl-cve-2022-27776/fixed.c", "function": "Curl_add_custom_headers", "id": "curl-cve-2022-27776:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27776", "project": "curl", "provenance": "human", "relpath": "lib/http.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "852aa5ad351ea53e5f01d2f44b5b4370c2bf5425", "commit_url": "https://github.com/curl/curl/commit/058f98dc3fe595f21dc26a5b9b1699e519ba5705", "cve": "CVE-2022-27775", "cwe": "CWE-119", "file": "curl-cve-2022-27775/vuln.c", "function": "hashkey", "id": "curl-cve-2022-27775:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27775", "project": "curl", "provenance": "human", "relpath": "lib/conncache.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "058f98dc3fe595f21dc26a5b9b1699e519ba5705", "commit_url": "https://github.com/curl/curl/commit/058f98dc3fe595f21dc26a5b9b1699e519ba5705", "cve": "CVE-2022-27775", "cwe": "CWE-119", "file": "curl-cve-2022-27775/fixed.c", "function": "hashkey", "id": "curl-cve-2022-27775:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27775", "project": "curl", "provenance": "human", "relpath": "lib/conncache.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "ff2f3e836702daa82e2356195482fcc95f4257dc", "commit_url": "https://github.com/curl/curl/commit/852aa5ad351ea53e5f01d2f44b5b4370c2bf5425", "cve": "CVE-2022-22576", "cwe": "CWE-119", "file": "curl-cve-2022-22576-conn_free/vuln.c", "function": "conn_free", "id": "curl-cve-2022-22576-conn_free:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-22576-conn_free", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "852aa5ad351ea53e5f01d2f44b5b4370c2bf5425", "commit_url": "https://github.com/curl/curl/commit/852aa5ad351ea53e5f01d2f44b5b4370c2bf5425", "cve": "CVE-2022-22576", "cwe": "CWE-119", "file": "curl-cve-2022-22576-conn_free/fixed.c", "function": "conn_free", "id": "curl-cve-2022-22576-conn_free:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-22576-conn_free", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2022} +{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947/vuln.c", "function": "ftp_statemachine", "id": "curl-cve-2021-22947:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947", "project": "curl", "provenance": "human", "relpath": "lib/ftp.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "8ef147c43646e91fdaad5d0e7b60351f842e5c68", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947/fixed.c", "function": "ftp_statemachine", "id": "curl-cve-2021-22947:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947", "project": "curl", "provenance": "human", "relpath": "lib/ftp.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-imap_state_starttls_resp/vuln.c", "function": "imap_state_starttls_resp", "id": "curl-cve-2021-22947-imap_state_starttls_resp:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947-imap_state_starttls_resp", "project": "curl", "provenance": "human", "relpath": "lib/imap.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "8ef147c43646e91fdaad5d0e7b60351f842e5c68", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-imap_state_starttls_resp/fixed.c", "function": "imap_state_starttls_resp", "id": "curl-cve-2021-22947-imap_state_starttls_resp:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947-imap_state_starttls_resp", "project": "curl", "provenance": "human", "relpath": "lib/imap.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-pop3_state_starttls_resp/vuln.c", "function": "pop3_state_starttls_resp", "id": "curl-cve-2021-22947-pop3_state_starttls_resp:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947-pop3_state_starttls_resp", "project": "curl", "provenance": "human", "relpath": "lib/pop3.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "8ef147c43646e91fdaad5d0e7b60351f842e5c68", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-pop3_state_starttls_resp/fixed.c", "function": "pop3_state_starttls_resp", "id": "curl-cve-2021-22947-pop3_state_starttls_resp:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947-pop3_state_starttls_resp", "project": "curl", "provenance": "human", "relpath": "lib/pop3.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-smtp_state_starttls_resp/vuln.c", "function": "smtp_state_starttls_resp", "id": "curl-cve-2021-22947-smtp_state_starttls_resp:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947-smtp_state_starttls_resp", "project": "curl", "provenance": "human", "relpath": "lib/smtp.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "8ef147c43646e91fdaad5d0e7b60351f842e5c68", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-smtp_state_starttls_resp/fixed.c", "function": "smtp_state_starttls_resp", "id": "curl-cve-2021-22947-smtp_state_starttls_resp:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947-smtp_state_starttls_resp", "project": "curl", "provenance": "human", "relpath": "lib/smtp.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "43157490a5054bd24256fe12876931e8abc9df49", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946/vuln.c", "function": "ftp_statemachine", "id": "curl-cve-2021-22946:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22946", "project": "curl", "provenance": "human", "relpath": "lib/ftp.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946/fixed.c", "function": "ftp_statemachine", "id": "curl-cve-2021-22946:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22946", "project": "curl", "provenance": "human", "relpath": "lib/ftp.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "43157490a5054bd24256fe12876931e8abc9df49", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946-imap_state_capability_re/vuln.c", "function": "imap_state_capability_resp", "id": "curl-cve-2021-22946-imap_state_capability_re:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22946-imap_state_capability_re", "project": "curl", "provenance": "human", "relpath": "lib/imap.