From c3e841003c8ae45360797800612501a6816560ce Mon Sep 17 00:00:00 2001 From: Marius Ciepluch <11855163+norandom@users.noreply.github.com> Date: Sat, 5 Sep 2026 09:27:03 +0200 Subject: [PATCH] fix(pair-corpus-honesty): re-harvest curl/OpenSSL excerpts, restore Juliet fixtures Tasks 3.3 and 4.1. - vfc curl and openssl-cve-2021-3449 excerpts re-harvested through the shared library: whole functions with upstream_start headers, the vendored key redacted code-safely, no truncated bodies. - vfc/recipes.toml carries mode, fix_path and function anchors; training/manifest.jsonl regenerated. - Juliet CWE-121 strcpy pair gets its buffer declarations back so the vulnerable side is a real overflow again. Co-Authored-By: Claude Fable 5.1 Claude-Session: https://claude.ai/code/session_01T7XD7x5KonMdmGRkp63EQG --- .../pairs/sast/juliet-c/cwe121-strcpy-fixed.c | 20 +- .../pairs/sast/juliet-c/cwe121-strcpy-vuln.c | 21 +- .../pairs/vfc/curl-cve-2020-8177/fixed.c | 2 + .../pairs/vfc/curl-cve-2020-8177/vuln.c | 2 + .../fixed.c | 2 + .../vuln.c | 2 + .../vfc/curl-cve-2020-8231-curl_open/fixed.c | 9 +- .../vfc/curl-cve-2020-8231-curl_open/vuln.c | 9 +- .../curl-cve-2020-8284-config_init/fixed.c | 2 + .../vfc/curl-cve-2020-8284-config_init/vuln.c | 2 + .../pairs/vfc/curl-cve-2020-8284/fixed.c | 2 + .../pairs/vfc/curl-cve-2020-8284/vuln.c | 2 + .../pairs/vfc/curl-cve-2020-8286/fixed.c | 2 + .../pairs/vfc/curl-cve-2020-8286/vuln.c | 2 + .../pairs/vfc/curl-cve-2021-22876/fixed.c | 7 +- .../pairs/vfc/curl-cve-2021-22876/vuln.c | 7 +- .../pairs/vfc/curl-cve-2021-22890/fixed.c | 2 + .../pairs/vfc/curl-cve-2021-22890/vuln.c | 2 + .../pairs/vfc/curl-cve-2021-22898/fixed.c | 8 +- .../pairs/vfc/curl-cve-2021-22898/vuln.c | 8 +- .../fixed.c | 2 + .../vuln.c | 2 + .../fixed.c | 2 + .../curl-cve-2021-22924-nss_do_connect/vuln.c | 2 + .../curl-cve-2021-22924-servercert/fixed.c | 2 + .../vfc/curl-cve-2021-22924-servercert/vuln.c | 2 + .../pairs/vfc/curl-cve-2021-22924/fixed.c | 16 +- .../pairs/vfc/curl-cve-2021-22924/vuln.c | 16 +- .../pairs/vfc/curl-cve-2021-22925/fixed.c | 8 +- .../pairs/vfc/curl-cve-2021-22925/vuln.c | 8 +- .../pairs/vfc/curl-cve-2021-22945/fixed.c | 2 + .../pairs/vfc/curl-cve-2021-22945/vuln.c | 2 + .../fixed.c | 2 + .../vuln.c | 2 + .../fixed.c | 2 + .../vuln.c | 2 + .../pairs/vfc/curl-cve-2021-22946/fixed.c | 2 + .../pairs/vfc/curl-cve-2021-22946/vuln.c | 2 + .../fixed.c | 2 + .../vuln.c | 2 + .../fixed.c | 2 + .../vuln.c | 2 + .../fixed.c | 2 + .../vuln.c | 2 + .../pairs/vfc/curl-cve-2021-22947/fixed.c | 2 + .../pairs/vfc/curl-cve-2021-22947/vuln.c | 2 + .../vfc/curl-cve-2022-22576-conn_free/fixed.c | 2 + .../vfc/curl-cve-2022-22576-conn_free/vuln.c | 2 + .../pairs/vfc/curl-cve-2022-27774/fixed.c | 7 +- .../pairs/vfc/curl-cve-2022-27774/vuln.c | 7 +- .../pairs/vfc/curl-cve-2022-27775/fixed.c | 2 + .../pairs/vfc/curl-cve-2022-27775/vuln.c | 2 + .../pairs/vfc/curl-cve-2022-27776/fixed.c | 2 + .../pairs/vfc/curl-cve-2022-27776/vuln.c | 2 + .../pairs/vfc/curl-cve-2022-27778/fixed.c | 2 + .../pairs/vfc/curl-cve-2022-27778/vuln.c | 2 + .../pairs/vfc/curl-cve-2022-27780/fixed.c | 2 + .../pairs/vfc/curl-cve-2022-27780/vuln.c | 2 + .../fixed.c | 2 + .../vuln.c | 2 + .../fixed.c | 2 + .../vuln.c | 2 + .../curl-cve-2022-27782-gtls_shutdown/fixed.c | 2 + .../curl-cve-2022-27782-gtls_shutdown/vuln.c | 2 + .../fixed.c | 2 + .../vuln.c | 2 + .../fixed.c | 2 + .../vuln.c | 2 + .../pairs/vfc/curl-cve-2022-30115/fixed.c | 2 + .../pairs/vfc/curl-cve-2022-30115/vuln.c | 2 + .../pairs/vfc/curl-cve-2022-32206/fixed.c | 2 + .../pairs/vfc/curl-cve-2022-32206/vuln.c | 2 + .../pairs/vfc/curl-cve-2022-32207/fixed.c | 9 +- .../pairs/vfc/curl-cve-2022-32207/vuln.c | 9 +- .../pairs/vfc/curl-cve-2022-32208/fixed.c | 2 + .../pairs/vfc/curl-cve-2022-32208/vuln.c | 2 + .../vfc/curl-cve-2023-38545-do_socks5/fixed.c | 2 + .../vfc/curl-cve-2023-38545-do_socks5/vuln.c | 2 + .../pairs/vfc/curl-cve-2023-38545/fixed.c | 2 + .../pairs/vfc/curl-cve-2023-38545/vuln.c | 2 + .../pairs/vfc/curl-cve-2026-9080/fixed.c | 2 + .../pairs/vfc/curl-cve-2026-9080/vuln.c | 2 + .../fixed.c | 2 + .../vuln.c | 2 + benchmarks/pairs/vfc/recipes.toml | 528 +++++++++++++ benchmarks/pairs/vfc/training/manifest.jsonl | 704 +++++++++--------- 86 files changed, 1072 insertions(+), 465 deletions(-) diff --git a/benchmarks/pairs/sast/juliet-c/cwe121-strcpy-fixed.c b/benchmarks/pairs/sast/juliet-c/cwe121-strcpy-fixed.c index a9116df..53ad182 100644 --- a/benchmarks/pairs/sast/juliet-c/cwe121-strcpy-fixed.c +++ b/benchmarks/pairs/sast/juliet-c/cwe121-strcpy-fixed.c @@ -1,10 +1,18 @@ -/* Juliet CWE-121 goodG2B still copies with strcpy (larger buffer, same sink). - * Regex SAST is expected to keep firing — that is the Juliet goodG2B trap. - * Upstream: CWE121_Stack_Based_Buffer_Overflow__CWE193_char_declare_cpy_01.c - */ +/* Juliet 1.3 CWE121_Stack_Based_Buffer_Overflow__CWE193_char_declare_cpy_01 (CC0). + * goodG2B(): same strcpy; data points at the 11-byte buffer, so the copy fits. */ #include +#define SRC_STRING "AAAAAAAAAA" -void CWE121_char_declare_cpy_01_goodG2B(char *data, char *source) +static void CWE121_char_declare_cpy_01_goodG2B() { - strcpy(data, source); + char * data; + char dataBadBuffer[10]; + char dataGoodBuffer[10+1]; + /* FIX: Set a pointer to a buffer that leaves room for a NULL terminator */ + data = dataGoodBuffer; + data[0] = '\0'; /* null terminate */ + { + char source[10+1] = SRC_STRING; + strcpy(data, source); + } } diff --git a/benchmarks/pairs/sast/juliet-c/cwe121-strcpy-vuln.c b/benchmarks/pairs/sast/juliet-c/cwe121-strcpy-vuln.c index a4c6a96..a25ec63 100644 --- a/benchmarks/pairs/sast/juliet-c/cwe121-strcpy-vuln.c +++ b/benchmarks/pairs/sast/juliet-c/cwe121-strcpy-vuln.c @@ -1,11 +1,18 @@ -/* Juliet CWE-121 flow variant 01 — bad sink only. - * Upstream: CWE121_Stack_Based_Buffer_Overflow__CWE193_char_declare_cpy_01.c - * https://github.com/arichardson/juliet-test-suite-c (NIST Juliet 1.3, CC0) - */ +/* Juliet 1.3 CWE121_Stack_Based_Buffer_Overflow__CWE193_char_declare_cpy_01 (CC0). + * bad(): data points at a 10-byte buffer; strcpy writes 11 bytes (10 chars + NUL). */ #include +#define SRC_STRING "AAAAAAAAAA" -void CWE121_char_declare_cpy_01_bad(char *data, char *source) +void CWE121_char_declare_cpy_01_bad() { - /* POTENTIAL FLAW: data may not have enough space to hold source */ - strcpy(data, source); + char * data; + char dataBadBuffer[10]; + char dataGoodBuffer[10+1]; + /* FLAW: Set a pointer to a buffer that does not leave room for a NULL terminator */ + data = dataBadBuffer; + data[0] = '\0'; /* null terminate */ + { + char source[10+1] = SRC_STRING; + strcpy(data, source); + } } diff --git a/benchmarks/pairs/vfc/curl-cve-2020-8177/fixed.c b/benchmarks/pairs/vfc/curl-cve-2020-8177/fixed.c index b145936..7f44d16 100644 --- a/benchmarks/pairs/vfc/curl-cve-2020-8177/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2020-8177/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: tool_header_cb * relpath: src/tool_cb_hdr.c + * provenance: human + * mechanism: other */ size_t tool_header_cb(char *ptr, size_t size, size_t nmemb, void *userdata) diff --git a/benchmarks/pairs/vfc/curl-cve-2020-8177/vuln.c b/benchmarks/pairs/vfc/curl-cve-2020-8177/vuln.c index c1c71ec..b26a3c4 100644 --- a/benchmarks/pairs/vfc/curl-cve-2020-8177/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2020-8177/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: tool_header_cb * relpath: src/tool_cb_hdr.c + * provenance: human + * mechanism: other */ size_t tool_header_cb(char *ptr, size_t size, size_t nmemb, void *userdata) diff --git a/benchmarks/pairs/vfc/curl-cve-2020-8231-curl_multi_add_handle/fixed.c b/benchmarks/pairs/vfc/curl-cve-2020-8231-curl_multi_add_handle/fixed.c index 42b8ca3..f7e94a8 100644 --- a/benchmarks/pairs/vfc/curl-cve-2020-8231-curl_multi_add_handle/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2020-8231-curl_multi_add_handle/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: curl_multi_add_handle * relpath: lib/multi.c + * provenance: human + * mechanism: other */ CURLMcode curl_multi_add_handle(struct Curl_multi *multi, diff --git a/benchmarks/pairs/vfc/curl-cve-2020-8231-curl_multi_add_handle/vuln.c b/benchmarks/pairs/vfc/curl-cve-2020-8231-curl_multi_add_handle/vuln.c index 4bddeea..39b9147 100644 --- a/benchmarks/pairs/vfc/curl-cve-2020-8231-curl_multi_add_handle/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2020-8231-curl_multi_add_handle/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: curl_multi_add_handle * relpath: lib/multi.c + * provenance: human + * mechanism: other */ CURLMcode curl_multi_add_handle(struct Curl_multi *multi, diff --git a/benchmarks/pairs/vfc/curl-cve-2020-8231-curl_open/fixed.c b/benchmarks/pairs/vfc/curl-cve-2020-8231-curl_open/fixed.c index 4f26d9f..bbabdff 100644 --- a/benchmarks/pairs/vfc/curl-cve-2020-8231-curl_open/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2020-8231-curl_open/fixed.c @@ -7,13 +7,8 @@ * license: curl * function: Curl_open * relpath: lib/url.c - */ - -* Curl_open() - * - * @param curl is a pointer to a sessionhandle pointer that gets set by this - * function. - * @return CURLcode + * provenance: human + * mechanism: other */ CURLcode Curl_open(struct Curl_easy **curl) diff --git a/benchmarks/pairs/vfc/curl-cve-2020-8231-curl_open/vuln.c b/benchmarks/pairs/vfc/curl-cve-2020-8231-curl_open/vuln.c index 1ccd153..2d787a5 100644 --- a/benchmarks/pairs/vfc/curl-cve-2020-8231-curl_open/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2020-8231-curl_open/vuln.c @@ -7,13 +7,8 @@ * license: curl * function: Curl_open * relpath: lib/url.c - */ - -* Curl_open() - * - * @param curl is a pointer to a sessionhandle pointer that gets set by this - * function. - * @return CURLcode + * provenance: human + * mechanism: other */ CURLcode Curl_open(struct Curl_easy **curl) diff --git a/benchmarks/pairs/vfc/curl-cve-2020-8284-config_init/fixed.c b/benchmarks/pairs/vfc/curl-cve-2020-8284-config_init/fixed.c index e1dd53a..7f08a23 100644 --- a/benchmarks/pairs/vfc/curl-cve-2020-8284-config_init/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2020-8284-config_init/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: config_init * relpath: src/tool_cfgable.c + * provenance: human + * mechanism: other */ void config_init(struct OperationConfig *config) diff --git a/benchmarks/pairs/vfc/curl-cve-2020-8284-config_init/vuln.c b/benchmarks/pairs/vfc/curl-cve-2020-8284-config_init/vuln.c index 387c337..68bf487 100644 --- a/benchmarks/pairs/vfc/curl-cve-2020-8284-config_init/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2020-8284-config_init/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: config_init * relpath: src/tool_cfgable.c + * provenance: human + * mechanism: other */ void config_init(struct OperationConfig *config) diff --git a/benchmarks/pairs/vfc/curl-cve-2020-8284/fixed.c b/benchmarks/pairs/vfc/curl-cve-2020-8284/fixed.c index 64ded2e..28b7f1c 100644 --- a/benchmarks/pairs/vfc/curl-cve-2020-8284/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2020-8284/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: Curl_init_userdefined * relpath: lib/url.c + * provenance: human + * mechanism: other */ CURLcode Curl_init_userdefined(struct Curl_easy *data) diff --git a/benchmarks/pairs/vfc/curl-cve-2020-8284/vuln.c b/benchmarks/pairs/vfc/curl-cve-2020-8284/vuln.c index bc5a523..b6818ed 100644 --- a/benchmarks/pairs/vfc/curl-cve-2020-8284/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2020-8284/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: Curl_init_userdefined * relpath: lib/url.c + * provenance: human + * mechanism: other */ CURLcode Curl_init_userdefined(struct Curl_easy *data) diff --git a/benchmarks/pairs/vfc/curl-cve-2020-8286/fixed.c b/benchmarks/pairs/vfc/curl-cve-2020-8286/fixed.c index 540ee75..fb5fc59 100644 --- a/benchmarks/pairs/vfc/curl-cve-2020-8286/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2020-8286/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: verifystatus * relpath: lib/vtls/openssl.c + * provenance: human + * mechanism: other */ !defined(OPENSSL_NO_OCSP) diff --git a/benchmarks/pairs/vfc/curl-cve-2020-8286/vuln.c b/benchmarks/pairs/vfc/curl-cve-2020-8286/vuln.c index 03a9720..4843e31 100644 --- a/benchmarks/pairs/vfc/curl-cve-2020-8286/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2020-8286/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: verifystatus * relpath: lib/vtls/openssl.c + * provenance: human + * mechanism: other */ !defined(OPENSSL_NO_OCSP) diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22876/fixed.c b/benchmarks/pairs/vfc/curl-cve-2021-22876/fixed.c index 09b28bf..d412f1c 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22876/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22876/fixed.c @@ -7,13 +7,10 @@ * license: curl * function: Curl_follow * relpath: lib/transfer.c + * provenance: human + * mechanism: other */ -* Curl_follow() handles the URL redirect magic. Pass in the 'newurl' string - * as given by the remote server and set up the new URL to request. - * - * This function DOES NOT FREE the given url. - */ CURLcode Curl_follow(struct Curl_easy *data, char *newurl, /* the Location: string */ followtype type) /* see transfer.h */ diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22876/vuln.c b/benchmarks/pairs/vfc/curl-cve-2021-22876/vuln.c index d4545af..933cc0a 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22876/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22876/vuln.c @@ -7,13 +7,10 @@ * license: curl * function: Curl_follow * relpath: lib/transfer.c + * provenance: human + * mechanism: other */ -* Curl_follow() handles the URL redirect magic. Pass in the 'newurl' string - * as given by the remote server and set up the new URL to request. - * - * This function DOES NOT FREE the given url. - */ CURLcode Curl_follow(struct Curl_easy *data, char *newurl, /* the Location: string */ followtype type) /* see transfer.h */ diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22890/fixed.c b/benchmarks/pairs/vfc/curl-cve-2021-22890/fixed.c index b5f70d6..234928b 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22890/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22890/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: bearssl_connect_step1 * relpath: lib/vtls/bearssl.c + * provenance: human + * mechanism: other */ static CURLcode bearssl_connect_step1(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22890/vuln.c b/benchmarks/pairs/vfc/curl-cve-2021-22890/vuln.c index 4481de0..89f554b 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22890/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22890/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: bearssl_connect_step1 * relpath: lib/vtls/bearssl.c + * provenance: human + * mechanism: other */ static CURLcode bearssl_connect_step1(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22898/fixed.c b/benchmarks/pairs/vfc/curl-cve-2021-22898/fixed.c index e7ef2f6..448faa1 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22898/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22898/fixed.c @@ -7,12 +7,8 @@ * license: curl * function: suboption * relpath: lib/telnet.c - */ - -* suboption() - * - * Look at the sub-option buffer, and try to be helpful to the other - * side. + * provenance: human + * mechanism: other */ static void suboption(struct Curl_easy *data) diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22898/vuln.c b/benchmarks/pairs/vfc/curl-cve-2021-22898/vuln.c index dbb2528..48ea083 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22898/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22898/vuln.c @@ -7,12 +7,8 @@ * license: curl * function: suboption * relpath: lib/telnet.c - */ - -* suboption() - * - * Look at the sub-option buffer, and try to be helpful to the other - * side. + * provenance: human + * mechanism: other */ static void suboption(struct Curl_easy *data) diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22901-ossl_connect_step1/fixed.c b/benchmarks/pairs/vfc/curl-cve-2021-22901-ossl_connect_step1/fixed.c index 14bf0d7..da6ae7f 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22901-ossl_connect_step1/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22901-ossl_connect_step1/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: ossl_connect_step1 * relpath: lib/vtls/openssl.c + * provenance: human + * mechanism: other */ static CURLcode ossl_connect_step1(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22901-ossl_connect_step1/vuln.c b/benchmarks/pairs/vfc/curl-cve-2021-22901-ossl_connect_step1/vuln.c index e539acc..ed5b575 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22901-ossl_connect_step1/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22901-ossl_connect_step1/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: ossl_connect_step1 * relpath: lib/vtls/openssl.c + * provenance: human + * mechanism: other */ static CURLcode ossl_connect_step1(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22924-nss_do_connect/fixed.c b/benchmarks/pairs/vfc/curl-cve-2021-22924-nss_do_connect/fixed.c index e33477c..c693f5d 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22924-nss_do_connect/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22924-nss_do_connect/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: nss_do_connect * relpath: lib/vtls/nss.c + * provenance: human + * mechanism: other */ static CURLcode nss_do_connect(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22924-nss_do_connect/vuln.c b/benchmarks/pairs/vfc/curl-cve-2021-22924-nss_do_connect/vuln.c index c053373..e56db75 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22924-nss_do_connect/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22924-nss_do_connect/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: nss_do_connect * relpath: lib/vtls/nss.c + * provenance: human + * mechanism: other */ static CURLcode nss_do_connect(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22924-servercert/fixed.c b/benchmarks/pairs/vfc/curl-cve-2021-22924-servercert/fixed.c index 8c4ac3e..83a6d0f 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22924-servercert/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22924-servercert/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: servercert * relpath: lib/vtls/openssl.c + * provenance: human + * mechanism: other */ static CURLcode servercert(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22924-servercert/vuln.c b/benchmarks/pairs/vfc/curl-cve-2021-22924-servercert/vuln.c index b1eb60b..c60ad23 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22924-servercert/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22924-servercert/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: servercert * relpath: lib/vtls/openssl.c + * provenance: human + * mechanism: other */ static CURLcode servercert(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22924/fixed.c b/benchmarks/pairs/vfc/curl-cve-2021-22924/fixed.c index 193ee47..329266d 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22924/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22924/fixed.c @@ -7,20 +7,8 @@ * license: curl * function: create_conn * relpath: lib/url.c - */ - -* create_conn() sets up a new connectdata struct, or re-uses an already - * existing one, and resolves host name. - * - * if this function returns CURLE_OK and *async is set to TRUE, the resolve - * response will be coming asynchronously. If *async is FALSE, the name is - * already resolved. - * - * @param data The sessionhandle pointer - * @param in_connect is set to the next connection data pointer - * @param async is set TRUE when an async DNS resolution is pending - * @see Curl_setup_conn() - * + * provenance: human + * mechanism: other */ static CURLcode create_conn(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22924/vuln.c b/benchmarks/pairs/vfc/curl-cve-2021-22924/vuln.c index c1aeb7e..3f4b4b7 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22924/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22924/vuln.c @@ -7,20 +7,8 @@ * license: curl * function: create_conn * relpath: lib/url.c - */ - -* create_conn() sets up a new connectdata struct, or re-uses an already - * existing one, and resolves host name. - * - * if this function returns CURLE_OK and *async is set to TRUE, the resolve - * response will be coming asynchronously. If *async is FALSE, the name is - * already resolved. - * - * @param data The sessionhandle pointer - * @param in_connect is set to the next connection data pointer - * @param async is set TRUE when an async DNS resolution is pending - * @see Curl_setup_conn() - * + * provenance: human + * mechanism: other */ static CURLcode create_conn(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22925/fixed.c b/benchmarks/pairs/vfc/curl-cve-2021-22925/fixed.c index 7115eed..6fbcf69 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22925/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22925/fixed.c @@ -7,12 +7,8 @@ * license: curl * function: suboption * relpath: lib/telnet.c - */ - -* suboption() - * - * Look at the sub-option buffer, and try to be helpful to the other - * side. + * provenance: human + * mechanism: other */ static void suboption(struct Curl_easy *data) diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22925/vuln.c b/benchmarks/pairs/vfc/curl-cve-2021-22925/vuln.c index 1fe952b..625a3fd 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22925/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22925/vuln.c @@ -7,12 +7,8 @@ * license: curl * function: suboption * relpath: lib/telnet.c - */ - -* suboption() - * - * Look at the sub-option buffer, and try to be helpful to the other - * side. + * provenance: human + * mechanism: other */ static void suboption(struct Curl_easy *data) diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22945/fixed.c b/benchmarks/pairs/vfc/curl-cve-2021-22945/fixed.c index caa4512..d80e753 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22945/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22945/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: mqtt_send * relpath: lib/mqtt.c + * provenance: human + * mechanism: other */ static CURLcode mqtt_send(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22945/vuln.c b/benchmarks/pairs/vfc/curl-cve-2021-22945/vuln.c index 3c28322..59002a3 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22945/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22945/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: mqtt_send * relpath: lib/mqtt.c + * provenance: human + * mechanism: other */ static CURLcode mqtt_send(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22946-imap_state_capability_re/fixed.c b/benchmarks/pairs/vfc/curl-cve-2021-22946-imap_state_capability_re/fixed.c index ccda973..3ecc0d4 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22946-imap_state_capability_re/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22946-imap_state_capability_re/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: imap_state_capability_resp * relpath: lib/imap.c + * provenance: human + * mechanism: other */ static CURLcode imap_state_capability_resp(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22946-imap_state_capability_re/vuln.c b/benchmarks/pairs/vfc/curl-cve-2021-22946-imap_state_capability_re/vuln.c index 78e5e87..bb0a885 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22946-imap_state_capability_re/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22946-imap_state_capability_re/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: imap_state_capability_resp * relpath: lib/imap.c + * provenance: human + * mechanism: other */ static CURLcode imap_state_capability_resp(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22946-pop3_state_capa_resp/fixed.c b/benchmarks/pairs/vfc/curl-cve-2021-22946-pop3_state_capa_resp/fixed.c index 690acd8..0a89d4b 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22946-pop3_state_capa_resp/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22946-pop3_state_capa_resp/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: pop3_state_capa_resp * relpath: lib/pop3.c + * provenance: human + * mechanism: other */ static CURLcode pop3_state_capa_resp(struct Curl_easy *data, int pop3code, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22946-pop3_state_capa_resp/vuln.c b/benchmarks/pairs/vfc/curl-cve-2021-22946-pop3_state_capa_resp/vuln.c index f5c5359..6676e0e 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22946-pop3_state_capa_resp/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22946-pop3_state_capa_resp/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: pop3_state_capa_resp * relpath: lib/pop3.c + * provenance: human + * mechanism: other */ static CURLcode pop3_state_capa_resp(struct Curl_easy *data, int pop3code, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22946/fixed.c b/benchmarks/pairs/vfc/curl-cve-2021-22946/fixed.c index 6e511b9..9dc32f4 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22946/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22946/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: ftp_statemachine * relpath: lib/ftp.c + * provenance: human + * mechanism: other */ static CURLcode ftp_statemachine(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22946/vuln.c b/benchmarks/pairs/vfc/curl-cve-2021-22946/vuln.c index ae0d14d..2f9b236 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22946/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22946/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: ftp_statemachine * relpath: lib/ftp.c + * provenance: human + * mechanism: other */ static CURLcode ftp_statemachine(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22947-imap_state_starttls_resp/fixed.c b/benchmarks/pairs/vfc/curl-cve-2021-22947-imap_state_starttls_resp/fixed.c index 7b764dc..52a332d 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22947-imap_state_starttls_resp/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22947-imap_state_starttls_resp/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: imap_state_starttls_resp * relpath: lib/imap.c + * provenance: human + * mechanism: other */ static CURLcode imap_state_starttls_resp(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22947-imap_state_starttls_resp/vuln.c b/benchmarks/pairs/vfc/curl-cve-2021-22947-imap_state_starttls_resp/vuln.c index b89e9bd..07bace7 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22947-imap_state_starttls_resp/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22947-imap_state_starttls_resp/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: imap_state_starttls_resp * relpath: lib/imap.c + * provenance: human + * mechanism: other */ static CURLcode imap_state_starttls_resp(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22947-pop3_state_starttls_resp/fixed.c b/benchmarks/pairs/vfc/curl-cve-2021-22947-pop3_state_starttls_resp/fixed.c index 0706032..f10fc86 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22947-pop3_state_starttls_resp/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22947-pop3_state_starttls_resp/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: pop3_state_starttls_resp * relpath: lib/pop3.c + * provenance: human + * mechanism: other */ static CURLcode pop3_state_starttls_resp(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22947-pop3_state_starttls_resp/vuln.c b/benchmarks/pairs/vfc/curl-cve-2021-22947-pop3_state_starttls_resp/vuln.c index 5d0d58f..053d2a9 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22947-pop3_state_starttls_resp/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22947-pop3_state_starttls_resp/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: pop3_state_starttls_resp * relpath: lib/pop3.c + * provenance: human + * mechanism: other */ static CURLcode pop3_state_starttls_resp(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22947-smtp_state_starttls_resp/fixed.c b/benchmarks/pairs/vfc/curl-cve-2021-22947-smtp_state_starttls_resp/fixed.c index d821c8e..3492903 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22947-smtp_state_starttls_resp/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22947-smtp_state_starttls_resp/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: smtp_state_starttls_resp * relpath: lib/smtp.c + * provenance: human + * mechanism: other */ static CURLcode smtp_state_starttls_resp(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22947-smtp_state_starttls_resp/vuln.c b/benchmarks/pairs/vfc/curl-cve-2021-22947-smtp_state_starttls_resp/vuln.c index ff7cbce..aa2ceb3 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22947-smtp_state_starttls_resp/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22947-smtp_state_starttls_resp/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: smtp_state_starttls_resp * relpath: lib/smtp.c + * provenance: human + * mechanism: other */ static CURLcode smtp_state_starttls_resp(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22947/fixed.c b/benchmarks/pairs/vfc/curl-cve-2021-22947/fixed.c index c2b6734..0dedee6 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22947/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22947/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: ftp_statemachine * relpath: lib/ftp.c + * provenance: human + * mechanism: other */ static CURLcode ftp_statemachine(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2021-22947/vuln.c b/benchmarks/pairs/vfc/curl-cve-2021-22947/vuln.c index ba6219e..f9fe0fb 100644 --- a/benchmarks/pairs/vfc/curl-cve-2021-22947/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2021-22947/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: ftp_statemachine * relpath: lib/ftp.c + * provenance: human + * mechanism: other */ static CURLcode ftp_statemachine(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2022-22576-conn_free/fixed.c b/benchmarks/pairs/vfc/curl-cve-2022-22576-conn_free/fixed.c index c95938b..5cac3de 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-22576-conn_free/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-22576-conn_free/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: conn_free * relpath: lib/url.c + * provenance: human + * mechanism: other */ static void conn_free(struct connectdata *conn) diff --git a/benchmarks/pairs/vfc/curl-cve-2022-22576-conn_free/vuln.c b/benchmarks/pairs/vfc/curl-cve-2022-22576-conn_free/vuln.c index a722efb..55ff766 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-22576-conn_free/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-22576-conn_free/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: conn_free * relpath: lib/url.c + * provenance: human + * mechanism: other */ static void conn_free(struct connectdata *conn) diff --git a/benchmarks/pairs/vfc/curl-cve-2022-27774/fixed.c b/benchmarks/pairs/vfc/curl-cve-2022-27774/fixed.c index 424f9fd..1fc5021 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-27774/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-27774/fixed.c @@ -7,13 +7,10 @@ * license: curl * function: Curl_follow * relpath: lib/transfer.c + * provenance: human + * mechanism: other */ -* Curl_follow() handles the URL redirect magic. Pass in the 'newurl' string - * as given by the remote server and set up the new URL to request. - * - * This function DOES NOT FREE the given url. - */ CURLcode Curl_follow(struct Curl_easy *data, char *newurl, /* the Location: string */ followtype type) /* see transfer.h */ diff --git a/benchmarks/pairs/vfc/curl-cve-2022-27774/vuln.c b/benchmarks/pairs/vfc/curl-cve-2022-27774/vuln.c index 0bb2168..e385dd0 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-27774/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-27774/vuln.c @@ -7,13 +7,10 @@ * license: curl * function: Curl_follow * relpath: lib/transfer.c + * provenance: human + * mechanism: other */ -* Curl_follow() handles the URL redirect magic. Pass in the 'newurl' string - * as given by the remote server and set up the new URL to request. - * - * This function DOES NOT FREE the given url. - */ CURLcode Curl_follow(struct Curl_easy *data, char *newurl, /* the Location: string */ followtype type) /* see transfer.h */ diff --git a/benchmarks/pairs/vfc/curl-cve-2022-27775/fixed.c b/benchmarks/pairs/vfc/curl-cve-2022-27775/fixed.c index 9657d48..dbafc47 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-27775/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-27775/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: hashkey * relpath: lib/conncache.c + * provenance: human + * mechanism: other */ static void hashkey(struct connectdata *conn, char *buf, diff --git a/benchmarks/pairs/vfc/curl-cve-2022-27775/vuln.c b/benchmarks/pairs/vfc/curl-cve-2022-27775/vuln.c index 69a9c1e..47674ec 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-27775/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-27775/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: hashkey * relpath: lib/conncache.c + * provenance: human + * mechanism: other */ static void hashkey(struct connectdata *conn, char *buf, diff --git a/benchmarks/pairs/vfc/curl-cve-2022-27776/fixed.c b/benchmarks/pairs/vfc/curl-cve-2022-27776/fixed.c index 929e55b..2daf91f 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-27776/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-27776/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: Curl_add_custom_headers * relpath: lib/http.c + * provenance: human + * mechanism: other */ CURLcode Curl_add_custom_headers(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2022-27776/vuln.c b/benchmarks/pairs/vfc/curl-cve-2022-27776/vuln.c index bb6ae8e..3890359 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-27776/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-27776/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: Curl_add_custom_headers * relpath: lib/http.c + * provenance: human + * mechanism: other */ CURLcode Curl_add_custom_headers(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2022-27778/fixed.c b/benchmarks/pairs/vfc/curl-cve-2022-27778/fixed.c index c2b28dd..4753bee 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-27778/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-27778/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: post_per_transfer * relpath: src/tool_operate.c + * provenance: human + * mechanism: other */ static CURLcode post_per_transfer(struct GlobalConfig *global, diff --git a/benchmarks/pairs/vfc/curl-cve-2022-27778/vuln.c b/benchmarks/pairs/vfc/curl-cve-2022-27778/vuln.c index 0235733..a76882f 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-27778/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-27778/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: post_per_transfer * relpath: src/tool_operate.c + * provenance: human + * mechanism: other */ static CURLcode post_per_transfer(struct GlobalConfig *global, diff --git a/benchmarks/pairs/vfc/curl-cve-2022-27780/fixed.c b/benchmarks/pairs/vfc/curl-cve-2022-27780/fixed.c index 0af8299..a62b23f 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-27780/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-27780/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: hostname_check * relpath: lib/urlapi.c + * provenance: human + * mechanism: other */ static CURLUcode hostname_check(struct Curl_URL *u, char *hostname) diff --git a/benchmarks/pairs/vfc/curl-cve-2022-27780/vuln.c b/benchmarks/pairs/vfc/curl-cve-2022-27780/vuln.c index 0debc09..2a2fe99 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-27780/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-27780/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: hostname_check * relpath: lib/urlapi.c + * provenance: human + * mechanism: other */ static CURLUcode hostname_check(struct Curl_URL *u, char *hostname) diff --git a/benchmarks/pairs/vfc/curl-cve-2022-27782-curl_free_primary_ssl_co/fixed.c b/benchmarks/pairs/vfc/curl-cve-2022-27782-curl_free_primary_ssl_co/fixed.c index 4db16b3..202bed2 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-27782-curl_free_primary_ssl_co/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-27782-curl_free_primary_ssl_co/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: Curl_free_primary_ssl_config * relpath: lib/vtls/vtls.c + * provenance: human + * mechanism: other */ void Curl_free_primary_ssl_config(struct ssl_primary_config *sslc) diff --git a/benchmarks/pairs/vfc/curl-cve-2022-27782-curl_free_primary_ssl_co/vuln.c b/benchmarks/pairs/vfc/curl-cve-2022-27782-curl_free_primary_ssl_co/vuln.c index f757801..6690742 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-27782-curl_free_primary_ssl_co/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-27782-curl_free_primary_ssl_co/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: Curl_free_primary_ssl_config * relpath: lib/vtls/vtls.c + * provenance: human + * mechanism: other */ void Curl_free_primary_ssl_config(struct ssl_primary_config *sslc) diff --git a/benchmarks/pairs/vfc/curl-cve-2022-27782-curl_init_userdefined/fixed.c b/benchmarks/pairs/vfc/curl-cve-2022-27782-curl_init_userdefined/fixed.c index 072bdd4..2b327cf 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-27782-curl_init_userdefined/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-27782-curl_init_userdefined/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: Curl_init_userdefined * relpath: lib/url.c + * provenance: human + * mechanism: other */ CURLcode Curl_init_userdefined(struct Curl_easy *data) diff --git a/benchmarks/pairs/vfc/curl-cve-2022-27782-curl_init_userdefined/vuln.c b/benchmarks/pairs/vfc/curl-cve-2022-27782-curl_init_userdefined/vuln.c index a4b2b48..311b9b5 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-27782-curl_init_userdefined/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-27782-curl_init_userdefined/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: Curl_init_userdefined * relpath: lib/url.c + * provenance: human + * mechanism: other */ CURLcode Curl_init_userdefined(struct Curl_easy *data) diff --git a/benchmarks/pairs/vfc/curl-cve-2022-27782-gtls_shutdown/fixed.c b/benchmarks/pairs/vfc/curl-cve-2022-27782-gtls_shutdown/fixed.c index c0968d8..44d1ca3 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-27782-gtls_shutdown/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-27782-gtls_shutdown/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: gtls_shutdown * relpath: lib/vtls/gtls.c + * provenance: human + * mechanism: other */ static int gtls_shutdown(struct Curl_easy *data, struct connectdata *conn, diff --git a/benchmarks/pairs/vfc/curl-cve-2022-27782-gtls_shutdown/vuln.c b/benchmarks/pairs/vfc/curl-cve-2022-27782-gtls_shutdown/vuln.c index 730ed5b..da49a56 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-27782-gtls_shutdown/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-27782-gtls_shutdown/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: gtls_shutdown * relpath: lib/vtls/gtls.c + * provenance: human + * mechanism: other */ static int gtls_shutdown(struct Curl_easy *data, struct connectdata *conn, diff --git a/benchmarks/pairs/vfc/curl-cve-2022-27782-nss_setup_connect/fixed.c b/benchmarks/pairs/vfc/curl-cve-2022-27782-nss_setup_connect/fixed.c index c7a9d39..b5e5694 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-27782-nss_setup_connect/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-27782-nss_setup_connect/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: nss_setup_connect * relpath: lib/vtls/nss.c + * provenance: human + * mechanism: other */ static CURLcode nss_setup_connect(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2022-27782-nss_setup_connect/vuln.c b/benchmarks/pairs/vfc/curl-cve-2022-27782-nss_setup_connect/vuln.c index 1b113fb..7814da9 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-27782-nss_setup_connect/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-27782-nss_setup_connect/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: nss_setup_connect * relpath: lib/vtls/nss.c + * provenance: human + * mechanism: other */ static CURLcode nss_setup_connect(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2022-27782-ossl_connect_step1/fixed.c b/benchmarks/pairs/vfc/curl-cve-2022-27782-ossl_connect_step1/fixed.c index fda13d8..9dbdcac 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-27782-ossl_connect_step1/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-27782-ossl_connect_step1/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: ossl_connect_step1 * relpath: lib/vtls/openssl.c + * provenance: human + * mechanism: other */ static CURLcode ossl_connect_step1(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2022-27782-ossl_connect_step1/vuln.c b/benchmarks/pairs/vfc/curl-cve-2022-27782-ossl_connect_step1/vuln.c index 985177a..31997c5 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-27782-ossl_connect_step1/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-27782-ossl_connect_step1/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: ossl_connect_step1 * relpath: lib/vtls/openssl.c + * provenance: human + * mechanism: other */ static CURLcode ossl_connect_step1(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2022-30115/fixed.c b/benchmarks/pairs/vfc/curl-cve-2022-30115/fixed.c index 09bed82..005eed5 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-30115/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-30115/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: hsts_create * relpath: lib/hsts.c + * provenance: human + * mechanism: other */ static CURLcode hsts_create(struct hsts *h, diff --git a/benchmarks/pairs/vfc/curl-cve-2022-30115/vuln.c b/benchmarks/pairs/vfc/curl-cve-2022-30115/vuln.c index 88eaafe..8c609f8 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-30115/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-30115/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: hsts_create * relpath: lib/hsts.c + * provenance: human + * mechanism: other */ static CURLcode hsts_create(struct hsts *h, diff --git a/benchmarks/pairs/vfc/curl-cve-2022-32206/fixed.c b/benchmarks/pairs/vfc/curl-cve-2022-32206/fixed.c index cbaeca6..a989b39 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-32206/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-32206/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: Curl_build_unencoding_stack * relpath: lib/content_encoding.c + * provenance: human + * mechanism: other */ CURLcode Curl_build_unencoding_stack(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2022-32206/vuln.c b/benchmarks/pairs/vfc/curl-cve-2022-32206/vuln.c index a8f60c7..e266366 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-32206/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-32206/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: Curl_build_unencoding_stack * relpath: lib/content_encoding.c + * provenance: human + * mechanism: other */ CURLcode Curl_build_unencoding_stack(struct Curl_easy *data, diff --git a/benchmarks/pairs/vfc/curl-cve-2022-32207/fixed.c b/benchmarks/pairs/vfc/curl-cve-2022-32207/fixed.c index 9ca2e5e..2922449 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-32207/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-32207/fixed.c @@ -7,15 +7,10 @@ * license: curl * function: cookie_output * relpath: lib/cookie.c + * provenance: human + * mechanism: other */ -* cookie_output() - * - * Writes all internally known cookies to the specified file. Specify - * "-" as file name to write to stdout. - * - * The function