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946-imap_state_capability_re/fixed.c", "function": "imap_state_capability_resp", "id": "curl-cve-2021-22946-imap_state_capability_re:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22946-imap_state_capability_re", "project": "curl", "provenance": "human", "relpath": "lib/imap.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "43157490a5054bd24256fe12876931e8abc9df49", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946-pop3_state_capa_resp/vuln.c", "function": "pop3_state_capa_resp", "id": "curl-cve-2021-22946-pop3_state_capa_resp:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22946-pop3_state_capa_resp", "project": "curl", "provenance": "human", "relpath": "lib/pop3.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946-pop3_state_capa_resp/fixed.c", "function": "pop3_state_capa_resp", "id": "curl-cve-2021-22946-pop3_state_capa_resp:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22946-pop3_state_capa_resp", "project": "curl", "provenance": "human", "relpath": "lib/pop3.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "409a4412409371db00af0a3fe987e517bfab3d19", "commit_url": "https://github.com/curl/curl/commit/43157490a5054bd24256fe12876931e8abc9df49", "cve": "CVE-2021-22945", "cwe": "CWE-119", "file": "curl-cve-2021-22945/vuln.c", "function": "mqtt_send", "id": "curl-cve-2021-22945:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22945", "project": "curl", "provenance": "human", "relpath": "lib/mqtt.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "43157490a5054bd24256fe12876931e8abc9df49", "commit_url": "https://github.com/curl/curl/commit/43157490a5054bd24256fe12876931e8abc9df49", "cve": "CVE-2021-22945", "cwe": "CWE-119", "file": "curl-cve-2021-22945/fixed.c", "function": "mqtt_send", "id": "curl-cve-2021-22945:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22945", "project": "curl", "provenance": "human", "relpath": "lib/mqtt.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "fd9b40bf8dfd43edcbc0d254d613d95a11061c05", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924/vuln.c", "function": "create_conn", "id": "curl-cve-2021-22924:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22924", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "5ea3145850ebff1dc2b13d17440300a01ca38161", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924/fixed.c", "function": "create_conn", "id": "curl-cve-2021-22924:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22924", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "fd9b40bf8dfd43edcbc0d254d613d95a11061c05", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924-nss_do_connect/vuln.c", "function": "nss_do_connect", "id": "curl-cve-2021-22924-nss_do_connect:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22924-nss_do_connect", "project": "curl", "provenance": "human", "relpath": "lib/vtls/nss.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "5ea3145850ebff1dc2b13d17440300a01ca38161", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924-nss_do_connect/fixed.c", "function": "nss_do_connect", "id": "curl-cve-2021-22924-nss_do_connect:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22924-nss_do_connect", "project": "curl", "provenance": "human", "relpath": "lib/vtls/nss.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "fd9b40bf8dfd43edcbc0d254d613d95a11061c05", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924-servercert/vuln.c", "function": "servercert", "id": "curl-cve-2021-22924-servercert:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22924-servercert", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "5ea3145850ebff1dc2b13d17440300a01ca38161", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924-servercert/fixed.c", "function": "servercert", "id": "curl-cve-2021-22924-servercert:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22924-servercert", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "12284e008bad5156b67d0ac253331a96d77201d1", "commit_url": "https://github.com/curl/curl/commit/894f6ec730597eb243618d33cc84d71add8d6a8a", "cve": "CVE-2021-22925", "cwe": "CWE-119", "file": "curl-cve-2021-22925/vuln.c", "function": "suboption", "id": "curl-cve-2021-22925:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22925", "project": "curl", "provenance": "human", "relpath": "lib/telnet.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "894f6ec730597eb243618d33cc84d71add8d6a8a", "commit_url": "https://github.com/curl/curl/commit/894f6ec730597eb243618d33cc84d71add8d6a8a", "cve": "CVE-2021-22925", "cwe": "CWE-119", "file": "curl-cve-2021-22925/fixed.c", "function": "suboption", "id": "curl-cve-2021-22925:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22925", "project": "curl", "provenance": "human", "relpath": "lib/telnet.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "39ce47f219b09c380b81f89fe54ac586c8db6bde", "commit_url": "https://github.com/curl/curl/commit/7f4a9a9b2a49547eae24d2e19bc5c346e9026479", "cve": "CVE-2021-22901", "cwe": "CWE-119", "file": "curl-cve-2021-22901-ossl_connect_step1/vuln.c", "function": "ossl_connect_step1", "id": "curl-cve-2021-22901-ossl_connect_step1:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22901-ossl_connect_step1", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "7f4a9a9b2a49547eae24d2e19bc5c346e9026479", "commit_url": "https://github.com/curl/curl/commit/7f4a9a9b2a49547eae24d2e19bc5c346e9026479", "cve": "CVE-2021-22901", "cwe": "CWE-119", "file": "curl-cve-2021-22901-ossl_connect_step1/fixed.c", "function": "ossl_connect_step1", "id": "curl-cve-2021-22901-ossl_connect_step1:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22901-ossl_connect_step1", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "bbb71507b7bab52002f9b1e0880bed6a32834511", "commit_url": "https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde", "cve": "CVE-2021-22898", "cwe": "CWE-119", "file": "curl-cve-2021-22898/vuln.c", "function": "suboption", "id": "curl-cve-2021-22898:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22898", "project": "curl", "provenance": "human", "relpath": "lib/telnet.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "39ce47f219b09c380b81f89fe54ac586c8db6bde", "commit_url": "https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde", "cve": "CVE-2021-22898", "cwe": "CWE-119", "file": "curl-cve-2021-22898/fixed.c", "function": "suboption", "id": "curl-cve-2021-22898:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22898", "project": "curl", "provenance": "human", "relpath": "lib/telnet.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "7214288898f5625a6cc196e22a74232eada7861c", "commit_url": "https://github.com/curl/curl/commit/b09c8ee15771c614c4bf3ddac893cdb12187c844", "cve": "CVE-2021-22890", "cwe": "CWE-119", "file": "curl-cve-2021-22890/vuln.c", "function": "bearssl_connect_step1", "id": "curl-cve-2021-22890:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22890", "project": "curl", "provenance": "human", "relpath": "lib/vtls/bearssl.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "b09c8ee15771c614c4bf3ddac893cdb12187c844", "commit_url": "https://github.com/curl/curl/commit/b09c8ee15771c614c4bf3ddac893cdb12187c844", "cve": "CVE-2021-22890", "cwe": "CWE-119", "file": "curl-cve-2021-22890/fixed.c", "function": "bearssl_connect_step1", "id": "curl-cve-2021-22890:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22890", "project": "curl", "provenance": "human", "relpath": "lib/vtls/bearssl.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "184ffc0bdfcab17eb96d1dd64f9c0cecc139e3e9", "commit_url": "https://github.com/curl/curl/commit/7214288898f5625a6cc196e22a74232eada7861c", "cve": "CVE-2021-22876", "cwe": "CWE-119", "file": "curl-cve-2021-22876/vuln.c", "function": "Curl_follow", "id": "curl-cve-2021-22876:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22876", "project": "curl", "provenance": "human", "relpath": "lib/transfer.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "7214288898f5625a6cc196e22a74232eada7861c", "commit_url": "https://github.com/curl/curl/commit/7214288898f5625a6cc196e22a74232eada7861c", "cve": "CVE-2021-22876", "cwe": "CWE-119", "file": "curl-cve-2021-22876/fixed.c", "function": "Curl_follow", "id": "curl-cve-2021-22876:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22876", "project": "curl", "provenance": "human", "relpath": "lib/transfer.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2021} +{"class": "security fix", "commit": "69a358f2186e04cf44698b5100332cbf1ee7f01d", "commit_url": "https://github.com/curl/curl/commit/d9d01672785b8ac04aab1abb6de95fe3072ae199", "cve": "CVE-2020-8286", "cwe": "CWE-119", "file": "curl-cve-2020-8286/vuln.c", "function": "verifystatus", "id": "curl-cve-2020-8286:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8286", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2020} +{"class": "security fix", "commit": "d9d01672785b8ac04aab1abb6de95fe3072ae199", "commit_url": "https://github.com/curl/curl/commit/d9d01672785b8ac04aab1abb6de95fe3072ae199", "cve": "CVE-2020-8286", "cwe": "CWE-119", "file": "curl-cve-2020-8286/fixed.c", "function": "verifystatus", "id": "curl-cve-2020-8286:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8286", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2020} +{"class": "security fix", "commit": "abd846c374c5269809ce11740754bc6f00a0b193", "commit_url": "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "cve": "CVE-2020-8284", "cwe": "CWE-119", "file": "curl-cve-2020-8284/vuln.c", "function": "Curl_init_userdefined", "id": "curl-cve-2020-8284:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8284", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2020} +{"class": "security fix", "commit": "ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "commit_url": "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "cve": "CVE-2020-8284", "cwe": "CWE-119", "file": "curl-cve-2020-8284/fixed.c", "function": "Curl_init_userdefined", "id": "curl-cve-2020-8284:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8284", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2020} +{"class": "security fix", "commit": "abd846c374c5269809ce11740754bc6f00a0b193", "commit_url": "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "cve": "CVE-2020-8284", "cwe": "CWE-119", "file": "curl-cve-2020-8284-config_init/vuln.c", "function": "config_init", "id": "curl-cve-2020-8284-config_init:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8284-config_init", "project": "curl", "provenance": "human", "relpath": "src/tool_cfgable.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2020} +{"class": "security fix", "commit": "ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "commit_url": "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "cve": "CVE-2020-8284", "cwe": "CWE-119", "file": "curl-cve-2020-8284-config_init/fixed.c", "function": "config_init", "id": "curl-cve-2020-8284-config_init:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8284-config_init", "project": "curl", "provenance": "human", "relpath": "src/tool_cfgable.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2020} +{"class": "security fix", "commit": "687908c6e6332b2bf4ba74b271e795f9c65a5a61", "commit_url": "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22", "cve": "CVE-2020-8231", "cwe": "CWE-119", "file": "curl-cve-2020-8231-curl_multi_add_handle/vuln.c", "function": "curl_multi_add_handle", "id": "curl-cve-2020-8231-curl_multi_add_handle:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8231-curl_multi_add_handle", "project": "curl", "provenance": "human", "relpath": "lib/multi.