returns non-zero on write failure. - */ static CURLcode cookie_output(struct Curl_easy *data, struct CookieInfo *c, const char *filename) { diff --git a/benchmarks/pairs/vfc/curl-cve-2022-32207/vuln.c b/benchmarks/pairs/vfc/curl-cve-2022-32207/vuln.c index 0850245..f46185f 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-32207/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-32207/vuln.c @@ -7,15 +7,10 @@ * license: curl * function: cookie_output * relpath: lib/cookie.c + * provenance: human + * mechanism: other */ -* cookie_output() - * - * Writes all internally known cookies to the specified file. Specify - * "-" as file name to write to stdout. - * - * The function returns non-zero on write failure. - */ static CURLcode cookie_output(struct Curl_easy *data, struct CookieInfo *c, const char *filename) { diff --git a/benchmarks/pairs/vfc/curl-cve-2022-32208/fixed.c b/benchmarks/pairs/vfc/curl-cve-2022-32208/fixed.c index 08e4392..98e1f41 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-32208/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-32208/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: read_data * relpath: lib/krb5.c + * provenance: human + * mechanism: other */ static CURLcode read_data(struct connectdata *conn, diff --git a/benchmarks/pairs/vfc/curl-cve-2022-32208/vuln.c b/benchmarks/pairs/vfc/curl-cve-2022-32208/vuln.c index 02f11e5..97595fe 100644 --- a/benchmarks/pairs/vfc/curl-cve-2022-32208/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2022-32208/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: read_data * relpath: lib/krb5.c + * provenance: human + * mechanism: other */ static CURLcode read_data(struct connectdata *conn, diff --git a/benchmarks/pairs/vfc/curl-cve-2023-38545-do_socks5/fixed.c b/benchmarks/pairs/vfc/curl-cve-2023-38545-do_socks5/fixed.c index e4dde4d..7aa7770 100644 --- a/benchmarks/pairs/vfc/curl-cve-2023-38545-do_socks5/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2023-38545-do_socks5/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: do_SOCKS5 * relpath: lib/socks.c + * provenance: human + * mechanism: other */ static CURLproxycode do_SOCKS5(struct Curl_cfilter *cf, diff --git a/benchmarks/pairs/vfc/curl-cve-2023-38545-do_socks5/vuln.c b/benchmarks/pairs/vfc/curl-cve-2023-38545-do_socks5/vuln.c index 780fcad..a0904a7 100644 --- a/benchmarks/pairs/vfc/curl-cve-2023-38545-do_socks5/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2023-38545-do_socks5/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: do_SOCKS5 * relpath: lib/socks.c + * provenance: human + * mechanism: other */ static CURLproxycode do_SOCKS5(struct Curl_cfilter *cf, diff --git a/benchmarks/pairs/vfc/curl-cve-2023-38545/fixed.c b/benchmarks/pairs/vfc/curl-cve-2023-38545/fixed.c index e4dde4d..11f2bb8 100644 --- a/benchmarks/pairs/vfc/curl-cve-2023-38545/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2023-38545/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: do_SOCKS5 * relpath: lib/socks.c + * provenance: human + * mechanism: unchecked_length_copy */ static CURLproxycode do_SOCKS5(struct Curl_cfilter *cf, diff --git a/benchmarks/pairs/vfc/curl-cve-2023-38545/vuln.c b/benchmarks/pairs/vfc/curl-cve-2023-38545/vuln.c index 780fcad..bc6c196 100644 --- a/benchmarks/pairs/vfc/curl-cve-2023-38545/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2023-38545/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: do_SOCKS5 * relpath: lib/socks.c + * provenance: human + * mechanism: unchecked_length_copy */ static CURLproxycode do_SOCKS5(struct Curl_cfilter *cf, diff --git a/benchmarks/pairs/vfc/curl-cve-2026-9080/fixed.c b/benchmarks/pairs/vfc/curl-cve-2026-9080/fixed.c index 2eeae66..5281706 100644 --- a/benchmarks/pairs/vfc/curl-cve-2026-9080/fixed.c +++ b/benchmarks/pairs/vfc/curl-cve-2026-9080/fixed.c @@ -7,6 +7,8 @@ * license: curl * function: mev_forget_socket * relpath: lib/multi_ev.c + * provenance: human + * mechanism: other */ static CURLMcode mev_forget_socket(struct Curl_multi *multi, diff --git a/benchmarks/pairs/vfc/curl-cve-2026-9080/vuln.c b/benchmarks/pairs/vfc/curl-cve-2026-9080/vuln.c index 1801edd..0d4ec87 100644 --- a/benchmarks/pairs/vfc/curl-cve-2026-9080/vuln.c +++ b/benchmarks/pairs/vfc/curl-cve-2026-9080/vuln.c @@ -7,6 +7,8 @@ * license: curl * function: mev_forget_socket * relpath: lib/multi_ev.c + * provenance: human + * mechanism: other */ static CURLMcode mev_forget_socket(struct Curl_multi *multi, diff --git a/benchmarks/pairs/vfc/openssl-cve-2021-3449-init_sig_algs_cert/fixed.c b/benchmarks/pairs/vfc/openssl-cve-2021-3449-init_sig_algs_cert/fixed.c index ee7c2e1..8be57e3 100644 --- a/benchmarks/pairs/vfc/openssl-cve-2021-3449-init_sig_algs_cert/fixed.c +++ b/benchmarks/pairs/vfc/openssl-cve-2021-3449-init_sig_algs_cert/fixed.c @@ -7,6 +7,8 @@ * license: OpenSSL License * function: init_sig_algs_cert * relpath: ssl/statem/extensions.c + * provenance: human + * mechanism: other */ static int init_sig_algs_cert(SSL *s, ossl_unused unsigned int context) diff --git a/benchmarks/pairs/vfc/openssl-cve-2021-3449-init_sig_algs_cert/vuln.c b/benchmarks/pairs/vfc/openssl-cve-2021-3449-init_sig_algs_cert/vuln.c index e9bc45f..d65ce41 100644 --- a/benchmarks/pairs/vfc/openssl-cve-2021-3449-init_sig_algs_cert/vuln.c +++ b/benchmarks/pairs/vfc/openssl-cve-2021-3449-init_sig_algs_cert/vuln.c @@ -7,6 +7,8 @@ * license: OpenSSL License * function: init_sig_algs_cert * relpath: ssl/statem/extensions.c + * provenance: human + * mechanism: other */ static int init_sig_algs_cert(SSL *s, ossl_unused unsigned int context) diff --git a/benchmarks/pairs/vfc/recipes.toml b/benchmarks/pairs/vfc/recipes.toml index 55afee6..a16f454 100644 --- a/benchmarks/pairs/vfc/recipes.toml +++ b/benchmarks/pairs/vfc/recipes.toml @@ -23,6 +23,9 @@ evidence = "memcpy copies heartbeat payload using an attacker-controlled length" commit_url = "https://github.com/openssl/openssl/commit/96db9023b881d7cd9f379b0c154650d6c108e9a3" origin = "openssl" project = "openssl" +mechanism = "unchecked_length_copy" +provenance = "human" +split = "train" [[recipe]] name = "firefox-cve-2020-15667" @@ -45,6 +48,9 @@ evidence = "memcpy copies a MAR index name using a signed namelen that can wrap" commit_url = "https://hg.mozilla.org/mozilla-central/rev/b79b6cc78248eea7fda10bfb76aa273c19c9fa65" origin = "mozilla-central" project = "firefox" +mechanism = "unchecked_length_copy" +provenance = "human" +split = "holdout" [[recipe]] name = "chromium-cve-2019-5786" @@ -67,6 +73,9 @@ evidence = "ArrayBufferResult can return two references to the same underlying A commit_url = "https://github.com/chromium/chromium/commit/ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449" origin = "chromium" project = "chromium" +mechanism = "uaf" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2020-1967" @@ -88,6 +97,9 @@ evidence = "SSL_check_chain / tls1_check_sig_alg can dereference NULL in TLS 1.3 commit_url = "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4" origin = "openssl" project = "openssl" +mechanism = "null_deref_unguarded" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2020-1971" @@ -109,6 +121,9 @@ evidence = "GENERAL_NAME_cmp mishandles EdiPartyName comparison" commit_url = "https://github.com/openssl/openssl/commit/b33c48b75aaf33c93aeda42d7138616b9e6a64cb" origin = "openssl" project = "openssl" +mechanism = "null_deref_unguarded" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2021-23840" @@ -130,6 +145,9 @@ evidence = "EVP_CipherUpdate output length can overflow" commit_url = "https://github.com/openssl/openssl/commit/c9fb704cf3af5524eb8e79961e31b60eee8c3c47" origin = "openssl" project = "openssl" +mechanism = "signed_size_operand" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2021-3711" @@ -151,6 +169,9 @@ evidence = "SM2 plaintext size is underestimated so the second EVP_PKEY_decrypt commit_url = "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46" origin = "openssl" project = "openssl" +mechanism = "unchecked_length_copy" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2021-3712" @@ -172,6 +193,9 @@ evidence = "append_ia5 assumes NUL-terminated ASN.1 strings" commit_url = "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9" origin = "openssl" project = "openssl" +mechanism = "unchecked_length_copy" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2022-0778" @@ -193,6 +217,9 @@ evidence = "BN_mod_sqrt can loop forever on crafted moduli" commit_url = "https://github.com/openssl/openssl/commit/9eafb53614bf65797db25f467946e735e1b43dc9" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2022-1292" @@ -214,6 +241,9 @@ evidence = "c_rehash interpolates certificate filenames into a shell backtick co commit_url = "https://github.com/openssl/openssl/commit/1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2" origin = "openssl" project = "openssl" +mechanism = "source_reaches_sink" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2022-3602" @@ -235,6 +265,9 @@ evidence = "punycode decoder can write past the output buffer" commit_url = "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332" origin = "openssl" project = "openssl" +mechanism = "unchecked_length_copy" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2022-3786" @@ -256,6 +289,9 @@ evidence = "punycode decoder can overflow a stack buffer via a crafted email nam commit_url = "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6" origin = "openssl" project = "openssl" +mechanism = "unchecked_length_copy" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2023-0286" @@ -277,6 +313,9 @@ evidence = "GENERAL_NAME_cmp type-confuses x400Address" commit_url = "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f" origin = "openssl" project = "openssl" +mechanism = "type_confusion" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2023-38545" @@ -299,6 +338,9 @@ evidence = "SOCKS5 remote-resolve copies a hostname that can exceed the local bu commit_url = "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147" origin = "curl" project = "curl" +mechanism = "unchecked_length_copy" +provenance = "human" +split = "holdout" [[recipe]] name = "chromium-cve-2022-2162" @@ -320,6 +362,9 @@ evidence = "File System Access suggested names did not sanitize Windows .url she commit_url = "https://github.com/chromium/chromium/commit/22c61cfae5d1b37c773e638d342488ae11118b51" origin = "chromium" project = "chromium" +mechanism = "validation_strength" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2025-69421" @@ -341,6 +386,9 @@ evidence = "PKCS12_item_decrypt_d2i_ex did not check a NULL oct argument" commit_url = "https://github.com/openssl/openssl/commit/2c13bf15286328641a805eb3b7c97e27d42881fb" origin = "openssl" project = "openssl" +mechanism = "null_deref_unguarded" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2025-66199" @@ -362,6 +410,9 @@ evidence = "TLS 1.3 compressed certificate length was trusted before allocation" commit_url = "https://github.com/openssl/openssl/commit/84f73f79af9f69c1527a9a372b7a9e771a394c2a" origin = "openssl" project = "openssl" +mechanism = "unchecked_alloc_size" +provenance = "human" +split = "train" [[recipe]] name = "firefox-bug-2058173" @@ -383,6 +434,9 @@ evidence = "mar_read_index malloc'd an untrusted MAR index size with no upper bo commit_url = "https://github.com/mozilla-firefox/firefox/commit/e46f28da1cd3a5d46a2680b3d87361e9e8de4ae6" origin = "mozilla-firefox/firefox" project = "firefox" +mechanism = "unchecked_alloc_size" +provenance = "human" +split = "train" # --- auto-harvested 2020-2026 (local git mine) --- @@ -406,6 +460,9 @@ evidence = "Avoid double free of qrx in port_default_packet_handler()" commit_url = "https://github.com/openssl/openssl/commit/70cebd74d3592f5272945501b58a60374c4e13af" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2026-54874" @@ -427,6 +484,9 @@ evidence = "Avoid full read buffer allocation when buffering DTLS records" commit_url = "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2026-54874-dtls1_process_record" @@ -448,6 +508,9 @@ evidence = "Avoid full read buffer allocation when buffering DTLS records" commit_url = "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2026-54874-dtls_rlayer_buffer_recor" @@ -469,6 +532,9 @@ evidence = "Avoid full read buffer allocation when buffering DTLS next-epoch rec commit_url = "https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2026-63072" @@ -490,6 +556,9 @@ evidence = "Fix heap buffer overflow (8-byte OOB write) in AES-WRAP-PAD unwrap" commit_url = "https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382" origin = "openssl" project = "openssl" +mechanism = "unchecked_length_copy" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2026-63072-cms_kek_cipher" @@ -511,6 +580,9 @@ evidence = "Fix heap buffer overflow (8-byte OOB write) in AES-WRAP-PAD unwrap" commit_url = "https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756" origin = "openssl" project = "openssl" +mechanism = "unchecked_length_copy" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2026-63073" @@ -532,6 +604,9 @@ evidence = "CMP unexpected sender DN used as format string in ERR_raise_data()" commit_url = "https://github.com/openssl/openssl/commit/a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2026-14457" @@ -553,6 +628,9 @@ evidence = "Handle signature_algorithms_cert extension in key-only context" commit_url = "https://github.com/openssl/openssl/commit/1e8c398db67404babd3e5af999bb6bd86f720c76" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2026-63074" @@ -574,6 +652,9 @@ evidence = "Fix unbounded cert cache growth in cmp" commit_url = "https://github.com/openssl/openssl/commit/21a5d9658b0c66daace60e10ea18ff32a448de9f" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2026-63075-txp_pkt_commit" @@ -595,6 +676,9 @@ evidence = "Don't store ACK-only frames in TX history for QUIC." commit_url = "https://github.com/openssl/openssl/commit/c902e5f16d6a9e130e96d3ca6d8f64d71652e393" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2026-75803" @@ -616,6 +700,9 @@ evidence = "Check the tag on EVP_Cipher() finalize: Poly1305 and OCB AEADs" commit_url = "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2026-75803-chacha20_poly1305_cipher" @@ -637,6 +724,9 @@ evidence = "Check the tag on EVP_Cipher() finalize: Poly1305 and OCB AEADs" commit_url = "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2026-75803-aes_gcm_siv_finish" @@ -658,6 +748,9 @@ evidence = "Check the tag on EVP_Cipher() finalize: Poly1305 and OCB AEADs" commit_url = "https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2026-14456-port_default_packet_hand" @@ -679,6 +772,9 @@ evidence = "QUIC server: limit number of pending QUIC channels/connections" commit_url = "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2026-14456-expect_quic_for_value" @@ -700,6 +796,9 @@ evidence = "QUIC server: limit number of pending QUIC channels/connections" commit_url = "https://github.com/openssl/openssl/commit/9416706d408bb84deb7cee4647bff3045d2dc7ba" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2026-45447" @@ -721,6 +820,9 @@ evidence = "Fix possible use-after-free in OpenSSL PKCS7_verify()" commit_url = "https://github.com/openssl/openssl/commit/f4129fbe3cde786d363510069fe297234f99be8f" origin = "openssl" project = "openssl" +mechanism = "uaf" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2026-45446" @@ -742,6 +844,9 @@ evidence = "Fix handling of empty-ciphertext messages in AES-GCM-SIV and AES-SIV commit_url = "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2026-45446-aes_siv_set_ctx_params" @@ -763,6 +868,9 @@ evidence = "Fix handling of empty-ciphertext messages in AES-GCM-SIV and AES-SIV commit_url = "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2026-45445" @@ -784,6 +892,9 @@ evidence = "Apply the buffered IV on the AES-OCB EVP_Cipher() path" commit_url = "https://github.com/openssl/openssl/commit/f87f0b6a8e04bcdeb98afc82b0da06a2d537f399" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2026-42771" @@ -805,6 +916,9 @@ evidence = "Fix length miscalculation in validate_email" commit_url = "https://github.com/openssl/openssl/commit/b3a555a0a7aa0028887149f6f973af89a4937bea" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2026-42769" @@ -826,6 +940,9 @@ evidence = "Use the correct issuer when validating rootCAKeyUpdate" commit_url = "https://github.com/openssl/openssl/commit/c2765d53c2649b56bc1ca1bb799e42002953056a" origin = "openssl" project = "openssl" +mechanism = "null_deref_unguarded" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2026-42768" @@ -847,6 +964,9 @@ evidence = "Enforce implicit rejection for CMS/PKCS#7 decryption" commit_url = "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2026-42768-pkcs7_decrypt_rinfo" @@ -868,6 +988,9 @@ evidence = "Enforce implicit rejection for CMS/PKCS#7 decryption" commit_url = "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2026-42766" @@ -889,6 +1012,9 @@ evidence = "Fix potential NULL dereference processing CMS PasswordRecipientInfo" commit_url = "https://github.com/openssl/openssl/commit/74245170b5a64b234ac4af27c86a25ec251c8b2a" origin = "openssl" project = "openssl" +mechanism = "null_deref_unguarded" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2026-42765" @@ -910,6 +1036,9 @@ evidence = "Fix NULL Dereference in Certificate Verification with OCSP Checking" commit_url = "https://github.com/openssl/openssl/commit/a9af3442290e8a04706a3cd5f284ffd5b486e3f6" origin = "openssl" project = "openssl" +mechanism = "null_deref_unguarded" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2026-42764" @@ -931,6 +1060,9 @@ evidence = "Fix NULL dereference in QUIC address validation" commit_url = "https://github.com/openssl/openssl/commit/5097ec4dae239112498abb722e255ea60ef7ac48" origin = "openssl" project = "openssl" +mechanism = "null_deref_unguarded" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2026-35188" @@ -952,6 +1084,9 @@ evidence = "Fix Double-free When Checking OCSP Stapled Response" commit_url = "https://github.com/openssl/openssl/commit/58633b658fe74095c8cdde191e4ce1bf94f8c5f9" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2026-34181" @@ -973,6 +1108,9 @@ evidence = "pkcs12: verify that the pbmac1 key length is safe" commit_url = "https://github.com/openssl/openssl/commit/5a0230b6cc95a576b0c2b7b5b2ba7c74232e7b7c" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2026-9076" @@ -994,6 +1132,9 @@ evidence = "cms: kek_unwrap_key: Fix out-of-bounds read in check-byte validation commit_url = "https://github.com/openssl/openssl/commit/51d1800e95283a8beec85152e35e3634dab8dd82" origin = "openssl" project = "openssl" +mechanism = "unchecked_length_copy" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2026-7383" @@ -1015,6 +1156,9 @@ evidence = "Reject oversized inputs in ASN1_mbstring_ncopy()" commit_url = "https://github.com/openssl/openssl/commit/97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2026-31790" @@ -1036,6 +1180,9 @@ evidence = "rsa_kem: validate RSA_public_encrypt() result in RSASVE" commit_url = "https://github.com/openssl/openssl/commit/eed200f58cd8645ed77e46b7e9f764e284df379e" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2026-31790-rsasve_generate" @@ -1057,6 +1204,9 @@ evidence = "rsa_kem: validate RSA_public_encrypt() result in RSASVE" commit_url = "https://github.com/openssl/openssl/commit/abd8b2eec7e3f3fda60ecfb68498b246b52af482" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2026-31789" @@ -1078,6 +1228,9 @@ evidence = "Avoid possible buffer overflow in buf2hex conversion" commit_url = "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521" origin = "openssl" project = "openssl" +mechanism = "unchecked_length_copy" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2026-28388" @@ -1099,6 +1252,9 @@ evidence = "Fix NULL Dereference When Delta CRL Lacks CRL Number Extension" commit_url = "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e" origin = "openssl" project = "openssl" +mechanism = "null_deref_unguarded" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2026-28389" @@ -1120,6 +1276,9 @@ evidence = "Fix NULL deref in rsa_cms_decrypt" commit_url = "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4" origin = "openssl" project = "openssl" +mechanism = "null_deref_unguarded" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2026-28389-dh_cms_set_shared_info" @@ -1141,6 +1300,9 @@ evidence = "Fix NULL deref in [ec]dh_cms_set_shared_info" commit_url = "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" origin = "openssl" project = "openssl" +mechanism = "null_deref_unguarded" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2026-28389-ecdh_cms_set_shared_info" @@ -1162,6 +1324,9 @@ evidence = "Fix NULL deref in [ec]dh_cms_set_shared_info" commit_url = "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" origin = "openssl" project = "openssl" +mechanism = "null_deref_unguarded" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2026-2673" @@ -1183,6 +1348,9 @@ evidence = "Fix group tuple handling in DEFAULT expansion" commit_url = "https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2025-69419" @@ -1204,6 +1372,9 @@ evidence = "Alternate fix for CVE-2025-69419" commit_url = "https://github.com/openssl/openssl/commit/4191043c36f1a50c717a2d0075fc6f3b9bc0afc5" origin = "openssl" project = "openssl" +mechanism = "unchecked_length_copy" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2025-69418" @@ -1225,6 +1396,9 @@ evidence = "Fix OCB AES-NI/HW stream path unauthenticated/unencrypted trailing b commit_url = "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2025-66199-tls13_process_compressed" @@ -1246,6 +1420,9 @@ evidence = "Check the received uncompressed certificate length to prevent excess commit_url = "https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2025-68160" @@ -1267,6 +1444,9 @@ evidence = "Fix heap buffer overflow in BIO_f_linebuffer" commit_url = "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6" origin = "openssl" project = "openssl" +mechanism = "unchecked_length_copy" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2025-15469" @@ -1288,6 +1468,9 @@ evidence = "Report truncation in oneshot `openssl dgst -sign`" commit_url = "https://github.com/openssl/openssl/commit/a7936fa4bd23c906e1955a16a0a0ab39a4953a61" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2025-15467" @@ -1309,6 +1492,9 @@ evidence = "Correct handling of AEAD-encrypted CMS with inadmissibly long IV" commit_url = "https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2025-11187" @@ -1330,6 +1516,9 @@ evidence = "pkcs12: Validate salt and keylength in PBMAC1" commit_url = "https://github.com/openssl/openssl/commit/205e3a55e16e4bd08c12fdbd3416ab829c0f6206" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2025-9232" @@ -1351,6 +1540,9 @@ evidence = "use_proxy(): Add missing terminating NUL byte" commit_url = "https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2025-9230" @@ -1372,6 +1564,9 @@ evidence = "kek_unwrap_key(): Fix incorrect check of unwrapped key size" commit_url = "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def" origin = "openssl" project = "openssl" +mechanism = "unchecked_length_copy" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2024-12797" @@ -1393,6 +1588,9 @@ evidence = "With SSL_VERIFY_PEER client RPK should abort on X509 error" commit_url = "https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2024-13176-ec_field_inverse_mod_ord" @@ -1414,6 +1612,9 @@ evidence = "Fix timing side-channel in ECDSA signature computation" commit_url = "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2024-6119" @@ -1435,6 +1636,9 @@ evidence = "Avoid type errors in EAI-related name check logic." commit_url = "https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2024-5535" @@ -1456,6 +1660,9 @@ evidence = "Add ALPN validation in the client" commit_url = "https://github.com/openssl/openssl/commit/4b375b998798dd516d367036773073e1b88e6433" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2024-5535-tls_construct_stoc_next_" @@ -1477,6 +1684,9 @@ evidence = "Correct return values for tls_construct_stoc_next_proto_neg" commit_url = "https://github.com/openssl/openssl/commit/189a7ed3e380e34ea38fe4190a7c9396bace0fb7" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2024-5535-tls_parse_stoc_npn" @@ -1498,6 +1708,9 @@ evidence = "More correctly handle a selected_len of 0 when processing NPN" commit_url = "https://github.com/openssl/openssl/commit/159921152fd4aa91e4c849fd281ad93ac0d0d0ba" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2024-5535-ssl_select_next_proto" @@ -1519,6 +1732,9 @@ evidence = "Fix SSL_select_next_proto" commit_url = "https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2024-5535-alpn_select_cb" @@ -1540,6 +1756,9 @@ evidence = "Use correctly formatted ALPN data in tserver" commit_url = "https://github.com/openssl/openssl/commit/6cc511826f09e513b4ec066d9b95acaf4f86d991" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2024-4741" @@ -1561,6 +1780,9 @@ evidence = "Set rlayer.packet to NULL after we've finished using it" commit_url = "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020" origin = "openssl" project = "openssl" +mechanism = "uaf" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2024-4741-ssl3_release_read_buffer" @@ -1582,6 +1804,9 @@ evidence = "Set rlayer.packet to NULL after we've finished using it" commit_url = "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020" origin = "openssl" project = "openssl" +mechanism = "uaf" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2024-4741-ssl_free_buffers" @@ -1603,6 +1828,9 @@ evidence = "Only free the read buffers if we're not using them" commit_url = "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2024-4741-tls_release_read_buffer" @@ -1624,6 +1852,9 @@ evidence = "Set rl->packet to NULL after we've finished using it" commit_url = "https://github.com/openssl/openssl/commit/10171e5b511b700c5ecd4fd3e1086b19c34b1ae3" origin = "openssl" project = "openssl" +mechanism = "uaf" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2024-4741-tls_free_buffers" @@ -1645,6 +1876,9 @@ evidence = "Only free the read buffers if we're not using them" commit_url = "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2024-4603" @@ -1666,6 +1900,9 @@ evidence = "Check DSA parameters for excessive sizes before validating" commit_url = "https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2024-2511" @@ -1687,6 +1924,9 @@ evidence = "Fix unconstrained session cache growth in TLSv1.3" commit_url = "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2024-2511-tls_construct_server_hel" @@ -1708,6 +1948,9 @@ evidence = "Fix unconstrained session cache growth in TLSv1.3" commit_url = "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2024-0727" @@ -1729,6 +1972,9 @@ evidence = "Add NULL checks where ContentInfo data can be NULL" commit_url = "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2" origin = "openssl" project = "openssl" +mechanism = "null_deref_unguarded" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2024-0727-smime_write_pkcs7" @@ -1750,6 +1996,9 @@ evidence = "Add NULL checks where ContentInfo data can be NULL" commit_url = "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2" origin = "openssl" project = "openssl" +mechanism = "null_deref_unguarded" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2023-5363" @@ -1771,6 +2020,9 @@ evidence = "evp: process key length and iv length early if present" commit_url = "https://github.com/openssl/openssl/commit/0df40630850fb2740e6be6890bb905d3fc623b2d" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2023-3817-dh_check" @@ -1792,6 +2044,9 @@ evidence = "DH_check(): Do not try checking q properties if it is obviously inva commit_url = "https://github.com/openssl/openssl/commit/9002fd07327a91f35ba6c1307e71fa6fd4409b7f" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2023-3446" @@ -1813,6 +2068,9 @@ evidence = "Fix DH_check() excessive time with over sized modulus" commit_url = "https://github.com/openssl/openssl/commit/8780a896543a654e757db1b9396383f9d8095528" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2023-2975" @@ -1834,6 +2092,9 @@ evidence = "Do not ignore empty associated data with AES-SIV mode" commit_url = "https://github.com/openssl/openssl/commit/00e2f5eea29994d19293ec4e8c8775ba73678598" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2023-2650" @@ -1855,6 +2116,9 @@ evidence = "Restrict the size of OBJECT IDENTIFIERs that OBJ_obj2txt will transl commit_url = "https://github.com/openssl/openssl/commit/d63b3e7959e79f98d60760a739f7876dc5adc838" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2022-37454" @@ -1876,6 +2140,9 @@ evidence = "Update hkdf.c to avoid potentially vulnerable code pattern" commit_url = "https://github.com/openssl/openssl/commit/d12cde7fc5561d463badcd8a73079cf92864c31e" origin = "openssl" project = "openssl" +mechanism = "unchecked_length_copy" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2022-4304" @@ -1897,6 +2164,9 @@ evidence = "Alternative fix for CVE-2022-4304" commit_url = "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2022-4304-bn_blinding_invert_ex" @@ -1918,6 +2188,9 @@ evidence = "Alternative fix for CVE-2022-4304" commit_url = "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2022-4304-rsa_blinding_invert" @@ -1939,6 +2212,9 @@ evidence = "Alternative fix for CVE-2022-4304" commit_url = "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2023-0465" @@ -1960,6 +2236,9 @@ evidence = "Ensure that EXFLAG_INVALID_POLICY is checked even in leaf certs" commit_url = "https://github.com/openssl/openssl/commit/b013765abfa80036dc779dd0e50602c57bb3bf95" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2023-0464" @@ -1981,6 +2260,9 @@ evidence = "x509: excessive resource use verifying policy constraints" commit_url = "https://github.com/openssl/openssl/commit/879f7080d7e141f415c79eaa3a8ac4a3dad0348b" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2023-0464-tree_init" @@ -2002,6 +2284,9 @@ evidence = "x509: excessive resource use verifying policy constraints" commit_url = "https://github.com/openssl/openssl/commit/959c59c7a0164117e7f8366466a32bb1f8d77ff1" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2021-3449" @@ -2023,6 +2308,9 @@ evidence = "fuzz: make post handshake reachable" commit_url = "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2021-3449-def_generate_session_id" @@ -2044,6 +2332,9 @@ evidence = "fuzz: make post handshake reachable" commit_url = "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2021-3449-tls_parse_ctos_renegotia" @@ -2065,6 +2356,9 @@ evidence = "fuzz: make post handshake reachable" commit_url = "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2021-3449-tls_process_finished" @@ -2086,6 +2380,9 @@ evidence = "fuzz: make post handshake reachable" commit_url = "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2023-0401" @@ -2107,6 +2404,9 @@ evidence = "pk7_doit.c: Check return of BIO_set_md() calls" commit_url = "https://github.com/openssl/openssl/commit/6eebe6c0238178356114a96a7858f36b24172847" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2023-0286-general_name_cmp" @@ -2128,6 +2428,9 @@ evidence = "Fix GENERAL_NAME_cmp for x400Address (master)" commit_url = "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2023-0217" @@ -2149,6 +2452,9 @@ evidence = "Fix NULL deference when validating FFC public key." commit_url = "https://github.com/openssl/openssl/commit/bcec03c33cc00a7b5eb89ebeeee59e604570a86a" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2023-0216" @@ -2170,6 +2476,9 @@ evidence = "Do not dereference PKCS7 object data if not set" commit_url = "https://github.com/openssl/openssl/commit/80253dbdc92bec584f4a9866b43f8674156d838a" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2022-4304-rsa_ossl_private_decrypt" @@ -2191,6 +2500,9 @@ evidence = "Fix Timing Oracle in RSA decryption" commit_url = "https://github.com/openssl/openssl/commit/8022a4799fe884b3bf8d538e2b4c4ec323663118" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2020-25659" @@ -2212,6 +2524,9 @@ evidence = "rsa: add implicit rejection in PKCS#1 v1.5" commit_url = "https://github.com/openssl/openssl/commit/7fc67e0a33102aa47bbaa56533eeecb98c0450f7" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2022-3996" @@ -2233,6 +2548,9 @@ evidence = "x509: fix double locking problem" commit_url = "https://github.com/openssl/openssl/commit/7725e7bfe6f2ce8146b6552b44e0d226be7638e7" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2022-3786-ossl_punycode_decode" @@ -2254,6 +2572,9 @@ evidence = "Fix CVE-2022-3786 in punycode decoder." commit_url = "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6" origin = "openssl" project = "openssl" +mechanism = "unchecked_length_copy" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2022-3602-ossl_punycode_decode" @@ -2275,6 +2596,9 @@ evidence = "Fix CVE-2022-3602 in punycode decoder." commit_url = "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2022-3358" @@ -2296,6 +2620,9 @@ evidence = "Fix usage of custom EVP_CIPHER objects" commit_url = "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b" origin = "openssl" project = "openssl" +mechanism = "null_deref_unguarded" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2022-3358-evp_cipher_init_internal" @@ -2317,6 +2644,9 @@ evidence = "Fix usage of custom EVP_CIPHER objects" commit_url = "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b" origin = "openssl" project = "openssl" +mechanism = "null_deref_unguarded" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2022-2068-hash_dir" @@ -2338,6 +2668,9 @@ evidence = "Fix file operations in c_rehash." commit_url = "https://github.com/openssl/openssl/commit/2c9c35870601b4a44d86ddbf512b38df38285cfa" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2022-29242" @@ -2359,6 +2692,9 @@ evidence = "Use safe pattern for buffer size determining in case of GOST key exc commit_url = "https://github.com/openssl/openssl/commit/373de40f3f76c63e4f2684abd86706f3863347ca" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2022-1434" @@ -2380,6 +2716,9 @@ evidence = "Fix the RC4-MD5 cipher" commit_url = "https://github.com/openssl/openssl/commit/7d56a74a96828985db7354a55227a511615f732b" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2022-1343" @@ -2401,6 +2740,9 @@ evidence = "Fix OCSP_basic_verify signer certificate validation" commit_url = "https://github.com/openssl/openssl/commit/2eda98790c5c2741d76d23cc1e74b0dc4f4b391a" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2021-4044" @@ -2422,6 +2764,9 @@ evidence = "Fix infinite verification loops due to has_san_id" commit_url = "https://github.com/openssl/openssl/commit/d69ae8a93bfc0f2489c008fcf303a98d77a6df4d" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2021-4044-tls_post_process_server_" @@ -2443,6 +2788,9 @@ evidence = "Fix invalid handling of verify errors in libssl" commit_url = "https://github.com/openssl/openssl/commit/758754966791c537ea95241438454aa86f91f256" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2021-3711-sm2_asym_decrypt" @@ -2464,6 +2812,9 @@ evidence = "Correctly calculate the length of SM2 plaintext given the ciphertext commit_url = "https://github.com/openssl/openssl/commit/36cf45ef3ba71e44a8be06ee81cb31aa02cb0010" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2021-3712-netscape_spki_print" @@ -2485,6 +2836,9 @@ evidence = "Fix NETSCAPE_SPKI_print function to not assume NUL terminated string commit_url = "https://github.com/openssl/openssl/commit/7c038a6bcd98d4bbfd2c2892a87a1138d2f7c5f3" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2021-3712-append_ia5" @@ -2506,6 +2860,9 @@ evidence = "Fix append_ia5 function to not assume NUL terminated strings" commit_url = "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet" @@ -2527,6 +2884,9 @@ evidence = "Fix CMP code to not assume NUL terminated strings" commit_url = "https://github.com/openssl/openssl/commit/95f8c1e142df835d03b5b62521383a462fc5470d" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2021-3712-ia5ncasecmp" @@ -2548,6 +2908,9 @@ evidence = "Fix the name constraints code to not assume NUL terminated strings" commit_url = "https://github.com/openssl/openssl/commit/d2015a783e64613d8e4a142fa05048d1863df944" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2021-3712-i2r_pci" @@ -2569,6 +2932,9 @@ evidence = "Fix printing of PROXY_CERT_INFO_EXTENSION to not assume NUL terminat commit_url = "https://github.com/openssl/openssl/commit/918430ba80d94ec8f05383b43b1872b1ebb13e1a" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2021-3712-general_name_print" @@ -2590,6 +2956,9 @@ evidence = "Fix GENERAL_NAME_print to not assume NUL terminated strings" commit_url = "https://github.com/openssl/openssl/commit/b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2021-3712-print_qualifiers" @@ -2611,6 +2980,9 @@ evidence = "Fix POLICYINFO printing to not assume NUL terminated strings" commit_url = "https://github.com/openssl/openssl/commit/1747d4658b3830951068a6a6c1fa2b45c4731fb3" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2021-3711-pkey_sm2_decrypt" @@ -2632,6 +3004,9 @@ evidence = "Correctly calculate the length of SM2 plaintext given the ciphertext commit_url = "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2021-3449-ssl_generate_master_secr" @@ -2653,6 +3028,9 @@ evidence = "Ensure buffer/length pairs are always in sync" commit_url = "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos" @@ -2674,6 +3052,9 @@ evidence = "Ensure buffer/length pairs are always in sync" commit_url = "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2021-3449-init_sig_algs_cert" @@ -2695,6 +3076,9 @@ evidence = "Ensure buffer/length pairs are always in sync" commit_url = "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2021-3449-tls_construct_ctos_early" @@ -2716,6 +3100,9 @@ evidence = "Ensure buffer/length pairs are always in sync" commit_url = "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2021-3449-tls_process_certificate_" @@ -2737,6 +3124,9 @@ evidence = "Ensure buffer/length pairs are always in sync" commit_url = "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2021-3449-tls_handle_alpn" @@ -2758,6 +3148,9 @@ evidence = "Ensure buffer/length pairs are always in sync" commit_url = "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2021-3449-init_sig_algs" @@ -2779,6 +3172,9 @@ evidence = "ssl sigalg extension: fix NULL pointer dereference" commit_url = "https://github.com/openssl/openssl/commit/02b1636fe3db274497304a3e95a4e32ced7e841b" origin = "openssl" project = "openssl" +mechanism = "null_deref_unguarded" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2021-3450" @@ -2800,6 +3196,9 @@ evidence = "check_chain_extensions: Do not override error return value by check_ commit_url = "https://github.com/openssl/openssl/commit/2a40b7bc7b94dd7de897a74571e7024f0cf0d63b" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2021-23840-evp_encryptdecryptupdate" @@ -2821,6 +3220,9 @@ evidence = "Don't overflow the output length in EVP_CipherUpdate calls" commit_url = "https://github.com/openssl/openssl/commit/6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1" origin = "openssl" project = "openssl" +mechanism = "unchecked_length_copy" +provenance = "human" +split = "holdout" [[recipe]] name = "openssl-cve-2021-23841" @@ -2842,6 +3244,9 @@ evidence = "Fix Null pointer deref in X509_issuer_and_serial_hash()" commit_url = "https://github.com/openssl/openssl/commit/122a19ab48091c657f7cb1fb3af9fc07bd557bbf" origin = "openssl" project = "openssl" +mechanism = "null_deref_unguarded" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2020-1971-general_name_cmp" @@ -2863,6 +3268,9 @@ evidence = "Correctly compare EdiPartyName in GENERAL_NAME_cmp()" commit_url = "https://github.com/openssl/openssl/commit/f960d81215ebf3f65e03d4d5d857fb9b666d6920" origin = "openssl" project = "openssl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "openssl-cve-2020-1967-tls1_check_sig_alg" @@ -2884,6 +3292,9 @@ evidence = "Fix NULL dereference in SSL_check_chain() for TLS 1.3" commit_url = "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4" origin = "openssl" project = "openssl" +mechanism = "null_deref_unguarded" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2026-9080" @@ -2905,6 +3316,9 @@ evidence = "multi_ev: refresh sock entry after remove callback" commit_url = "https://github.com/curl/curl/commit/e9a2b0dc72dd3a9aa3a5210e89079a3b719475dc" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "curl-cve-2023-38545-do_socks5" @@ -2926,6 +3340,9 @@ evidence = "socks: return error if hostname too long for remote resolve" commit_url = "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2022-32207" @@ -2947,6 +3364,9 @@ evidence = "fopen: add Curl_fopen() for better overwriting of files" commit_url = "https://github.com/curl/curl/commit/20f9dd6bae50b7223171b17ba7798946e74f877f" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "curl-cve-2022-32206" @@ -2968,6 +3388,9 @@ evidence = "content_encoding: return error on too many compression steps" commit_url = "https://github.com/curl/curl/commit/3a09fbb7f264c67c438d01a30669ce325aa508e2" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2022-32208" @@ -2989,6 +3412,9 @@ evidence = "krb5: return error properly on decode errors" commit_url = "https://github.com/curl/curl/commit/6ecdf5136b52af747e7bda08db9a748256b1cd09" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2022-27782-curl_init_userdefined" @@ -3010,6 +3436,9 @@ evidence = "tls: check more TLS details for connection reuse" commit_url = "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "curl-cve-2022-27782-gtls_shutdown" @@ -3031,6 +3460,9 @@ evidence = "tls: check more TLS details for connection reuse" commit_url = "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2022-27782-nss_setup_connect" @@ -3052,6 +3484,9 @@ evidence = "tls: check more TLS details for connection reuse" commit_url = "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "curl-cve-2022-27782-ossl_connect_step1" @@ -3073,6 +3508,9 @@ evidence = "tls: check more TLS details for connection reuse" commit_url = "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2022-27782-curl_free_primary_ssl_co" @@ -3094,6 +3532,9 @@ evidence = "tls: check more TLS details for connection reuse" commit_url = "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2022-27778" @@ -3115,6 +3556,9 @@ evidence = "post_per_transfer: remove the updated file name" commit_url = "https://github.com/curl/curl/commit/8c7ee9083d0d719d0a77ab20d9cc2ae84eeea7f3" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2022-30115" @@ -3136,6 +3580,9 @@ evidence = "hsts: ignore trailing dots when comparing hosts names" commit_url = "https://github.com/curl/curl/commit/fae6fea209a2d4db1582f608bd8cc8000721733a" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "curl-cve-2022-27780" @@ -3157,6 +3604,9 @@ evidence = "urlapi: reject percent-decoding host name into separator bytes" commit_url = "https://github.com/curl/curl/commit/914aaab9153764ef8fa4178215b8ad89d3ac263a" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "curl-cve-2022-27774" @@ -3178,6 +3628,9 @@ evidence = "transfer: redirects to other protocols or ports clear auth" commit_url = "https://github.com/curl/curl/commit/620ea21410030a9977396b4661806bc187231b79" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "curl-cve-2022-27776" @@ -3199,6 +3652,9 @@ evidence = "http: avoid auth/cookie on redirects same host diff port" commit_url = "https://github.com/curl/curl/commit/6e659993952aa5f90f48864be84a1bbb047fc258" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "curl-cve-2022-27775" @@ -3220,6 +3676,9 @@ evidence = "conncache: include the zone id in the \"bundle\" hashkey" commit_url = "https://github.com/curl/curl/commit/058f98dc3fe595f21dc26a5b9b1699e519ba5705" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2022-22576-conn_free" @@ -3241,6 +3700,9 @@ evidence = "url: check sasl additional parameters for connection reuse." commit_url = "https://github.com/curl/curl/commit/852aa5ad351ea53e5f01d2f44b5b4370c2bf5425" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2021-22947" @@ -3262,6 +3724,9 @@ evidence = "ftp,imap,pop3,smtp: reject STARTTLS server response pipelining" commit_url = "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2021-22947-imap_state_starttls_resp" @@ -3283,6 +3748,9 @@ evidence = "ftp,imap,pop3,smtp: reject STARTTLS server response pipelining" commit_url = "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "curl-cve-2021-22947-pop3_state_starttls_resp" @@ -3304,6 +3772,9 @@ evidence = "ftp,imap,pop3,smtp: reject STARTTLS server response pipelining" commit_url = "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2021-22947-smtp_state_starttls_resp" @@ -3325,6 +3796,9 @@ evidence = "ftp,imap,pop3,smtp: reject STARTTLS server response pipelining" commit_url = "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "curl-cve-2021-22946" @@ -3346,6 +3820,9 @@ evidence = "ftp,imap,pop3: do not ignore --ssl-reqd" commit_url = "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "curl-cve-2021-22946-imap_state_capability_re" @@ -3367,6 +3844,9 @@ evidence = "ftp,imap,pop3: do not ignore --ssl-reqd" commit_url = "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2021-22946-pop3_state_capa_resp" @@ -3388,6 +3868,9 @@ evidence = "ftp,imap,pop3: do not ignore --ssl-reqd" commit_url = "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "curl-cve-2021-22945" @@ -3409,6 +3892,9 @@ evidence = "mqtt: clear the leftovers pointer when sending succeeds" commit_url = "https://github.com/curl/curl/commit/43157490a5054bd24256fe12876931e8abc9df49" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2021-22924" @@ -3430,6 +3916,9 @@ evidence = "vtls: fix connection reuse checks for issuer cert and case sensitivi commit_url = "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2021-22924-nss_do_connect" @@ -3451,6 +3940,9 @@ evidence = "vtls: fix connection reuse checks for issuer cert and case sensitivi commit_url = "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "curl-cve-2021-22924-servercert" @@ -3472,6 +3964,9 @@ evidence = "vtls: fix connection reuse checks for issuer cert and case sensitivi commit_url = "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2021-22925" @@ -3493,6 +3988,9 @@ evidence = "telnet: fix option parser to not send uninitialized contents" commit_url = "https://github.com/curl/curl/commit/894f6ec730597eb243618d33cc84d71add8d6a8a" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "curl-cve-2021-22901-ossl_connect_step1" @@ -3514,6 +4012,9 @@ evidence = "openssl: associate/detach the transfer from connection" commit_url = "https://github.com/curl/curl/commit/7f4a9a9b2a49547eae24d2e19bc5c346e9026479" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "curl-cve-2021-22898" @@ -3535,6 +4036,9 @@ evidence = "telnet: check sscanf() for correct number of matches" commit_url = "https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2021-22890" @@ -3556,6 +4060,9 @@ evidence = "vtls: add 'isproxy' argument to Curl_ssl_get/addsessionid()" commit_url = "https://github.com/curl/curl/commit/b09c8ee15771c614c4bf3ddac893cdb12187c844" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "curl-cve-2021-22876" @@ -3577,6 +4084,9 @@ evidence = "transfer: strip credentials from the auto-referer header field" commit_url = "https://github.com/curl/curl/commit/7214288898f5625a6cc196e22a74232eada7861c" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2020-8286" @@ -3598,6 +4108,9 @@ evidence = "openssl: make the OCSP verification verify the certificate id" commit_url = "https://github.com/curl/curl/commit/d9d01672785b8ac04aab1abb6de95fe3072ae199" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "curl-cve-2020-8284" @@ -3619,6 +4132,9 @@ evidence = "ftp: CURLOPT_FTP_SKIP_PASV_IP by default" commit_url = "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "curl-cve-2020-8284-config_init" @@ -3640,6 +4156,9 @@ evidence = "ftp: CURLOPT_FTP_SKIP_PASV_IP by default" commit_url = "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2020-8231-curl_multi_add_handle" @@ -3661,6 +4180,9 @@ evidence = "Curl_easy: remember last connection by id, not by pointer" commit_url = "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "holdout" [[recipe]] name = "curl-cve-2020-8231-curl_open" @@ -3682,6 +4204,9 @@ evidence = "Curl_easy: remember last connection by id, not by pointer" commit_url = "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "train" [[recipe]] name = "curl-cve-2020-8177" @@ -3703,3 +4228,6 @@ evidence = "tool_getparam: -i is not OK if -J is used" commit_url = "https://github.com/curl/curl/commit/8236aba58542c5f89f1d41ca09d84579efb05e22" origin = "curl" project = "curl" +mechanism = "other" +provenance = "human" +split = "train" diff --git a/benchmarks/pairs/vfc/training/manifest.jsonl b/benchmarks/pairs/vfc/training/manifest.jsonl index 6313772..ce9c519 100644 --- a/benchmarks/pairs/vfc/training/manifest.jsonl +++ b/benchmarks/pairs/vfc/training/manifest.jsonl @@ -1,352 +1,352 @@ -{"class": "buffer over-read", "commit": "0d7717fc9c83dafab8153cbd5e2180e6e04cc802", "commit_url": "https://github.com/openssl/openssl/commit/96db9023b881d7cd9f379b0c154650d6c108e9a3", "cve": "CVE-2014-0160", "cwe": "CWE-126", "file": "openssl-cve-2014-0160/vuln.c", "function": "tls1_process_heartbeat", "id": "openssl-cve-2014-0160:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2014-0160", "project": "openssl", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "year": 2014} -{"class": "buffer over-read", "commit": "96db9023b881d7cd9f379b0c154650d6c108e9a3", "commit_url": "https://github.com/openssl/openssl/commit/96db9023b881d7cd9f379b0c154650d6c108e9a3", "cve": "CVE-2014-0160", "cwe": "CWE-126", "file": "openssl-cve-2014-0160/fixed.c", "function": "tls1_process_heartbeat", "id": "openssl-cve-2014-0160:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2014-0160", "project": "openssl", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "year": 2014} -{"class": "buffer overflow", "commit": "0c0f777161a9499dd149853ff62d356f75d16c2a", "commit_url": "https://hg.mozilla.org/mozilla-central/rev/b79b6cc78248eea7fda10bfb76aa273c19c9fa65", "cve": "CVE-2020-15667", "cwe": "CWE-119", "file": "firefox-cve-2020-15667/vuln.c", "function": "mar_insert_item", "id": "firefox-cve-2020-15667:vuln", "label": "vuln", "license": "MPL-2.0", "pair": "firefox-cve-2020-15667", "project": "firefox", "relpath": "modules/libmar/src/mar_read.c", "repo": "mozilla-central", "year": 2020} -{"class": "buffer overflow", "commit": "b79b6cc78248eea7fda10bfb76aa273c19c9fa65", "commit_url": "https://hg.mozilla.org/mozilla-central/rev/b79b6cc78248eea7fda10bfb76aa273c19c9fa65", "cve": "CVE-2020-15667", "cwe": "CWE-119", "file": "firefox-cve-2020-15667/fixed.c", "function": "mar_insert_item", "id": "firefox-cve-2020-15667:fixed", "label": "fixed", "license": "MPL-2.0", "pair": "firefox-cve-2020-15667", "project": "firefox", "relpath": "modules/libmar/src/mar_read.c", "repo": "mozilla-central", "year": 2020} -{"class": "use after free", "commit": "9f3fccdba567f30ea39b08f57d8d5b49cd832b4a", "commit_url": "https://github.com/chromium/chromium/commit/ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449", "cve": "CVE-2019-5786", "cwe": "CWE-416", "file": "chromium-cve-2019-5786/vuln.cc", "function": "ArrayBufferResult", "id": "chromium-cve-2019-5786:vuln", "label": "vuln", "license": "BSD-3-Clause", "pair": "chromium-cve-2019-5786", "project": "chromium", "relpath": "third_party/blink/renderer/core/fileapi/file_reader_loader.cc", "repo": "chromium/chromium", "year": 2019} -{"class": "use after free", "commit": "ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449", "commit_url": "https://github.com/chromium/chromium/commit/ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449", "cve": "CVE-2019-5786", "cwe": "CWE-416", "file": "chromium-cve-2019-5786/fixed.cc", "function": "ArrayBufferResult", "id": "chromium-cve-2019-5786:fixed", "label": "fixed", "license": "BSD-3-Clause", "pair": "chromium-cve-2019-5786", "project": "chromium", "relpath": "third_party/blink/renderer/core/fileapi/file_reader_loader.cc", "repo": "chromium/chromium", "year": 2019} -{"class": "null pointer dereference", "commit": "3656c08ab4b1b892730cb5e808b6f4298b08a2e6", "commit_url": "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4", "cve": "CVE-2020-1967", "cwe": "CWE-476", "file": "openssl-cve-2020-1967/vuln.c", "function": "tls1_check_sig_alg", "id": "openssl-cve-2020-1967:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2020-1967", "project": "openssl", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "year": 2020} -{"class": "null pointer dereference", "commit": "a87f3fe01a5a894aa27ccd6a239155fd129988e4", "commit_url": "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4", "cve": "CVE-2020-1967", "cwe": "CWE-476", "file": "openssl-cve-2020-1967/fixed.c", "function": "tls1_check_sig_alg", "id": "openssl-cve-2020-1967:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2020-1967", "project": "openssl", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "year": 2020} -{"class": "null pointer dereference", "commit": "198b11683568452282bd48828fcf60d4835bf327", "commit_url": "https://github.com/openssl/openssl/commit/b33c48b75aaf33c93aeda42d7138616b9e6a64cb", "cve": "CVE-2020-1971", "cwe": "CWE-476", "file": "openssl-cve-2020-1971/vuln.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2020-1971:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2020-1971", "project": "openssl", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "year": 2020} -{"class": "null pointer dereference", "commit": "b33c48b75aaf33c93aeda42d7138616b9e6a64cb", "commit_url": "https://github.com/openssl/openssl/commit/b33c48b75aaf33c93aeda42d7138616b9e6a64cb", "cve": "CVE-2020-1971", "cwe": "CWE-476", "file": "openssl-cve-2020-1971/fixed.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2020-1971:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2020-1971", "project": "openssl", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "year": 2020} -{"class": "integer overflow", "commit": "c1ddd392cf9737c09c1f9bf690adfbe596403c5e", "commit_url": "https://github.com/openssl/openssl/commit/c9fb704cf3af5524eb8e79961e31b60eee8c3c47", "cve": "CVE-2021-23840", "cwe": "CWE-190", "file": "openssl-cve-2021-23840/vuln.c", "function": "evp_EncryptDecryptUpdate", "id": "openssl-cve-2021-23840:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-23840", "project": "openssl", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "year": 2021} -{"class": "integer overflow", "commit": "c9fb704cf3af5524eb8e79961e31b60eee8c3c47", "commit_url": "https://github.com/openssl/openssl/commit/c9fb704cf3af5524eb8e79961e31b60eee8c3c47", "cve": "CVE-2021-23840", "cwe": "CWE-190", "file": "openssl-cve-2021-23840/fixed.c", "function": "evp_EncryptDecryptUpdate", "id": "openssl-cve-2021-23840:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-23840", "project": "openssl", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "year": 2021} -{"class": "buffer overflow", "commit": "8c74c9d1ade0fbdab5b815ddb747351b8b839641", "commit_url": "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "cve": "CVE-2021-3711", "cwe": "CWE-120", "file": "openssl-cve-2021-3711/vuln.c", "function": "sm2_plaintext_size", "id": "openssl-cve-2021-3711:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3711", "project": "openssl", "relpath": "crypto/sm2/sm2_crypt.c", "repo": "openssl/openssl", "year": 2021} -{"class": "buffer overflow", "commit": "59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "commit_url": "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "cve": "CVE-2021-3711", "cwe": "CWE-120", "file": "openssl-cve-2021-3711/fixed.c", "function": "sm2_plaintext_size", "id": "openssl-cve-2021-3711:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3711", "project": "openssl", "relpath": "crypto/sm2/sm2_crypt.c", "repo": "openssl/openssl", "year": 2021} -{"class": "buffer over-read", "commit": "1f365708a3318a5f1a395f90c38b584a58d37fb9", "commit_url": "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9", "cve": "CVE-2021-3712", "cwe": "CWE-125", "file": "openssl-cve-2021-3712/vuln.c", "function": "append_ia5", "id": "openssl-cve-2021-3712:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3712", "project": "openssl", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "year": 2021} -{"class": "buffer over-read", "commit": "98624776c4d501c8badd6f772ab7048ac9191cb9", "commit_url": "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9", "cve": "CVE-2021-3712", "cwe": "CWE-125", "file": "openssl-cve-2021-3712/fixed.c", "function": "append_ia5", "id": "openssl-cve-2021-3712:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3712", "project": "openssl", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "year": 2021} -{"class": "infinite loop", "commit": "1832bb0f02e519a48f06a10467c7ce5f7f3feeeb", "commit_url": "https://github.com/openssl/openssl/commit/9eafb53614bf65797db25f467946e735e1b43dc9", "cve": "CVE-2022-0778", "cwe": "CWE-835", "file": "openssl-cve-2022-0778/vuln.c", "function": "BN_mod_sqrt", "id": "openssl-cve-2022-0778:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2022-0778", "project": "openssl", "relpath": "crypto/bn/bn_sqrt.c", "repo": "openssl/openssl", "year": 2022} -{"class": "infinite loop", "commit": "9eafb53614bf65797db25f467946e735e1b43dc9", "commit_url": "https://github.com/openssl/openssl/commit/9eafb53614bf65797db25f467946e735e1b43dc9", "cve": "CVE-2022-0778", "cwe": "CWE-835", "file": "openssl-cve-2022-0778/fixed.c", "function": "BN_mod_sqrt", "id": "openssl-cve-2022-0778:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2022-0778", "project": "openssl", "relpath": "crypto/bn/bn_sqrt.c", "repo": "openssl/openssl", "year": 2022} -{"class": "command injection", "commit": "7d56a74a96828985db7354a55227a511615f732b", "commit_url": "https://github.com/openssl/openssl/commit/1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2", "cve": "CVE-2022-1292", "cwe": "CWE-78", "file": "openssl-cve-2022-1292/vuln.in", "function": "link_hash_cert", "id": "openssl-cve-2022-1292:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2022-1292", "project": "openssl", "relpath": "tools/c_rehash.in", "repo": "openssl/openssl", "year": 2022} -{"class": "command injection", "commit": "1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2", "commit_url": "https://github.com/openssl/openssl/commit/1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2", "cve": "CVE-2022-1292", "cwe": "CWE-78", "file": "openssl-cve-2022-1292/fixed.in", "function": "link_hash_cert", "id": "openssl-cve-2022-1292:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2022-1292", "project": "openssl", "relpath": "tools/c_rehash.in", "repo": "openssl/openssl", "year": 2022} -{"class": "buffer overflow", "commit": "89d72311327735ef15c804d2adea84a0fb1bfa0a", "commit_url": "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332", "cve": "CVE-2022-3602", "cwe": "CWE-787", "file": "openssl-cve-2022-3602/vuln.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3602:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2022-3602", "project": "openssl", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "year": 2022} -{"class": "buffer overflow", "commit": "3b421ebc64c7b52f1b9feb3812bdc7781c784332", "commit_url": "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332", "cve": "CVE-2022-3602", "cwe": "CWE-787", "file": "openssl-cve-2022-3602/fixed.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3602:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2022-3602", "project": "openssl", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "year": 2022} -{"class": "buffer overflow", "commit": "3b421ebc64c7b52f1b9feb3812bdc7781c784332", "commit_url": "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "cve": "CVE-2022-3786", "cwe": "CWE-787", "file": "openssl-cve-2022-3786/vuln.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3786:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2022-3786", "project": "openssl", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "year": 2022} -{"class": "buffer overflow", "commit": "680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "commit_url": "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "cve": "CVE-2022-3786", "cwe": "CWE-787", "file": "openssl-cve-2022-3786/fixed.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3786:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2022-3786", "project": "openssl", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "year": 2022} -{"class": "type confusion", "commit": "adf77d6657e836fc87391fad53d857927a764297", "commit_url": "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f", "cve": "CVE-2023-0286", "cwe": "CWE-843", "file": "openssl-cve-2023-0286/vuln.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2023-0286:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2023-0286", "project": "openssl", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "year": 2023} -{"class": "type confusion", "commit": "7880536fe17c2b5450e279155bedd51771d28c9f", "commit_url": "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f", "cve": "CVE-2023-0286", "cwe": "CWE-843", "file": "openssl-cve-2023-0286/fixed.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2023-0286:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2023-0286", "project": "openssl", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "year": 2023} -{"class": "heap buffer overflow", "commit": "09e25b9d94f4106eac8ca3a43b221bdc66f405e4", "commit_url": "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147", "cve": "CVE-2023-38545", "cwe": "CWE-122", "file": "curl-cve-2023-38545/vuln.c", "function": "do_SOCKS5", "id": "curl-cve-2023-38545:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2023-38545", "project": "curl", "relpath": "lib/socks.c", "repo": "curl/curl", "year": 2023} -{"class": "heap buffer overflow", "commit": "fb4415d8aee6c1045be932a34fe6107c2f5ed147", "commit_url": "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147", "cve": "CVE-2023-38545", "cwe": "CWE-122", "file": "curl-cve-2023-38545/fixed.c", "function": "do_SOCKS5", "id": "curl-cve-2023-38545:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2023-38545", "project": "curl", "relpath": "lib/socks.c", "repo": "curl/curl", "year": 2023} -{"class": "insufficient input validation", "commit": "a07d0ae0a7dc68686adca10dcf11138cb2f4ab6d", "commit_url": "https://github.com/chromium/chromium/commit/22c61cfae5d1b37c773e638d342488ae11118b51", "cve": "CVE-2022-2162", "cwe": "CWE-20", "file": "chromium-cve-2022-2162/vuln.cc", "function": "IsShellIntegratedExtension", "id": "chromium-cve-2022-2162:vuln", "label": "vuln", "license": "BSD-3-Clause", "pair": "chromium-cve-2022-2162", "project": "chromium", "relpath": "content/browser/file_system_access/file_system_chooser.cc", "repo": "chromium/chromium", "year": 2022} -{"class": "insufficient input validation", "commit": "22c61cfae5d1b37c773e638d342488ae11118b51", "commit_url": "https://github.com/chromium/chromium/commit/22c61cfae5d1b37c773e638d342488ae11118b51", "cve": "CVE-2022-2162", "cwe": "CWE-20", "file": "chromium-cve-2022-2162/fixed.cc", "function": "IsShellIntegratedExtension", "id": "chromium-cve-2022-2162:fixed", "label": "fixed", "license": "BSD-3-Clause", "pair": "chromium-cve-2022-2162", "project": "chromium", "relpath": "content/browser/file_system_access/file_system_chooser.cc", "repo": "chromium/chromium", "year": 2022} -{"class": "null pointer dereference", "commit": "ea8fc4c345fbd749048809c9f7c881ea656b0b94", "commit_url": "https://github.com/openssl/openssl/commit/2c13bf15286328641a805eb3b7c97e27d42881fb", "cve": "CVE-2025-69421", "cwe": "CWE-476", "file": "openssl-cve-2025-69421/vuln.c", "function": "PKCS12_item_decrypt_d2i_ex", "id": "openssl-cve-2025-69421:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2025-69421", "project": "openssl", "relpath": "crypto/pkcs12/p12_decr.c", "repo": "openssl/openssl", "year": 2025} -{"class": "null pointer dereference", "commit": "2c13bf15286328641a805eb3b7c97e27d42881fb", "commit_url": "https://github.com/openssl/openssl/commit/2c13bf15286328641a805eb3b7c97e27d42881fb", "cve": "CVE-2025-69421", "cwe": "CWE-476", "file": "openssl-cve-2025-69421/fixed.c", "function": "PKCS12_item_decrypt_d2i_ex", "id": "openssl-cve-2025-69421:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2025-69421", "project": "openssl", "relpath": "crypto/pkcs12/p12_decr.c", "repo": "openssl/openssl", "year": 2025} -{"class": "uncontrolled allocation", "commit": "b21663c35a6f0ed4c8de06855bdc7a6a21f00c2f", "commit_url": "https://github.com/openssl/openssl/commit/84f73f79af9f69c1527a9a372b7a9e771a394c2a", "cve": "CVE-2025-66199", "cwe": "CWE-770", "file": "openssl-cve-2025-66199/vuln.c", "function": "tls13_process_compressed_certificate", "id": "openssl-cve-2025-66199:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2025-66199", "project": "openssl", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "year": 2025} -{"class": "uncontrolled allocation", "commit": "84f73f79af9f69c1527a9a372b7a9e771a394c2a", "commit_url": "https://github.com/openssl/openssl/commit/84f73f79af9f69c1527a9a372b7a9e771a394c2a", "cve": "CVE-2025-66199", "cwe": "CWE-770", "file": "openssl-cve-2025-66199/fixed.c", "function": "tls13_process_compressed_certificate", "id": "openssl-cve-2025-66199:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2025-66199", "project": "openssl", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "year": 2025} -{"class": "uncontrolled allocation", "commit": "eed0931f85474d0db6e2326dfd9718c6bf1cd418", "commit_url": "https://github.com/mozilla-firefox/firefox/commit/e46f28da1cd3a5d46a2680b3d87361e9e8de4ae6", "cve": "BUG-2058173", "cwe": "CWE-770", "file": "firefox-bug-2058173/vuln.c", "function": "mar_read_index", "id": "firefox-bug-2058173:vuln", "label": "vuln", "license": "MPL-2.0", "pair": "firefox-bug-2058173", "project": "firefox", "relpath": "modules/libmar/src/mar_read.c", "repo": "mozilla-firefox/firefox", "year": 2026} -{"class": "uncontrolled allocation", "commit": "e46f28da1cd3a5d46a2680b3d87361e9e8de4ae6", "commit_url": "https://github.com/mozilla-firefox/firefox/commit/e46f28da1cd3a5d46a2680b3d87361e9e8de4ae6", "cve": "BUG-2058173", "cwe": "CWE-770", "file": "firefox-bug-2058173/fixed.c", "function": "mar_read_index", "id": "firefox-bug-2058173:fixed", "label": "fixed", "license": "MPL-2.0", "pair": "firefox-bug-2058173", "project": "firefox", "relpath": "modules/libmar/src/mar_read.c", "repo": "mozilla-firefox/firefox", "year": 2026} -{"class": "security fix", "commit": "48f5785425ee6b5316f8e5f921978397ba632cc6", "commit_url": "https://github.com/openssl/openssl/commit/70cebd74d3592f5272945501b58a60374c4e13af", "cve": "CVE-2026-18798", "cwe": "CWE-119", "file": "openssl-cve-2026-18798/vuln.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-18798:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-18798", "project": "openssl", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "70cebd74d3592f5272945501b58a60374c4e13af", "commit_url": "https://github.com/openssl/openssl/commit/70cebd74d3592f5272945501b58a60374c4e13af", "cve": "CVE-2026-18798", "cwe": "CWE-119", "file": "openssl-cve-2026-18798/fixed.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-18798:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-18798", "project": "openssl", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "a0c8ec557d9cac078f032d76cdf684fe743eb382", "commit_url": "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874/vuln.c", "function": "DTLS_RECORD_LAYER_clear", "id": "openssl-cve-2026-54874:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-54874", "project": "openssl", "relpath": "ssl/record/rec_layer_d1.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "commit_url": "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874/fixed.c", "function": "DTLS_RECORD_LAYER_clear", "id": "openssl-cve-2026-54874:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-54874", "project": "openssl", "relpath": "ssl/record/rec_layer_d1.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "a0c8ec557d9cac078f032d76cdf684fe743eb382", "commit_url": "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874-dtls1_process_record/vuln.c", "function": "dtls1_process_record", "id": "openssl-cve-2026-54874-dtls1_process_record:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-54874-dtls1_process_record", "project": "openssl", "relpath": "ssl/record/ssl3_record.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "commit_url": "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874-dtls1_process_record/fixed.c", "function": "dtls1_process_record", "id": "openssl-cve-2026-54874-dtls1_process_record:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-54874-dtls1_process_record", "project": "openssl", "relpath": "ssl/record/ssl3_record.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "9ec2f6d2ae2bcad907cf7ee38584855bafe4979a", "commit_url": "https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor/vuln.c", "function": "dtls_rlayer_buffer_record", "id": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor", "project": "openssl", "relpath": "ssl/record/methods/dtls_meth.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "7110cb2f75806d0bf809eb2f90790d477900be40", "commit_url": "https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor/fixed.c", "function": "dtls_rlayer_buffer_record", "id": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor", "project": "openssl", "relpath": "ssl/record/methods/dtls_meth.c", "repo": "openssl/openssl", "year": 2026} -{"class": "buffer overflow", "commit": "d307f61f1b341b6eb7d5d07bd6902a939c709bc6", "commit_url": "https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382", "cve": "CVE-2026-63072", "cwe": "CWE-119", "file": "openssl-cve-2026-63072/vuln.c", "function": "cms_kek_cipher", "id": "openssl-cve-2026-63072:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-63072", "project": "openssl", "relpath": "crypto/cms/cms_kari.c", "repo": "openssl/openssl", "year": 2026} -{"class": "buffer overflow", "commit": "a0c8ec557d9cac078f032d76cdf684fe743eb382", "commit_url": "https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382", "cve": "CVE-2026-63072", "cwe": "CWE-119", "file": "openssl-cve-2026-63072/fixed.c", "function": "cms_kek_cipher", "id": "openssl-cve-2026-63072:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-63072", "project": "openssl", "relpath": "crypto/cms/cms_kari.c", "repo": "openssl/openssl", "year": 2026} -{"class": "buffer overflow", "commit": "1951c3cbd9d5101e027a1eb126f26c3c758f6cc0", "commit_url": "https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756", "cve": "CVE-2026-63072", "cwe": "CWE-119", "file": "openssl-cve-2026-63072-cms_kek_cipher/vuln.c", "function": "cms_kek_cipher", "id": "openssl-cve-2026-63072-cms_kek_cipher:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-63072-cms_kek_cipher", "project": "openssl", "relpath": "crypto/cms/cms_kemri.c", "repo": "openssl/openssl", "year": 2026} -{"class": "buffer overflow", "commit": "2a3dac874c8057c1f0186849bf1ede1ae7b6b756", "commit_url": "https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756", "cve": "CVE-2026-63072", "cwe": "CWE-119", "file": "openssl-cve-2026-63072-cms_kek_cipher/fixed.c", "function": "cms_kek_cipher", "id": "openssl-cve-2026-63072-cms_kek_cipher:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-63072-cms_kek_cipher", "project": "openssl", "relpath": "crypto/cms/cms_kemri.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "1e8c398db67404babd3e5af999bb6bd86f720c76", "commit_url": "https://github.com/openssl/openssl/commit/a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4", "cve": "CVE-2026-63073", "cwe": "CWE-119", "file": "openssl-cve-2026-63073/vuln.c", "function": "ossl_cmp_msg_check_update", "id": "openssl-cve-2026-63073:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-63073", "project": "openssl", "relpath": "crypto/cmp/cmp_vfy.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4", "commit_url": "https://github.com/openssl/openssl/commit/a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4", "cve": "CVE-2026-63073", "cwe": "CWE-119", "file": "openssl-cve-2026-63073/fixed.c", "function": "ossl_cmp_msg_check_update", "id": "openssl-cve-2026-63073:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-63073", "project": "openssl", "relpath": "crypto/cmp/cmp_vfy.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "f636f9ca0fa1bae5b42f9e787f025c96fb09c43a", "commit_url": "https://github.com/openssl/openssl/commit/1e8c398db67404babd3e5af999bb6bd86f720c76", "cve": "CVE-2026-14457", "cwe": "CWE-119", "file": "openssl-cve-2026-14457/vuln.c", "function": "check_cert_usable", "id": "openssl-cve-2026-14457:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-14457", "project": "openssl", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "1e8c398db67404babd3e5af999bb6bd86f720c76", "commit_url": "https://github.com/openssl/openssl/commit/1e8c398db67404babd3e5af999bb6bd86f720c76", "cve": "CVE-2026-14457", "cwe": "CWE-119", "file": "openssl-cve-2026-14457/fixed.c", "function": "check_cert_usable", "id": "openssl-cve-2026-14457:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-14457", "project": "openssl", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "9f2b8522d39ff869fac2ff7c3f20609b54843188", "commit_url": "https://github.com/openssl/openssl/commit/21a5d9658b0c66daace60e10ea18ff32a448de9f", "cve": "CVE-2026-63074", "cwe": "CWE-119", "file": "openssl-cve-2026-63074/vuln.c", "function": "ossl_cmp_msg_check_update", "id": "openssl-cve-2026-63074:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-63074", "project": "openssl", "relpath": "crypto/cmp/cmp_vfy.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "21a5d9658b0c66daace60e10ea18ff32a448de9f", "commit_url": "https://github.com/openssl/openssl/commit/21a5d9658b0c66daace60e10ea18ff32a448de9f", "cve": "CVE-2026-63074", "cwe": "CWE-119", "file": "openssl-cve-2026-63074/fixed.c", "function": "ossl_cmp_msg_check_update", "id": "openssl-cve-2026-63074:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-63074", "project": "openssl", "relpath": "crypto/cmp/cmp_vfy.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "a1f348ccb328c3afbd4ba6883f9b7c813c043259", "commit_url": "https://github.com/openssl/openssl/commit/c902e5f16d6a9e130e96d3ca6d8f64d71652e393", "cve": "CVE-2026-63075", "cwe": "CWE-119", "file": "openssl-cve-2026-63075-txp_pkt_commit/vuln.c", "function": "txp_pkt_commit", "id": "openssl-cve-2026-63075-txp_pkt_commit:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-63075-txp_pkt_commit", "project": "openssl", "relpath": "ssl/quic/quic_txp.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "c902e5f16d6a9e130e96d3ca6d8f64d71652e393", "commit_url": "https://github.com/openssl/openssl/commit/c902e5f16d6a9e130e96d3ca6d8f64d71652e393", "cve": "CVE-2026-63075", "cwe": "CWE-119", "file": "openssl-cve-2026-63075-txp_pkt_commit/fixed.c", "function": "txp_pkt_commit", "id": "openssl-cve-2026-63075-txp_pkt_commit:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-63075-txp_pkt_commit", "project": "openssl", "relpath": "ssl/quic/quic_txp.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "39488cb863074d5b8ece833905f7ad2b357d44fe", "commit_url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803/vuln.c", "function": "aes_ocb_cipher", "id": "openssl-cve-2026-75803:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-75803", "project": "openssl", "relpath": "providers/implementations/ciphers/cipher_aes_ocb.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "119ab9555dc62275bbd71f6f49529b1a44feba42", "commit_url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803/fixed.c", "function": "aes_ocb_cipher", "id": "openssl-cve-2026-75803:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-75803", "project": "openssl", "relpath": "providers/implementations/ciphers/cipher_aes_ocb.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "39488cb863074d5b8ece833905f7ad2b357d44fe", "commit_url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803-chacha20_poly1305_cipher/vuln.c", "function": "chacha20_poly1305_cipher", "id": "openssl-cve-2026-75803-chacha20_poly1305_cipher:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-75803-chacha20_poly1305_cipher", "project": "openssl", "relpath": "providers/implementations/ciphers/cipher_chacha20_poly1305.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "119ab9555dc62275bbd71f6f49529b1a44feba42", "commit_url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803-chacha20_poly1305_cipher/fixed.c", "function": "chacha20_poly1305_cipher", "id": "openssl-cve-2026-75803-chacha20_poly1305_cipher:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-75803-chacha20_poly1305_cipher", "project": "openssl", "relpath": "providers/implementations/ciphers/cipher_chacha20_poly1305.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "de7d1871087fc1fa3e2c1db4b11275b68d72f416", "commit_url": "https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803-aes_gcm_siv_finish/vuln.c", "function": "aes_gcm_siv_finish", "id": "openssl-cve-2026-75803-aes_gcm_siv_finish:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-75803-aes_gcm_siv_finish", "project": "openssl", "relpath": "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "bf95f5f772e9362f87b25cfa2f8cb15d984865b9", "commit_url": "https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803-aes_gcm_siv_finish/fixed.c", "function": "aes_gcm_siv_finish", "id": "openssl-cve-2026-75803-aes_gcm_siv_finish:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-75803-aes_gcm_siv_finish", "project": "openssl", "relpath": "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "2dacccc943b47b8dc1ce8f7109c9852391b5a0d8", "commit_url": "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9", "cve": "CVE-2026-14456", "cwe": "CWE-119", "file": "openssl-cve-2026-14456-port_default_packet_hand/vuln.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-14456-port_default_packet_hand:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-14456-port_default_packet_hand", "project": "openssl", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "08e7756c3900bcfd77a720e7b74e27d6e4ed01a9", "commit_url": "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9", "cve": "CVE-2026-14456", "cwe": "CWE-119", "file": "openssl-cve-2026-14456-port_default_packet_hand/fixed.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-14456-port_default_packet_hand:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-14456-port_default_packet_hand", "project": "openssl", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "2c9a078b6030444ed868a3943991f42b35cd49dc", "commit_url": "https://github.com/openssl/openssl/commit/9416706d408bb84deb7cee4647bff3045d2dc7ba", "cve": "CVE-2026-14456", "cwe": "CWE-119", "file": "openssl-cve-2026-14456-expect_quic_for_value/vuln.c", "function": "expect_quic_for_value", "id": "openssl-cve-2026-14456-expect_quic_for_value:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-14456-expect_quic_for_value", "project": "openssl", "relpath": "ssl/quic/quic_impl.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "9416706d408bb84deb7cee4647bff3045d2dc7ba", "commit_url": "https://github.com/openssl/openssl/commit/9416706d408bb84deb7cee4647bff3045d2dc7ba", "cve": "CVE-2026-14456", "cwe": "CWE-119", "file": "openssl-cve-2026-14456-expect_quic_for_value/fixed.c", "function": "expect_quic_for_value", "id": "openssl-cve-2026-14456-expect_quic_for_value:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-14456-expect_quic_for_value", "project": "openssl", "relpath": "ssl/quic/quic_impl.c", "repo": "openssl/openssl", "year": 2026} -{"class": "use after free", "commit": "609bcb24866d64f1fc49d38b852edbb39057d721", "commit_url": "https://github.com/openssl/openssl/commit/f4129fbe3cde786d363510069fe297234f99be8f", "cve": "CVE-2026-45447", "cwe": "CWE-416", "file": "openssl-cve-2026-45447/vuln.c", "function": "PKCS7_verify", "id": "openssl-cve-2026-45447:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-45447", "project": "openssl", "relpath": "crypto/pkcs7/pk7_smime.c", "repo": "openssl/openssl", "year": 2026} -{"class": "use after free", "commit": "f4129fbe3cde786d363510069fe297234f99be8f", "commit_url": "https://github.com/openssl/openssl/commit/f4129fbe3cde786d363510069fe297234f99be8f", "cve": "CVE-2026-45447", "cwe": "CWE-416", "file": "openssl-cve-2026-45447/fixed.c", "function": "PKCS7_verify", "id": "openssl-cve-2026-45447:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-45447", "project": "openssl", "relpath": "crypto/pkcs7/pk7_smime.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "f87f0b6a8e04bcdeb98afc82b0da06a2d537f399", "commit_url": "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721", "cve": "CVE-2026-45446", "cwe": "CWE-119", "file": "openssl-cve-2026-45446/vuln.c", "function": "aes_gcm_siv_initkey", "id": "openssl-cve-2026-45446:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-45446", "project": "openssl", "relpath": "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "609bcb24866d64f1fc49d38b852edbb39057d721", "commit_url": "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721", "cve": "CVE-2026-45446", "cwe": "CWE-119", "file": "openssl-cve-2026-45446/fixed.c", "function": "aes_gcm_siv_initkey", "id": "openssl-cve-2026-45446:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-45446", "project": "openssl", "relpath": "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "f87f0b6a8e04bcdeb98afc82b0da06a2d537f399", "commit_url": "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721", "cve": "CVE-2026-45446", "cwe": "CWE-119", "file": "openssl-cve-2026-45446-aes_siv_set_ctx_params/vuln.c", "function": "aes_siv_set_ctx_params", "id": "openssl-cve-2026-45446-aes_siv_set_ctx_params:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-45446-aes_siv_set_ctx_params", "project": "openssl", "relpath": "providers/implementations/ciphers/cipher_aes_siv.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "609bcb24866d64f1fc49d38b852edbb39057d721", "commit_url": "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721", "cve": "CVE-2026-45446", "cwe": "CWE-119", "file": "openssl-cve-2026-45446-aes_siv_set_ctx_params/fixed.c", "function": "aes_siv_set_ctx_params", "id": "openssl-cve-2026-45446-aes_siv_set_ctx_params:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-45446-aes_siv_set_ctx_params", "project": "openssl", "relpath": "providers/implementations/ciphers/cipher_aes_siv.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "5f489043b662fed32fbf7eb7442c479568eb43fd", "commit_url": "https://github.com/openssl/openssl/commit/f87f0b6a8e04bcdeb98afc82b0da06a2d537f399", "cve": "CVE-2026-45445", "cwe": "CWE-119", "file": "openssl-cve-2026-45445/vuln.c", "function": "aes_ocb_cipher", "id": "openssl-cve-2026-45445:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-45445", "project": "openssl", "relpath": "providers/implementations/ciphers/cipher_aes_ocb.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "f87f0b6a8e04bcdeb98afc82b0da06a2d537f399", "commit_url": "https://github.com/openssl/openssl/commit/f87f0b6a8e04bcdeb98afc82b0da06a2d537f399", "cve": "CVE-2026-45445", "cwe": "CWE-119", "file": "openssl-cve-2026-45445/fixed.c", "function": "aes_ocb_cipher", "id": "openssl-cve-2026-45445:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-45445", "project": "openssl", "relpath": "providers/implementations/ciphers/cipher_aes_ocb.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "0f3fab2eccc7c3417093a8243dd15d95b6cb472d", "commit_url": "https://github.com/openssl/openssl/commit/b3a555a0a7aa0028887149f6f973af89a4937bea", "cve": "CVE-2026-42771", "cwe": "CWE-119", "file": "openssl-cve-2026-42771/vuln.c", "function": "validate_hostname_part", "id": "openssl-cve-2026-42771:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-42771", "project": "openssl", "relpath": "crypto/x509/x509_vpm.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "b3a555a0a7aa0028887149f6f973af89a4937bea", "commit_url": "https://github.com/openssl/openssl/commit/b3a555a0a7aa0028887149f6f973af89a4937bea", "cve": "CVE-2026-42771", "cwe": "CWE-119", "file": "openssl-cve-2026-42771/fixed.c", "function": "validate_hostname_part", "id": "openssl-cve-2026-42771:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-42771", "project": "openssl", "relpath": "crypto/x509/x509_vpm.c", "repo": "openssl/openssl", "year": 2026} -{"class": "null pointer dereference", "commit": "d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "commit_url": "https://github.com/openssl/openssl/commit/c2765d53c2649b56bc1ca1bb799e42002953056a", "cve": "CVE-2026-42769", "cwe": "CWE-476", "file": "openssl-cve-2026-42769/vuln.c", "function": "selfsigned_verify_cb", "id": "openssl-cve-2026-42769:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-42769", "project": "openssl", "relpath": "crypto/cmp/cmp_genm.c", "repo": "openssl/openssl", "year": 2026} -{"class": "null pointer dereference", "commit": "c2765d53c2649b56bc1ca1bb799e42002953056a", "commit_url": "https://github.com/openssl/openssl/commit/c2765d53c2649b56bc1ca1bb799e42002953056a", "cve": "CVE-2026-42769", "cwe": "CWE-476", "file": "openssl-cve-2026-42769/fixed.c", "function": "selfsigned_verify_cb", "id": "openssl-cve-2026-42769:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-42769", "project": "openssl", "relpath": "crypto/cmp/cmp_genm.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "f04d65692dd8109be9f387ce2ddd9fb1ab612b6b", "commit_url": "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "cve": "CVE-2026-42768", "cwe": "CWE-119", "file": "openssl-cve-2026-42768/vuln.c", "function": "cms_RecipientInfo_ktri_decrypt", "id": "openssl-cve-2026-42768:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-42768", "project": "openssl", "relpath": "crypto/cms/cms_env.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "commit_url": "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "cve": "CVE-2026-42768", "cwe": "CWE-119", "file": "openssl-cve-2026-42768/fixed.c", "function": "cms_RecipientInfo_ktri_decrypt", "id": "openssl-cve-2026-42768:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-42768", "project": "openssl", "relpath": "crypto/cms/cms_env.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "f04d65692dd8109be9f387ce2ddd9fb1ab612b6b", "commit_url": "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "cve": "CVE-2026-42768", "cwe": "CWE-119", "file": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo/vuln.c", "function": "pkcs7_decrypt_rinfo", "id": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo", "project": "openssl", "relpath": "crypto/pkcs7/pk7_doit.