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2020} +{"class": "security fix", "commit": "3c9e021f86872baae412a427e807fbfa2f3e8a22", "commit_url": "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22", "cve": "CVE-2020-8231", "cwe": "CWE-119", "file": "curl-cve-2020-8231-curl_multi_add_handle/fixed.c", "function": "curl_multi_add_handle", "id": "curl-cve-2020-8231-curl_multi_add_handle:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8231-curl_multi_add_handle", "project": "curl", "provenance": "human", "relpath": "lib/multi.c", "repo": "curl/curl", "review_tier": "advisory", "split": "holdout", "year": 2020} +{"class": "security fix", "commit": "687908c6e6332b2bf4ba74b271e795f9c65a5a61", "commit_url": "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22", "cve": "CVE-2020-8231", "cwe": "CWE-119", "file": "curl-cve-2020-8231-curl_open/vuln.c", "function": "Curl_open", "id": "curl-cve-2020-8231-curl_open:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8231-curl_open", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2020} +{"class": "security fix", "commit": "3c9e021f86872baae412a427e807fbfa2f3e8a22", "commit_url": "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22", "cve": "CVE-2020-8231", "cwe": "CWE-119", "file": "curl-cve-2020-8231-curl_open/fixed.c", "function": "Curl_open", "id": "curl-cve-2020-8231-curl_open:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8231-curl_open", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2020} +{"class": "security fix", "commit": "26d2755d7c3181e90e46014778941bff53d2309f", "commit_url": "https://github.com/curl/curl/commit/8236aba58542c5f89f1d41ca09d84579efb05e22", "cve": "CVE-2020-8177", "cwe": "CWE-119", "file": "curl-cve-2020-8177/vuln.c", "function": "tool_header_cb", "id": "curl-cve-2020-8177:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8177", "project": "curl", "provenance": "human", "relpath": "src/tool_cb_hdr.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2020} +{"class": "security fix", "commit": "8236aba58542c5f89f1d41ca09d84579efb05e22", "commit_url": "https://github.com/curl/curl/commit/8236aba58542c5f89f1d41ca09d84579efb05e22", "cve": "CVE-2020-8177", "cwe": "CWE-119", "file": "curl-cve-2020-8177/fixed.c", "function": "tool_header_cb", "id": "curl-cve-2020-8177:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8177", "project": "curl", "provenance": "human", "relpath": "src/tool_cb_hdr.c", "repo": "curl/curl", "review_tier": "advisory", "split": "train", "year": 2020} diff --git a/benchmarks/pairs/vibe-py/catalog.toml b/benchmarks/pairs/vibe-py/catalog.toml index b06f3ab..4d8a4fa 100644 --- a/benchmarks/pairs/vibe-py/catalog.toml +++ b/benchmarks/pairs/vibe-py/catalog.toml @@ -28,6 +28,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-22" @@ -62,6 +63,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-639" @@ -96,6 +98,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -130,6 +133,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-79" @@ -164,6 +168,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -198,6 +203,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -232,6 +238,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -266,6 +273,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -300,6 +308,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-22" @@ -334,6 +343,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-639" @@ -368,6 +378,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -402,6 +413,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-79" @@ -436,6 +448,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -470,6 +483,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -504,6 +518,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-79" @@ -538,6 +553,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -572,6 +588,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-22" @@ -606,6 +623,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-639" @@ -640,6 +658,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -674,6 +693,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-79" @@ -708,6 +728,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-639" @@ -742,6 +763,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-22" @@ -776,6 +798,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -810,6 +833,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-79" @@ -844,6 +868,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -878,6 +903,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -912,6 +938,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -946,6 +973,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -980,6 +1008,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-22" @@ -1014,6 +1043,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-639" @@ -1048,6 +1078,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -1082,6 +1113,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-79" @@ -1116,6 +1148,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -1150,6 +1183,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -1184,6 +1218,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-79" @@ -1218,6 +1253,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -1252,6 +1288,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-22" @@ -1286,6 +1323,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-639" @@ -1320,6 +1358,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -1354,6 +1393,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-79" @@ -1388,6 +1428,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -1422,6 +1463,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -1456,6 +1498,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -1490,6 +1533,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -1524,6 +1568,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-22" @@ -1558,6 +1603,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-639" @@ -1592,6 +1638,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -1626,6 +1673,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-79" @@ -1660,6 +1708,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -1694,6 +1743,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -1728,6 +1778,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -1762,6 +1813,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -1796,6 +1848,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-22" @@ -1830,6 +1883,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-639" @@ -1864,6 +1918,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-79" @@ -1898,6 +1953,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-79" @@ -1932,6 +1988,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -1966,6 +2023,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -2000,6 +2058,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-942" @@ -2034,6 +2093,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -2063,6 +2123,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-78" @@ -2092,6 +2153,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" @@ -2121,6 +2183,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-78" @@ -2150,6 +2213,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" @@ -2179,6 +2243,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -2208,6 +2273,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" @@ -2237,6 +2303,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" @@ -2266,6 +2333,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-326" @@ -2295,6 +2363,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-78" @@ -2325,6 +2394,7 @@ provenance = "human" split = "holdout" review_tier = "seeded" known_limit = "identical_twin" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" @@ -2354,6 +2424,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-16" @@ -2383,6 +2454,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-1004" @@ -2412,6 +2484,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" @@ -2441,6 +2514,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -2470,6 +2544,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" @@ -2499,6 +2574,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" @@ -2533,6 +2609,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -2567,6 +2644,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -2601,6 +2679,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -2635,6 +2714,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -2669,6 +2749,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-22" @@ -2703,6 +2784,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-639" @@ -2737,6 +2819,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -2771,6 +2854,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-79" @@ -2805,6 +2889,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -2839,6 +2924,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -2873,6 +2959,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -2907,6 +2994,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -2941,6 +3029,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-22" @@ -2975,6 +3064,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-639" @@ -3009,6 +3099,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-79" @@ -3043,6 +3134,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-79" @@ -3077,6 +3169,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -3111,6 +3204,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -3145,6 +3239,7 @@ fix_policy = "silent" provenance = "agent" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-79" @@ -3179,6 +3274,7 @@ fix_policy = "silent" provenance = "agent" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-601" @@ -3209,6 +3305,7 @@ provenance = "human" split = "train" review_tier = "seeded" known_limit = "identical_twin" +fix_date = "2026" [[pair.expected]] cwe = "CWE-1336" @@ -3239,6 +3336,7 @@ provenance = "human" split = "holdout" review_tier = "seeded" known_limit = "identical_twin" +fix_date = "2026" [[pair.expected]] cwe = "CWE-79" @@ -3268,6 +3366,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-862" @@ -3298,6 +3397,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-639" @@ -3328,6 +3428,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" @@ -3358,6 +3459,7 @@ provenance = "human" split = "holdout" review_tier = "seeded" known_limit = "identical_twin" +fix_date = "2026" [[pair.context]] relpath = "openapi_specs/openapi3.yml" @@ -3393,6 +3495,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" @@ -3422,6 +3525,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.context]] relpath = "openapi_specs/openapi3.yml" @@ -3457,6 +3561,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" @@ -3486,6 +3591,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" @@ -3515,6 +3621,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" @@ -3544,6 +3651,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-79" @@ -3573,6 +3681,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-22" @@ -3602,6 +3711,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-78" @@ -3631,6 +3741,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-78" @@ -3661,6 +3772,7 @@ provenance = "human" split = "train" review_tier = "seeded" known_limit = "identical_twin" +fix_date = "2026" [[pair.expected]] cwe = "CWE-502" @@ -3690,6 +3802,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" @@ -3719,6 +3832,7 @@ fix_policy = "silent" provenance = "human" split = "train" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" @@ -3748,6 +3862,7 @@ fix_policy = "silent" provenance = "human" split = "holdout" review_tier = "seeded" +fix_date = "2026" [[pair.expected]] cwe = "CWE-89" diff --git a/src/openultrasast/cli.py b/src/openultrasast/cli.py index 647303c..5e01bd8 100644 --- a/src/openultrasast/cli.py +++ b/src/openultrasast/cli.py @@ -1288,12 +1288,22 @@ def _learning_run(args: argparse.Namespace, cases: Sequence[PairCase], taxonomy: for case in cases if _label(case, taxonomy) in configs ] - families = {name: block.to_dict() for name, block in aggregate(scores, taxonomy=taxonomy).items()} + cutoff = config.learning.cutoff_date or "" + families = {name: block.to_dict() for name, block in aggregate(scores, taxonomy=taxonomy, cutoff=cutoff).items()} if args.json: print(json.dumps({"families": families}, indent=2, sort_keys=True)) else: for name, block in sorted(families.items()): - print(f"learning score {name}: scorable={block['scorable']} recall={block['recall']:.3f} youden={block['youden']:.3f}") + raw = block.get("post_cutoff") + recent: dict[str, object] = raw if isinstance(raw, dict) else {} + tail = ( + f" post-cutoff({cutoff})={recent.get('scorable', 0)} undated={block['undated']}" + if cutoff + else " post-cutoff=none configured" + ) + print( + f"learning score {name}: scorable={block['scorable']} recall={block['recall']:.3f} youden={block['youden']:.3f}{tail}" + ) return 0 if args.learning_command == "baseline": report = run_baseline( @@ -1304,6 +1314,7 @@ def _learning_run(args: argparse.Namespace, cases: Sequence[PairCase], taxonomy: model=model, out_dir=out, k_runs=k_runs, + cutoff=config.learning.cutoff_date or "", ) print(f"learning baseline {model}: {len(report.floors)} families, k={report.k_runs} -> {out / 'baseline'}") return 0 diff --git a/src/openultrasast/learning/publish.py b/src/openultrasast/learning/publish.py index 8db6a88..c31b725 100644 --- a/src/openultrasast/learning/publish.py +++ b/src/openultrasast/learning/publish.py @@ -131,11 +131,47 @@ def _table(models: Mapping[str, Baseline], families: tuple[str, ...], lever: Map f"| {_num(row.get('fixed_fpr_recall'))} | budget {budget} | {_cost(cost, correct)} |" ) lines += ["", _credit_note(models), ""] + cutoff = _cutoff_note(models, families) + if cutoff: + lines += [cutoff, ""] if lever is not None: lines += [_lever_note(lever), ""] return "\n".join(lines) +def _cutoff_note(models: Mapping[str, Baseline], families: tuple[str, ...]) -> str: + """The post-cutoff slice, its cutoff and the undated count (Req 10.5). + + A model that may have read the fix cannot be measured on it the same way as one that cannot have, so the rows + fixed after the detector's training cutoff are reported apart. Rows the corpus records no date for are in + neither slice, and their number is here rather than folded silently into the whole.""" + rows = [ + (model, family, baseline.metrics[family]) + for model, baseline in sorted(models.items()) + for family in families + if family in baseline.metrics and str(baseline.metrics[family].get("cutoff") or "") + ] + if not rows: + return "No detector cutoff is configured, so no post-cutoff slice is reported; every figure above is over the whole corpus." + cutoff = str(rows[0][2].get("cutoff")) + lines = [ + f"Post-cutoff slice, fixed after {cutoff} and therefore beyond the detector's training data. " + "A row counts only when its earliest possible date is after the cutoff, so a year-precision date can " + "under-claim this slice but never over-claim it.", + "", + "| model | family | post-cutoff scorable | post-cutoff recall | post-cutoff Youden | undated |", + "|---|---|---|---|---|---|", + ] + for model, family, row in rows: + block = row.get("post_cutoff") + block = block if isinstance(block, Mapping) else {} + lines.append( + f"| {model} | {family} | {block.get('scorable', 0)} | {_num(block.get('recall'))} " + f"| {_num(block.get('youden'))} | {row.get('undated', 0)} |" + ) + return "\n".join(lines) + + def _credit_note(models: Mapping[str, Baseline]) -> str: hierarchical = any(bool(row.get("hierarchical_credit")) for baseline in models.values() for row in baseline.metrics.values()) if hierarchical: diff --git a/src/openultrasast/learning/rounds.py b/src/openultrasast/learning/rounds.py index 3437ff2..cc5adc3 100644 --- a/src/openultrasast/learning/rounds.py +++ b/src/openultrasast/learning/rounds.py @@ -99,6 +99,7 @@ def run_baseline( k_runs: int = DEFAULT_K_RUNS, prompt: str | None = None, spent_usd: Callable[[], float] | None = None, + cutoff: str = "", ) -> BaselineReport: """Clone one detector into every family, measure each family **with its own configuration**, write the artifacts. @@ -123,7 +124,7 @@ def run_baseline( if config is None: continue # a family with no configuration is not measured rather than measured with someone else's scores.append(score_case(case, scan_factory(config), taxonomy=taxonomy, runs=k_runs, family=name)) - metrics = aggregate(scores, taxonomy=taxonomy) + metrics = aggregate(scores, taxonomy=taxonomy, cutoff=cutoff) floors = {name: _floor(name, block, [item for item in scores if item.family == name], k_runs) for name, block in metrics.items()} report = BaselineReport( model=model, @@ -132,7 +133,7 @@ def run_baseline( slices=tuple(slices), floors=floors, metrics={name: block.to_dict() for name, block in metrics.items()}, - per_slice={name: block.to_dict() for name, block in aggregate(scores, taxonomy=taxonomy, per_slice=True).items()}, + per_slice={name: block.to_dict() for name, block in aggregate(scores, taxonomy=taxonomy, per_slice=True, cutoff=cutoff).items()}, scores=tuple(scores), cost_usd=spent_usd() if spent_usd is not None else 0.0, ) @@ -156,6 +157,7 @@ def score_case(case: PairCase, scan: Scan, *, taxonomy: FamilyTaxonomy, runs: in runs=(), outcome="unscorable", slice=case.slice, + fix_date=case.fix_date, unscorable_reason=case.unscorable, ) with tempfile.TemporaryDirectory(prefix="ousast-round-") as scratch: diff --git a/src/openultrasast/learning/scoring.py b/src/openultrasast/learning/scoring.py index 0778268..34c8d5f 100644 --- a/src/openultrasast/learning/scoring.py +++ b/src/openultrasast/learning/scoring.py @@ -25,6 +25,21 @@ FamilyOutcome = Literal["pair_correct", "both_flagged", "both_silent", "reversed # Families whose bug shape is the absence of a check on a reached handler: without the registration that # makes the handler reachable, the pair says nothing either way, which is a corpus defect with its own name. CONTEXT_DEPENDENT_FAMILIES = frozenset({"access_control"}) + + +def is_post_cutoff(fix_date: str, cutoff: str) -> bool: + """True when the *earliest possible* date of ``fix_date`` is after ``cutoff`` (Req 10.5). + + The corpus records dates at the precision it has: a full ISO day for a few rows, a year for almost all of them. + A year-precision row counts only when the whole year is after the cutoff, so a coarse date can under-claim the + clean slice but never over-claim it — and over-claiming is the one that would turn contamination into a result. + """ + if not fix_date or not cutoff: + return False + earliest = fix_date if len(fix_date) == 10 else f"{fix_date[:4]}-01-01" + return earliest > cutoff + + Rung = Literal["suspicion", "static_corroboration", "proven"] _RUNGS: tuple[Rung, ...] = ("suspicion", "static_corroboration", "proven") FunctionRanges = Mapping[str, Sequence[tuple[str, int, int]]] @@ -46,6 +61,7 @@ class PairFamilyScore: flips: int = 0 # runs that disagreed with the majority rung: Rung = "suspicion" unscorable_reason: str | None = None + fix_date: str = "" # the date the corpus recorded, at whatever precision it has (Req 10.5) def score_pair_family( @@ -70,7 +86,15 @@ def score_pair_family( slice_name = str(getattr(case, "slice", "") or "") reason = unscorable_reason(case, parse_ok=parse_ok, ranges=ranges, entry_points=entry_points, family=family) if reason is not None: - return PairFamilyScore(pair=name, family=family, slice=slice_name, runs=(), outcome="unscorable", unscorable_reason=reason) + return PairFamilyScore( + pair=name, + family=family, + slice=slice_name, + fix_date=str(getattr(case, "fix_date", "") or ""), + runs=(), + outcome="unscorable", + unscorable_reason=reason, + ) spans = _spans(case, ranges) fixed_spans = _spans(case, fixed_ranges) if fixed_ranges is not None else spans outcomes: list[FamilyOutcome] = [] @@ -94,6 +118,7 @@ def score_pair_family( pair=name, family=family, slice=slice_name, + fix_date=str(getattr(case, "fix_date", "") or ""), runs=tuple(outcomes), outcome=majority, other_findings_vuln=other_vuln, @@ -219,6 +244,9 @@ class FamilyMetrics: p_value: float | None = None # two-sided sign test over the discordant pairs reliable_change: bool = False hierarchical_credit: bool = False # False: the taxonomy is flat, so no answer could earn partial credit (Req 3.7) + cutoff: str = "" # the detector cutoff these numbers were split on, or "" when none is configured (Req 10.5) + undated: int = 0 # rows the corpus records no date for; they are in neither slice and are counted here + post_cutoff: dict[str, object] = field(default_factory=dict) # the same numbers over rows fixed after the cutoff def to_dict(self) -> dict[str, object]: return { @@ -238,6 +266,9 @@ class FamilyMetrics: "p_value": self.p_value, "reliable_change": self.reliable_change, "hierarchical_credit": self.hierarchical_credit, + "cutoff": self.cutoff, + "undated": self.undated, + "post_cutoff": dict(self.post_cutoff), } @@ -249,8 +280,13 @@ def aggregate( fpr_ceiling: float = 0.1, per_slice: bool = False, alpha: float = 0.05, + cutoff: str = "", ) -> dict[str, FamilyMetrics]: - """Group scores into per-family numbers. Unscorable rows are listed by reason and leave every denominator.""" + """Group scores into per-family numbers. Unscorable rows are listed by reason and leave every denominator. + + With a ``cutoff`` each family also reports the same numbers over the rows fixed after it, beside the whole + number and never instead of it: a model that may have read the fix cannot be measured on it the same way as one + that cannot have. Rows the corpus records no date for are counted on their own (Req 10.5).""" grouped: dict[str, list[PairFamilyScore]] = {} for score in scores: grouped.setdefault(f"{score.slice}/{score.family}" if per_slice else score.family, []).append(score) @@ -281,6 +317,7 @@ def aggregate( elif before != "pair_correct" and item.outcome == "pair_correct": positive += 1 p_value = sign_test(positive, negative) if baseline is not None else None + recent = [item for item in scorable if is_post_cutoff(item.fix_date, cutoff)] if cutoff else [] out[key] = FamilyMetrics( family=group[0].family, taxonomy_version=taxonomy.version, @@ -298,10 +335,28 @@ def aggregate( p_value=p_value, reliable_change=bool(p_value is not None and p_value < alpha and positive != negative), hierarchical_credit=taxonomy.hierarchical, + cutoff=cutoff, + undated=sum(1 for item in group if not item.fix_date) if cutoff else 0, + post_cutoff=_slice_numbers(recent) if cutoff else {}, ) return out +def _slice_numbers(scores: Sequence[PairFamilyScore]) -> dict[str, object]: + """Recall, silence and Youden over a subset, with the subset's own denominator beside them.""" + total = len(scores) + counts = Counter(item.outcome for item in scores) + recall = (counts["pair_correct"] + counts["both_flagged"]) / total if total else 0.0 + silence = (counts["pair_correct"] + counts["both_silent"]) / total if total else 0.0 + return { + "scorable": total, + "outcomes": {name: count for name, count in sorted(counts.items())}, + "recall": recall, + "silence": silence, + "youden": (recall + silence - 1.0) if total else 0.0, + } + + def sign_test(better: int, worse: int) -> float: """Two-sided exact sign test over the pairs that changed. 1.0 when nothing changed, so noise never reads as progress.""" total = better + worse @@ -320,6 +375,7 @@ __all__ = [ "PairFamilyScore", "Rung", "aggregate", + "is_post_cutoff", "score_pair_family", "sign_test", "unscorable_reason", diff --git a/tests/test_learning_cutoff.py b/tests/test_learning_cutoff.py new file mode 100644 index 0000000..63398e0 --- /dev/null +++ b/tests/test_learning_cutoff.py @@ -0,0 +1,170 @@ +"""Rows fixed after the detector's training cutoff are reported apart (learning-harness 4.3, Req 10.5). + +A model that may have read the fix cannot be measured on it the same way as one that cannot have. The corpus +carries the date at the precision the recipe recorded — a year for every row harvested so far — so a row counts as +post-cutoff only when its *earliest possible* date is after the cutoff. Rows with no date at all are counted +separately rather than quietly folded into either side. +""" + +from __future__ import annotations + +import json +import tomllib +from pathlib import Path + +import pytest + +from openultrasast.benchmark import ExpectedFinding +from openultrasast.learning.families import