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "commit_url": "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "cve": "CVE-2026-42768", "cwe": "CWE-119", "file": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo/fixed.c", "function": "pkcs7_decrypt_rinfo", "id": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo", "project": "openssl", "relpath": "crypto/pkcs7/pk7_doit.c", "repo": "openssl/openssl", "year": 2026} -{"class": "null pointer dereference", "commit": "a9af3442290e8a04706a3cd5f284ffd5b486e3f6", "commit_url": "https://github.com/openssl/openssl/commit/74245170b5a64b234ac4af27c86a25ec251c8b2a", "cve": "CVE-2026-42766", "cwe": "CWE-476", "file": "openssl-cve-2026-42766/vuln.c", "function": "ossl_cms_RecipientInfo_pwri_crypt", "id": "openssl-cve-2026-42766:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-42766", "project": "openssl", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "year": 2026} -{"class": "null pointer dereference", "commit": "74245170b5a64b234ac4af27c86a25ec251c8b2a", "commit_url": "https://github.com/openssl/openssl/commit/74245170b5a64b234ac4af27c86a25ec251c8b2a", "cve": "CVE-2026-42766", "cwe": "CWE-476", "file": "openssl-cve-2026-42766/fixed.c", "function": "ossl_cms_RecipientInfo_pwri_crypt", "id": "openssl-cve-2026-42766:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-42766", "project": "openssl", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "year": 2026} -{"class": "null pointer dereference", "commit": "5097ec4dae239112498abb722e255ea60ef7ac48", "commit_url": "https://github.com/openssl/openssl/commit/a9af3442290e8a04706a3cd5f284ffd5b486e3f6", "cve": "CVE-2026-42765", "cwe": "CWE-476", "file": "openssl-cve-2026-42765/vuln.c", "function": "check_revocation", "id": "openssl-cve-2026-42765:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-42765", "project": "openssl", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "year": 2026} -{"class": "null pointer dereference", "commit": "a9af3442290e8a04706a3cd5f284ffd5b486e3f6", "commit_url": "https://github.com/openssl/openssl/commit/a9af3442290e8a04706a3cd5f284ffd5b486e3f6", "cve": "CVE-2026-42765", "cwe": "CWE-476", "file": "openssl-cve-2026-42765/fixed.c", "function": "check_revocation", "id": "openssl-cve-2026-42765:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-42765", "project": "openssl", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "year": 2026} -{"class": "null pointer dereference", "commit": "58633b658fe74095c8cdde191e4ce1bf94f8c5f9", "commit_url": "https://github.com/openssl/openssl/commit/5097ec4dae239112498abb722e255ea60ef7ac48", "cve": "CVE-2026-42764", "cwe": "CWE-476", "file": "openssl-cve-2026-42764/vuln.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-42764:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-42764", "project": "openssl", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "year": 2026} -{"class": "null pointer dereference", "commit": "5097ec4dae239112498abb722e255ea60ef7ac48", "commit_url": "https://github.com/openssl/openssl/commit/5097ec4dae239112498abb722e255ea60ef7ac48", "cve": "CVE-2026-42764", "cwe": "CWE-476", "file": "openssl-cve-2026-42764/fixed.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-42764:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-42764", "project": "openssl", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "68ef88913e321bdb47eee88118ceba18ed2388cd", "commit_url": "https://github.com/openssl/openssl/commit/58633b658fe74095c8cdde191e4ce1bf94f8c5f9", "cve": "CVE-2026-35188", "cwe": "CWE-119", "file": "openssl-cve-2026-35188/vuln.c", "function": "check_cert_ocsp_resp", "id": "openssl-cve-2026-35188:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-35188", "project": "openssl", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "58633b658fe74095c8cdde191e4ce1bf94f8c5f9", "commit_url": "https://github.com/openssl/openssl/commit/58633b658fe74095c8cdde191e4ce1bf94f8c5f9", "cve": "CVE-2026-35188", "cwe": "CWE-119", "file": "openssl-cve-2026-35188/fixed.c", "function": "check_cert_ocsp_resp", "id": "openssl-cve-2026-35188:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-35188", "project": "openssl", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "fcb23806047f5afbe55d5d601a527fc24bf7ca2c", "commit_url": "https://github.com/openssl/openssl/commit/5a0230b6cc95a576b0c2b7b5b2ba7c74232e7b7c", "cve": "CVE-2026-34181", "cwe": "CWE-119", "file": "openssl-cve-2026-34181/vuln.c", "function": "PBMAC1_PBKDF2_HMAC", "id": "openssl-cve-2026-34181:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-34181", "project": "openssl", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "5a0230b6cc95a576b0c2b7b5b2ba7c74232e7b7c", "commit_url": "https://github.com/openssl/openssl/commit/5a0230b6cc95a576b0c2b7b5b2ba7c74232e7b7c", "cve": "CVE-2026-34181", "cwe": "CWE-119", "file": "openssl-cve-2026-34181/fixed.c", "function": "PBMAC1_PBKDF2_HMAC", "id": "openssl-cve-2026-34181:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-34181", "project": "openssl", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "year": 2026} -{"class": "buffer overflow", "commit": "97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9", "commit_url": "https://github.com/openssl/openssl/commit/51d1800e95283a8beec85152e35e3634dab8dd82", "cve": "CVE-2026-9076", "cwe": "CWE-119", "file": "openssl-cve-2026-9076/vuln.c", "function": "kek_unwrap_key", "id": "openssl-cve-2026-9076:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-9076", "project": "openssl", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "year": 2026} -{"class": "buffer overflow", "commit": "51d1800e95283a8beec85152e35e3634dab8dd82", "commit_url": "https://github.com/openssl/openssl/commit/51d1800e95283a8beec85152e35e3634dab8dd82", "cve": "CVE-2026-9076", "cwe": "CWE-119", "file": "openssl-cve-2026-9076/fixed.c", "function": "kek_unwrap_key", "id": "openssl-cve-2026-9076:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-9076", "project": "openssl", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "cb005ceaaf1fb50722e0101762a3e266338c5bf9", "commit_url": "https://github.com/openssl/openssl/commit/97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9", "cve": "CVE-2026-7383", "cwe": "CWE-119", "file": "openssl-cve-2026-7383/vuln.c", "function": "ASN1_mbstring_ncopy", "id": "openssl-cve-2026-7383:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-7383", "project": "openssl", "relpath": "crypto/asn1/a_mbstr.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9", "commit_url": "https://github.com/openssl/openssl/commit/97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9", "cve": "CVE-2026-7383", "cwe": "CWE-119", "file": "openssl-cve-2026-7383/fixed.c", "function": "ASN1_mbstring_ncopy", "id": "openssl-cve-2026-7383:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-7383", "project": "openssl", "relpath": "crypto/asn1/a_mbstr.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "a91e537d16d74050dbde50bb0dfb1fe9930f0521", "commit_url": "https://github.com/openssl/openssl/commit/eed200f58cd8645ed77e46b7e9f764e284df379e", "cve": "CVE-2026-31790", "cwe": "CWE-119", "file": "openssl-cve-2026-31790/vuln.c", "function": "rsasve_generate", "id": "openssl-cve-2026-31790:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-31790", "project": "openssl", "relpath": "providers/implementations/kem/rsa_kem.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "eed200f58cd8645ed77e46b7e9f764e284df379e", "commit_url": "https://github.com/openssl/openssl/commit/eed200f58cd8645ed77e46b7e9f764e284df379e", "cve": "CVE-2026-31790", "cwe": "CWE-119", "file": "openssl-cve-2026-31790/fixed.c", "function": "rsasve_generate", "id": "openssl-cve-2026-31790:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-31790", "project": "openssl", "relpath": "providers/implementations/kem/rsa_kem.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "commit_url": "https://github.com/openssl/openssl/commit/abd8b2eec7e3f3fda60ecfb68498b246b52af482", "cve": "CVE-2026-31790", "cwe": "CWE-119", "file": "openssl-cve-2026-31790-rsasve_generate/vuln.in", "function": "rsasve_generate", "id": "openssl-cve-2026-31790-rsasve_generate:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-31790-rsasve_generate", "project": "openssl", "relpath": "providers/implementations/kem/rsa_kem.c.in", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "abd8b2eec7e3f3fda60ecfb68498b246b52af482", "commit_url": "https://github.com/openssl/openssl/commit/abd8b2eec7e3f3fda60ecfb68498b246b52af482", "cve": "CVE-2026-31790", "cwe": "CWE-119", "file": "openssl-cve-2026-31790-rsasve_generate/fixed.in", "function": "rsasve_generate", "id": "openssl-cve-2026-31790-rsasve_generate:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-31790-rsasve_generate", "project": "openssl", "relpath": "providers/implementations/kem/rsa_kem.c.in", "repo": "openssl/openssl", "year": 2026} -{"class": "buffer overflow", "commit": "b7ae7a093997b5cd549bc21cccd715510fef86c0", "commit_url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "cve": "CVE-2026-31789", "cwe": "CWE-119", "file": "openssl-cve-2026-31789/vuln.c", "function": "buf2hexstr_sep", "id": "openssl-cve-2026-31789:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-31789", "project": "openssl", "relpath": "crypto/o_str.c", "repo": "openssl/openssl", "year": 2026} -{"class": "buffer overflow", "commit": "a91e537d16d74050dbde50bb0dfb1fe9930f0521", "commit_url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "cve": "CVE-2026-31789", "cwe": "CWE-119", "file": "openssl-cve-2026-31789/fixed.c", "function": "buf2hexstr_sep", "id": "openssl-cve-2026-31789:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-31789", "project": "openssl", "relpath": "crypto/o_str.c", "repo": "openssl/openssl", "year": 2026} -{"class": "null pointer dereference", "commit": "d044f9252fe9a54001986fb4eb4e32076a056527", "commit_url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "cve": "CVE-2026-28388", "cwe": "CWE-476", "file": "openssl-cve-2026-28388/vuln.c", "function": "check_delta_base", "id": "openssl-cve-2026-28388:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-28388", "project": "openssl", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "year": 2026} -{"class": "null pointer dereference", "commit": "59c3b3158553ab53275bbbccca5cb305d591cf2e", "commit_url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "cve": "CVE-2026-28388", "cwe": "CWE-476", "file": "openssl-cve-2026-28388/fixed.c", "function": "check_delta_base", "id": "openssl-cve-2026-28388:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-28388", "project": "openssl", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "year": 2026} -{"class": "null pointer dereference", "commit": "6e74b1275cbc1fd1cf7ba32f662602d68501f6ca", "commit_url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389/vuln.c", "function": "rsa_cms_decrypt", "id": "openssl-cve-2026-28389:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-28389", "project": "openssl", "relpath": "crypto/cms/cms_rsa.c", "repo": "openssl/openssl", "year": 2026} -{"class": "null pointer dereference", "commit": "af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "commit_url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389/fixed.c", "function": "rsa_cms_decrypt", "id": "openssl-cve-2026-28389:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-28389", "project": "openssl", "relpath": "crypto/cms/cms_rsa.c", "repo": "openssl/openssl", "year": 2026} -{"class": "null pointer dereference", "commit": "72ec3e38c87f71f5c50ae3b16cc34d8371c71bb9", "commit_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389-dh_cms_set_shared_info/vuln.c", "function": "dh_cms_set_shared_info", "id": "openssl-cve-2026-28389-dh_cms_set_shared_info:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-28389-dh_cms_set_shared_info", "project": "openssl", "relpath": "crypto/cms/cms_dh.c", "repo": "openssl/openssl", "year": 2026} -{"class": "null pointer dereference", "commit": "7b5274e812400cacb6f3be4c2df5340923fa807f", "commit_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389-dh_cms_set_shared_info/fixed.c", "function": "dh_cms_set_shared_info", "id": "openssl-cve-2026-28389-dh_cms_set_shared_info:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-28389-dh_cms_set_shared_info", "project": "openssl", "relpath": "crypto/cms/cms_dh.c", "repo": "openssl/openssl", "year": 2026} -{"class": "null pointer dereference", "commit": "72ec3e38c87f71f5c50ae3b16cc34d8371c71bb9", "commit_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389-ecdh_cms_set_shared_info/vuln.c", "function": "ecdh_cms_set_shared_info", "id": "openssl-cve-2026-28389-ecdh_cms_set_shared_info:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-28389-ecdh_cms_set_shared_info", "project": "openssl", "relpath": "crypto/cms/cms_ec.c", "repo": "openssl/openssl", "year": 2026} -{"class": "null pointer dereference", "commit": "7b5274e812400cacb6f3be4c2df5340923fa807f", "commit_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389-ecdh_cms_set_shared_info/fixed.c", "function": "ecdh_cms_set_shared_info", "id": "openssl-cve-2026-28389-ecdh_cms_set_shared_info:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-28389-ecdh_cms_set_shared_info", "project": "openssl", "relpath": "crypto/cms/cms_ec.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "21d525dc846aed171fc886f3da614a6645948f13", "commit_url": "https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34", "cve": "CVE-2026-2673", "cwe": "CWE-119", "file": "openssl-cve-2026-2673/vuln.c", "function": "gid_cb", "id": "openssl-cve-2026-2673:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2026-2673", "project": "openssl", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "year": 2026} -{"class": "security fix", "commit": "85977e013f32ceb96aa034c0e741adddc1a05e34", "commit_url": "https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34", "cve": "CVE-2026-2673", "cwe": "CWE-119", "file": "openssl-cve-2026-2673/fixed.c", "function": "gid_cb", "id": "openssl-cve-2026-2673:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2026-2673", "project": "openssl", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "year": 2026} -{"class": "buffer overflow", "commit": "7565bb46fa2979511cb27aad1c2bd6b80adf7352", "commit_url": "https://github.com/openssl/openssl/commit/4191043c36f1a50c717a2d0075fc6f3b9bc0afc5", "cve": "CVE-2025-69419", "cwe": "CWE-119", "file": "openssl-cve-2025-69419/vuln.c", "function": "bmp_to_utf8", "id": "openssl-cve-2025-69419:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2025-69419", "project": "openssl", "relpath": "crypto/pkcs12/p12_utl.c", "repo": "openssl/openssl", "year": 2025} -{"class": "buffer overflow", "commit": "4191043c36f1a50c717a2d0075fc6f3b9bc0afc5", "commit_url": "https://github.com/openssl/openssl/commit/4191043c36f1a50c717a2d0075fc6f3b9bc0afc5", "cve": "CVE-2025-69419", "cwe": "CWE-119", "file": "openssl-cve-2025-69419/fixed.c", "function": "bmp_to_utf8", "id": "openssl-cve-2025-69419:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2025-69419", "project": "openssl", "relpath": "crypto/pkcs12/p12_utl.c", "repo": "openssl/openssl", "year": 2025} -{"class": "security fix", "commit": "475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6", "commit_url": "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347", "cve": "CVE-2025-69418", "cwe": "CWE-119", "file": "openssl-cve-2025-69418/vuln.c", "function": "CRYPTO_ocb128_encrypt", "id": "openssl-cve-2025-69418:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2025-69418", "project": "openssl", "relpath": "crypto/modes/ocb128.c", "repo": "openssl/openssl", "year": 2025} -{"class": "security fix", "commit": "52d23c86a54adab5ee9f80e48b242b52c4cc2347", "commit_url": "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347", "cve": "CVE-2025-69418", "cwe": "CWE-119", "file": "openssl-cve-2025-69418/fixed.c", "function": "CRYPTO_ocb128_encrypt", "id": "openssl-cve-2025-69418:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2025-69418", "project": "openssl", "relpath": "crypto/modes/ocb128.c", "repo": "openssl/openssl", "year": 2025} -{"class": "security fix", "commit": "384011202af92605d926fafe4a0bcd6b65d162ad", "commit_url": "https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4", "cve": "CVE-2025-66199", "cwe": "CWE-119", "file": "openssl-cve-2025-66199-tls13_process_compressed/vuln.c", "function": "tls13_process_compressed_certificate", "id": "openssl-cve-2025-66199-tls13_process_compressed:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2025-66199-tls13_process_compressed", "project": "openssl", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "year": 2025} -{"class": "security fix", "commit": "3ed1f75249932b155eef993a8e66a99cb98bfef4", "commit_url": "https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4", "cve": "CVE-2025-66199", "cwe": "CWE-119", "file": "openssl-cve-2025-66199-tls13_process_compressed/fixed.c", "function": "tls13_process_compressed_certificate", "id": "openssl-cve-2025-66199-tls13_process_compressed:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2025-66199-tls13_process_compressed", "project": "openssl", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "year": 2025} -{"class": "buffer overflow", "commit": "e0666f72294691a808443970b654412a6d92fa0f", "commit_url": "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6", "cve": "CVE-2025-68160", "cwe": "CWE-119", "file": "openssl-cve-2025-68160/vuln.c", "function": "linebuffer_write", "id": "openssl-cve-2025-68160:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2025-68160", "project": "openssl", "relpath": "crypto/bio/bf_lbuf.c", "repo": "openssl/openssl", "year": 2025} -{"class": "buffer overflow", "commit": "475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6", "commit_url": "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6", "cve": "CVE-2025-68160", "cwe": "CWE-119", "file": "openssl-cve-2025-68160/fixed.c", "function": "linebuffer_write", "id": "openssl-cve-2025-68160:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2025-68160", "project": "openssl", "relpath": "crypto/bio/bf_lbuf.c", "repo": "openssl/openssl", "year": 2025} -{"class": "security fix", "commit": "1f08e54bad32843044fe8a675948d65e3b4ece65", "commit_url": "https://github.com/openssl/openssl/commit/a7936fa4bd23c906e1955a16a0a0ab39a4953a61", "cve": "CVE-2025-15469", "cwe": "CWE-119", "file": "openssl-cve-2025-15469/vuln.c", "function": "do_fp_oneshot_sign", "id": "openssl-cve-2025-15469:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2025-15469", "project": "openssl", "relpath": "apps/dgst.c", "repo": "openssl/openssl", "year": 2025} -{"class": "security fix", "commit": "a7936fa4bd23c906e1955a16a0a0ab39a4953a61", "commit_url": "https://github.com/openssl/openssl/commit/a7936fa4bd23c906e1955a16a0a0ab39a4953a61", "cve": "CVE-2025-15469", "cwe": "CWE-119", "file": "openssl-cve-2025-15469/fixed.c", "function": "do_fp_oneshot_sign", "id": "openssl-cve-2025-15469:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2025-15469", "project": "openssl", "relpath": "apps/dgst.c", "repo": "openssl/openssl", "year": 2025} -{"class": "security fix", "commit": "3250efdfe99d2d7fe4fb05231add7fba864b7653", "commit_url": "https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e", "cve": "CVE-2025-15467", "cwe": "CWE-119", "file": "openssl-cve-2025-15467/vuln.c", "function": "evp_cipher_get_asn1_aead_params", "id": "openssl-cve-2025-15467:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2025-15467", "project": "openssl", "relpath": "crypto/evp/evp_lib.c", "repo": "openssl/openssl", "year": 2025} -{"class": "security fix", "commit": "ce39170276daec87f55c39dad1f629b56344429e", "commit_url": "https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e", "cve": "CVE-2025-15467", "cwe": "CWE-119", "file": "openssl-cve-2025-15467/fixed.c", "function": "evp_cipher_get_asn1_aead_params", "id": "openssl-cve-2025-15467:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2025-15467", "project": "openssl", "relpath": "crypto/evp/evp_lib.c", "repo": "openssl/openssl", "year": 2025} -{"class": "security fix", "commit": "b8654779e3b3b4eb0bda7623c0891d394e068187", "commit_url": "https://github.com/openssl/openssl/commit/205e3a55e16e4bd08c12fdbd3416ab829c0f6206", "cve": "CVE-2025-11187", "cwe": "CWE-119", "file": "openssl-cve-2025-11187/vuln.c", "function": "PBMAC1_PBKDF2_HMAC", "id": "openssl-cve-2025-11187:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2025-11187", "project": "openssl", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "year": 2025} -{"class": "security fix", "commit": "205e3a55e16e4bd08c12fdbd3416ab829c0f6206", "commit_url": "https://github.com/openssl/openssl/commit/205e3a55e16e4bd08c12fdbd3416ab829c0f6206", "cve": "CVE-2025-11187", "cwe": "CWE-119", "file": "openssl-cve-2025-11187/fixed.c", "function": "PBMAC1_PBKDF2_HMAC", "id": "openssl-cve-2025-11187:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2025-11187", "project": "openssl", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "year": 2025} -{"class": "security fix", "commit": "a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def", "commit_url": "https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b", "cve": "CVE-2025-9232", "cwe": "CWE-119", "file": "openssl-cve-2025-9232/vuln.c", "function": "use_proxy", "id": "openssl-cve-2025-9232:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2025-9232", "project": "openssl", "relpath": "crypto/http/http_lib.c", "repo": "openssl/openssl", "year": 2025} -{"class": "security fix", "commit": "654dc11d23468a74fc8ea4672b702dd3feb7be4b", "commit_url": "https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b", "cve": "CVE-2025-9232", "cwe": "CWE-119", "file": "openssl-cve-2025-9232/fixed.c", "function": "use_proxy", "id": "openssl-cve-2025-9232:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2025-9232", "project": "openssl", "relpath": "crypto/http/http_lib.c", "repo": "openssl/openssl", "year": 2025} -{"class": "buffer overflow", "commit": "7e0fc054a08706d194d3355aba4a06003cadfb29", "commit_url": "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def", "cve": "CVE-2025-9230", "cwe": "CWE-119", "file": "openssl-cve-2025-9230/vuln.c", "function": "kek_unwrap_key", "id": "openssl-cve-2025-9230:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2025-9230", "project": "openssl", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "year": 2025} -{"class": "buffer overflow", "commit": "a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def", "commit_url": "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def", "cve": "CVE-2025-9230", "cwe": "CWE-119", "file": "openssl-cve-2025-9230/fixed.c", "function": "kek_unwrap_key", "id": "openssl-cve-2025-9230:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2025-9230", "project": "openssl", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "year": 2025} -{"class": "security fix", "commit": "0db27ec7f8abd258d2e8849ac555ca26ba0cd8d6", "commit_url": "https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7", "cve": "CVE-2024-12797", "cwe": "CWE-119", "file": "openssl-cve-2024-12797/vuln.c", "function": "tls_post_process_server_rpk", "id": "openssl-cve-2024-12797:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2024-12797", "project": "openssl", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "798779d43494549b611233f92652f0da5328fbe7", "commit_url": "https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7", "cve": "CVE-2024-12797", "cwe": "CWE-119", "file": "openssl-cve-2024-12797/fixed.c", "function": "tls_post_process_server_rpk", "id": "openssl-cve-2024-12797:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2024-12797", "project": "openssl", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "643de602771f6b38ad7823e26d5a63c669eb185b", "commit_url": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844", "cve": "CVE-2024-13176", "cwe": "CWE-119", "file": "openssl-cve-2024-13176-ec_field_inverse_mod_ord/vuln.c", "function": "ec_field_inverse_mod_ord", "id": "openssl-cve-2024-13176-ec_field_inverse_mod_ord:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2024-13176-ec_field_inverse_mod_ord", "project": "openssl", "relpath": "crypto/ec/ec_lib.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "07272b05b04836a762b4baa874958af51d513844", "commit_url": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844", "cve": "CVE-2024-13176", "cwe": "CWE-119", "file": "openssl-cve-2024-13176-ec_field_inverse_mod_ord/fixed.c", "function": "ec_field_inverse_mod_ord", "id": "openssl-cve-2024-13176-ec_field_inverse_mod_ord:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2024-13176-ec_field_inverse_mod_ord", "project": "openssl", "relpath": "crypto/ec/ec_lib.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "9aae56395aa8e77c44a9df83fd395a644d016635", "commit_url": "https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6", "cve": "CVE-2024-6119", "cwe": "CWE-119", "file": "openssl-cve-2024-6119/vuln.c", "function": "do_x509_check", "id": "openssl-cve-2024-6119:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2024-6119", "project": "openssl", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6", "commit_url": "https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6", "cve": "CVE-2024-6119", "cwe": "CWE-119", "file": "openssl-cve-2024-6119/fixed.c", "function": "do_x509_check", "id": "openssl-cve-2024-6119:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2024-6119", "project": "openssl", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "189a7ed3e380e34ea38fe4190a7c9396bace0fb7", "commit_url": "https://github.com/openssl/openssl/commit/4b375b998798dd516d367036773073e1b88e6433", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535/vuln.c", "function": "tls_parse_stoc_alpn", "id": "openssl-cve-2024-5535:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2024-5535", "project": "openssl", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "4b375b998798dd516d367036773073e1b88e6433", "commit_url": "https://github.com/openssl/openssl/commit/4b375b998798dd516d367036773073e1b88e6433", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535/fixed.c", "function": "tls_parse_stoc_alpn", "id": "openssl-cve-2024-5535:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2024-5535", "project": "openssl", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "72394c9a1a6a6b07edf43eb2ad7e95e1093ada1b", "commit_url": "https://github.com/openssl/openssl/commit/189a7ed3e380e34ea38fe4190a7c9396bace0fb7", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-tls_construct_stoc_next_/vuln.c", "function": "tls_construct_stoc_next_proto_neg", "id": "openssl-cve-2024-5535-tls_construct_stoc_next_:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2024-5535-tls_construct_stoc_next_", "project": "openssl", "relpath": "ssl/statem/extensions_srvr.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "189a7ed3e380e34ea38fe4190a7c9396bace0fb7", "commit_url": "https://github.com/openssl/openssl/commit/189a7ed3e380e34ea38fe4190a7c9396bace0fb7", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-tls_construct_stoc_next_/fixed.c", "function": "tls_construct_stoc_next_proto_neg", "id": "openssl-cve-2024-5535-tls_construct_stoc_next_:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2024-5535-tls_construct_stoc_next_", "project": "openssl", "relpath": "ssl/statem/extensions_srvr.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "cf6f91f6121f4db167405db2f0de410a456f260c", "commit_url": "https://github.com/openssl/openssl/commit/159921152fd4aa91e4c849fd281ad93ac0d0d0ba", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-tls_parse_stoc_npn/vuln.c", "function": "tls_parse_stoc_npn", "id": "openssl-cve-2024-5535-tls_parse_stoc_npn:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2024-5535-tls_parse_stoc_npn", "project": "openssl", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "159921152fd4aa91e4c849fd281ad93ac0d0d0ba", "commit_url": "https://github.com/openssl/openssl/commit/159921152fd4aa91e4c849fd281ad93ac0d0d0ba", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-tls_parse_stoc_npn/fixed.c", "function": "tls_parse_stoc_npn", "id": "openssl-cve-2024-5535-tls_parse_stoc_npn:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2024-5535-tls_parse_stoc_npn", "project": "openssl", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "a6facb1042adda2394dc5c98fbceb7625eef141a", "commit_url": "https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-ssl_select_next_proto/vuln.c", "function": "SSL_select_next_proto", "id": "openssl-cve-2024-5535-ssl_select_next_proto:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2024-5535-ssl_select_next_proto", "project": "openssl", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "cf6f91f6121f4db167405db2f0de410a456f260c", "commit_url": "https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-ssl_select_next_proto/fixed.c", "function": "SSL_select_next_proto", "id": "openssl-cve-2024-5535-ssl_select_next_proto:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2024-5535-ssl_select_next_proto", "project": "openssl", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "015255851371757d54c2560643eb3b3a88123cf1", "commit_url": "https://github.com/openssl/openssl/commit/6cc511826f09e513b4ec066d9b95acaf4f86d991", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-alpn_select_cb/vuln.c", "function": "alpn_select_cb", "id": "openssl-cve-2024-5535-alpn_select_cb:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2024-5535-alpn_select_cb", "project": "openssl", "relpath": "ssl/quic/quic_tserver.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "6cc511826f09e513b4ec066d9b95acaf4f86d991", "commit_url": "https://github.com/openssl/openssl/commit/6cc511826f09e513b4ec066d9b95acaf4f86d991", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-alpn_select_cb/fixed.c", "function": "alpn_select_cb", "id": "openssl-cve-2024-5535-alpn_select_cb:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2024-5535-alpn_select_cb", "project": "openssl", "relpath": "ssl/quic/quic_tserver.c", "repo": "openssl/openssl", "year": 2024} -{"class": "use after free", "commit": "b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "commit_url": "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741/vuln.c", "function": "ssl3_read_n", "id": "openssl-cve-2024-4741:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2024-4741", "project": "openssl", "relpath": "ssl/record/rec_layer_s3.c", "repo": "openssl/openssl", "year": 2024} -{"class": "use after free", "commit": "2d05959073c4bf8803401668b9df85931a08e020", "commit_url": "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741/fixed.c", "function": "ssl3_read_n", "id": "openssl-cve-2024-4741:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2024-4741", "project": "openssl", "relpath": "ssl/record/rec_layer_s3.c", "repo": "openssl/openssl", "year": 2024} -{"class": "use after free", "commit": "b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "commit_url": "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741-ssl3_release_read_buffer/vuln.c", "function": "ssl3_release_read_buffer", "id": "openssl-cve-2024-4741-ssl3_release_read_buffer:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2024-4741-ssl3_release_read_buffer", "project": "openssl", "relpath": "ssl/record/ssl3_buffer.c", "repo": "openssl/openssl", "year": 2024} -{"class": "use after free", "commit": "2d05959073c4bf8803401668b9df85931a08e020", "commit_url": "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741-ssl3_release_read_buffer/fixed.c", "function": "ssl3_release_read_buffer", "id": "openssl-cve-2024-4741-ssl3_release_read_buffer:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2024-4741-ssl3_release_read_buffer", "project": "openssl", "relpath": "ssl/record/ssl3_buffer.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "ec559c2a6cca3fd4cedae5c47f2dfa38e5e24865", "commit_url": "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "cve": "CVE-2024-4741", "cwe": "CWE-119", "file": "openssl-cve-2024-4741-ssl_free_buffers/vuln.c", "function": "SSL_free_buffers", "id": "openssl-cve-2024-4741-ssl_free_buffers:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2024-4741-ssl_free_buffers", "project": "openssl", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "commit_url": "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "cve": "CVE-2024-4741", "cwe": "CWE-119", "file": "openssl-cve-2024-4741-ssl_free_buffers/fixed.c", "function": "SSL_free_buffers", "id": "openssl-cve-2024-4741-ssl_free_buffers:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2024-4741-ssl_free_buffers", "project": "openssl", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "year": 2024} -{"class": "use after free", "commit": "c88c3de51020c37e8706bf7a682a162593053aac", "commit_url": "https://github.com/openssl/openssl/commit/10171e5b511b700c5ecd4fd3e1086b19c34b1ae3", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741-tls_release_read_buffer/vuln.c", "function": "tls_release_read_buffer", "id": "openssl-cve-2024-4741-tls_release_read_buffer:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2024-4741-tls_release_read_buffer", "project": "openssl", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "year": 2024} -{"class": "use after free", "commit": "10171e5b511b700c5ecd4fd3e1086b19c34b1ae3", "commit_url": "https://github.com/openssl/openssl/commit/10171e5b511b700c5ecd4fd3e1086b19c34b1ae3", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741-tls_release_read_buffer/fixed.c", "function": "tls_release_read_buffer", "id": "openssl-cve-2024-4741-tls_release_read_buffer:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2024-4741-tls_release_read_buffer", "project": "openssl", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "17765d9cefed8b4ada6548719beb98e22672a9bd", "commit_url": "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac", "cve": "CVE-2024-4741", "cwe": "CWE-119", "file": "openssl-cve-2024-4741-tls_free_buffers/vuln.c", "function": "tls_free_buffers", "id": "openssl-cve-2024-4741-tls_free_buffers:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2024-4741-tls_free_buffers", "project": "openssl", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "c88c3de51020c37e8706bf7a682a162593053aac", "commit_url": "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac", "cve": "CVE-2024-4741", "cwe": "CWE-119", "file": "openssl-cve-2024-4741-tls_free_buffers/fixed.c", "function": "tls_free_buffers", "id": "openssl-cve-2024-4741-tls_free_buffers:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2024-4741-tls_free_buffers", "project": "openssl", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "d4b119c567cb5dcaf83add7ca2ea1d646eb3ef9f", "commit_url": "https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397", "cve": "CVE-2024-4603", "cwe": "CWE-119", "file": "openssl-cve-2024-4603/vuln.c", "function": "ossl_dsa_check_params", "id": "openssl-cve-2024-4603:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2024-4603", "project": "openssl", "relpath": "crypto/dsa/dsa_check.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "3559e868e58005d15c6013a0c1fd832e51c73397", "commit_url": "https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397", "cve": "CVE-2024-4603", "cwe": "CWE-119", "file": "openssl-cve-2024-4603/fixed.c", "function": "ossl_dsa_check_params", "id": "openssl-cve-2024-4603:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2024-4603", "project": "openssl", "relpath": "crypto/dsa/dsa_check.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "c1e462ee4bd61867ee391fc13110ca41e4889535", "commit_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "cve": "CVE-2024-2511", "cwe": "CWE-119", "file": "openssl-cve-2024-2511/vuln.c", "function": "ssl_update_cache", "id": "openssl-cve-2024-2511:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2024-2511", "project": "openssl", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "commit_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "cve": "CVE-2024-2511", "cwe": "CWE-119", "file": "openssl-cve-2024-2511/fixed.c", "function": "ssl_update_cache", "id": "openssl-cve-2024-2511:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2024-2511", "project": "openssl", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "c1e462ee4bd61867ee391fc13110ca41e4889535", "commit_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "cve": "CVE-2024-2511", "cwe": "CWE-119", "file": "openssl-cve-2024-2511-tls_construct_server_hel/vuln.c", "function": "tls_construct_server_hello", "id": "openssl-cve-2024-2511-tls_construct_server_hel:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2024-2511-tls_construct_server_hel", "project": "openssl", "relpath": "ssl/statem/statem_srvr.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "commit_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "cve": "CVE-2024-2511", "cwe": "CWE-119", "file": "openssl-cve-2024-2511-tls_construct_server_hel/fixed.c", "function": "tls_construct_server_hello", "id": "openssl-cve-2024-2511-tls_construct_server_hel:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2024-2511-tls_construct_server_hel", "project": "openssl", "relpath": "ssl/statem/statem_srvr.c", "repo": "openssl/openssl", "year": 2024} -{"class": "null pointer dereference", "commit": "6c70934a46eaa1734c2efbe9d7baac51c607062e", "commit_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "cve": "CVE-2024-0727", "cwe": "CWE-476", "file": "openssl-cve-2024-0727/vuln.c", "function": "pkcs12_gen_mac", "id": "openssl-cve-2024-0727:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2024-0727", "project": "openssl", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "year": 2024} -{"class": "null pointer dereference", "commit": "09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "commit_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "cve": "CVE-2024-0727", "cwe": "CWE-476", "file": "openssl-cve-2024-0727/fixed.c", "function": "pkcs12_gen_mac", "id": "openssl-cve-2024-0727:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2024-0727", "project": "openssl", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "year": 2024} -{"class": "null pointer dereference", "commit": "6c70934a46eaa1734c2efbe9d7baac51c607062e", "commit_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "cve": "CVE-2024-0727", "cwe": "CWE-476", "file": "openssl-cve-2024-0727-smime_write_pkcs7/vuln.c", "function": "SMIME_write_PKCS7", "id": "openssl-cve-2024-0727-smime_write_pkcs7:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2024-0727-smime_write_pkcs7", "project": "openssl", "relpath": "crypto/pkcs7/pk7_mime.c", "repo": "openssl/openssl", "year": 2024} -{"class": "null pointer dereference", "commit": "09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "commit_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "cve": "CVE-2024-0727", "cwe": "CWE-476", "file": "openssl-cve-2024-0727-smime_write_pkcs7/fixed.c", "function": "SMIME_write_PKCS7", "id": "openssl-cve-2024-0727-smime_write_pkcs7:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2024-0727-smime_write_pkcs7", "project": "openssl", "relpath": "crypto/pkcs7/pk7_mime.c", "repo": "openssl/openssl", "year": 2024} -{"class": "security fix", "commit": "23d21359e35536a4ee8f7be0b245ddbfac909bff", "commit_url": "https://github.com/openssl/openssl/commit/0df40630850fb2740e6be6890bb905d3fc623b2d", "cve": "CVE-2023-5363", "cwe": "CWE-119", "file": "openssl-cve-2023-5363/vuln.c", "function": "evp_cipher_init_internal", "id": "openssl-cve-2023-5363:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2023-5363", "project": "openssl", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "0df40630850fb2740e6be6890bb905d3fc623b2d", "commit_url": "https://github.com/openssl/openssl/commit/0df40630850fb2740e6be6890bb905d3fc623b2d", "cve": "CVE-2023-5363", "cwe": "CWE-119", "file": "openssl-cve-2023-5363/fixed.c", "function": "evp_cipher_init_internal", "id": "openssl-cve-2023-5363:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2023-5363", "project": "openssl", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "e648db50d9a63f71cab5cb78424c2932d019a744", "commit_url": "https://github.com/openssl/openssl/commit/9002fd07327a91f35ba6c1307e71fa6fd4409b7f", "cve": "CVE-2023-3817", "cwe": "CWE-119", "file": "openssl-cve-2023-3817-dh_check/vuln.c", "function": "DH_check", "id": "openssl-cve-2023-3817-dh_check:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2023-3817-dh_check", "project": "openssl", "relpath": "crypto/dh/dh_check.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "9002fd07327a91f35ba6c1307e71fa6fd4409b7f", "commit_url": "https://github.com/openssl/openssl/commit/9002fd07327a91f35ba6c1307e71fa6fd4409b7f", "cve": "CVE-2023-3817", "cwe": "CWE-119", "file": "openssl-cve-2023-3817-dh_check/fixed.c", "function": "DH_check", "id": "openssl-cve-2023-3817-dh_check:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2023-3817-dh_check", "project": "openssl", "relpath": "crypto/dh/dh_check.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "fe824ce0c5d51e7e7cf36c31db6c49c1c0c04a25", "commit_url": "https://github.com/openssl/openssl/commit/8780a896543a654e757db1b9396383f9d8095528", "cve": "CVE-2023-3446", "cwe": "CWE-119", "file": "openssl-cve-2023-3446/vuln.c", "function": "DH_check", "id": "openssl-cve-2023-3446:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2023-3446", "project": "openssl", "relpath": "crypto/dh/dh_check.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "8780a896543a654e757db1b9396383f9d8095528", "commit_url": "https://github.com/openssl/openssl/commit/8780a896543a654e757db1b9396383f9d8095528", "cve": "CVE-2023-3446", "cwe": "CWE-119", "file": "openssl-cve-2023-3446/fixed.c", "function": "DH_check", "id": "openssl-cve-2023-3446:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2023-3446", "project": "openssl", "relpath": "crypto/dh/dh_check.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "175fa8469fc78f6cf35dfb87d26899e60e9ff1d4", "commit_url": "https://github.com/openssl/openssl/commit/00e2f5eea29994d19293ec4e8c8775ba73678598", "cve": "CVE-2023-2975", "cwe": "CWE-119", "file": "openssl-cve-2023-2975/vuln.c", "function": "siv_cipher", "id": "openssl-cve-2023-2975:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2023-2975", "project": "openssl", "relpath": "providers/implementations/ciphers/cipher_aes_siv.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "00e2f5eea29994d19293ec4e8c8775ba73678598", "commit_url": "https://github.com/openssl/openssl/commit/00e2f5eea29994d19293ec4e8c8775ba73678598", "cve": "CVE-2023-2975", "cwe": "CWE-119", "file": "openssl-cve-2023-2975/fixed.c", "function": "siv_cipher", "id": "openssl-cve-2023-2975:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2023-2975", "project": "openssl", "relpath": "providers/implementations/ciphers/cipher_aes_siv.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "3ca28c9e81fae36b0b44dc39beecd2b5a7561975", "commit_url": "https://github.com/openssl/openssl/commit/d63b3e7959e79f98d60760a739f7876dc5adc838", "cve": "CVE-2023-2650", "cwe": "CWE-119", "file": "openssl-cve-2023-2650/vuln.c", "function": "OBJ_obj2txt", "id": "openssl-cve-2023-2650:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2023-2650", "project": "openssl", "relpath": "crypto/objects/obj_dat.