load_families +from openultrasast.learning.scoring import PairFamilyScore, aggregate +from openultrasast.pairs import DEFAULT_CATALOG, PairCase, load_pair_catalog, select_vendored + + +def _score(pair: str, outcome: str, *, fix_date: str = "") -> PairFamilyScore: + return PairFamilyScore(pair=pair, family="injection", slice="vibe-py", runs=(outcome,), outcome=outcome, fix_date=fix_date) # type: ignore[arg-type] + + +def test_every_vendored_row_carries_the_date_its_recipe_recorded() -> None: + cases = select_vendored(load_pair_catalog(DEFAULT_CATALOG)) + dated = [case for case in cases if case.fix_date] + assert len(dated) >= 250, "the generator fills the date from the recipe; almost every row has a year" + assert all(len(case.fix_date) in {4, 10} for case in dated), "a date is a year or a full ISO day, never anything else" + by_name = {case.name: case for case in cases} + for slice_name in ("vibe-py", "agent-vfc"): + for recipe in tomllib.loads((Path("benchmarks/pairs") / slice_name / "recipes.toml").read_text())["recipe"]: + case = by_name.get(str(recipe["name"])) + if case is not None and recipe.get("year"): + assert case.fix_date.startswith(str(recipe["year"])) + + +@pytest.mark.parametrize( + ("fix_date", "cutoff", "expected"), + [ + ("2026", "2025-07-01", True), # every day of 2026 is after the cutoff + ("2026", "2026-03-01", False), # a year-precision row that might be before it is not claimed + ("2026-04-02", "2026-03-01", True), + ("2024", "2025-07-01", False), + ("", "2025-07-01", False), + ], +) +def test_a_row_is_post_cutoff_only_when_its_earliest_possible_date_is_after_it(fix_date: str, cutoff: str, expected: bool) -> None: + from openultrasast.learning.scoring import is_post_cutoff + + assert is_post_cutoff(fix_date, cutoff) is expected + + +def test_the_scoreboard_reports_the_post_cutoff_slice_the_cutoff_and_the_undated_count() -> None: + scores = [ + _score("new-correct", "pair_correct", fix_date="2026"), + _score("new-missed", "both_silent", fix_date="2026"), + _score("old-correct", "pair_correct", fix_date="2021"), + _score("undated", "pair_correct"), + ] + block = aggregate(scores, taxonomy=load_families(), cutoff="2025-07-01")["injection"] + assert block.cutoff == "2025-07-01" and block.undated == 1 + assert block.post_cutoff["scorable"] == 2 and block.post_cutoff["recall"] == 0.5 + assert block.scorable == 4, "the slice is reported beside the whole number, never instead of it" + payload = block.to_dict() + json.dumps(payload) + assert payload["cutoff"] == "2025-07-01" and payload["post_cutoff"]["scorable"] == 2 + + +def test_without_a_configured_cutoff_the_scoreboard_says_so_rather_than_inventing_one() -> None: + block = aggregate([_score("a", "pair_correct", fix_date="2026")], taxonomy=load_families())["injection"] + assert block.cutoff == "" and block.post_cutoff == {} and block.undated == 0 + + +def test_the_score_carries_the_date_from_the_pair(tmp_path: Path) -> None: + from openultrasast.learning.scoring import score_pair_family + + (tmp_path / "v.py").write_text("def run():\n return 1\n") + case = PairCase( + name="p", + slice="vibe-py", + language="python", + origin="test", + vuln_file=tmp_path / "v.py", + fixed_file=tmp_path / "v.py", + relpath="app.py", + expected=(ExpectedFinding(cwe="CWE-78", vulnerability_class="x", path="app.py", evidence="", function="run", mechanism="other"),), + min_recall=1.0, + fix_policy="silent", + fix_date="2026", + ) + score = score_pair_family(case, "injection", [[]], [[]], ranges={"app.py": (("run", 1, 2),)}, taxonomy=load_families()) + assert score.fix_date == "2026" + + +def test_the_published_table_names_the_post_cutoff_slice(tmp_path: Path) -> None: + from openultrasast.learning.publish import publish + + out = tmp_path / "learning" + directory = out / "baseline" / "m" + directory.mkdir(parents=True) + (directory / "report.json").write_text( + json.dumps( + { + "model": "m", + "k_runs": 5, + "cost_usd": 1.0, + "taxonomy_version": "1", + "metrics": { + "injection": { + "family": "injection", + "scorable": 4, + "unscorable": {}, + "recall": 0.5, + "youden": 0.25, + "hierarchical_credit": False, + "cutoff": "2025-07-01", + "undated": 1, + "post_cutoff": {"scorable": 2, "recall": 0.5, "youden": 0.5}, + } + }, + "floors": {}, + } + ) + ) + roadmap = tmp_path / "roadmap.md" + roadmap.write_text("# Roadmap\n") + report = publish(learning_dir=out, measurements_dir=tmp_path / "m", roadmap=roadmap) + assert "2025-07-01" in report.table + assert "post-cutoff" in report.table.lower() + assert "undated" in report.table.lower() + + +def test_the_command_line_reports_the_slice_the_cutoff_and_the_undated_count(tmp_path: Path, monkeypatch: pytest.MonkeyPatch) -> None: + """Req 10.5 says every scoreboard, which includes the one an operator actually reads.""" + import sys + + sys.path.insert(0, str(Path(__file__).parent)) + from test_learning_cli import CATALOG, FIXED, VULN, _detector # noqa: PLC0415 + + from openultrasast.cli import main + + for name in ("train-a", "hold-a"): + (tmp_path / f"{name}-v.py").write_text(VULN) + (tmp_path / f"{name}-f.py").write_text(FIXED) + catalog = CATALOG.format(name="train-a", split="train") + "\n" + CATALOG.format(name="hold-a", split="holdout") + (tmp_path / "pairs.toml").write_text(catalog.replace('review_tier = "seeded"', 'review_tier = "seeded"\nfix_date = "2026"')) + (tmp_path / "openultrasast.toml").write_text('[learning]\nenabled = true\ncutoff_date = "2025-07-01"\n') + _detector(monkeypatch) + captured: list[str] = [] + monkeypatch.setattr("builtins.print", lambda *args, **kwargs: captured.append(" ".join(str(item) for item in args))) + assert ( + main( + [ + "learning", + "score", + "--catalog", + str(tmp_path / "pairs.toml"), + "--out", + str(tmp_path / "learning"), + "--config", + str(tmp_path / "openultrasast.toml"), + ] + ) + == 0 + ) + line = next(item for item in captured if item.startswith("learning score injection")) + assert "post-cutoff(2025-07-01)=2" in line and "undated=0" in line