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "d63b3e7959e79f98d60760a739f7876dc5adc838", "commit_url": "https://github.com/openssl/openssl/commit/d63b3e7959e79f98d60760a739f7876dc5adc838", "cve": "CVE-2023-2650", "cwe": "CWE-119", "file": "openssl-cve-2023-2650/fixed.c", "function": "OBJ_obj2txt", "id": "openssl-cve-2023-2650:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2023-2650", "project": "openssl", "relpath": "crypto/objects/obj_dat.c", "repo": "openssl/openssl", "year": 2023} -{"class": "buffer overflow", "commit": "5d6f13d90d5c4212737002bcd54871cf236a1220", "commit_url": "https://github.com/openssl/openssl/commit/d12cde7fc5561d463badcd8a73079cf92864c31e", "cve": "CVE-2022-37454", "cwe": "CWE-119", "file": "openssl-cve-2022-37454/vuln.c", "function": "HKDF_Expand", "id": "openssl-cve-2022-37454:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2022-37454", "project": "openssl", "relpath": "providers/implementations/kdfs/hkdf.c", "repo": "openssl/openssl", "year": 2022} -{"class": "buffer overflow", "commit": "d12cde7fc5561d463badcd8a73079cf92864c31e", "commit_url": "https://github.com/openssl/openssl/commit/d12cde7fc5561d463badcd8a73079cf92864c31e", "cve": "CVE-2022-37454", "cwe": "CWE-119", "file": "openssl-cve-2022-37454/fixed.c", "function": "HKDF_Expand", "id": "openssl-cve-2022-37454:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2022-37454", "project": "openssl", "relpath": "providers/implementations/kdfs/hkdf.c", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "908eaceb62624f5b5c505b286d904bd3a4e8a64a", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304/vuln.c", "function": "bn_sub_words", "id": "openssl-cve-2022-4304:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2022-4304", "project": "openssl", "relpath": "crypto/bn/bn_asm.c", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "a00d757d9ca212994625d1a02c81cc5edd27e13b", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304/fixed.c", "function": "bn_sub_words", "id": "openssl-cve-2022-4304:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2022-4304", "project": "openssl", "relpath": "crypto/bn/bn_asm.c", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "908eaceb62624f5b5c505b286d904bd3a4e8a64a", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-bn_blinding_invert_ex/vuln.c", "function": "BN_BLINDING_invert_ex", "id": "openssl-cve-2022-4304-bn_blinding_invert_ex:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2022-4304-bn_blinding_invert_ex", "project": "openssl", "relpath": "crypto/bn/bn_blind.c", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "a00d757d9ca212994625d1a02c81cc5edd27e13b", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-bn_blinding_invert_ex/fixed.c", "function": "BN_BLINDING_invert_ex", "id": "openssl-cve-2022-4304-bn_blinding_invert_ex:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2022-4304-bn_blinding_invert_ex", "project": "openssl", "relpath": "crypto/bn/bn_blind.c", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "908eaceb62624f5b5c505b286d904bd3a4e8a64a", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-rsa_blinding_invert/vuln.c", "function": "rsa_blinding_invert", "id": "openssl-cve-2022-4304-rsa_blinding_invert:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2022-4304-rsa_blinding_invert", "project": "openssl", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "a00d757d9ca212994625d1a02c81cc5edd27e13b", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-rsa_blinding_invert/fixed.c", "function": "rsa_blinding_invert", "id": "openssl-cve-2022-4304-rsa_blinding_invert:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2022-4304-rsa_blinding_invert", "project": "openssl", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "f675d164e5d9648c3537a0f5efe1cc2fd232b4a9", "commit_url": "https://github.com/openssl/openssl/commit/b013765abfa80036dc779dd0e50602c57bb3bf95", "cve": "CVE-2023-0465", "cwe": "CWE-119", "file": "openssl-cve-2023-0465/vuln.c", "function": "check_policy", "id": "openssl-cve-2023-0465:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2023-0465", "project": "openssl", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "b013765abfa80036dc779dd0e50602c57bb3bf95", "commit_url": "https://github.com/openssl/openssl/commit/b013765abfa80036dc779dd0e50602c57bb3bf95", "cve": "CVE-2023-0465", "cwe": "CWE-119", "file": "openssl-cve-2023-0465/fixed.c", "function": "check_policy", "id": "openssl-cve-2023-0465:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2023-0465", "project": "openssl", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "969327390220aee7515a4054d5189186402d6687", "commit_url": "https://github.com/openssl/openssl/commit/879f7080d7e141f415c79eaa3a8ac4a3dad0348b", "cve": "CVE-2023-0464", "cwe": "CWE-119", "file": "openssl-cve-2023-0464/vuln.c", "function": "tree_init", "id": "openssl-cve-2023-0464:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2023-0464", "project": "openssl", "relpath": "crypto/x509v3/pcy_tree.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "879f7080d7e141f415c79eaa3a8ac4a3dad0348b", "commit_url": "https://github.com/openssl/openssl/commit/879f7080d7e141f415c79eaa3a8ac4a3dad0348b", "cve": "CVE-2023-0464", "cwe": "CWE-119", "file": "openssl-cve-2023-0464/fixed.c", "function": "tree_init", "id": "openssl-cve-2023-0464:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2023-0464", "project": "openssl", "relpath": "crypto/x509v3/pcy_tree.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "c309c4dce742c3eeb393a0f03f9c567d0e368ccc", "commit_url": "https://github.com/openssl/openssl/commit/959c59c7a0164117e7f8366466a32bb1f8d77ff1", "cve": "CVE-2023-0464", "cwe": "CWE-119", "file": "openssl-cve-2023-0464-tree_init/vuln.c", "function": "tree_init", "id": "openssl-cve-2023-0464-tree_init:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2023-0464-tree_init", "project": "openssl", "relpath": "crypto/x509/pcy_tree.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "959c59c7a0164117e7f8366466a32bb1f8d77ff1", "commit_url": "https://github.com/openssl/openssl/commit/959c59c7a0164117e7f8366466a32bb1f8d77ff1", "cve": "CVE-2023-0464", "cwe": "CWE-119", "file": "openssl-cve-2023-0464-tree_init/fixed.c", "function": "tree_init", "id": "openssl-cve-2023-0464-tree_init:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2023-0464-tree_init", "project": "openssl", "relpath": "crypto/x509/pcy_tree.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449/vuln.c", "function": "tls_get_more_records", "id": "openssl-cve-2021-3449:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449", "project": "openssl", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "2b9e2afc382490592078cdb69d06f54f0fefd4c6", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449/fixed.c", "function": "tls_get_more_records", "id": "openssl-cve-2021-3449:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449", "project": "openssl", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-def_generate_session_id/vuln.c", "function": "def_generate_session_id", "id": "openssl-cve-2021-3449-def_generate_session_id:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449-def_generate_session_id", "project": "openssl", "relpath": "ssl/ssl_sess.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "2b9e2afc382490592078cdb69d06f54f0fefd4c6", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-def_generate_session_id/fixed.c", "function": "def_generate_session_id", "id": "openssl-cve-2021-3449-def_generate_session_id:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449-def_generate_session_id", "project": "openssl", "relpath": "ssl/ssl_sess.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_parse_ctos_renegotia/vuln.c", "function": "tls_parse_ctos_renegotiate", "id": "openssl-cve-2021-3449-tls_parse_ctos_renegotia:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449-tls_parse_ctos_renegotia", "project": "openssl", "relpath": "ssl/statem/extensions_srvr.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "2b9e2afc382490592078cdb69d06f54f0fefd4c6", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_parse_ctos_renegotia/fixed.c", "function": "tls_parse_ctos_renegotiate", "id": "openssl-cve-2021-3449-tls_parse_ctos_renegotia:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449-tls_parse_ctos_renegotia", "project": "openssl", "relpath": "ssl/statem/extensions_srvr.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_process_finished/vuln.c", "function": "tls_process_finished", "id": "openssl-cve-2021-3449-tls_process_finished:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449-tls_process_finished", "project": "openssl", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "2b9e2afc382490592078cdb69d06f54f0fefd4c6", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_process_finished/fixed.c", "function": "tls_process_finished", "id": "openssl-cve-2021-3449-tls_process_finished:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449-tls_process_finished", "project": "openssl", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "7880536fe17c2b5450e279155bedd51771d28c9f", "commit_url": "https://github.com/openssl/openssl/commit/6eebe6c0238178356114a96a7858f36b24172847", "cve": "CVE-2023-0401", "cwe": "CWE-119", "file": "openssl-cve-2023-0401/vuln.c", "function": "pkcs7_bio_add_digest", "id": "openssl-cve-2023-0401:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2023-0401", "project": "openssl", "relpath": "crypto/pkcs7/pk7_doit.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "6eebe6c0238178356114a96a7858f36b24172847", "commit_url": "https://github.com/openssl/openssl/commit/6eebe6c0238178356114a96a7858f36b24172847", "cve": "CVE-2023-0401", "cwe": "CWE-119", "file": "openssl-cve-2023-0401/fixed.c", "function": "pkcs7_bio_add_digest", "id": "openssl-cve-2023-0401:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2023-0401", "project": "openssl", "relpath": "crypto/pkcs7/pk7_doit.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "adf77d6657e836fc87391fad53d857927a764297", "commit_url": "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f", "cve": "CVE-2023-0286", "cwe": "CWE-119", "file": "openssl-cve-2023-0286-general_name_cmp/vuln.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2023-0286-general_name_cmp:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2023-0286-general_name_cmp", "project": "openssl", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "7880536fe17c2b5450e279155bedd51771d28c9f", "commit_url": "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f", "cve": "CVE-2023-0286", "cwe": "CWE-119", "file": "openssl-cve-2023-0286-general_name_cmp/fixed.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2023-0286-general_name_cmp:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2023-0286-general_name_cmp", "project": "openssl", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "3436f9c24ab90c1661e4798e7944f028d5d251ce", "commit_url": "https://github.com/openssl/openssl/commit/bcec03c33cc00a7b5eb89ebeeee59e604570a86a", "cve": "CVE-2023-0217", "cwe": "CWE-119", "file": "openssl-cve-2023-0217/vuln.c", "function": "ossl_ffc_validate_public_key_partial", "id": "openssl-cve-2023-0217:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2023-0217", "project": "openssl", "relpath": "crypto/ffc/ffc_key_validate.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "bcec03c33cc00a7b5eb89ebeeee59e604570a86a", "commit_url": "https://github.com/openssl/openssl/commit/bcec03c33cc00a7b5eb89ebeeee59e604570a86a", "cve": "CVE-2023-0217", "cwe": "CWE-119", "file": "openssl-cve-2023-0217/fixed.c", "function": "ossl_ffc_validate_public_key_partial", "id": "openssl-cve-2023-0217:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2023-0217", "project": "openssl", "relpath": "crypto/ffc/ffc_key_validate.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "625faca931957719c76fb16094cf5b6e0debe23f", "commit_url": "https://github.com/openssl/openssl/commit/80253dbdc92bec584f4a9866b43f8674156d838a", "cve": "CVE-2023-0216", "cwe": "CWE-119", "file": "openssl-cve-2023-0216/vuln.c", "function": "STACK_OF", "id": "openssl-cve-2023-0216:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2023-0216", "project": "openssl", "relpath": "crypto/pkcs7/pk7_lib.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "80253dbdc92bec584f4a9866b43f8674156d838a", "commit_url": "https://github.com/openssl/openssl/commit/80253dbdc92bec584f4a9866b43f8674156d838a", "cve": "CVE-2023-0216", "cwe": "CWE-119", "file": "openssl-cve-2023-0216/fixed.c", "function": "STACK_OF", "id": "openssl-cve-2023-0216:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2023-0216", "project": "openssl", "relpath": "crypto/pkcs7/pk7_lib.c", "repo": "openssl/openssl", "year": 2023} -{"class": "security fix", "commit": "e2d0a3b5f559e23f11e4d4687b2889b483afb22a", "commit_url": "https://github.com/openssl/openssl/commit/8022a4799fe884b3bf8d538e2b4c4ec323663118", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-rsa_ossl_private_decrypt/vuln.c", "function": "rsa_ossl_private_decrypt", "id": "openssl-cve-2022-4304-rsa_ossl_private_decrypt:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2022-4304-rsa_ossl_private_decrypt", "project": "openssl", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "8022a4799fe884b3bf8d538e2b4c4ec323663118", "commit_url": "https://github.com/openssl/openssl/commit/8022a4799fe884b3bf8d538e2b4c4ec323663118", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-rsa_ossl_private_decrypt/fixed.c", "function": "rsa_ossl_private_decrypt", "id": "openssl-cve-2022-4304-rsa_ossl_private_decrypt:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2022-4304-rsa_ossl_private_decrypt", "project": "openssl", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "1ca61aa56090356bbdbb16cf48916fbd9886c78d", "commit_url": "https://github.com/openssl/openssl/commit/7fc67e0a33102aa47bbaa56533eeecb98c0450f7", "cve": "CVE-2020-25659", "cwe": "CWE-119", "file": "openssl-cve-2020-25659/vuln.c", "function": "rsa_ossl_private_decrypt", "id": "openssl-cve-2020-25659:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2020-25659", "project": "openssl", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "year": 2020} -{"class": "security fix", "commit": "7fc67e0a33102aa47bbaa56533eeecb98c0450f7", "commit_url": "https://github.com/openssl/openssl/commit/7fc67e0a33102aa47bbaa56533eeecb98c0450f7", "cve": "CVE-2020-25659", "cwe": "CWE-119", "file": "openssl-cve-2020-25659/fixed.c", "function": "rsa_ossl_private_decrypt", "id": "openssl-cve-2020-25659:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2020-25659", "project": "openssl", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "year": 2020} -{"class": "security fix", "commit": "9a5c884999a55595e376083b3a165515c8123049", "commit_url": "https://github.com/openssl/openssl/commit/7725e7bfe6f2ce8146b6552b44e0d226be7638e7", "cve": "CVE-2022-3996", "cwe": "CWE-119", "file": "openssl-cve-2022-3996/vuln.c", "function": "ossl_policy_cache_set_mapping", "id": "openssl-cve-2022-3996:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2022-3996", "project": "openssl", "relpath": "crypto/x509/pcy_map.c", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "7725e7bfe6f2ce8146b6552b44e0d226be7638e7", "commit_url": "https://github.com/openssl/openssl/commit/7725e7bfe6f2ce8146b6552b44e0d226be7638e7", "cve": "CVE-2022-3996", "cwe": "CWE-119", "file": "openssl-cve-2022-3996/fixed.c", "function": "ossl_policy_cache_set_mapping", "id": "openssl-cve-2022-3996:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2022-3996", "project": "openssl", "relpath": "crypto/x509/pcy_map.c", "repo": "openssl/openssl", "year": 2022} -{"class": "buffer overflow", "commit": "3b421ebc64c7b52f1b9feb3812bdc7781c784332", "commit_url": "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "cve": "CVE-2022-3786", "cwe": "CWE-119", "file": "openssl-cve-2022-3786-ossl_punycode_decode/vuln.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3786-ossl_punycode_decode:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2022-3786-ossl_punycode_decode", "project": "openssl", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "year": 2022} -{"class": "buffer overflow", "commit": "680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "commit_url": "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "cve": "CVE-2022-3786", "cwe": "CWE-119", "file": "openssl-cve-2022-3786-ossl_punycode_decode/fixed.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3786-ossl_punycode_decode:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2022-3786-ossl_punycode_decode", "project": "openssl", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "89d72311327735ef15c804d2adea84a0fb1bfa0a", "commit_url": "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332", "cve": "CVE-2022-3602", "cwe": "CWE-119", "file": "openssl-cve-2022-3602-ossl_punycode_decode/vuln.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3602-ossl_punycode_decode:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2022-3602-ossl_punycode_decode", "project": "openssl", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "3b421ebc64c7b52f1b9feb3812bdc7781c784332", "commit_url": "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332", "cve": "CVE-2022-3602", "cwe": "CWE-119", "file": "openssl-cve-2022-3602-ossl_punycode_decode/fixed.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3602-ossl_punycode_decode:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2022-3602-ossl_punycode_decode", "project": "openssl", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "year": 2022} -{"class": "null pointer dereference", "commit": "9f0867da4cbf77ed642717b5e703e09ab2c087a0", "commit_url": "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "cve": "CVE-2022-3358", "cwe": "CWE-476", "file": "openssl-cve-2022-3358/vuln.c", "function": "evp_md_init_internal", "id": "openssl-cve-2022-3358:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2022-3358", "project": "openssl", "relpath": "crypto/evp/digest.c", "repo": "openssl/openssl", "year": 2022} -{"class": "null pointer dereference", "commit": "5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "commit_url": "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "cve": "CVE-2022-3358", "cwe": "CWE-476", "file": "openssl-cve-2022-3358/fixed.c", "function": "evp_md_init_internal", "id": "openssl-cve-2022-3358:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2022-3358", "project": "openssl", "relpath": "crypto/evp/digest.c", "repo": "openssl/openssl", "year": 2022} -{"class": "null pointer dereference", "commit": "9f0867da4cbf77ed642717b5e703e09ab2c087a0", "commit_url": "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "cve": "CVE-2022-3358", "cwe": "CWE-476", "file": "openssl-cve-2022-3358-evp_cipher_init_internal/vuln.c", "function": "evp_cipher_init_internal", "id": "openssl-cve-2022-3358-evp_cipher_init_internal:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2022-3358-evp_cipher_init_internal", "project": "openssl", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "year": 2022} -{"class": "null pointer dereference", "commit": "5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "commit_url": "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "cve": "CVE-2022-3358", "cwe": "CWE-476", "file": "openssl-cve-2022-3358-evp_cipher_init_internal/fixed.c", "function": "evp_cipher_init_internal", "id": "openssl-cve-2022-3358-evp_cipher_init_internal:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2022-3358-evp_cipher_init_internal", "project": "openssl", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "abebcec7b1a30fbb1fd5c5cbbe8817690c139163", "commit_url": "https://github.com/openssl/openssl/commit/2c9c35870601b4a44d86ddbf512b38df38285cfa", "cve": "CVE-2022-2068", "cwe": "CWE-119", "file": "openssl-cve-2022-2068-hash_dir/vuln.in", "function": "hash_dir", "id": "openssl-cve-2022-2068-hash_dir:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2022-2068-hash_dir", "project": "openssl", "relpath": "tools/c_rehash.in", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "2c9c35870601b4a44d86ddbf512b38df38285cfa", "commit_url": "https://github.com/openssl/openssl/commit/2c9c35870601b4a44d86ddbf512b38df38285cfa", "cve": "CVE-2022-2068", "cwe": "CWE-119", "file": "openssl-cve-2022-2068-hash_dir/fixed.in", "function": "hash_dir", "id": "openssl-cve-2022-2068-hash_dir:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2022-2068-hash_dir", "project": "openssl", "relpath": "tools/c_rehash.in", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "3be529cd2eb4eb3eaaa7913af619fb9c918d4581", "commit_url": "https://github.com/openssl/openssl/commit/373de40f3f76c63e4f2684abd86706f3863347ca", "cve": "CVE-2022-29242", "cwe": "CWE-119", "file": "openssl-cve-2022-29242/vuln.c", "function": "tls_construct_cke_gost18", "id": "openssl-cve-2022-29242:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2022-29242", "project": "openssl", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "373de40f3f76c63e4f2684abd86706f3863347ca", "commit_url": "https://github.com/openssl/openssl/commit/373de40f3f76c63e4f2684abd86706f3863347ca", "cve": "CVE-2022-29242", "cwe": "CWE-119", "file": "openssl-cve-2022-29242/fixed.c", "function": "tls_construct_cke_gost18", "id": "openssl-cve-2022-29242:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2022-29242", "project": "openssl", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "55c80c222293a972587004c185dc5653ae207a0e", "commit_url": "https://github.com/openssl/openssl/commit/7d56a74a96828985db7354a55227a511615f732b", "cve": "CVE-2022-1434", "cwe": "CWE-119", "file": "openssl-cve-2022-1434/vuln.c", "function": "rc4_hmac_md5_set_ctx_params", "id": "openssl-cve-2022-1434:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2022-1434", "project": "openssl", "relpath": "providers/implementations/ciphers/cipher_rc4_hmac_md5.c", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "7d56a74a96828985db7354a55227a511615f732b", "commit_url": "https://github.com/openssl/openssl/commit/7d56a74a96828985db7354a55227a511615f732b", "cve": "CVE-2022-1434", "cwe": "CWE-119", "file": "openssl-cve-2022-1434/fixed.c", "function": "rc4_hmac_md5_set_ctx_params", "id": "openssl-cve-2022-1434:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2022-1434", "project": "openssl", "relpath": "providers/implementations/ciphers/cipher_rc4_hmac_md5.c", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "ae3ece03a61e8822fd7ea58f44812871efba82d1", "commit_url": "https://github.com/openssl/openssl/commit/2eda98790c5c2741d76d23cc1e74b0dc4f4b391a", "cve": "CVE-2022-1343", "cwe": "CWE-119", "file": "openssl-cve-2022-1343/vuln.c", "function": "ocsp_verify_signer", "id": "openssl-cve-2022-1343:vuln", "label": "vuln", "license": "Apache-2.0", "pair": "openssl-cve-2022-1343", "project": "openssl", "relpath": "crypto/ocsp/ocsp_vfy.c", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "2eda98790c5c2741d76d23cc1e74b0dc4f4b391a", "commit_url": "https://github.com/openssl/openssl/commit/2eda98790c5c2741d76d23cc1e74b0dc4f4b391a", "cve": "CVE-2022-1343", "cwe": "CWE-119", "file": "openssl-cve-2022-1343/fixed.c", "function": "ocsp_verify_signer", "id": "openssl-cve-2022-1343:fixed", "label": "fixed", "license": "Apache-2.0", "pair": "openssl-cve-2022-1343", "project": "openssl", "relpath": "crypto/ocsp/ocsp_vfy.c", "repo": "openssl/openssl", "year": 2022} -{"class": "security fix", "commit": "758754966791c537ea95241438454aa86f91f256", "commit_url": "https://github.com/openssl/openssl/commit/d69ae8a93bfc0f2489c008fcf303a98d77a6df4d", "cve": "CVE-2021-4044", "cwe": "CWE-119", "file": "openssl-cve-2021-4044/vuln.c", "function": "has_san_id", "id": "openssl-cve-2021-4044:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-4044", "project": "openssl", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "d69ae8a93bfc0f2489c008fcf303a98d77a6df4d", "commit_url": "https://github.com/openssl/openssl/commit/d69ae8a93bfc0f2489c008fcf303a98d77a6df4d", "cve": "CVE-2021-4044", "cwe": "CWE-119", "file": "openssl-cve-2021-4044/fixed.c", "function": "has_san_id", "id": "openssl-cve-2021-4044:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-4044", "project": "openssl", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "8e78289c4e6f4c9f2fec073b78443736e689854d", "commit_url": "https://github.com/openssl/openssl/commit/758754966791c537ea95241438454aa86f91f256", "cve": "CVE-2021-4044", "cwe": "CWE-119", "file": "openssl-cve-2021-4044-tls_post_process_server_/vuln.c", "function": "tls_post_process_server_certificate", "id": "openssl-cve-2021-4044-tls_post_process_server_:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-4044-tls_post_process_server_", "project": "openssl", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "758754966791c537ea95241438454aa86f91f256", "commit_url": "https://github.com/openssl/openssl/commit/758754966791c537ea95241438454aa86f91f256", "cve": "CVE-2021-4044", "cwe": "CWE-119", "file": "openssl-cve-2021-4044-tls_post_process_server_/fixed.c", "function": "tls_post_process_server_certificate", "id": "openssl-cve-2021-4044-tls_post_process_server_:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-4044-tls_post_process_server_", "project": "openssl", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "4b8a8bb75229b64d1c7598d845fdc3c7e7d7eee2", "commit_url": "https://github.com/openssl/openssl/commit/36cf45ef3ba71e44a8be06ee81cb31aa02cb0010", "cve": "CVE-2021-3711", "cwe": "CWE-119", "file": "openssl-cve-2021-3711-sm2_asym_decrypt/vuln.c", "function": "sm2_asym_decrypt", "id": "openssl-cve-2021-3711-sm2_asym_decrypt:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3711-sm2_asym_decrypt", "project": "openssl", "relpath": "providers/implementations/asymciphers/sm2_enc.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "36cf45ef3ba71e44a8be06ee81cb31aa02cb0010", "commit_url": "https://github.com/openssl/openssl/commit/36cf45ef3ba71e44a8be06ee81cb31aa02cb0010", "cve": "CVE-2021-3711", "cwe": "CWE-119", "file": "openssl-cve-2021-3711-sm2_asym_decrypt/fixed.c", "function": "sm2_asym_decrypt", "id": "openssl-cve-2021-3711-sm2_asym_decrypt:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3711-sm2_asym_decrypt", "project": "openssl", "relpath": "providers/implementations/asymciphers/sm2_enc.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "98624776c4d501c8badd6f772ab7048ac9191cb9", "commit_url": "https://github.com/openssl/openssl/commit/7c038a6bcd98d4bbfd2c2892a87a1138d2f7c5f3", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-netscape_spki_print/vuln.c", "function": "NETSCAPE_SPKI_print", "id": "openssl-cve-2021-3712-netscape_spki_print:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3712-netscape_spki_print", "project": "openssl", "relpath": "crypto/asn1/t_spki.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "7c038a6bcd98d4bbfd2c2892a87a1138d2f7c5f3", "commit_url": "https://github.com/openssl/openssl/commit/7c038a6bcd98d4bbfd2c2892a87a1138d2f7c5f3", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-netscape_spki_print/fixed.c", "function": "NETSCAPE_SPKI_print", "id": "openssl-cve-2021-3712-netscape_spki_print:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3712-netscape_spki_print", "project": "openssl", "relpath": "crypto/asn1/t_spki.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "1f365708a3318a5f1a395f90c38b584a58d37fb9", "commit_url": "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-append_ia5/vuln.c", "function": "append_ia5", "id": "openssl-cve-2021-3712-append_ia5:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3712-append_ia5", "project": "openssl", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "98624776c4d501c8badd6f772ab7048ac9191cb9", "commit_url": "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-append_ia5/fixed.c", "function": "append_ia5", "id": "openssl-cve-2021-3712-append_ia5:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3712-append_ia5", "project": "openssl", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "d2015a783e64613d8e4a142fa05048d1863df944", "commit_url": "https://github.com/openssl/openssl/commit/95f8c1e142df835d03b5b62521383a462fc5470d", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet/vuln.c", "function": "ossl_cmp_hdr_push1_freeText", "id": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet", "project": "openssl", "relpath": "crypto/cmp/cmp_hdr.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "95f8c1e142df835d03b5b62521383a462fc5470d", "commit_url": "https://github.com/openssl/openssl/commit/95f8c1e142df835d03b5b62521383a462fc5470d", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet/fixed.c", "function": "ossl_cmp_hdr_push1_freeText", "id": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet", "project": "openssl", "relpath": "crypto/cmp/cmp_hdr.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "918430ba80d94ec8f05383b43b1872b1ebb13e1a", "commit_url": "https://github.com/openssl/openssl/commit/d2015a783e64613d8e4a142fa05048d1863df944", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-ia5ncasecmp/vuln.c", "function": "ia5ncasecmp", "id": "openssl-cve-2021-3712-ia5ncasecmp:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3712-ia5ncasecmp", "project": "openssl", "relpath": "crypto/x509/v3_ncons.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "d2015a783e64613d8e4a142fa05048d1863df944", "commit_url": "https://github.com/openssl/openssl/commit/d2015a783e64613d8e4a142fa05048d1863df944", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-ia5ncasecmp/fixed.c", "function": "ia5ncasecmp", "id": "openssl-cve-2021-3712-ia5ncasecmp:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3712-ia5ncasecmp", "project": "openssl", "relpath": "crypto/x509/v3_ncons.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd", "commit_url": "https://github.com/openssl/openssl/commit/918430ba80d94ec8f05383b43b1872b1ebb13e1a", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-i2r_pci/vuln.c", "function": "i2r_pci", "id": "openssl-cve-2021-3712-i2r_pci:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3712-i2r_pci", "project": "openssl", "relpath": "crypto/x509/v3_pci.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "918430ba80d94ec8f05383b43b1872b1ebb13e1a", "commit_url": "https://github.com/openssl/openssl/commit/918430ba80d94ec8f05383b43b1872b1ebb13e1a", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-i2r_pci/fixed.c", "function": "i2r_pci", "id": "openssl-cve-2021-3712-i2r_pci:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3712-i2r_pci", "project": "openssl", "relpath": "crypto/x509/v3_pci.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "1747d4658b3830951068a6a6c1fa2b45c4731fb3", "commit_url": "https://github.com/openssl/openssl/commit/b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-general_name_print/vuln.c", "function": "GENERAL_NAME_print", "id": "openssl-cve-2021-3712-general_name_print:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3712-general_name_print", "project": "openssl", "relpath": "crypto/x509/v3_san.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd", "commit_url": "https://github.com/openssl/openssl/commit/b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-general_name_print/fixed.c", "function": "GENERAL_NAME_print", "id": "openssl-cve-2021-3712-general_name_print:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3712-general_name_print", "project": "openssl", "relpath": "crypto/x509/v3_san.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "ad6ac17489241574136b7d035f01f6175dd9c941", "commit_url": "https://github.com/openssl/openssl/commit/1747d4658b3830951068a6a6c1fa2b45c4731fb3", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-print_qualifiers/vuln.c", "function": "print_qualifiers", "id": "openssl-cve-2021-3712-print_qualifiers:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3712-print_qualifiers", "project": "openssl", "relpath": "crypto/x509/v3_cpols.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "1747d4658b3830951068a6a6c1fa2b45c4731fb3", "commit_url": "https://github.com/openssl/openssl/commit/1747d4658b3830951068a6a6c1fa2b45c4731fb3", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-print_qualifiers/fixed.c", "function": "print_qualifiers", "id": "openssl-cve-2021-3712-print_qualifiers:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3712-print_qualifiers", "project": "openssl", "relpath": "crypto/x509/v3_cpols.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "8c74c9d1ade0fbdab5b815ddb747351b8b839641", "commit_url": "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "cve": "CVE-2021-3711", "cwe": "CWE-119", "file": "openssl-cve-2021-3711-pkey_sm2_decrypt/vuln.c", "function": "pkey_sm2_decrypt", "id": "openssl-cve-2021-3711-pkey_sm2_decrypt:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3711-pkey_sm2_decrypt", "project": "openssl", "relpath": "crypto/sm2/sm2_pmeth.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "commit_url": "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "cve": "CVE-2021-3711", "cwe": "CWE-119", "file": "openssl-cve-2021-3711-pkey_sm2_decrypt/fixed.c", "function": "pkey_sm2_decrypt", "id": "openssl-cve-2021-3711-pkey_sm2_decrypt:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3711-pkey_sm2_decrypt", "project": "openssl", "relpath": "crypto/sm2/sm2_pmeth.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-ssl_generate_master_secr/vuln.c", "function": "ssl_generate_master_secret", "id": "openssl-cve-2021-3449-ssl_generate_master_secr:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449-ssl_generate_master_secr", "project": "openssl", "relpath": "ssl/s3_lib.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-ssl_generate_master_secr/fixed.c", "function": "ssl_generate_master_secret", "id": "openssl-cve-2021-3449-ssl_generate_master_secr:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449-ssl_generate_master_secr", "project": "openssl", "relpath": "ssl/s3_lib.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos/vuln.c", "function": "SSL_CTX_set_alpn_protos", "id": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos", "project": "openssl", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos/fixed.c", "function": "SSL_CTX_set_alpn_protos", "id": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos", "project": "openssl", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-init_sig_algs_cert/vuln.c", "function": "init_sig_algs_cert", "id": "openssl-cve-2021-3449-init_sig_algs_cert:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449-init_sig_algs_cert", "project": "openssl", "relpath": "ssl/statem/extensions.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-init_sig_algs_cert/fixed.c", "function": "init_sig_algs_cert", "id": "openssl-cve-2021-3449-init_sig_algs_cert:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449-init_sig_algs_cert", "project": "openssl", "relpath": "ssl/statem/extensions.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_construct_ctos_early/vuln.c", "function": "tls_construct_ctos_early_data", "id": "openssl-cve-2021-3449-tls_construct_ctos_early:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449-tls_construct_ctos_early", "project": "openssl", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_construct_ctos_early/fixed.c", "function": "tls_construct_ctos_early_data", "id": "openssl-cve-2021-3449-tls_construct_ctos_early:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449-tls_construct_ctos_early", "project": "openssl", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_process_certificate_/vuln.c", "function": "tls_process_certificate_request", "id": "openssl-cve-2021-3449-tls_process_certificate_:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449-tls_process_certificate_", "project": "openssl", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_process_certificate_/fixed.c", "function": "tls_process_certificate_request", "id": "openssl-cve-2021-3449-tls_process_certificate_:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449-tls_process_certificate_", "project": "openssl", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_handle_alpn/vuln.c", "function": "tls_handle_alpn", "id": "openssl-cve-2021-3449-tls_handle_alpn:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449-tls_handle_alpn", "project": "openssl", "relpath": "ssl/statem/statem_srvr.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_handle_alpn/fixed.c", "function": "tls_handle_alpn", "id": "openssl-cve-2021-3449-tls_handle_alpn:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449-tls_handle_alpn", "project": "openssl", "relpath": "ssl/statem/statem_srvr.c", "repo": "openssl/openssl", "year": 2021} -{"class": "null pointer dereference", "commit": "112580c27b829b0ac0874d5c5787195f27c7952c", "commit_url": "https://github.com/openssl/openssl/commit/02b1636fe3db274497304a3e95a4e32ced7e841b", "cve": "CVE-2021-3449", "cwe": "CWE-476", "file": "openssl-cve-2021-3449-init_sig_algs/vuln.c", "function": "init_sig_algs", "id": "openssl-cve-2021-3449-init_sig_algs:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449-init_sig_algs", "project": "openssl", "relpath": "ssl/statem/extensions.c", "repo": "openssl/openssl", "year": 2021} -{"class": "null pointer dereference", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/02b1636fe3db274497304a3e95a4e32ced7e841b", "cve": "CVE-2021-3449", "cwe": "CWE-476", "file": "openssl-cve-2021-3449-init_sig_algs/fixed.c", "function": "init_sig_algs", "id": "openssl-cve-2021-3449-init_sig_algs:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3449-init_sig_algs", "project": "openssl", "relpath": "ssl/statem/extensions.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "cfd74383d9b06f85cb1e166180346115a3f9a452", "commit_url": "https://github.com/openssl/openssl/commit/2a40b7bc7b94dd7de897a74571e7024f0cf0d63b", "cve": "CVE-2021-3450", "cwe": "CWE-119", "file": "openssl-cve-2021-3450/vuln.c", "function": "check_chain_extensions", "id": "openssl-cve-2021-3450:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-3450", "project": "openssl", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "2a40b7bc7b94dd7de897a74571e7024f0cf0d63b", "commit_url": "https://github.com/openssl/openssl/commit/2a40b7bc7b94dd7de897a74571e7024f0cf0d63b", "cve": "CVE-2021-3450", "cwe": "CWE-119", "file": "openssl-cve-2021-3450/fixed.c", "function": "check_chain_extensions", "id": "openssl-cve-2021-3450:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-3450", "project": "openssl", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "year": 2021} -{"class": "buffer overflow", "commit": "481a88f13c44996a008195791ea0dc076b968774", "commit_url": "https://github.com/openssl/openssl/commit/6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1", "cve": "CVE-2021-23840", "cwe": "CWE-119", "file": "openssl-cve-2021-23840-evp_encryptdecryptupdate/vuln.c", "function": "evp_EncryptDecryptUpdate", "id": "openssl-cve-2021-23840-evp_encryptdecryptupdate:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-23840-evp_encryptdecryptupdate", "project": "openssl", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "year": 2021} -{"class": "buffer overflow", "commit": "6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1", "commit_url": "https://github.com/openssl/openssl/commit/6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1", "cve": "CVE-2021-23840", "cwe": "CWE-119", "file": "openssl-cve-2021-23840-evp_encryptdecryptupdate/fixed.c", "function": "evp_EncryptDecryptUpdate", "id": "openssl-cve-2021-23840-evp_encryptdecryptupdate:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-23840-evp_encryptdecryptupdate", "project": "openssl", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "year": 2021} -{"class": "null pointer dereference", "commit": "c8c6e7438c03b2fc24e7ead460feeaef04911fb4", "commit_url": "https://github.com/openssl/openssl/commit/122a19ab48091c657f7cb1fb3af9fc07bd557bbf", "cve": "CVE-2021-23841", "cwe": "CWE-476", "file": "openssl-cve-2021-23841/vuln.c", "function": "X509_issuer_and_serial_hash", "id": "openssl-cve-2021-23841:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2021-23841", "project": "openssl", "relpath": "crypto/x509/x509_cmp.c", "repo": "openssl/openssl", "year": 2021} -{"class": "null pointer dereference", "commit": "122a19ab48091c657f7cb1fb3af9fc07bd557bbf", "commit_url": "https://github.com/openssl/openssl/commit/122a19ab48091c657f7cb1fb3af9fc07bd557bbf", "cve": "CVE-2021-23841", "cwe": "CWE-476", "file": "openssl-cve-2021-23841/fixed.c", "function": "X509_issuer_and_serial_hash", "id": "openssl-cve-2021-23841:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2021-23841", "project": "openssl", "relpath": "crypto/x509/x509_cmp.c", "repo": "openssl/openssl", "year": 2021} -{"class": "security fix", "commit": "aa0ad2011d3e7ad8a611da274ef7d9c7706e289b", "commit_url": "https://github.com/openssl/openssl/commit/f960d81215ebf3f65e03d4d5d857fb9b666d6920", "cve": "CVE-2020-1971", "cwe": "CWE-119", "file": "openssl-cve-2020-1971-general_name_cmp/vuln.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2020-1971-general_name_cmp:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2020-1971-general_name_cmp", "project": "openssl", "relpath": "crypto/x509v3/v3_genn.c", "repo": "openssl/openssl", "year": 2020} -{"class": "security fix", "commit": "f960d81215ebf3f65e03d4d5d857fb9b666d6920", "commit_url": "https://github.com/openssl/openssl/commit/f960d81215ebf3f65e03d4d5d857fb9b666d6920", "cve": "CVE-2020-1971", "cwe": "CWE-119", "file": "openssl-cve-2020-1971-general_name_cmp/fixed.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2020-1971-general_name_cmp:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2020-1971-general_name_cmp", "project": "openssl", "relpath": "crypto/x509v3/v3_genn.c", "repo": "openssl/openssl", "year": 2020} -{"class": "null pointer dereference", "commit": "3656c08ab4b1b892730cb5e808b6f4298b08a2e6", "commit_url": "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4", "cve": "CVE-2020-1967", "cwe": "CWE-476", "file": "openssl-cve-2020-1967-tls1_check_sig_alg/vuln.c", "function": "tls1_check_sig_alg", "id": "openssl-cve-2020-1967-tls1_check_sig_alg:vuln", "label": "vuln", "license": "OpenSSL License", "pair": "openssl-cve-2020-1967-tls1_check_sig_alg", "project": "openssl", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "year": 2020} -{"class": "null pointer dereference", "commit": "a87f3fe01a5a894aa27ccd6a239155fd129988e4", "commit_url": "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4", "cve": "CVE-2020-1967", "cwe": "CWE-476", "file": "openssl-cve-2020-1967-tls1_check_sig_alg/fixed.c", "function": "tls1_check_sig_alg", "id": "openssl-cve-2020-1967-tls1_check_sig_alg:fixed", "label": "fixed", "license": "OpenSSL License", "pair": "openssl-cve-2020-1967-tls1_check_sig_alg", "project": "openssl", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "year": 2020} -{"class": "security fix", "commit": "f746780a1e548b4b93790b58d70c3b22fde5360d", "commit_url": "https://github.com/curl/curl/commit/e9a2b0dc72dd3a9aa3a5210e89079a3b719475dc", "cve": "CVE-2026-9080", "cwe": "CWE-119", "file": "curl-cve-2026-9080/vuln.c", "function": "mev_forget_socket", "id": "curl-cve-2026-9080:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2026-9080", "project": "curl", "relpath": "lib/multi_ev.c", "repo": "curl/curl", "year": 2026} -{"class": "security fix", "commit": "e9a2b0dc72dd3a9aa3a5210e89079a3b719475dc", "commit_url": "https://github.com/curl/curl/commit/e9a2b0dc72dd3a9aa3a5210e89079a3b719475dc", "cve": "CVE-2026-9080", "cwe": "CWE-119", "file": "curl-cve-2026-9080/fixed.c", "function": "mev_forget_socket", "id": "curl-cve-2026-9080:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2026-9080", "project": "curl", "relpath": "lib/multi_ev.c", "repo": "curl/curl", "year": 2026} -{"class": "security fix", "commit": "09e25b9d94f4106eac8ca3a43b221bdc66f405e4", "commit_url": "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147", "cve": "CVE-2023-38545", "cwe": "CWE-119", "file": "curl-cve-2023-38545-do_socks5/vuln.c", "function": "do_SOCKS5", "id": "curl-cve-2023-38545-do_socks5:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2023-38545-do_socks5", "project": "curl", "relpath": "lib/socks.c", "repo": "curl/curl", "year": 2023} -{"class": "security fix", "commit": "fb4415d8aee6c1045be932a34fe6107c2f5ed147", "commit_url": "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147", "cve": "CVE-2023-38545", "cwe": "CWE-119", "file": "curl-cve-2023-38545-do_socks5/fixed.c", "function": "do_SOCKS5", "id": "curl-cve-2023-38545-do_socks5:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2023-38545-do_socks5", "project": "curl", "relpath": "lib/socks.c", "repo": "curl/curl", "year": 2023} -{"class": "security fix", "commit": "46f8911d3942dc06fdd67e9f6f3908982e5d2fb4", "commit_url": "https://github.com/curl/curl/commit/20f9dd6bae50b7223171b17ba7798946e74f877f", "cve": "CVE-2022-32207", "cwe": "CWE-119", "file": "curl-cve-2022-32207/vuln.c", "function": "cookie_output", "id": "curl-cve-2022-32207:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2022-32207", "project": "curl", "relpath": "lib/cookie.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "20f9dd6bae50b7223171b17ba7798946e74f877f", "commit_url": "https://github.com/curl/curl/commit/20f9dd6bae50b7223171b17ba7798946e74f877f", "cve": "CVE-2022-32207", "cwe": "CWE-119", "file": "curl-cve-2022-32207/fixed.c", "function": "cookie_output", "id": "curl-cve-2022-32207:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2022-32207", "project": "curl", "relpath": "lib/cookie.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "6ecdf5136b52af747e7bda08db9a748256b1cd09", "commit_url": "https://github.com/curl/curl/commit/3a09fbb7f264c67c438d01a30669ce325aa508e2", "cve": "CVE-2022-32206", "cwe": "CWE-119", "file": "curl-cve-2022-32206/vuln.c", "function": "Curl_build_unencoding_stack", "id": "curl-cve-2022-32206:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2022-32206", "project": "curl", "relpath": "lib/content_encoding.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "3a09fbb7f264c67c438d01a30669ce325aa508e2", "commit_url": "https://github.com/curl/curl/commit/3a09fbb7f264c67c438d01a30669ce325aa508e2", "cve": "CVE-2022-32206", "cwe": "CWE-119", "file": "curl-cve-2022-32206/fixed.c", "function": "Curl_build_unencoding_stack", "id": "curl-cve-2022-32206:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2022-32206", "project": "curl", "relpath": "lib/content_encoding.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "2b67a0a1129b20a56ed04859fec8999f5c0c4280", "commit_url": "https://github.com/curl/curl/commit/6ecdf5136b52af747e7bda08db9a748256b1cd09", "cve": "CVE-2022-32208", "cwe": "CWE-119", "file": "curl-cve-2022-32208/vuln.c", "function": "read_data", "id": "curl-cve-2022-32208:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2022-32208", "project": "curl", "relpath": "lib/krb5.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "6ecdf5136b52af747e7bda08db9a748256b1cd09", "commit_url": "https://github.com/curl/curl/commit/6ecdf5136b52af747e7bda08db9a748256b1cd09", "cve": "CVE-2022-32208", "cwe": "CWE-119", "file": "curl-cve-2022-32208/fixed.c", "function": "read_data", "id": "curl-cve-2022-32208:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2022-32208", "project": "curl", "relpath": "lib/krb5.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "7e92d12b4e6911f424678a133b19de670e183a59", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-curl_init_userdefined/vuln.c", "function": "Curl_init_userdefined", "id": "curl-cve-2022-27782-curl_init_userdefined:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2022-27782-curl_init_userdefined", "project": "curl", "relpath": "lib/url.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "f18af4f874cecab82a9797e8c7541e0990c7a64c", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-curl_init_userdefined/fixed.c", "function": "Curl_init_userdefined", "id": "curl-cve-2022-27782-curl_init_userdefined:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2022-27782-curl_init_userdefined", "project": "curl", "relpath": "lib/url.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "7e92d12b4e6911f424678a133b19de670e183a59", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-gtls_shutdown/vuln.c", "function": "gtls_shutdown", "id": "curl-cve-2022-27782-gtls_shutdown:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2022-27782-gtls_shutdown", "project": "curl", "relpath": "lib/vtls/gtls.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "f18af4f874cecab82a9797e8c7541e0990c7a64c", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-gtls_shutdown/fixed.c", "function": "gtls_shutdown", "id": "curl-cve-2022-27782-gtls_shutdown:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2022-27782-gtls_shutdown", "project": "curl", "relpath": "lib/vtls/gtls.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "7e92d12b4e6911f424678a133b19de670e183a59", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-nss_setup_connect/vuln.c", "function": "nss_setup_connect", "id": "curl-cve-2022-27782-nss_setup_connect:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2022-27782-nss_setup_connect", "project": "curl", "relpath": "lib/vtls/nss.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "f18af4f874cecab82a9797e8c7541e0990c7a64c", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-nss_setup_connect/fixed.c", "function": "nss_setup_connect", "id": "curl-cve-2022-27782-nss_setup_connect:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2022-27782-nss_setup_connect", "project": "curl", "relpath": "lib/vtls/nss.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "7e92d12b4e6911f424678a133b19de670e183a59", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-ossl_connect_step1/vuln.c", "function": "ossl_connect_step1", "id": "curl-cve-2022-27782-ossl_connect_step1:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2022-27782-ossl_connect_step1", "project": "curl", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "f18af4f874cecab82a9797e8c7541e0990c7a64c", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-ossl_connect_step1/fixed.c", "function": "ossl_connect_step1", "id": "curl-cve-2022-27782-ossl_connect_step1:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2022-27782-ossl_connect_step1", "project": "curl", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "7e92d12b4e6911f424678a133b19de670e183a59", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-curl_free_primary_ssl_co/vuln.c", "function": "Curl_free_primary_ssl_config", "id": "curl-cve-2022-27782-curl_free_primary_ssl_co:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2022-27782-curl_free_primary_ssl_co", "project": "curl", "relpath": "lib/vtls/vtls.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "f18af4f874cecab82a9797e8c7541e0990c7a64c", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-curl_free_primary_ssl_co/fixed.c", "function": "Curl_free_primary_ssl_config", "id": "curl-cve-2022-27782-curl_free_primary_ssl_co:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2022-27782-curl_free_primary_ssl_co", "project": "curl", "relpath": "lib/vtls/vtls.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "fae6fea209a2d4db1582f608bd8cc8000721733a", "commit_url": "https://github.com/curl/curl/commit/8c7ee9083d0d719d0a77ab20d9cc2ae84eeea7f3", "cve": "CVE-2022-27778", "cwe": "CWE-119", "file": "curl-cve-2022-27778/vuln.c", "function": "post_per_transfer", "id": "curl-cve-2022-27778:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2022-27778", "project": "curl", "relpath": "src/tool_operate.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "8c7ee9083d0d719d0a77ab20d9cc2ae84eeea7f3", "commit_url": "https://github.com/curl/curl/commit/8c7ee9083d0d719d0a77ab20d9cc2ae84eeea7f3", "cve": "CVE-2022-27778", "cwe": "CWE-119", "file": "curl-cve-2022-27778/fixed.c", "function": "post_per_transfer", "id": "curl-cve-2022-27778:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2022-27778", "project": "curl", "relpath": "src/tool_operate.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "ff3ee510c328db03bf171cae6179bb9463fb054f", "commit_url": "https://github.com/curl/curl/commit/fae6fea209a2d4db1582f608bd8cc8000721733a", "cve": "CVE-2022-30115", "cwe": "CWE-119", "file": "curl-cve-2022-30115/vuln.c", "function": "hsts_create", "id": "curl-cve-2022-30115:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2022-30115", "project": "curl", "relpath": "lib/hsts.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "fae6fea209a2d4db1582f608bd8cc8000721733a", "commit_url": "https://github.com/curl/curl/commit/fae6fea209a2d4db1582f608bd8cc8000721733a", "cve": "CVE-2022-30115", "cwe": "CWE-119", "file": "curl-cve-2022-30115/fixed.c", "function": "hsts_create", "id": "curl-cve-2022-30115:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2022-30115", "project": "curl", "relpath": "lib/hsts.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "5c7da89d404bf59c8dd82a001119a16d18365917", "commit_url": "https://github.com/curl/curl/commit/914aaab9153764ef8fa4178215b8ad89d3ac263a", "cve": "CVE-2022-27780", "cwe": "CWE-119", "file": "curl-cve-2022-27780/vuln.c", "function": "hostname_check", "id": "curl-cve-2022-27780:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2022-27780", "project": "curl", "relpath": "lib/urlapi.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "914aaab9153764ef8fa4178215b8ad89d3ac263a", "commit_url": "https://github.com/curl/curl/commit/914aaab9153764ef8fa4178215b8ad89d3ac263a", "cve": "CVE-2022-27780", "cwe": "CWE-119", "file": "curl-cve-2022-27780/fixed.c", "function": "hostname_check", "id": "curl-cve-2022-27780:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2022-27780", "project": "curl", "relpath": "lib/urlapi.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "08b8ef4e726ba10f45081ecda5b3cea788d3c839", "commit_url": "https://github.com/curl/curl/commit/620ea21410030a9977396b4661806bc187231b79", "cve": "CVE-2022-27774", "cwe": "CWE-119", "file": "curl-cve-2022-27774/vuln.c", "function": "Curl_follow", "id": "curl-cve-2022-27774:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2022-27774", "project": "curl", "relpath": "lib/transfer.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "620ea21410030a9977396b4661806bc187231b79", "commit_url": "https://github.com/curl/curl/commit/620ea21410030a9977396b4661806bc187231b79", "cve": "CVE-2022-27774", "cwe": "CWE-119", "file": "curl-cve-2022-27774/fixed.c", "function": "Curl_follow", "id": "curl-cve-2022-27774:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2022-27774", "project": "curl", "relpath": "lib/transfer.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "8f2079154f80561ccffcaa954268798b658e66b6", "commit_url": "https://github.com/curl/curl/commit/6e659993952aa5f90f48864be84a1bbb047fc258", "cve": "CVE-2022-27776", "cwe": "CWE-119", "file": "curl-cve-2022-27776/vuln.c", "function": "Curl_add_custom_headers", "id": "curl-cve-2022-27776:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2022-27776", "project": "curl", "relpath": "lib/http.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "6e659993952aa5f90f48864be84a1bbb047fc258", "commit_url": "https://github.com/curl/curl/commit/6e659993952aa5f90f48864be84a1bbb047fc258", "cve": "CVE-2022-27776", "cwe": "CWE-119", "file": "curl-cve-2022-27776/fixed.c", "function": "Curl_add_custom_headers", "id": "curl-cve-2022-27776:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2022-27776", "project": "curl", "relpath": "lib/http.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "852aa5ad351ea53e5f01d2f44b5b4370c2bf5425", "commit_url": "https://github.com/curl/curl/commit/058f98dc3fe595f21dc26a5b9b1699e519ba5705", "cve": "CVE-2022-27775", "cwe": "CWE-119", "file": "curl-cve-2022-27775/vuln.c", "function": "hashkey", "id": "curl-cve-2022-27775:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2022-27775", "project": "curl", "relpath": "lib/conncache.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "058f98dc3fe595f21dc26a5b9b1699e519ba5705", "commit_url": "https://github.com/curl/curl/commit/058f98dc3fe595f21dc26a5b9b1699e519ba5705", "cve": "CVE-2022-27775", "cwe": "CWE-119", "file": "curl-cve-2022-27775/fixed.c", "function": "hashkey", "id": "curl-cve-2022-27775:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2022-27775", "project": "curl", "relpath": "lib/conncache.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "ff2f3e836702daa82e2356195482fcc95f4257dc", "commit_url": "https://github.com/curl/curl/commit/852aa5ad351ea53e5f01d2f44b5b4370c2bf5425", "cve": "CVE-2022-22576", "cwe": "CWE-119", "file": "curl-cve-2022-22576-conn_free/vuln.c", "function": "conn_free", "id": "curl-cve-2022-22576-conn_free:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2022-22576-conn_free", "project": "curl", "relpath": "lib/url.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "852aa5ad351ea53e5f01d2f44b5b4370c2bf5425", "commit_url": "https://github.com/curl/curl/commit/852aa5ad351ea53e5f01d2f44b5b4370c2bf5425", "cve": "CVE-2022-22576", "cwe": "CWE-119", "file": "curl-cve-2022-22576-conn_free/fixed.c", "function": "conn_free", "id": "curl-cve-2022-22576-conn_free:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2022-22576-conn_free", "project": "curl", "relpath": "lib/url.c", "repo": "curl/curl", "year": 2022} -{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947/vuln.c", "function": "ftp_statemachine", "id": "curl-cve-2021-22947:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2021-22947", "project": "curl", "relpath": "lib/ftp.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "8ef147c43646e91fdaad5d0e7b60351f842e5c68", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947/fixed.c", "function": "ftp_statemachine", "id": "curl-cve-2021-22947:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2021-22947", "project": "curl", "relpath": "lib/ftp.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-imap_state_starttls_resp/vuln.c", "function": "imap_state_starttls_resp", "id": "curl-cve-2021-22947-imap_state_starttls_resp:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2021-22947-imap_state_starttls_resp", "project": "curl", "relpath": "lib/imap.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "8ef147c43646e91fdaad5d0e7b60351f842e5c68", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-imap_state_starttls_resp/fixed.c", "function": "imap_state_starttls_resp", "id": "curl-cve-2021-22947-imap_state_starttls_resp:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2021-22947-imap_state_starttls_resp", "project": "curl", "relpath": "lib/imap.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-pop3_state_starttls_resp/vuln.c", "function": "pop3_state_starttls_resp", "id": "curl-cve-2021-22947-pop3_state_starttls_resp:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2021-22947-pop3_state_starttls_resp", "project": "curl", "relpath": "lib/pop3.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "8ef147c43646e91fdaad5d0e7b60351f842e5c68", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-pop3_state_starttls_resp/fixed.c", "function": "pop3_state_starttls_resp", "id": "curl-cve-2021-22947-pop3_state_starttls_resp:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2021-22947-pop3_state_starttls_resp", "project": "curl", "relpath": "lib/pop3.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-smtp_state_starttls_resp/vuln.c", "function": "smtp_state_starttls_resp", "id": "curl-cve-2021-22947-smtp_state_starttls_resp:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2021-22947-smtp_state_starttls_resp", "project": "curl", "relpath": "lib/smtp.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "8ef147c43646e91fdaad5d0e7b60351f842e5c68", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-smtp_state_starttls_resp/fixed.c", "function": "smtp_state_starttls_resp", "id": "curl-cve-2021-22947-smtp_state_starttls_resp:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2021-22947-smtp_state_starttls_resp", "project": "curl", "relpath": "lib/smtp.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "43157490a5054bd24256fe12876931e8abc9df49", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946/vuln.c", "function": "ftp_statemachine", "id": "curl-cve-2021-22946:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2021-22946", "project": "curl", "relpath": "lib/ftp.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946/fixed.c", "function": "ftp_statemachine", "id": "curl-cve-2021-22946:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2021-22946", "project": "curl", "relpath": "lib/ftp.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "43157490a5054bd24256fe12876931e8abc9df49", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946-imap_state_capability_re/vuln.c", "function": "imap_state_capability_resp", "id": "curl-cve-2021-22946-imap_state_capability_re:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2021-22946-imap_state_capability_re", "project": "curl", "relpath": "lib/imap.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946-imap_state_capability_re/fixed.c", "function": "imap_state_capability_resp", "id": "curl-cve-2021-22946-imap_state_capability_re:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2021-22946-imap_state_capability_re", "project": "curl", "relpath": "lib/imap.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "43157490a5054bd24256fe12876931e8abc9df49", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946-pop3_state_capa_resp/vuln.c", "function": "pop3_state_capa_resp", "id": "curl-cve-2021-22946-pop3_state_capa_resp:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2021-22946-pop3_state_capa_resp", "project": "curl", "relpath": "lib/pop3.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946-pop3_state_capa_resp/fixed.c", "function": "pop3_state_capa_resp", "id": "curl-cve-2021-22946-pop3_state_capa_resp:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2021-22946-pop3_state_capa_resp", "project": "curl", "relpath": "lib/pop3.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "409a4412409371db00af0a3fe987e517bfab3d19", "commit_url": "https://github.com/curl/curl/commit/43157490a5054bd24256fe12876931e8abc9df49", "cve": "CVE-2021-22945", "cwe": "CWE-119", "file": "curl-cve-2021-22945/vuln.c", "function": "mqtt_send", "id": "curl-cve-2021-22945:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2021-22945", "project": "curl", "relpath": "lib/mqtt.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "43157490a5054bd24256fe12876931e8abc9df49", "commit_url": "https://github.com/curl/curl/commit/43157490a5054bd24256fe12876931e8abc9df49", "cve": "CVE-2021-22945", "cwe": "CWE-119", "file": "curl-cve-2021-22945/fixed.c", "function": "mqtt_send", "id": "curl-cve-2021-22945:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2021-22945", "project": "curl", "relpath": "lib/mqtt.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "fd9b40bf8dfd43edcbc0d254d613d95a11061c05", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924/vuln.c", "function": "create_conn", "id": "curl-cve-2021-22924:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2021-22924", "project": "curl", "relpath": "lib/url.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "5ea3145850ebff1dc2b13d17440300a01ca38161", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924/fixed.c", "function": "create_conn", "id": "curl-cve-2021-22924:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2021-22924", "project": "curl", "relpath": "lib/url.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "fd9b40bf8dfd43edcbc0d254d613d95a11061c05", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924-nss_do_connect/vuln.c", "function": "nss_do_connect", "id": "curl-cve-2021-22924-nss_do_connect:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2021-22924-nss_do_connect", "project": "curl", "relpath": "lib/vtls/nss.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "5ea3145850ebff1dc2b13d17440300a01ca38161", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924-nss_do_connect/fixed.c", "function": "nss_do_connect", "id": "curl-cve-2021-22924-nss_do_connect:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2021-22924-nss_do_connect", "project": "curl", "relpath": "lib/vtls/nss.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "fd9b40bf8dfd43edcbc0d254d613d95a11061c05", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924-servercert/vuln.c", "function": "servercert", "id": "curl-cve-2021-22924-servercert:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2021-22924-servercert", "project": "curl", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "5ea3145850ebff1dc2b13d17440300a01ca38161", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924-servercert/fixed.c", "function": "servercert", "id": "curl-cve-2021-22924-servercert:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2021-22924-servercert", "project": "curl", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "12284e008bad5156b67d0ac253331a96d77201d1", "commit_url": "https://github.com/curl/curl/commit/894f6ec730597eb243618d33cc84d71add8d6a8a", "cve": "CVE-2021-22925", "cwe": "CWE-119", "file": "curl-cve-2021-22925/vuln.c", "function": "suboption", "id": "curl-cve-2021-22925:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2021-22925", "project": "curl", "relpath": "lib/telnet.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "894f6ec730597eb243618d33cc84d71add8d6a8a", "commit_url": "https://github.com/curl/curl/commit/894f6ec730597eb243618d33cc84d71add8d6a8a", "cve": "CVE-2021-22925", "cwe": "CWE-119", "file": "curl-cve-2021-22925/fixed.c", "function": "suboption", "id": "curl-cve-2021-22925:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2021-22925", "project": "curl", "relpath": "lib/telnet.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "39ce47f219b09c380b81f89fe54ac586c8db6bde", "commit_url": "https://github.com/curl/curl/commit/7f4a9a9b2a49547eae24d2e19bc5c346e9026479", "cve": "CVE-2021-22901", "cwe": "CWE-119", "file": "curl-cve-2021-22901-ossl_connect_step1/vuln.c", "function": "ossl_connect_step1", "id": "curl-cve-2021-22901-ossl_connect_step1:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2021-22901-ossl_connect_step1", "project": "curl", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "7f4a9a9b2a49547eae24d2e19bc5c346e9026479", "commit_url": "https://github.com/curl/curl/commit/7f4a9a9b2a49547eae24d2e19bc5c346e9026479", "cve": "CVE-2021-22901", "cwe": "CWE-119", "file": "curl-cve-2021-22901-ossl_connect_step1/fixed.c", "function": "ossl_connect_step1", "id": "curl-cve-2021-22901-ossl_connect_step1:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2021-22901-ossl_connect_step1", "project": "curl", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "bbb71507b7bab52002f9b1e0880bed6a32834511", "commit_url": "https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde", "cve": "CVE-2021-22898", "cwe": "CWE-119", "file": "curl-cve-2021-22898/vuln.c", "function": "suboption", "id": "curl-cve-2021-22898:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2021-22898", "project": "curl", "relpath": "lib/telnet.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "39ce47f219b09c380b81f89fe54ac586c8db6bde", "commit_url": "https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde", "cve": "CVE-2021-22898", "cwe": "CWE-119", "file": "curl-cve-2021-22898/fixed.c", "function": "suboption", "id": "curl-cve-2021-22898:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2021-22898", "project": "curl", "relpath": "lib/telnet.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "7214288898f5625a6cc196e22a74232eada7861c", "commit_url": "https://github.com/curl/curl/commit/b09c8ee15771c614c4bf3ddac893cdb12187c844", "cve": "CVE-2021-22890", "cwe": "CWE-119", "file": "curl-cve-2021-22890/vuln.c", "function": "bearssl_connect_step1", "id": "curl-cve-2021-22890:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2021-22890", "project": "curl", "relpath": "lib/vtls/bearssl.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "b09c8ee15771c614c4bf3ddac893cdb12187c844", "commit_url": "https://github.com/curl/curl/commit/b09c8ee15771c614c4bf3ddac893cdb12187c844", "cve": "CVE-2021-22890", "cwe": "CWE-119", "file": "curl-cve-2021-22890/fixed.c", "function": "bearssl_connect_step1", "id": "curl-cve-2021-22890:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2021-22890", "project": "curl", "relpath": "lib/vtls/bearssl.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "184ffc0bdfcab17eb96d1dd64f9c0cecc139e3e9", "commit_url": "https://github.com/curl/curl/commit/7214288898f5625a6cc196e22a74232eada7861c", "cve": "CVE-2021-22876", "cwe": "CWE-119", "file": "curl-cve-2021-22876/vuln.c", "function": "Curl_follow", "id": "curl-cve-2021-22876:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2021-22876", "project": "curl", "relpath": "lib/transfer.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "7214288898f5625a6cc196e22a74232eada7861c", "commit_url": "https://github.com/curl/curl/commit/7214288898f5625a6cc196e22a74232eada7861c", "cve": "CVE-2021-22876", "cwe": "CWE-119", "file": "curl-cve-2021-22876/fixed.c", "function": "Curl_follow", "id": "curl-cve-2021-22876:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2021-22876", "project": "curl", "relpath": "lib/transfer.c", "repo": "curl/curl", "year": 2021} -{"class": "security fix", "commit": "69a358f2186e04cf44698b5100332cbf1ee7f01d", "commit_url": "https://github.com/curl/curl/commit/d9d01672785b8ac04aab1abb6de95fe3072ae199", "cve": "CVE-2020-8286", "cwe": "CWE-119", "file": "curl-cve-2020-8286/vuln.c", "function": "verifystatus", "id": "curl-cve-2020-8286:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2020-8286", "project": "curl", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "year": 2020} -{"class": "security fix", "commit": "d9d01672785b8ac04aab1abb6de95fe3072ae199", "commit_url": "https://github.com/curl/curl/commit/d9d01672785b8ac04aab1abb6de95fe3072ae199", "cve": "CVE-2020-8286", "cwe": "CWE-119", "file": "curl-cve-2020-8286/fixed.c", "function": "verifystatus", "id": "curl-cve-2020-8286:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2020-8286", "project": "curl", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "year": 2020} -{"class": "security fix", "commit": "abd846c374c5269809ce11740754bc6f00a0b193", "commit_url": "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "cve": "CVE-2020-8284", "cwe": "CWE-119", "file": "curl-cve-2020-8284/vuln.c", "function": "Curl_init_userdefined", "id": "curl-cve-2020-8284:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2020-8284", "project": "curl", "relpath": "lib/url.c", "repo": "curl/curl", "year": 2020} -{"class": "security fix", "commit": "ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "commit_url": "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "cve": "CVE-2020-8284", "cwe": "CWE-119", "file": "curl-cve-2020-8284/fixed.c", "function": "Curl_init_userdefined", "id": "curl-cve-2020-8284:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2020-8284", "project": "curl", "relpath": "lib/url.c", "repo": "curl/curl", "year": 2020} -{"class": "security fix", "commit": "abd846c374c5269809ce11740754bc6f00a0b193", "commit_url": "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "cve": "CVE-2020-8284", "cwe": "CWE-119", "file": "curl-cve-2020-8284-config_init/vuln.c", "function": "config_init", "id": "curl-cve-2020-8284-config_init:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2020-8284-config_init", "project": "curl", "relpath": "src/tool_cfgable.c", "repo": "curl/curl", "year": 2020} -{"class": "security fix", "commit": "ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "commit_url": "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "cve": "CVE-2020-8284", "cwe": "CWE-119", "file": "curl-cve-2020-8284-config_init/fixed.c", "function": "config_init", "id": "curl-cve-2020-8284-config_init:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2020-8284-config_init", "project": "curl", "relpath": "src/tool_cfgable.c", "repo": "curl/curl", "year": 2020} -{"class": "security fix", "commit": "687908c6e6332b2bf4ba74b271e795f9c65a5a61", "commit_url": "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22", "cve": "CVE-2020-8231", "cwe": "CWE-119", "file": "curl-cve-2020-8231-curl_multi_add_handle/vuln.c", "function": "curl_multi_add_handle", "id": "curl-cve-2020-8231-curl_multi_add_handle:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2020-8231-curl_multi_add_handle", "project": "curl", "relpath": "lib/multi.c", "repo": "curl/curl", "year": 2020} -{"class": "security fix", "commit": "3c9e021f86872baae412a427e807fbfa2f3e8a22", "commit_url": "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22", "cve": "CVE-2020-8231", "cwe": "CWE-119", "file": "curl-cve-2020-8231-curl_multi_add_handle/fixed.c", "function": "curl_multi_add_handle", "id": "curl-cve-2020-8231-curl_multi_add_handle:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2020-8231-curl_multi_add_handle", "project": "curl", "relpath": "lib/multi.c", "repo": "curl/curl", "year": 2020} -{"class": "security fix", "commit": "687908c6e6332b2bf4ba74b271e795f9c65a5a61", "commit_url": "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22", "cve": "CVE-2020-8231", "cwe": "CWE-119", "file": "curl-cve-2020-8231-curl_open/vuln.c", "function": "Curl_open", "id": "curl-cve-2020-8231-curl_open:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2020-8231-curl_open", "project": "curl", "relpath": "lib/url.c", "repo": "curl/curl", "year": 2020} -{"class": "security fix", "commit": "3c9e021f86872baae412a427e807fbfa2f3e8a22", "commit_url": "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22", "cve": "CVE-2020-8231", "cwe": "CWE-119", "file": "curl-cve-2020-8231-curl_open/fixed.c", "function": "Curl_open", "id": "curl-cve-2020-8231-curl_open:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2020-8231-curl_open", "project": "curl", "relpath": "lib/url.c", "repo": "curl/curl", "year": 2020} -{"class": "security fix", "commit": "26d2755d7c3181e90e46014778941bff53d2309f", "commit_url": "https://github.com/curl/curl/commit/8236aba58542c5f89f1d41ca09d84579efb05e22", "cve": "CVE-2020-8177", "cwe": "CWE-119", "file": "curl-cve-2020-8177/vuln.c", "function": "tool_header_cb", "id": "curl-cve-2020-8177:vuln", "label": "vuln", "license": "curl", "pair": "curl-cve-2020-8177", "project": "curl", "relpath": "src/tool_cb_hdr.c", "repo": "curl/curl", "year": 2020} -{"class": "security fix", "commit": "8236aba58542c5f89f1d41ca09d84579efb05e22", "commit_url": "https://github.com/curl/curl/commit/8236aba58542c5f89f1d41ca09d84579efb05e22", "cve": "CVE-2020-8177", "cwe": "CWE-119", "file": "curl-cve-2020-8177/fixed.c", "function": "tool_header_cb", "id": "curl-cve-2020-8177:fixed", "label": "fixed", "license": "curl", "pair": "curl-cve-2020-8177", "project": "curl", "relpath": "src/tool_cb_hdr.c", "repo": "curl/curl", "year": 2020} +{"class": "buffer over-read", "commit": "0d7717fc9c83dafab8153cbd5e2180e6e04cc802", "commit_url": "https://github.com/openssl/openssl/commit/96db9023b881d7cd9f379b0c154650d6c108e9a3", "cve": "CVE-2014-0160", "cwe": "CWE-126", "file": "openssl-cve-2014-0160/vuln.c", "function": "tls1_process_heartbeat", "id": "openssl-cve-2014-0160:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2014-0160", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2014} +{"class": "buffer over-read", "commit": "96db9023b881d7cd9f379b0c154650d6c108e9a3", "commit_url": "https://github.com/openssl/openssl/commit/96db9023b881d7cd9f379b0c154650d6c108e9a3", "cve": "CVE-2014-0160", "cwe": "CWE-126", "file": "openssl-cve-2014-0160/fixed.c", "function": "tls1_process_heartbeat", "id": "openssl-cve-2014-0160:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2014-0160", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2014} +{"class": "buffer overflow", "commit": "0c0f777161a9499dd149853ff62d356f75d16c2a", "commit_url": "https://hg.mozilla.org/mozilla-central/rev/b79b6cc78248eea7fda10bfb76aa273c19c9fa65", "cve": "CVE-2020-15667", "cwe": "CWE-119", "file": "firefox-cve-2020-15667/vuln.c", "function": "mar_insert_item", "id": "firefox-cve-2020-15667:vuln", "label": "vuln", "license": "MPL-2.0", "mechanism": "unchecked_length_copy", "pair": "firefox-cve-2020-15667", "project": "firefox", "provenance": "human", "relpath": "modules/libmar/src/mar_read.c", "repo": "mozilla-central", "split": "holdout", "year": 2020} +{"class": "buffer overflow", "commit": "b79b6cc78248eea7fda10bfb76aa273c19c9fa65", "commit_url": "https://hg.mozilla.org/mozilla-central/rev/b79b6cc78248eea7fda10bfb76aa273c19c9fa65", "cve": "CVE-2020-15667", "cwe": "CWE-119", "file": "firefox-cve-2020-15667/fixed.c", "function": "mar_insert_item", "id": "firefox-cve-2020-15667:fixed", "label": "fixed", "license": "MPL-2.0", "mechanism": "unchecked_length_copy", "pair": "firefox-cve-2020-15667", "project": "firefox", "provenance": "human", "relpath": "modules/libmar/src/mar_read.c", "repo": "mozilla-central", "split": "holdout", "year": 2020} +{"class": "use after free", "commit": "9f3fccdba567f30ea39b08f57d8d5b49cd832b4a", "commit_url": "https://github.com/chromium/chromium/commit/ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449", "cve": "CVE-2019-5786", "cwe": "CWE-416", "file": "chromium-cve-2019-5786/vuln.cc", "function": "ArrayBufferResult", "id": "chromium-cve-2019-5786:vuln", "label": "vuln", "license": "BSD-3-Clause", "mechanism": "uaf", "pair": "chromium-cve-2019-5786", "project": "chromium", "provenance": "human", "relpath": "third_party/blink/renderer/core/fileapi/file_reader_loader.cc", "repo": "chromium/chromium", "split": "train", "year": 2019} +{"class": "use after free", "commit": "ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449", "commit_url": "https://github.com/chromium/chromium/commit/ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449", "cve": "CVE-2019-5786", "cwe": "CWE-416", "file": "chromium-cve-2019-5786/fixed.cc", "function": "ArrayBufferResult", "id": "chromium-cve-2019-5786:fixed", "label": "fixed", "license": "BSD-3-Clause", "mechanism": "uaf", "pair": "chromium-cve-2019-5786", "project": "chromium", "provenance": "human", "relpath": "third_party/blink/renderer/core/fileapi/file_reader_loader.cc", "repo": "chromium/chromium", "split": "train", "year": 2019} +{"class": "null pointer dereference", "commit": "3656c08ab4b1b892730cb5e808b6f4298b08a2e6", "commit_url": "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4", "cve": "CVE-2020-1967", "cwe": "CWE-476", "file": "openssl-cve-2020-1967/vuln.c", "function": "tls1_check_sig_alg", "id": "openssl-cve-2020-1967:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2020-1967", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2020} +{"class": "null pointer dereference", "commit": "a87f3fe01a5a894aa27ccd6a239155fd129988e4", "commit_url": "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4", "cve": "CVE-2020-1967", "cwe": "CWE-476", "file": "openssl-cve-2020-1967/fixed.c", "function": "tls1_check_sig_alg", "id": "openssl-cve-2020-1967:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2020-1967", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2020} +{"class": "null pointer dereference", "commit": "198b11683568452282bd48828fcf60d4835bf327", "commit_url": "https://github.com/openssl/openssl/commit/b33c48b75aaf33c93aeda42d7138616b9e6a64cb", "cve": "CVE-2020-1971", "cwe": "CWE-476", "file": "openssl-cve-2020-1971/vuln.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2020-1971:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2020-1971", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "split": "holdout", "year": 2020} +{"class": "null pointer dereference", "commit": "b33c48b75aaf33c93aeda42d7138616b9e6a64cb", "commit_url": "https://github.com/openssl/openssl/commit/b33c48b75aaf33c93aeda42d7138616b9e6a64cb", "cve": "CVE-2020-1971", "cwe": "CWE-476", "file": "openssl-cve-2020-1971/fixed.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2020-1971:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2020-1971", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "split": "holdout", "year": 2020} +{"class": "integer overflow", "commit": "c1ddd392cf9737c09c1f9bf690adfbe596403c5e", "commit_url": "https://github.com/openssl/openssl/commit/c9fb704cf3af5524eb8e79961e31b60eee8c3c47", "cve": "CVE-2021-23840", "cwe": "CWE-190", "file": "openssl-cve-2021-23840/vuln.c", "function": "evp_EncryptDecryptUpdate", "id": "openssl-cve-2021-23840:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "signed_size_operand", "pair": "openssl-cve-2021-23840", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "integer overflow", "commit": "c9fb704cf3af5524eb8e79961e31b60eee8c3c47", "commit_url": "https://github.com/openssl/openssl/commit/c9fb704cf3af5524eb8e79961e31b60eee8c3c47", "cve": "CVE-2021-23840", "cwe": "CWE-190", "file": "openssl-cve-2021-23840/fixed.c", "function": "evp_EncryptDecryptUpdate", "id": "openssl-cve-2021-23840:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "signed_size_operand", "pair": "openssl-cve-2021-23840", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "buffer overflow", "commit": "8c74c9d1ade0fbdab5b815ddb747351b8b839641", "commit_url": "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "cve": "CVE-2021-3711", "cwe": "CWE-120", "file": "openssl-cve-2021-3711/vuln.c", "function": "sm2_plaintext_size", "id": "openssl-cve-2021-3711:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2021-3711", "project": "openssl", "provenance": "human", "relpath": "crypto/sm2/sm2_crypt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "buffer overflow", "commit": "59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "commit_url": "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "cve": "CVE-2021-3711", "cwe": "CWE-120", "file": "openssl-cve-2021-3711/fixed.c", "function": "sm2_plaintext_size", "id": "openssl-cve-2021-3711:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2021-3711", "project": "openssl", "provenance": "human", "relpath": "crypto/sm2/sm2_crypt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "buffer over-read", "commit": "1f365708a3318a5f1a395f90c38b584a58d37fb9", "commit_url": "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9", "cve": "CVE-2021-3712", "cwe": "CWE-125", "file": "openssl-cve-2021-3712/vuln.c", "function": "append_ia5", "id": "openssl-cve-2021-3712:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2021-3712", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "buffer over-read", "commit": "98624776c4d501c8badd6f772ab7048ac9191cb9", "commit_url": "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9", "cve": "CVE-2021-3712", "cwe": "CWE-125", "file": "openssl-cve-2021-3712/fixed.c", "function": "append_ia5", "id": "openssl-cve-2021-3712:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2021-3712", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "infinite loop", "commit": "1832bb0f02e519a48f06a10467c7ce5f7f3feeeb", "commit_url": "https://github.com/openssl/openssl/commit/9eafb53614bf65797db25f467946e735e1b43dc9", "cve": "CVE-2022-0778", "cwe": "CWE-835", "file": "openssl-cve-2022-0778/vuln.c", "function": "BN_mod_sqrt", "id": "openssl-cve-2022-0778:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-0778", "project": "openssl", "provenance": "human", "relpath": "crypto/bn/bn_sqrt.c", "repo": "openssl/openssl", "split": "train", "year": 2022} +{"class": "infinite loop", "commit": "9eafb53614bf65797db25f467946e735e1b43dc9", "commit_url": "https://github.com/openssl/openssl/commit/9eafb53614bf65797db25f467946e735e1b43dc9", "cve": "CVE-2022-0778", "cwe": "CWE-835", "file": "openssl-cve-2022-0778/fixed.c", "function": "BN_mod_sqrt", "id": "openssl-cve-2022-0778:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-0778", "project": "openssl", "provenance": "human", "relpath": "crypto/bn/bn_sqrt.c", "repo": "openssl/openssl", "split": "train", "year": 2022} +{"class": "command injection", "commit": "7d56a74a96828985db7354a55227a511615f732b", "commit_url": "https://github.com/openssl/openssl/commit/1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2", "cve": "CVE-2022-1292", "cwe": "CWE-78", "file": "openssl-cve-2022-1292/vuln.in", "function": "link_hash_cert", "id": "openssl-cve-2022-1292:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "source_reaches_sink", "pair": "openssl-cve-2022-1292", "project": "openssl", "provenance": "human", "relpath": "tools/c_rehash.in", "repo": "openssl/openssl", "split": "holdout", "year": 2022} +{"class": "command injection", "commit": "1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2", "commit_url": "https://github.com/openssl/openssl/commit/1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2", "cve": "CVE-2022-1292", "cwe": "CWE-78", "file": "openssl-cve-2022-1292/fixed.in", "function": "link_hash_cert", "id": "openssl-cve-2022-1292:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "source_reaches_sink", "pair": "openssl-cve-2022-1292", "project": "openssl", "provenance": "human", "relpath": "tools/c_rehash.in", "repo": "openssl/openssl", "split": "holdout", "year": 2022} +{"class": "buffer overflow", "commit": "89d72311327735ef15c804d2adea84a0fb1bfa0a", "commit_url": "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332", "cve": "CVE-2022-3602", "cwe": "CWE-787", "file": "openssl-cve-2022-3602/vuln.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3602:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-3602", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "split": "train", "year": 2022} +{"class": "buffer overflow", "commit": "3b421ebc64c7b52f1b9feb3812bdc7781c784332", "commit_url": "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332", "cve": "CVE-2022-3602", "cwe": "CWE-787", "file": "openssl-cve-2022-3602/fixed.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3602:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-3602", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "split": "train", "year": 2022} +{"class": "buffer overflow", "commit": "3b421ebc64c7b52f1b9feb3812bdc7781c784332", "commit_url": "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "cve": "CVE-2022-3786", "cwe": "CWE-787", "file": "openssl-cve-2022-3786/vuln.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3786:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-3786", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} +{"class": "buffer overflow", "commit": "680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "commit_url": "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "cve": "CVE-2022-3786", "cwe": "CWE-787", "file": "openssl-cve-2022-3786/fixed.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3786:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-3786", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} +{"class": "type confusion", "commit": "adf77d6657e836fc87391fad53d857927a764297", "commit_url": "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f", "cve": "CVE-2023-0286", "cwe": "CWE-843", "file": "openssl-cve-2023-0286/vuln.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2023-0286:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "type_confusion", "pair": "openssl-cve-2023-0286", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "split": "train", "year": 2023} +{"class": "type confusion", "commit": "7880536fe17c2b5450e279155bedd51771d28c9f", "commit_url": "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f", "cve": "CVE-2023-0286", "cwe": "CWE-843", "file": "openssl-cve-2023-0286/fixed.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2023-0286:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "type_confusion", "pair": "openssl-cve-2023-0286", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "split": "train", "year": 2023} +{"class": "heap buffer overflow", "commit": "09e25b9d94f4106eac8ca3a43b221bdc66f405e4", "commit_url": "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147", "cve": "CVE-2023-38545", "cwe": "CWE-122", "file": "curl-cve-2023-38545/vuln.c", "function": "do_SOCKS5", "id": "curl-cve-2023-38545:vuln", "label": "vuln", "license": "curl", "mechanism": "unchecked_length_copy", "pair": "curl-cve-2023-38545", "project": "curl", "provenance": "human", "relpath": "lib/socks.c", "repo": "curl/curl", "split": "holdout", "year": 2023} +{"class": "heap buffer overflow", "commit": "fb4415d8aee6c1045be932a34fe6107c2f5ed147", "commit_url": "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147", "cve": "CVE-2023-38545", "cwe": "CWE-122", "file": "curl-cve-2023-38545/fixed.c", "function": "do_SOCKS5", "id": "curl-cve-2023-38545:fixed", "label": "fixed", "license": "curl", "mechanism": "unchecked_length_copy", "pair": "curl-cve-2023-38545", "project": "curl", "provenance": "human", "relpath": "lib/socks.c", "repo": "curl/curl", "split": "holdout", "year": 2023} +{"class": "insufficient input validation", "commit": "a07d0ae0a7dc68686adca10dcf11138cb2f4ab6d", "commit_url": "https://github.com/chromium/chromium/commit/22c61cfae5d1b37c773e638d342488ae11118b51", "cve": "CVE-2022-2162", "cwe": "CWE-20", "file": "chromium-cve-2022-2162/vuln.cc", "function": "IsShellIntegratedExtension", "id": "chromium-cve-2022-2162:vuln", "label": "vuln", "license": "BSD-3-Clause", "mechanism": "validation_strength", "pair": "chromium-cve-2022-2162", "project": "chromium", "provenance": "human", "relpath": "content/browser/file_system_access/file_system_chooser.cc", "repo": "chromium/chromium", "split": "holdout", "year": 2022} +{"class": "insufficient input validation", "commit": "22c61cfae5d1b37c773e638d342488ae11118b51", "commit_url": "https://github.com/chromium/chromium/commit/22c61cfae5d1b37c773e638d342488ae11118b51", "cve": "CVE-2022-2162", "cwe": "CWE-20", "file": "chromium-cve-2022-2162/fixed.cc", "function": "IsShellIntegratedExtension", "id": "chromium-cve-2022-2162:fixed", "label": "fixed", "license": "BSD-3-Clause", "mechanism": "validation_strength", "pair": "chromium-cve-2022-2162", "project": "chromium", "provenance": "human", "relpath": "content/browser/file_system_access/file_system_chooser.cc", "repo": "chromium/chromium", "split": "holdout", "year": 2022} +{"class": "null pointer dereference", "commit": "ea8fc4c345fbd749048809c9f7c881ea656b0b94", "commit_url": "https://github.com/openssl/openssl/commit/2c13bf15286328641a805eb3b7c97e27d42881fb", "cve": "CVE-2025-69421", "cwe": "CWE-476", "file": "openssl-cve-2025-69421/vuln.c", "function": "PKCS12_item_decrypt_d2i_ex", "id": "openssl-cve-2025-69421:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2025-69421", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_decr.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} +{"class": "null pointer dereference", "commit": "2c13bf15286328641a805eb3b7c97e27d42881fb", "commit_url": "https://github.com/openssl/openssl/commit/2c13bf15286328641a805eb3b7c97e27d42881fb", "cve": "CVE-2025-69421", "cwe": "CWE-476", "file": "openssl-cve-2025-69421/fixed.c", "function": "PKCS12_item_decrypt_d2i_ex", "id": "openssl-cve-2025-69421:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2025-69421", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_decr.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} +{"class": "uncontrolled allocation", "commit": "b21663c35a6f0ed4c8de06855bdc7a6a21f00c2f", "commit_url": "https://github.com/openssl/openssl/commit/84f73f79af9f69c1527a9a372b7a9e771a394c2a", "cve": "CVE-2025-66199", "cwe": "CWE-770", "file": "openssl-cve-2025-66199/vuln.c", "function": "tls13_process_compressed_certificate", "id": "openssl-cve-2025-66199:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_alloc_size", "pair": "openssl-cve-2025-66199", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2025} +{"class": "uncontrolled allocation", "commit": "84f73f79af9f69c1527a9a372b7a9e771a394c2a", "commit_url": "https://github.com/openssl/openssl/commit/84f73f79af9f69c1527a9a372b7a9e771a394c2a", "cve": "CVE-2025-66199", "cwe": "CWE-770", "file": "openssl-cve-2025-66199/fixed.c", "function": "tls13_process_compressed_certificate", "id": "openssl-cve-2025-66199:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_alloc_size", "pair": "openssl-cve-2025-66199", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2025} +{"class": "uncontrolled allocation", "commit": "eed0931f85474d0db6e2326dfd9718c6bf1cd418", "commit_url": "https://github.com/mozilla-firefox/firefox/commit/e46f28da1cd3a5d46a2680b3d87361e9e8de4ae6", "cve": "BUG-2058173", "cwe": "CWE-770", "file": "firefox-bug-2058173/vuln.c", "function": "mar_read_index", "id": "firefox-bug-2058173:vuln", "label": "vuln", "license": "MPL-2.0", "mechanism": "unchecked_alloc_size", "pair": "firefox-bug-2058173", "project": "firefox", "provenance": "human", "relpath": "modules/libmar/src/mar_read.c", "repo": "mozilla-firefox/firefox", "split": "train", "year": 2026} +{"class": "uncontrolled allocation", "commit": "e46f28da1cd3a5d46a2680b3d87361e9e8de4ae6", "commit_url": "https://github.com/mozilla-firefox/firefox/commit/e46f28da1cd3a5d46a2680b3d87361e9e8de4ae6", "cve": "BUG-2058173", "cwe": "CWE-770", "file": "firefox-bug-2058173/fixed.c", "function": "mar_read_index", "id": "firefox-bug-2058173:fixed", "label": "fixed", "license": "MPL-2.0", "mechanism": "unchecked_alloc_size", "pair": "firefox-bug-2058173", "project": "firefox", "provenance": "human", "relpath": "modules/libmar/src/mar_read.c", "repo": "mozilla-firefox/firefox", "split": "train", "year": 2026} +{"class": "security fix", "commit": "48f5785425ee6b5316f8e5f921978397ba632cc6", "commit_url": "https://github.com/openssl/openssl/commit/70cebd74d3592f5272945501b58a60374c4e13af", "cve": "CVE-2026-18798", "cwe": "CWE-119", "file": "openssl-cve-2026-18798/vuln.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-18798:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-18798", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "70cebd74d3592f5272945501b58a60374c4e13af", "commit_url": "https://github.com/openssl/openssl/commit/70cebd74d3592f5272945501b58a60374c4e13af", "cve": "CVE-2026-18798", "cwe": "CWE-119", "file": "openssl-cve-2026-18798/fixed.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-18798:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-18798", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "a0c8ec557d9cac078f032d76cdf684fe743eb382", "commit_url": "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874/vuln.c", "function": "DTLS_RECORD_LAYER_clear", "id": "openssl-cve-2026-54874:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-54874", "project": "openssl", "provenance": "human", "relpath": "ssl/record/rec_layer_d1.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "commit_url": "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874/fixed.c", "function": "DTLS_RECORD_LAYER_clear", "id": "openssl-cve-2026-54874:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-54874", "project": "openssl", "provenance": "human", "relpath": "ssl/record/rec_layer_d1.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "a0c8ec557d9cac078f032d76cdf684fe743eb382", "commit_url": "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874-dtls1_process_record/vuln.c", "function": "dtls1_process_record", "id": "openssl-cve-2026-54874-dtls1_process_record:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-54874-dtls1_process_record", "project": "openssl", "provenance": "human", "relpath": "ssl/record/ssl3_record.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "commit_url": "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874-dtls1_process_record/fixed.c", "function": "dtls1_process_record", "id": "openssl-cve-2026-54874-dtls1_process_record:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-54874-dtls1_process_record", "project": "openssl", "provenance": "human", "relpath": "ssl/record/ssl3_record.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "9ec2f6d2ae2bcad907cf7ee38584855bafe4979a", "commit_url": "https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor/vuln.c", "function": "dtls_rlayer_buffer_record", "id": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/dtls_meth.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "7110cb2f75806d0bf809eb2f90790d477900be40", "commit_url": "https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40", "cve": "CVE-2026-54874", "cwe": "CWE-119", "file": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor/fixed.c", "function": "dtls_rlayer_buffer_record", "id": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-54874-dtls_rlayer_buffer_recor", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/dtls_meth.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "buffer overflow", "commit": "d307f61f1b341b6eb7d5d07bd6902a939c709bc6", "commit_url": "https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382", "cve": "CVE-2026-63072", "cwe": "CWE-119", "file": "openssl-cve-2026-63072/vuln.c", "function": "cms_kek_cipher", "id": "openssl-cve-2026-63072:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-63072", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_kari.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "buffer overflow", "commit": "a0c8ec557d9cac078f032d76cdf684fe743eb382", "commit_url": "https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382", "cve": "CVE-2026-63072", "cwe": "CWE-119", "file": "openssl-cve-2026-63072/fixed.c", "function": "cms_kek_cipher", "id": "openssl-cve-2026-63072:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-63072", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_kari.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "buffer overflow", "commit": "1951c3cbd9d5101e027a1eb126f26c3c758f6cc0", "commit_url": "https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756", "cve": "CVE-2026-63072", "cwe": "CWE-119", "file": "openssl-cve-2026-63072-cms_kek_cipher/vuln.c", "function": "cms_kek_cipher", "id": "openssl-cve-2026-63072-cms_kek_cipher:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-63072-cms_kek_cipher", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_kemri.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "buffer overflow", "commit": "2a3dac874c8057c1f0186849bf1ede1ae7b6b756", "commit_url": "https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756", "cve": "CVE-2026-63072", "cwe": "CWE-119", "file": "openssl-cve-2026-63072-cms_kek_cipher/fixed.c", "function": "cms_kek_cipher", "id": "openssl-cve-2026-63072-cms_kek_cipher:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-63072-cms_kek_cipher", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_kemri.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "1e8c398db67404babd3e5af999bb6bd86f720c76", "commit_url": "https://github.com/openssl/openssl/commit/a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4", "cve": "CVE-2026-63073", "cwe": "CWE-119", "file": "openssl-cve-2026-63073/vuln.c", "function": "ossl_cmp_msg_check_update", "id": "openssl-cve-2026-63073:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-63073", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_vfy.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4", "commit_url": "https://github.com/openssl/openssl/commit/a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4", "cve": "CVE-2026-63073", "cwe": "CWE-119", "file": "openssl-cve-2026-63073/fixed.c", "function": "ossl_cmp_msg_check_update", "id": "openssl-cve-2026-63073:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-63073", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_vfy.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "f636f9ca0fa1bae5b42f9e787f025c96fb09c43a", "commit_url": "https://github.com/openssl/openssl/commit/1e8c398db67404babd3e5af999bb6bd86f720c76", "cve": "CVE-2026-14457", "cwe": "CWE-119", "file": "openssl-cve-2026-14457/vuln.c", "function": "check_cert_usable", "id": "openssl-cve-2026-14457:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-14457", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "1e8c398db67404babd3e5af999bb6bd86f720c76", "commit_url": "https://github.com/openssl/openssl/commit/1e8c398db67404babd3e5af999bb6bd86f720c76", "cve": "CVE-2026-14457", "cwe": "CWE-119", "file": "openssl-cve-2026-14457/fixed.c", "function": "check_cert_usable", "id": "openssl-cve-2026-14457:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-14457", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "9f2b8522d39ff869fac2ff7c3f20609b54843188", "commit_url": "https://github.com/openssl/openssl/commit/21a5d9658b0c66daace60e10ea18ff32a448de9f", "cve": "CVE-2026-63074", "cwe": "CWE-119", "file": "openssl-cve-2026-63074/vuln.c", "function": "ossl_cmp_msg_check_update", "id": "openssl-cve-2026-63074:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-63074", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_vfy.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "21a5d9658b0c66daace60e10ea18ff32a448de9f", "commit_url": "https://github.com/openssl/openssl/commit/21a5d9658b0c66daace60e10ea18ff32a448de9f", "cve": "CVE-2026-63074", "cwe": "CWE-119", "file": "openssl-cve-2026-63074/fixed.c", "function": "ossl_cmp_msg_check_update", "id": "openssl-cve-2026-63074:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-63074", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_vfy.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "a1f348ccb328c3afbd4ba6883f9b7c813c043259", "commit_url": "https://github.com/openssl/openssl/commit/c902e5f16d6a9e130e96d3ca6d8f64d71652e393", "cve": "CVE-2026-63075", "cwe": "CWE-119", "file": "openssl-cve-2026-63075-txp_pkt_commit/vuln.c", "function": "txp_pkt_commit", "id": "openssl-cve-2026-63075-txp_pkt_commit:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-63075-txp_pkt_commit", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_txp.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "c902e5f16d6a9e130e96d3ca6d8f64d71652e393", "commit_url": "https://github.com/openssl/openssl/commit/c902e5f16d6a9e130e96d3ca6d8f64d71652e393", "cve": "CVE-2026-63075", "cwe": "CWE-119", "file": "openssl-cve-2026-63075-txp_pkt_commit/fixed.c", "function": "txp_pkt_commit", "id": "openssl-cve-2026-63075-txp_pkt_commit:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-63075-txp_pkt_commit", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_txp.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "39488cb863074d5b8ece833905f7ad2b357d44fe", "commit_url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803/vuln.c", "function": "aes_ocb_cipher", "id": "openssl-cve-2026-75803:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-75803", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_ocb.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "119ab9555dc62275bbd71f6f49529b1a44feba42", "commit_url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803/fixed.c", "function": "aes_ocb_cipher", "id": "openssl-cve-2026-75803:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-75803", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_ocb.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "39488cb863074d5b8ece833905f7ad2b357d44fe", "commit_url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803-chacha20_poly1305_cipher/vuln.c", "function": "chacha20_poly1305_cipher", "id": "openssl-cve-2026-75803-chacha20_poly1305_cipher:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-75803-chacha20_poly1305_cipher", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_chacha20_poly1305.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "119ab9555dc62275bbd71f6f49529b1a44feba42", "commit_url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803-chacha20_poly1305_cipher/fixed.c", "function": "chacha20_poly1305_cipher", "id": "openssl-cve-2026-75803-chacha20_poly1305_cipher:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-75803-chacha20_poly1305_cipher", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_chacha20_poly1305.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "de7d1871087fc1fa3e2c1db4b11275b68d72f416", "commit_url": "https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803-aes_gcm_siv_finish/vuln.c", "function": "aes_gcm_siv_finish", "id": "openssl-cve-2026-75803-aes_gcm_siv_finish:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-75803-aes_gcm_siv_finish", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "bf95f5f772e9362f87b25cfa2f8cb15d984865b9", "commit_url": "https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9", "cve": "CVE-2026-75803", "cwe": "CWE-119", "file": "openssl-cve-2026-75803-aes_gcm_siv_finish/fixed.c", "function": "aes_gcm_siv_finish", "id": "openssl-cve-2026-75803-aes_gcm_siv_finish:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-75803-aes_gcm_siv_finish", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "2dacccc943b47b8dc1ce8f7109c9852391b5a0d8", "commit_url": "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9", "cve": "CVE-2026-14456", "cwe": "CWE-119", "file": "openssl-cve-2026-14456-port_default_packet_hand/vuln.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-14456-port_default_packet_hand:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-14456-port_default_packet_hand", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "08e7756c3900bcfd77a720e7b74e27d6e4ed01a9", "commit_url": "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9", "cve": "CVE-2026-14456", "cwe": "CWE-119", "file": "openssl-cve-2026-14456-port_default_packet_hand/fixed.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-14456-port_default_packet_hand:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-14456-port_default_packet_hand", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "2c9a078b6030444ed868a3943991f42b35cd49dc", "commit_url": "https://github.com/openssl/openssl/commit/9416706d408bb84deb7cee4647bff3045d2dc7ba", "cve": "CVE-2026-14456", "cwe": "CWE-119", "file": "openssl-cve-2026-14456-expect_quic_for_value/vuln.c", "function": "expect_quic_for_value", "id": "openssl-cve-2026-14456-expect_quic_for_value:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-14456-expect_quic_for_value", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_impl.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "9416706d408bb84deb7cee4647bff3045d2dc7ba", "commit_url": "https://github.com/openssl/openssl/commit/9416706d408bb84deb7cee4647bff3045d2dc7ba", "cve": "CVE-2026-14456", "cwe": "CWE-119", "file": "openssl-cve-2026-14456-expect_quic_for_value/fixed.c", "function": "expect_quic_for_value", "id": "openssl-cve-2026-14456-expect_quic_for_value:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-14456-expect_quic_for_value", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_impl.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "use after free", "commit": "609bcb24866d64f1fc49d38b852edbb39057d721", "commit_url": "https://github.com/openssl/openssl/commit/f4129fbe3cde786d363510069fe297234f99be8f", "cve": "CVE-2026-45447", "cwe": "CWE-416", "file": "openssl-cve-2026-45447/vuln.c", "function": "PKCS7_verify", "id": "openssl-cve-2026-45447:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2026-45447", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_smime.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "use after free", "commit": "f4129fbe3cde786d363510069fe297234f99be8f", "commit_url": "https://github.com/openssl/openssl/commit/f4129fbe3cde786d363510069fe297234f99be8f", "cve": "CVE-2026-45447", "cwe": "CWE-416", "file": "openssl-cve-2026-45447/fixed.c", "function": "PKCS7_verify", "id": "openssl-cve-2026-45447:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2026-45447", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_smime.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "f87f0b6a8e04bcdeb98afc82b0da06a2d537f399", "commit_url": "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721", "cve": "CVE-2026-45446", "cwe": "CWE-119", "file": "openssl-cve-2026-45446/vuln.c", "function": "aes_gcm_siv_initkey", "id": "openssl-cve-2026-45446:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-45446", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "609bcb24866d64f1fc49d38b852edbb39057d721", "commit_url": "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721", "cve": "CVE-2026-45446", "cwe": "CWE-119", "file": "openssl-cve-2026-45446/fixed.c", "function": "aes_gcm_siv_initkey", "id": "openssl-cve-2026-45446:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-45446", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "f87f0b6a8e04bcdeb98afc82b0da06a2d537f399", "commit_url": "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721", "cve": "CVE-2026-45446", "cwe": "CWE-119", "file": "openssl-cve-2026-45446-aes_siv_set_ctx_params/vuln.c", "function": "aes_siv_set_ctx_params", "id": "openssl-cve-2026-45446-aes_siv_set_ctx_params:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-45446-aes_siv_set_ctx_params", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_siv.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "609bcb24866d64f1fc49d38b852edbb39057d721", "commit_url": "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721", "cve": "CVE-2026-45446", "cwe": "CWE-119", "file": "openssl-cve-2026-45446-aes_siv_set_ctx_params/fixed.c", "function": "aes_siv_set_ctx_params", "id": "openssl-cve-2026-45446-aes_siv_set_ctx_params:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-45446-aes_siv_set_ctx_params", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_siv.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "5f489043b662fed32fbf7eb7442c479568eb43fd", "commit_url": "https://github.com/openssl/openssl/commit/f87f0b6a8e04bcdeb98afc82b0da06a2d537f399", "cve": "CVE-2026-45445", "cwe": "CWE-119", "file": "openssl-cve-2026-45445/vuln.c", "function": "aes_ocb_cipher", "id": "openssl-cve-2026-45445:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-45445", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_ocb.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "f87f0b6a8e04bcdeb98afc82b0da06a2d537f399", "commit_url": "https://github.com/openssl/openssl/commit/f87f0b6a8e04bcdeb98afc82b0da06a2d537f399", "cve": "CVE-2026-45445", "cwe": "CWE-119", "file": "openssl-cve-2026-45445/fixed.c", "function": "aes_ocb_cipher", "id": "openssl-cve-2026-45445:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-45445", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_ocb.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "0f3fab2eccc7c3417093a8243dd15d95b6cb472d", "commit_url": "https://github.com/openssl/openssl/commit/b3a555a0a7aa0028887149f6f973af89a4937bea", "cve": "CVE-2026-42771", "cwe": "CWE-119", "file": "openssl-cve-2026-42771/vuln.c", "function": "validate_hostname_part", "id": "openssl-cve-2026-42771:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-42771", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vpm.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "b3a555a0a7aa0028887149f6f973af89a4937bea", "commit_url": "https://github.com/openssl/openssl/commit/b3a555a0a7aa0028887149f6f973af89a4937bea", "cve": "CVE-2026-42771", "cwe": "CWE-119", "file": "openssl-cve-2026-42771/fixed.c", "function": "validate_hostname_part", "id": "openssl-cve-2026-42771:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-42771", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vpm.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "null pointer dereference", "commit": "d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "commit_url": "https://github.com/openssl/openssl/commit/c2765d53c2649b56bc1ca1bb799e42002953056a", "cve": "CVE-2026-42769", "cwe": "CWE-476", "file": "openssl-cve-2026-42769/vuln.c", "function": "selfsigned_verify_cb", "id": "openssl-cve-2026-42769:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42769", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_genm.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "null pointer dereference", "commit": "c2765d53c2649b56bc1ca1bb799e42002953056a", "commit_url": "https://github.com/openssl/openssl/commit/c2765d53c2649b56bc1ca1bb799e42002953056a", "cve": "CVE-2026-42769", "cwe": "CWE-476", "file": "openssl-cve-2026-42769/fixed.c", "function": "selfsigned_verify_cb", "id": "openssl-cve-2026-42769:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42769", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_genm.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "f04d65692dd8109be9f387ce2ddd9fb1ab612b6b", "commit_url": "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "cve": "CVE-2026-42768", "cwe": "CWE-119", "file": "openssl-cve-2026-42768/vuln.c", "function": "cms_RecipientInfo_ktri_decrypt", "id": "openssl-cve-2026-42768:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-42768", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_env.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "commit_url": "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "cve": "CVE-2026-42768", "cwe": "CWE-119", "file": "openssl-cve-2026-42768/fixed.c", "function": "cms_RecipientInfo_ktri_decrypt", "id": "openssl-cve-2026-42768:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-42768", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_env.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "f04d65692dd8109be9f387ce2ddd9fb1ab612b6b", "commit_url": "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "cve": "CVE-2026-42768", "cwe": "CWE-119", "file": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo/vuln.c", "function": "pkcs7_decrypt_rinfo", "id": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_doit.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "commit_url": "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369", "cve": "CVE-2026-42768", "cwe": "CWE-119", "file": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo/fixed.c", "function": "pkcs7_decrypt_rinfo", "id": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-42768-pkcs7_decrypt_rinfo", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_doit.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "null pointer dereference", "commit": "a9af3442290e8a04706a3cd5f284ffd5b486e3f6", "commit_url": "https://github.com/openssl/openssl/commit/74245170b5a64b234ac4af27c86a25ec251c8b2a", "cve": "CVE-2026-42766", "cwe": "CWE-476", "file": "openssl-cve-2026-42766/vuln.c", "function": "ossl_cms_RecipientInfo_pwri_crypt", "id": "openssl-cve-2026-42766:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42766", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "null pointer dereference", "commit": "74245170b5a64b234ac4af27c86a25ec251c8b2a", "commit_url": "https://github.com/openssl/openssl/commit/74245170b5a64b234ac4af27c86a25ec251c8b2a", "cve": "CVE-2026-42766", "cwe": "CWE-476", "file": "openssl-cve-2026-42766/fixed.c", "function": "ossl_cms_RecipientInfo_pwri_crypt", "id": "openssl-cve-2026-42766:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42766", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "null pointer dereference", "commit": "5097ec4dae239112498abb722e255ea60ef7ac48", "commit_url": "https://github.com/openssl/openssl/commit/a9af3442290e8a04706a3cd5f284ffd5b486e3f6", "cve": "CVE-2026-42765", "cwe": "CWE-476", "file": "openssl-cve-2026-42765/vuln.c", "function": "check_revocation", "id": "openssl-cve-2026-42765:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42765", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "null pointer dereference", "commit": "a9af3442290e8a04706a3cd5f284ffd5b486e3f6", "commit_url": "https://github.com/openssl/openssl/commit/a9af3442290e8a04706a3cd5f284ffd5b486e3f6", "cve": "CVE-2026-42765", "cwe": "CWE-476", "file": "openssl-cve-2026-42765/fixed.c", "function": "check_revocation", "id": "openssl-cve-2026-42765:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42765", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "null pointer dereference", "commit": "58633b658fe74095c8cdde191e4ce1bf94f8c5f9", "commit_url": "https://github.com/openssl/openssl/commit/5097ec4dae239112498abb722e255ea60ef7ac48", "cve": "CVE-2026-42764", "cwe": "CWE-476", "file": "openssl-cve-2026-42764/vuln.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-42764:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42764", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "null pointer dereference", "commit": "5097ec4dae239112498abb722e255ea60ef7ac48", "commit_url": "https://github.com/openssl/openssl/commit/5097ec4dae239112498abb722e255ea60ef7ac48", "cve": "CVE-2026-42764", "cwe": "CWE-476", "file": "openssl-cve-2026-42764/fixed.c", "function": "port_default_packet_handler", "id": "openssl-cve-2026-42764:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-42764", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_port.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "68ef88913e321bdb47eee88118ceba18ed2388cd", "commit_url": "https://github.com/openssl/openssl/commit/58633b658fe74095c8cdde191e4ce1bf94f8c5f9", "cve": "CVE-2026-35188", "cwe": "CWE-119", "file": "openssl-cve-2026-35188/vuln.c", "function": "check_cert_ocsp_resp", "id": "openssl-cve-2026-35188:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-35188", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "58633b658fe74095c8cdde191e4ce1bf94f8c5f9", "commit_url": "https://github.com/openssl/openssl/commit/58633b658fe74095c8cdde191e4ce1bf94f8c5f9", "cve": "CVE-2026-35188", "cwe": "CWE-119", "file": "openssl-cve-2026-35188/fixed.c", "function": "check_cert_ocsp_resp", "id": "openssl-cve-2026-35188:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-35188", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "fcb23806047f5afbe55d5d601a527fc24bf7ca2c", "commit_url": "https://github.com/openssl/openssl/commit/5a0230b6cc95a576b0c2b7b5b2ba7c74232e7b7c", "cve": "CVE-2026-34181", "cwe": "CWE-119", "file": "openssl-cve-2026-34181/vuln.c", "function": "PBMAC1_PBKDF2_HMAC", "id": "openssl-cve-2026-34181:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-34181", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "5a0230b6cc95a576b0c2b7b5b2ba7c74232e7b7c", "commit_url": "https://github.com/openssl/openssl/commit/5a0230b6cc95a576b0c2b7b5b2ba7c74232e7b7c", "cve": "CVE-2026-34181", "cwe": "CWE-119", "file": "openssl-cve-2026-34181/fixed.c", "function": "PBMAC1_PBKDF2_HMAC", "id": "openssl-cve-2026-34181:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-34181", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "buffer overflow", "commit": "97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9", "commit_url": "https://github.com/openssl/openssl/commit/51d1800e95283a8beec85152e35e3634dab8dd82", "cve": "CVE-2026-9076", "cwe": "CWE-119", "file": "openssl-cve-2026-9076/vuln.c", "function": "kek_unwrap_key", "id": "openssl-cve-2026-9076:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-9076", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "buffer overflow", "commit": "51d1800e95283a8beec85152e35e3634dab8dd82", "commit_url": "https://github.com/openssl/openssl/commit/51d1800e95283a8beec85152e35e3634dab8dd82", "cve": "CVE-2026-9076", "cwe": "CWE-119", "file": "openssl-cve-2026-9076/fixed.c", "function": "kek_unwrap_key", "id": "openssl-cve-2026-9076:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-9076", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "cb005ceaaf1fb50722e0101762a3e266338c5bf9", "commit_url": "https://github.com/openssl/openssl/commit/97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9", "cve": "CVE-2026-7383", "cwe": "CWE-119", "file": "openssl-cve-2026-7383/vuln.c", "function": "ASN1_mbstring_ncopy", "id": "openssl-cve-2026-7383:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-7383", "project": "openssl", "provenance": "human", "relpath": "crypto/asn1/a_mbstr.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9", "commit_url": "https://github.com/openssl/openssl/commit/97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9", "cve": "CVE-2026-7383", "cwe": "CWE-119", "file": "openssl-cve-2026-7383/fixed.c", "function": "ASN1_mbstring_ncopy", "id": "openssl-cve-2026-7383:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-7383", "project": "openssl", "provenance": "human", "relpath": "crypto/asn1/a_mbstr.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "a91e537d16d74050dbde50bb0dfb1fe9930f0521", "commit_url": "https://github.com/openssl/openssl/commit/eed200f58cd8645ed77e46b7e9f764e284df379e", "cve": "CVE-2026-31790", "cwe": "CWE-119", "file": "openssl-cve-2026-31790/vuln.c", "function": "rsasve_generate", "id": "openssl-cve-2026-31790:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-31790", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/kem/rsa_kem.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "eed200f58cd8645ed77e46b7e9f764e284df379e", "commit_url": "https://github.com/openssl/openssl/commit/eed200f58cd8645ed77e46b7e9f764e284df379e", "cve": "CVE-2026-31790", "cwe": "CWE-119", "file": "openssl-cve-2026-31790/fixed.c", "function": "rsasve_generate", "id": "openssl-cve-2026-31790:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-31790", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/kem/rsa_kem.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "commit_url": "https://github.com/openssl/openssl/commit/abd8b2eec7e3f3fda60ecfb68498b246b52af482", "cve": "CVE-2026-31790", "cwe": "CWE-119", "file": "openssl-cve-2026-31790-rsasve_generate/vuln.in", "function": "rsasve_generate", "id": "openssl-cve-2026-31790-rsasve_generate:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-31790-rsasve_generate", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/kem/rsa_kem.c.in", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "abd8b2eec7e3f3fda60ecfb68498b246b52af482", "commit_url": "https://github.com/openssl/openssl/commit/abd8b2eec7e3f3fda60ecfb68498b246b52af482", "cve": "CVE-2026-31790", "cwe": "CWE-119", "file": "openssl-cve-2026-31790-rsasve_generate/fixed.in", "function": "rsasve_generate", "id": "openssl-cve-2026-31790-rsasve_generate:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-31790-rsasve_generate", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/kem/rsa_kem.c.in", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "buffer overflow", "commit": "b7ae7a093997b5cd549bc21cccd715510fef86c0", "commit_url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "cve": "CVE-2026-31789", "cwe": "CWE-119", "file": "openssl-cve-2026-31789/vuln.c", "function": "buf2hexstr_sep", "id": "openssl-cve-2026-31789:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-31789", "project": "openssl", "provenance": "human", "relpath": "crypto/o_str.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "buffer overflow", "commit": "a91e537d16d74050dbde50bb0dfb1fe9930f0521", "commit_url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "cve": "CVE-2026-31789", "cwe": "CWE-119", "file": "openssl-cve-2026-31789/fixed.c", "function": "buf2hexstr_sep", "id": "openssl-cve-2026-31789:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2026-31789", "project": "openssl", "provenance": "human", "relpath": "crypto/o_str.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "null pointer dereference", "commit": "d044f9252fe9a54001986fb4eb4e32076a056527", "commit_url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "cve": "CVE-2026-28388", "cwe": "CWE-476", "file": "openssl-cve-2026-28388/vuln.c", "function": "check_delta_base", "id": "openssl-cve-2026-28388:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28388", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "null pointer dereference", "commit": "59c3b3158553ab53275bbbccca5cb305d591cf2e", "commit_url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "cve": "CVE-2026-28388", "cwe": "CWE-476", "file": "openssl-cve-2026-28388/fixed.c", "function": "check_delta_base", "id": "openssl-cve-2026-28388:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28388", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "null pointer dereference", "commit": "6e74b1275cbc1fd1cf7ba32f662602d68501f6ca", "commit_url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389/vuln.c", "function": "rsa_cms_decrypt", "id": "openssl-cve-2026-28389:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28389", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_rsa.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "null pointer dereference", "commit": "af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "commit_url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389/fixed.c", "function": "rsa_cms_decrypt", "id": "openssl-cve-2026-28389:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28389", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_rsa.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "null pointer dereference", "commit": "72ec3e38c87f71f5c50ae3b16cc34d8371c71bb9", "commit_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389-dh_cms_set_shared_info/vuln.c", "function": "dh_cms_set_shared_info", "id": "openssl-cve-2026-28389-dh_cms_set_shared_info:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28389-dh_cms_set_shared_info", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_dh.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "null pointer dereference", "commit": "7b5274e812400cacb6f3be4c2df5340923fa807f", "commit_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389-dh_cms_set_shared_info/fixed.c", "function": "dh_cms_set_shared_info", "id": "openssl-cve-2026-28389-dh_cms_set_shared_info:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28389-dh_cms_set_shared_info", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_dh.c", "repo": "openssl/openssl", "split": "holdout", "year": 2026} +{"class": "null pointer dereference", "commit": "72ec3e38c87f71f5c50ae3b16cc34d8371c71bb9", "commit_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389-ecdh_cms_set_shared_info/vuln.c", "function": "ecdh_cms_set_shared_info", "id": "openssl-cve-2026-28389-ecdh_cms_set_shared_info:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28389-ecdh_cms_set_shared_info", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_ec.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "null pointer dereference", "commit": "7b5274e812400cacb6f3be4c2df5340923fa807f", "commit_url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "cve": "CVE-2026-28389", "cwe": "CWE-476", "file": "openssl-cve-2026-28389-ecdh_cms_set_shared_info/fixed.c", "function": "ecdh_cms_set_shared_info", "id": "openssl-cve-2026-28389-ecdh_cms_set_shared_info:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2026-28389-ecdh_cms_set_shared_info", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_ec.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "21d525dc846aed171fc886f3da614a6645948f13", "commit_url": "https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34", "cve": "CVE-2026-2673", "cwe": "CWE-119", "file": "openssl-cve-2026-2673/vuln.c", "function": "gid_cb", "id": "openssl-cve-2026-2673:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-2673", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "security fix", "commit": "85977e013f32ceb96aa034c0e741adddc1a05e34", "commit_url": "https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34", "cve": "CVE-2026-2673", "cwe": "CWE-119", "file": "openssl-cve-2026-2673/fixed.c", "function": "gid_cb", "id": "openssl-cve-2026-2673:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2026-2673", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2026} +{"class": "buffer overflow", "commit": "7565bb46fa2979511cb27aad1c2bd6b80adf7352", "commit_url": "https://github.com/openssl/openssl/commit/4191043c36f1a50c717a2d0075fc6f3b9bc0afc5", "cve": "CVE-2025-69419", "cwe": "CWE-119", "file": "openssl-cve-2025-69419/vuln.c", "function": "bmp_to_utf8", "id": "openssl-cve-2025-69419:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2025-69419", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_utl.c", "repo": "openssl/openssl", "split": "train", "year": 2025} +{"class": "buffer overflow", "commit": "4191043c36f1a50c717a2d0075fc6f3b9bc0afc5", "commit_url": "https://github.com/openssl/openssl/commit/4191043c36f1a50c717a2d0075fc6f3b9bc0afc5", "cve": "CVE-2025-69419", "cwe": "CWE-119", "file": "openssl-cve-2025-69419/fixed.c", "function": "bmp_to_utf8", "id": "openssl-cve-2025-69419:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2025-69419", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_utl.c", "repo": "openssl/openssl", "split": "train", "year": 2025} +{"class": "security fix", "commit": "475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6", "commit_url": "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347", "cve": "CVE-2025-69418", "cwe": "CWE-119", "file": "openssl-cve-2025-69418/vuln.c", "function": "CRYPTO_ocb128_encrypt", "id": "openssl-cve-2025-69418:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-69418", "project": "openssl", "provenance": "human", "relpath": "crypto/modes/ocb128.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} +{"class": "security fix", "commit": "52d23c86a54adab5ee9f80e48b242b52c4cc2347", "commit_url": "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347", "cve": "CVE-2025-69418", "cwe": "CWE-119", "file": "openssl-cve-2025-69418/fixed.c", "function": "CRYPTO_ocb128_encrypt", "id": "openssl-cve-2025-69418:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-69418", "project": "openssl", "provenance": "human", "relpath": "crypto/modes/ocb128.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} +{"class": "security fix", "commit": "384011202af92605d926fafe4a0bcd6b65d162ad", "commit_url": "https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4", "cve": "CVE-2025-66199", "cwe": "CWE-119", "file": "openssl-cve-2025-66199-tls13_process_compressed/vuln.c", "function": "tls13_process_compressed_certificate", "id": "openssl-cve-2025-66199-tls13_process_compressed:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-66199-tls13_process_compressed", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} +{"class": "security fix", "commit": "3ed1f75249932b155eef993a8e66a99cb98bfef4", "commit_url": "https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4", "cve": "CVE-2025-66199", "cwe": "CWE-119", "file": "openssl-cve-2025-66199-tls13_process_compressed/fixed.c", "function": "tls13_process_compressed_certificate", "id": "openssl-cve-2025-66199-tls13_process_compressed:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-66199-tls13_process_compressed", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} +{"class": "buffer overflow", "commit": "e0666f72294691a808443970b654412a6d92fa0f", "commit_url": "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6", "cve": "CVE-2025-68160", "cwe": "CWE-119", "file": "openssl-cve-2025-68160/vuln.c", "function": "linebuffer_write", "id": "openssl-cve-2025-68160:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2025-68160", "project": "openssl", "provenance": "human", "relpath": "crypto/bio/bf_lbuf.c", "repo": "openssl/openssl", "split": "train", "year": 2025} +{"class": "buffer overflow", "commit": "475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6", "commit_url": "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6", "cve": "CVE-2025-68160", "cwe": "CWE-119", "file": "openssl-cve-2025-68160/fixed.c", "function": "linebuffer_write", "id": "openssl-cve-2025-68160:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2025-68160", "project": "openssl", "provenance": "human", "relpath": "crypto/bio/bf_lbuf.c", "repo": "openssl/openssl", "split": "train", "year": 2025} +{"class": "security fix", "commit": "1f08e54bad32843044fe8a675948d65e3b4ece65", "commit_url": "https://github.com/openssl/openssl/commit/a7936fa4bd23c906e1955a16a0a0ab39a4953a61", "cve": "CVE-2025-15469", "cwe": "CWE-119", "file": "openssl-cve-2025-15469/vuln.c", "function": "do_fp_oneshot_sign", "id": "openssl-cve-2025-15469:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-15469", "project": "openssl", "provenance": "human", "relpath": "apps/dgst.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} +{"class": "security fix", "commit": "a7936fa4bd23c906e1955a16a0a0ab39a4953a61", "commit_url": "https://github.com/openssl/openssl/commit/a7936fa4bd23c906e1955a16a0a0ab39a4953a61", "cve": "CVE-2025-15469", "cwe": "CWE-119", "file": "openssl-cve-2025-15469/fixed.c", "function": "do_fp_oneshot_sign", "id": "openssl-cve-2025-15469:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-15469", "project": "openssl", "provenance": "human", "relpath": "apps/dgst.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} +{"class": "security fix", "commit": "3250efdfe99d2d7fe4fb05231add7fba864b7653", "commit_url": "https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e", "cve": "CVE-2025-15467", "cwe": "CWE-119", "file": "openssl-cve-2025-15467/vuln.c", "function": "evp_cipher_get_asn1_aead_params", "id": "openssl-cve-2025-15467:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-15467", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2025} +{"class": "security fix", "commit": "ce39170276daec87f55c39dad1f629b56344429e", "commit_url": "https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e", "cve": "CVE-2025-15467", "cwe": "CWE-119", "file": "openssl-cve-2025-15467/fixed.c", "function": "evp_cipher_get_asn1_aead_params", "id": "openssl-cve-2025-15467:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-15467", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2025} +{"class": "security fix", "commit": "b8654779e3b3b4eb0bda7623c0891d394e068187", "commit_url": "https://github.com/openssl/openssl/commit/205e3a55e16e4bd08c12fdbd3416ab829c0f6206", "cve": "CVE-2025-11187", "cwe": "CWE-119", "file": "openssl-cve-2025-11187/vuln.c", "function": "PBMAC1_PBKDF2_HMAC", "id": "openssl-cve-2025-11187:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-11187", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} +{"class": "security fix", "commit": "205e3a55e16e4bd08c12fdbd3416ab829c0f6206", "commit_url": "https://github.com/openssl/openssl/commit/205e3a55e16e4bd08c12fdbd3416ab829c0f6206", "cve": "CVE-2025-11187", "cwe": "CWE-119", "file": "openssl-cve-2025-11187/fixed.c", "function": "PBMAC1_PBKDF2_HMAC", "id": "openssl-cve-2025-11187:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-11187", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} +{"class": "security fix", "commit": "a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def", "commit_url": "https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b", "cve": "CVE-2025-9232", "cwe": "CWE-119", "file": "openssl-cve-2025-9232/vuln.c", "function": "use_proxy", "id": "openssl-cve-2025-9232:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-9232", "project": "openssl", "provenance": "human", "relpath": "crypto/http/http_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} +{"class": "security fix", "commit": "654dc11d23468a74fc8ea4672b702dd3feb7be4b", "commit_url": "https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b", "cve": "CVE-2025-9232", "cwe": "CWE-119", "file": "openssl-cve-2025-9232/fixed.c", "function": "use_proxy", "id": "openssl-cve-2025-9232:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2025-9232", "project": "openssl", "provenance": "human", "relpath": "crypto/http/http_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2025} +{"class": "buffer overflow", "commit": "7e0fc054a08706d194d3355aba4a06003cadfb29", "commit_url": "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def", "cve": "CVE-2025-9230", "cwe": "CWE-119", "file": "openssl-cve-2025-9230/vuln.c", "function": "kek_unwrap_key", "id": "openssl-cve-2025-9230:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2025-9230", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "split": "train", "year": 2025} +{"class": "buffer overflow", "commit": "a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def", "commit_url": "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def", "cve": "CVE-2025-9230", "cwe": "CWE-119", "file": "openssl-cve-2025-9230/fixed.c", "function": "kek_unwrap_key", "id": "openssl-cve-2025-9230:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2025-9230", "project": "openssl", "provenance": "human", "relpath": "crypto/cms/cms_pwri.c", "repo": "openssl/openssl", "split": "train", "year": 2025} +{"class": "security fix", "commit": "0db27ec7f8abd258d2e8849ac555ca26ba0cd8d6", "commit_url": "https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7", "cve": "CVE-2024-12797", "cwe": "CWE-119", "file": "openssl-cve-2024-12797/vuln.c", "function": "tls_post_process_server_rpk", "id": "openssl-cve-2024-12797:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-12797", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "798779d43494549b611233f92652f0da5328fbe7", "commit_url": "https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7", "cve": "CVE-2024-12797", "cwe": "CWE-119", "file": "openssl-cve-2024-12797/fixed.c", "function": "tls_post_process_server_rpk", "id": "openssl-cve-2024-12797:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-12797", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "643de602771f6b38ad7823e26d5a63c669eb185b", "commit_url": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844", "cve": "CVE-2024-13176", "cwe": "CWE-119", "file": "openssl-cve-2024-13176-ec_field_inverse_mod_ord/vuln.c", "function": "ec_field_inverse_mod_ord", "id": "openssl-cve-2024-13176-ec_field_inverse_mod_ord:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-13176-ec_field_inverse_mod_ord", "project": "openssl", "provenance": "human", "relpath": "crypto/ec/ec_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2024} +{"class": "security fix", "commit": "07272b05b04836a762b4baa874958af51d513844", "commit_url": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844", "cve": "CVE-2024-13176", "cwe": "CWE-119", "file": "openssl-cve-2024-13176-ec_field_inverse_mod_ord/fixed.c", "function": "ec_field_inverse_mod_ord", "id": "openssl-cve-2024-13176-ec_field_inverse_mod_ord:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-13176-ec_field_inverse_mod_ord", "project": "openssl", "provenance": "human", "relpath": "crypto/ec/ec_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2024} +{"class": "security fix", "commit": "9aae56395aa8e77c44a9df83fd395a644d016635", "commit_url": "https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6", "cve": "CVE-2024-6119", "cwe": "CWE-119", "file": "openssl-cve-2024-6119/vuln.c", "function": "do_x509_check", "id": "openssl-cve-2024-6119:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-6119", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "split": "train", "year": 2024} +{"class": "security fix", "commit": "06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6", "commit_url": "https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6", "cve": "CVE-2024-6119", "cwe": "CWE-119", "file": "openssl-cve-2024-6119/fixed.c", "function": "do_x509_check", "id": "openssl-cve-2024-6119:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-6119", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "split": "train", "year": 2024} +{"class": "security fix", "commit": "189a7ed3e380e34ea38fe4190a7c9396bace0fb7", "commit_url": "https://github.com/openssl/openssl/commit/4b375b998798dd516d367036773073e1b88e6433", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535/vuln.c", "function": "tls_parse_stoc_alpn", "id": "openssl-cve-2024-5535:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "4b375b998798dd516d367036773073e1b88e6433", "commit_url": "https://github.com/openssl/openssl/commit/4b375b998798dd516d367036773073e1b88e6433", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535/fixed.c", "function": "tls_parse_stoc_alpn", "id": "openssl-cve-2024-5535:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "72394c9a1a6a6b07edf43eb2ad7e95e1093ada1b", "commit_url": "https://github.com/openssl/openssl/commit/189a7ed3e380e34ea38fe4190a7c9396bace0fb7", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-tls_construct_stoc_next_/vuln.c", "function": "tls_construct_stoc_next_proto_neg", "id": "openssl-cve-2024-5535-tls_construct_stoc_next_:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-tls_construct_stoc_next_", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_srvr.c", "repo": "openssl/openssl", "split": "train", "year": 2024} +{"class": "security fix", "commit": "189a7ed3e380e34ea38fe4190a7c9396bace0fb7", "commit_url": "https://github.com/openssl/openssl/commit/189a7ed3e380e34ea38fe4190a7c9396bace0fb7", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-tls_construct_stoc_next_/fixed.c", "function": "tls_construct_stoc_next_proto_neg", "id": "openssl-cve-2024-5535-tls_construct_stoc_next_:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-tls_construct_stoc_next_", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_srvr.c", "repo": "openssl/openssl", "split": "train", "year": 2024} +{"class": "security fix", "commit": "cf6f91f6121f4db167405db2f0de410a456f260c", "commit_url": "https://github.com/openssl/openssl/commit/159921152fd4aa91e4c849fd281ad93ac0d0d0ba", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-tls_parse_stoc_npn/vuln.c", "function": "tls_parse_stoc_npn", "id": "openssl-cve-2024-5535-tls_parse_stoc_npn:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-tls_parse_stoc_npn", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "159921152fd4aa91e4c849fd281ad93ac0d0d0ba", "commit_url": "https://github.com/openssl/openssl/commit/159921152fd4aa91e4c849fd281ad93ac0d0d0ba", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-tls_parse_stoc_npn/fixed.c", "function": "tls_parse_stoc_npn", "id": "openssl-cve-2024-5535-tls_parse_stoc_npn:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-tls_parse_stoc_npn", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "a6facb1042adda2394dc5c98fbceb7625eef141a", "commit_url": "https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-ssl_select_next_proto/vuln.c", "function": "SSL_select_next_proto", "id": "openssl-cve-2024-5535-ssl_select_next_proto:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-ssl_select_next_proto", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "cf6f91f6121f4db167405db2f0de410a456f260c", "commit_url": "https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-ssl_select_next_proto/fixed.c", "function": "SSL_select_next_proto", "id": "openssl-cve-2024-5535-ssl_select_next_proto:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-ssl_select_next_proto", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "015255851371757d54c2560643eb3b3a88123cf1", "commit_url": "https://github.com/openssl/openssl/commit/6cc511826f09e513b4ec066d9b95acaf4f86d991", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-alpn_select_cb/vuln.c", "function": "alpn_select_cb", "id": "openssl-cve-2024-5535-alpn_select_cb:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-alpn_select_cb", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_tserver.c", "repo": "openssl/openssl", "split": "train", "year": 2024} +{"class": "security fix", "commit": "6cc511826f09e513b4ec066d9b95acaf4f86d991", "commit_url": "https://github.com/openssl/openssl/commit/6cc511826f09e513b4ec066d9b95acaf4f86d991", "cve": "CVE-2024-5535", "cwe": "CWE-119", "file": "openssl-cve-2024-5535-alpn_select_cb/fixed.c", "function": "alpn_select_cb", "id": "openssl-cve-2024-5535-alpn_select_cb:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-5535-alpn_select_cb", "project": "openssl", "provenance": "human", "relpath": "ssl/quic/quic_tserver.c", "repo": "openssl/openssl", "split": "train", "year": 2024} +{"class": "use after free", "commit": "b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "commit_url": "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741/vuln.c", "function": "ssl3_read_n", "id": "openssl-cve-2024-4741:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2024-4741", "project": "openssl", "provenance": "human", "relpath": "ssl/record/rec_layer_s3.c", "repo": "openssl/openssl", "split": "train", "year": 2024} +{"class": "use after free", "commit": "2d05959073c4bf8803401668b9df85931a08e020", "commit_url": "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741/fixed.c", "function": "ssl3_read_n", "id": "openssl-cve-2024-4741:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2024-4741", "project": "openssl", "provenance": "human", "relpath": "ssl/record/rec_layer_s3.c", "repo": "openssl/openssl", "split": "train", "year": 2024} +{"class": "use after free", "commit": "b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "commit_url": "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741-ssl3_release_read_buffer/vuln.c", "function": "ssl3_release_read_buffer", "id": "openssl-cve-2024-4741-ssl3_release_read_buffer:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2024-4741-ssl3_release_read_buffer", "project": "openssl", "provenance": "human", "relpath": "ssl/record/ssl3_buffer.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} +{"class": "use after free", "commit": "2d05959073c4bf8803401668b9df85931a08e020", "commit_url": "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741-ssl3_release_read_buffer/fixed.c", "function": "ssl3_release_read_buffer", "id": "openssl-cve-2024-4741-ssl3_release_read_buffer:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2024-4741-ssl3_release_read_buffer", "project": "openssl", "provenance": "human", "relpath": "ssl/record/ssl3_buffer.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "ec559c2a6cca3fd4cedae5c47f2dfa38e5e24865", "commit_url": "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "cve": "CVE-2024-4741", "cwe": "CWE-119", "file": "openssl-cve-2024-4741-ssl_free_buffers/vuln.c", "function": "SSL_free_buffers", "id": "openssl-cve-2024-4741-ssl_free_buffers:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-4741-ssl_free_buffers", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2024} +{"class": "security fix", "commit": "b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "commit_url": "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "cve": "CVE-2024-4741", "cwe": "CWE-119", "file": "openssl-cve-2024-4741-ssl_free_buffers/fixed.c", "function": "SSL_free_buffers", "id": "openssl-cve-2024-4741-ssl_free_buffers:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-4741-ssl_free_buffers", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2024} +{"class": "use after free", "commit": "c88c3de51020c37e8706bf7a682a162593053aac", "commit_url": "https://github.com/openssl/openssl/commit/10171e5b511b700c5ecd4fd3e1086b19c34b1ae3", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741-tls_release_read_buffer/vuln.c", "function": "tls_release_read_buffer", "id": "openssl-cve-2024-4741-tls_release_read_buffer:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2024-4741-tls_release_read_buffer", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "split": "train", "year": 2024} +{"class": "use after free", "commit": "10171e5b511b700c5ecd4fd3e1086b19c34b1ae3", "commit_url": "https://github.com/openssl/openssl/commit/10171e5b511b700c5ecd4fd3e1086b19c34b1ae3", "cve": "CVE-2024-4741", "cwe": "CWE-416", "file": "openssl-cve-2024-4741-tls_release_read_buffer/fixed.c", "function": "tls_release_read_buffer", "id": "openssl-cve-2024-4741-tls_release_read_buffer:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "uaf", "pair": "openssl-cve-2024-4741-tls_release_read_buffer", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "split": "train", "year": 2024} +{"class": "security fix", "commit": "17765d9cefed8b4ada6548719beb98e22672a9bd", "commit_url": "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac", "cve": "CVE-2024-4741", "cwe": "CWE-119", "file": "openssl-cve-2024-4741-tls_free_buffers/vuln.c", "function": "tls_free_buffers", "id": "openssl-cve-2024-4741-tls_free_buffers:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-4741-tls_free_buffers", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "c88c3de51020c37e8706bf7a682a162593053aac", "commit_url": "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac", "cve": "CVE-2024-4741", "cwe": "CWE-119", "file": "openssl-cve-2024-4741-tls_free_buffers/fixed.c", "function": "tls_free_buffers", "id": "openssl-cve-2024-4741-tls_free_buffers:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-4741-tls_free_buffers", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "d4b119c567cb5dcaf83add7ca2ea1d646eb3ef9f", "commit_url": "https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397", "cve": "CVE-2024-4603", "cwe": "CWE-119", "file": "openssl-cve-2024-4603/vuln.c", "function": "ossl_dsa_check_params", "id": "openssl-cve-2024-4603:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-4603", "project": "openssl", "provenance": "human", "relpath": "crypto/dsa/dsa_check.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "3559e868e58005d15c6013a0c1fd832e51c73397", "commit_url": "https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397", "cve": "CVE-2024-4603", "cwe": "CWE-119", "file": "openssl-cve-2024-4603/fixed.c", "function": "ossl_dsa_check_params", "id": "openssl-cve-2024-4603:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-4603", "project": "openssl", "provenance": "human", "relpath": "crypto/dsa/dsa_check.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "c1e462ee4bd61867ee391fc13110ca41e4889535", "commit_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "cve": "CVE-2024-2511", "cwe": "CWE-119", "file": "openssl-cve-2024-2511/vuln.c", "function": "ssl_update_cache", "id": "openssl-cve-2024-2511:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-2511", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "commit_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "cve": "CVE-2024-2511", "cwe": "CWE-119", "file": "openssl-cve-2024-2511/fixed.c", "function": "ssl_update_cache", "id": "openssl-cve-2024-2511:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-2511", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} +{"class": "security fix", "commit": "c1e462ee4bd61867ee391fc13110ca41e4889535", "commit_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "cve": "CVE-2024-2511", "cwe": "CWE-119", "file": "openssl-cve-2024-2511-tls_construct_server_hel/vuln.c", "function": "tls_construct_server_hello", "id": "openssl-cve-2024-2511-tls_construct_server_hel:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-2511-tls_construct_server_hel", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_srvr.c", "repo": "openssl/openssl", "split": "train", "year": 2024} +{"class": "security fix", "commit": "b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "commit_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "cve": "CVE-2024-2511", "cwe": "CWE-119", "file": "openssl-cve-2024-2511-tls_construct_server_hel/fixed.c", "function": "tls_construct_server_hello", "id": "openssl-cve-2024-2511-tls_construct_server_hel:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2024-2511-tls_construct_server_hel", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_srvr.c", "repo": "openssl/openssl", "split": "train", "year": 2024} +{"class": "null pointer dereference", "commit": "6c70934a46eaa1734c2efbe9d7baac51c607062e", "commit_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "cve": "CVE-2024-0727", "cwe": "CWE-476", "file": "openssl-cve-2024-0727/vuln.c", "function": "pkcs12_gen_mac", "id": "openssl-cve-2024-0727:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2024-0727", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} +{"class": "null pointer dereference", "commit": "09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "commit_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "cve": "CVE-2024-0727", "cwe": "CWE-476", "file": "openssl-cve-2024-0727/fixed.c", "function": "pkcs12_gen_mac", "id": "openssl-cve-2024-0727:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2024-0727", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs12/p12_mutl.c", "repo": "openssl/openssl", "split": "holdout", "year": 2024} +{"class": "null pointer dereference", "commit": "6c70934a46eaa1734c2efbe9d7baac51c607062e", "commit_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "cve": "CVE-2024-0727", "cwe": "CWE-476", "file": "openssl-cve-2024-0727-smime_write_pkcs7/vuln.c", "function": "SMIME_write_PKCS7", "id": "openssl-cve-2024-0727-smime_write_pkcs7:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2024-0727-smime_write_pkcs7", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_mime.c", "repo": "openssl/openssl", "split": "train", "year": 2024} +{"class": "null pointer dereference", "commit": "09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "commit_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "cve": "CVE-2024-0727", "cwe": "CWE-476", "file": "openssl-cve-2024-0727-smime_write_pkcs7/fixed.c", "function": "SMIME_write_PKCS7", "id": "openssl-cve-2024-0727-smime_write_pkcs7:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2024-0727-smime_write_pkcs7", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_mime.c", "repo": "openssl/openssl", "split": "train", "year": 2024} +{"class": "security fix", "commit": "23d21359e35536a4ee8f7be0b245ddbfac909bff", "commit_url": "https://github.com/openssl/openssl/commit/0df40630850fb2740e6be6890bb905d3fc623b2d", "cve": "CVE-2023-5363", "cwe": "CWE-119", "file": "openssl-cve-2023-5363/vuln.c", "function": "evp_cipher_init_internal", "id": "openssl-cve-2023-5363:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-5363", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "split": "train", "year": 2023} +{"class": "security fix", "commit": "0df40630850fb2740e6be6890bb905d3fc623b2d", "commit_url": "https://github.com/openssl/openssl/commit/0df40630850fb2740e6be6890bb905d3fc623b2d", "cve": "CVE-2023-5363", "cwe": "CWE-119", "file": "openssl-cve-2023-5363/fixed.c", "function": "evp_cipher_init_internal", "id": "openssl-cve-2023-5363:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-5363", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "split": "train", "year": 2023} +{"class": "security fix", "commit": "e648db50d9a63f71cab5cb78424c2932d019a744", "commit_url": "https://github.com/openssl/openssl/commit/9002fd07327a91f35ba6c1307e71fa6fd4409b7f", "cve": "CVE-2023-3817", "cwe": "CWE-119", "file": "openssl-cve-2023-3817-dh_check/vuln.c", "function": "DH_check", "id": "openssl-cve-2023-3817-dh_check:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-3817-dh_check", "project": "openssl", "provenance": "human", "relpath": "crypto/dh/dh_check.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "9002fd07327a91f35ba6c1307e71fa6fd4409b7f", "commit_url": "https://github.com/openssl/openssl/commit/9002fd07327a91f35ba6c1307e71fa6fd4409b7f", "cve": "CVE-2023-3817", "cwe": "CWE-119", "file": "openssl-cve-2023-3817-dh_check/fixed.c", "function": "DH_check", "id": "openssl-cve-2023-3817-dh_check:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-3817-dh_check", "project": "openssl", "provenance": "human", "relpath": "crypto/dh/dh_check.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "fe824ce0c5d51e7e7cf36c31db6c49c1c0c04a25", "commit_url": "https://github.com/openssl/openssl/commit/8780a896543a654e757db1b9396383f9d8095528", "cve": "CVE-2023-3446", "cwe": "CWE-119", "file": "openssl-cve-2023-3446/vuln.c", "function": "DH_check", "id": "openssl-cve-2023-3446:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-3446", "project": "openssl", "provenance": "human", "relpath": "crypto/dh/dh_check.c", "repo": "openssl/openssl", "split": "train", "year": 2023} +{"class": "security fix", "commit": "8780a896543a654e757db1b9396383f9d8095528", "commit_url": "https://github.com/openssl/openssl/commit/8780a896543a654e757db1b9396383f9d8095528", "cve": "CVE-2023-3446", "cwe": "CWE-119", "file": "openssl-cve-2023-3446/fixed.c", "function": "DH_check", "id": "openssl-cve-2023-3446:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-3446", "project": "openssl", "provenance": "human", "relpath": "crypto/dh/dh_check.c", "repo": "openssl/openssl", "split": "train", "year": 2023} +{"class": "security fix", "commit": "175fa8469fc78f6cf35dfb87d26899e60e9ff1d4", "commit_url": "https://github.com/openssl/openssl/commit/00e2f5eea29994d19293ec4e8c8775ba73678598", "cve": "CVE-2023-2975", "cwe": "CWE-119", "file": "openssl-cve-2023-2975/vuln.c", "function": "siv_cipher", "id": "openssl-cve-2023-2975:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-2975", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_siv.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "00e2f5eea29994d19293ec4e8c8775ba73678598", "commit_url": "https://github.com/openssl/openssl/commit/00e2f5eea29994d19293ec4e8c8775ba73678598", "cve": "CVE-2023-2975", "cwe": "CWE-119", "file": "openssl-cve-2023-2975/fixed.c", "function": "siv_cipher", "id": "openssl-cve-2023-2975:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-2975", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_aes_siv.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "3ca28c9e81fae36b0b44dc39beecd2b5a7561975", "commit_url": "https://github.com/openssl/openssl/commit/d63b3e7959e79f98d60760a739f7876dc5adc838", "cve": "CVE-2023-2650", "cwe": "CWE-119", "file": "openssl-cve-2023-2650/vuln.c", "function": "OBJ_obj2txt", "id": "openssl-cve-2023-2650:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-2650", "project": "openssl", "provenance": "human", "relpath": "crypto/objects/obj_dat.c", "repo": "openssl/openssl", "split": "train", "year": 2023} +{"class": "security fix", "commit": "d63b3e7959e79f98d60760a739f7876dc5adc838", "commit_url": "https://github.com/openssl/openssl/commit/d63b3e7959e79f98d60760a739f7876dc5adc838", "cve": "CVE-2023-2650", "cwe": "CWE-119", "file": "openssl-cve-2023-2650/fixed.c", "function": "OBJ_obj2txt", "id": "openssl-cve-2023-2650:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-2650", "project": "openssl", "provenance": "human", "relpath": "crypto/objects/obj_dat.c", "repo": "openssl/openssl", "split": "train", "year": 2023} +{"class": "buffer overflow", "commit": "5d6f13d90d5c4212737002bcd54871cf236a1220", "commit_url": "https://github.com/openssl/openssl/commit/d12cde7fc5561d463badcd8a73079cf92864c31e", "cve": "CVE-2022-37454", "cwe": "CWE-119", "file": "openssl-cve-2022-37454/vuln.c", "function": "HKDF_Expand", "id": "openssl-cve-2022-37454:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-37454", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/kdfs/hkdf.c", "repo": "openssl/openssl", "split": "train", "year": 2022} +{"class": "buffer overflow", "commit": "d12cde7fc5561d463badcd8a73079cf92864c31e", "commit_url": "https://github.com/openssl/openssl/commit/d12cde7fc5561d463badcd8a73079cf92864c31e", "cve": "CVE-2022-37454", "cwe": "CWE-119", "file": "openssl-cve-2022-37454/fixed.c", "function": "HKDF_Expand", "id": "openssl-cve-2022-37454:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-37454", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/kdfs/hkdf.c", "repo": "openssl/openssl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "908eaceb62624f5b5c505b286d904bd3a4e8a64a", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304/vuln.c", "function": "bn_sub_words", "id": "openssl-cve-2022-4304:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304", "project": "openssl", "provenance": "human", "relpath": "crypto/bn/bn_asm.c", "repo": "openssl/openssl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "a00d757d9ca212994625d1a02c81cc5edd27e13b", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304/fixed.c", "function": "bn_sub_words", "id": "openssl-cve-2022-4304:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304", "project": "openssl", "provenance": "human", "relpath": "crypto/bn/bn_asm.c", "repo": "openssl/openssl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "908eaceb62624f5b5c505b286d904bd3a4e8a64a", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-bn_blinding_invert_ex/vuln.c", "function": "BN_BLINDING_invert_ex", "id": "openssl-cve-2022-4304-bn_blinding_invert_ex:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304-bn_blinding_invert_ex", "project": "openssl", "provenance": "human", "relpath": "crypto/bn/bn_blind.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "a00d757d9ca212994625d1a02c81cc5edd27e13b", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-bn_blinding_invert_ex/fixed.c", "function": "BN_BLINDING_invert_ex", "id": "openssl-cve-2022-4304-bn_blinding_invert_ex:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304-bn_blinding_invert_ex", "project": "openssl", "provenance": "human", "relpath": "crypto/bn/bn_blind.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "908eaceb62624f5b5c505b286d904bd3a4e8a64a", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-rsa_blinding_invert/vuln.c", "function": "rsa_blinding_invert", "id": "openssl-cve-2022-4304-rsa_blinding_invert:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304-rsa_blinding_invert", "project": "openssl", "provenance": "human", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "a00d757d9ca212994625d1a02c81cc5edd27e13b", "commit_url": "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-rsa_blinding_invert/fixed.c", "function": "rsa_blinding_invert", "id": "openssl-cve-2022-4304-rsa_blinding_invert:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304-rsa_blinding_invert", "project": "openssl", "provenance": "human", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "f675d164e5d9648c3537a0f5efe1cc2fd232b4a9", "commit_url": "https://github.com/openssl/openssl/commit/b013765abfa80036dc779dd0e50602c57bb3bf95", "cve": "CVE-2023-0465", "cwe": "CWE-119", "file": "openssl-cve-2023-0465/vuln.c", "function": "check_policy", "id": "openssl-cve-2023-0465:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0465", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "b013765abfa80036dc779dd0e50602c57bb3bf95", "commit_url": "https://github.com/openssl/openssl/commit/b013765abfa80036dc779dd0e50602c57bb3bf95", "cve": "CVE-2023-0465", "cwe": "CWE-119", "file": "openssl-cve-2023-0465/fixed.c", "function": "check_policy", "id": "openssl-cve-2023-0465:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0465", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "969327390220aee7515a4054d5189186402d6687", "commit_url": "https://github.com/openssl/openssl/commit/879f7080d7e141f415c79eaa3a8ac4a3dad0348b", "cve": "CVE-2023-0464", "cwe": "CWE-119", "file": "openssl-cve-2023-0464/vuln.c", "function": "tree_init", "id": "openssl-cve-2023-0464:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0464", "project": "openssl", "provenance": "human", "relpath": "crypto/x509v3/pcy_tree.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "879f7080d7e141f415c79eaa3a8ac4a3dad0348b", "commit_url": "https://github.com/openssl/openssl/commit/879f7080d7e141f415c79eaa3a8ac4a3dad0348b", "cve": "CVE-2023-0464", "cwe": "CWE-119", "file": "openssl-cve-2023-0464/fixed.c", "function": "tree_init", "id": "openssl-cve-2023-0464:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0464", "project": "openssl", "provenance": "human", "relpath": "crypto/x509v3/pcy_tree.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "c309c4dce742c3eeb393a0f03f9c567d0e368ccc", "commit_url": "https://github.com/openssl/openssl/commit/959c59c7a0164117e7f8366466a32bb1f8d77ff1", "cve": "CVE-2023-0464", "cwe": "CWE-119", "file": "openssl-cve-2023-0464-tree_init/vuln.c", "function": "tree_init", "id": "openssl-cve-2023-0464-tree_init:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0464-tree_init", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/pcy_tree.c", "repo": "openssl/openssl", "split": "train", "year": 2023} +{"class": "security fix", "commit": "959c59c7a0164117e7f8366466a32bb1f8d77ff1", "commit_url": "https://github.com/openssl/openssl/commit/959c59c7a0164117e7f8366466a32bb1f8d77ff1", "cve": "CVE-2023-0464", "cwe": "CWE-119", "file": "openssl-cve-2023-0464-tree_init/fixed.c", "function": "tree_init", "id": "openssl-cve-2023-0464-tree_init:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0464-tree_init", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/pcy_tree.c", "repo": "openssl/openssl", "split": "train", "year": 2023} +{"class": "security fix", "commit": "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449/vuln.c", "function": "tls_get_more_records", "id": "openssl-cve-2021-3449:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "2b9e2afc382490592078cdb69d06f54f0fefd4c6", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449/fixed.c", "function": "tls_get_more_records", "id": "openssl-cve-2021-3449:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449", "project": "openssl", "provenance": "human", "relpath": "ssl/record/methods/tls_common.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-def_generate_session_id/vuln.c", "function": "def_generate_session_id", "id": "openssl-cve-2021-3449-def_generate_session_id:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-def_generate_session_id", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_sess.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "2b9e2afc382490592078cdb69d06f54f0fefd4c6", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-def_generate_session_id/fixed.c", "function": "def_generate_session_id", "id": "openssl-cve-2021-3449-def_generate_session_id:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-def_generate_session_id", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_sess.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_parse_ctos_renegotia/vuln.c", "function": "tls_parse_ctos_renegotiate", "id": "openssl-cve-2021-3449-tls_parse_ctos_renegotia:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_parse_ctos_renegotia", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_srvr.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "2b9e2afc382490592078cdb69d06f54f0fefd4c6", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_parse_ctos_renegotia/fixed.c", "function": "tls_parse_ctos_renegotiate", "id": "openssl-cve-2021-3449-tls_parse_ctos_renegotia:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_parse_ctos_renegotia", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_srvr.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_process_finished/vuln.c", "function": "tls_process_finished", "id": "openssl-cve-2021-3449-tls_process_finished:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_process_finished", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "2b9e2afc382490592078cdb69d06f54f0fefd4c6", "commit_url": "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_process_finished/fixed.c", "function": "tls_process_finished", "id": "openssl-cve-2021-3449-tls_process_finished:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_process_finished", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "7880536fe17c2b5450e279155bedd51771d28c9f", "commit_url": "https://github.com/openssl/openssl/commit/6eebe6c0238178356114a96a7858f36b24172847", "cve": "CVE-2023-0401", "cwe": "CWE-119", "file": "openssl-cve-2023-0401/vuln.c", "function": "pkcs7_bio_add_digest", "id": "openssl-cve-2023-0401:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0401", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_doit.c", "repo": "openssl/openssl", "split": "train", "year": 2023} +{"class": "security fix", "commit": "6eebe6c0238178356114a96a7858f36b24172847", "commit_url": "https://github.com/openssl/openssl/commit/6eebe6c0238178356114a96a7858f36b24172847", "cve": "CVE-2023-0401", "cwe": "CWE-119", "file": "openssl-cve-2023-0401/fixed.c", "function": "pkcs7_bio_add_digest", "id": "openssl-cve-2023-0401:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0401", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_doit.c", "repo": "openssl/openssl", "split": "train", "year": 2023} +{"class": "security fix", "commit": "adf77d6657e836fc87391fad53d857927a764297", "commit_url": "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f", "cve": "CVE-2023-0286", "cwe": "CWE-119", "file": "openssl-cve-2023-0286-general_name_cmp/vuln.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2023-0286-general_name_cmp:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0286-general_name_cmp", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "7880536fe17c2b5450e279155bedd51771d28c9f", "commit_url": "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f", "cve": "CVE-2023-0286", "cwe": "CWE-119", "file": "openssl-cve-2023-0286-general_name_cmp/fixed.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2023-0286-general_name_cmp:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0286-general_name_cmp", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_genn.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "3436f9c24ab90c1661e4798e7944f028d5d251ce", "commit_url": "https://github.com/openssl/openssl/commit/bcec03c33cc00a7b5eb89ebeeee59e604570a86a", "cve": "CVE-2023-0217", "cwe": "CWE-119", "file": "openssl-cve-2023-0217/vuln.c", "function": "ossl_ffc_validate_public_key_partial", "id": "openssl-cve-2023-0217:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0217", "project": "openssl", "provenance": "human", "relpath": "crypto/ffc/ffc_key_validate.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "bcec03c33cc00a7b5eb89ebeeee59e604570a86a", "commit_url": "https://github.com/openssl/openssl/commit/bcec03c33cc00a7b5eb89ebeeee59e604570a86a", "cve": "CVE-2023-0217", "cwe": "CWE-119", "file": "openssl-cve-2023-0217/fixed.c", "function": "ossl_ffc_validate_public_key_partial", "id": "openssl-cve-2023-0217:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0217", "project": "openssl", "provenance": "human", "relpath": "crypto/ffc/ffc_key_validate.c", "repo": "openssl/openssl", "split": "holdout", "year": 2023} +{"class": "security fix", "commit": "625faca931957719c76fb16094cf5b6e0debe23f", "commit_url": "https://github.com/openssl/openssl/commit/80253dbdc92bec584f4a9866b43f8674156d838a", "cve": "CVE-2023-0216", "cwe": "CWE-119", "file": "openssl-cve-2023-0216/vuln.c", "function": "STACK_OF", "id": "openssl-cve-2023-0216:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0216", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2023} +{"class": "security fix", "commit": "80253dbdc92bec584f4a9866b43f8674156d838a", "commit_url": "https://github.com/openssl/openssl/commit/80253dbdc92bec584f4a9866b43f8674156d838a", "cve": "CVE-2023-0216", "cwe": "CWE-119", "file": "openssl-cve-2023-0216/fixed.c", "function": "STACK_OF", "id": "openssl-cve-2023-0216:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2023-0216", "project": "openssl", "provenance": "human", "relpath": "crypto/pkcs7/pk7_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2023} +{"class": "security fix", "commit": "e2d0a3b5f559e23f11e4d4687b2889b483afb22a", "commit_url": "https://github.com/openssl/openssl/commit/8022a4799fe884b3bf8d538e2b4c4ec323663118", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-rsa_ossl_private_decrypt/vuln.c", "function": "rsa_ossl_private_decrypt", "id": "openssl-cve-2022-4304-rsa_ossl_private_decrypt:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304-rsa_ossl_private_decrypt", "project": "openssl", "provenance": "human", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "8022a4799fe884b3bf8d538e2b4c4ec323663118", "commit_url": "https://github.com/openssl/openssl/commit/8022a4799fe884b3bf8d538e2b4c4ec323663118", "cve": "CVE-2022-4304", "cwe": "CWE-119", "file": "openssl-cve-2022-4304-rsa_ossl_private_decrypt/fixed.c", "function": "rsa_ossl_private_decrypt", "id": "openssl-cve-2022-4304-rsa_ossl_private_decrypt:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-4304-rsa_ossl_private_decrypt", "project": "openssl", "provenance": "human", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "1ca61aa56090356bbdbb16cf48916fbd9886c78d", "commit_url": "https://github.com/openssl/openssl/commit/7fc67e0a33102aa47bbaa56533eeecb98c0450f7", "cve": "CVE-2020-25659", "cwe": "CWE-119", "file": "openssl-cve-2020-25659/vuln.c", "function": "rsa_ossl_private_decrypt", "id": "openssl-cve-2020-25659:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2020-25659", "project": "openssl", "provenance": "human", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "split": "holdout", "year": 2020} +{"class": "security fix", "commit": "7fc67e0a33102aa47bbaa56533eeecb98c0450f7", "commit_url": "https://github.com/openssl/openssl/commit/7fc67e0a33102aa47bbaa56533eeecb98c0450f7", "cve": "CVE-2020-25659", "cwe": "CWE-119", "file": "openssl-cve-2020-25659/fixed.c", "function": "rsa_ossl_private_decrypt", "id": "openssl-cve-2020-25659:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2020-25659", "project": "openssl", "provenance": "human", "relpath": "crypto/rsa/rsa_ossl.c", "repo": "openssl/openssl", "split": "holdout", "year": 2020} +{"class": "security fix", "commit": "9a5c884999a55595e376083b3a165515c8123049", "commit_url": "https://github.com/openssl/openssl/commit/7725e7bfe6f2ce8146b6552b44e0d226be7638e7", "cve": "CVE-2022-3996", "cwe": "CWE-119", "file": "openssl-cve-2022-3996/vuln.c", "function": "ossl_policy_cache_set_mapping", "id": "openssl-cve-2022-3996:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-3996", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/pcy_map.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "7725e7bfe6f2ce8146b6552b44e0d226be7638e7", "commit_url": "https://github.com/openssl/openssl/commit/7725e7bfe6f2ce8146b6552b44e0d226be7638e7", "cve": "CVE-2022-3996", "cwe": "CWE-119", "file": "openssl-cve-2022-3996/fixed.c", "function": "ossl_policy_cache_set_mapping", "id": "openssl-cve-2022-3996:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-3996", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/pcy_map.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} +{"class": "buffer overflow", "commit": "3b421ebc64c7b52f1b9feb3812bdc7781c784332", "commit_url": "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "cve": "CVE-2022-3786", "cwe": "CWE-119", "file": "openssl-cve-2022-3786-ossl_punycode_decode/vuln.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3786-ossl_punycode_decode:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-3786-ossl_punycode_decode", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "split": "train", "year": 2022} +{"class": "buffer overflow", "commit": "680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "commit_url": "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6", "cve": "CVE-2022-3786", "cwe": "CWE-119", "file": "openssl-cve-2022-3786-ossl_punycode_decode/fixed.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3786-ossl_punycode_decode:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2022-3786-ossl_punycode_decode", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "89d72311327735ef15c804d2adea84a0fb1bfa0a", "commit_url": "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332", "cve": "CVE-2022-3602", "cwe": "CWE-119", "file": "openssl-cve-2022-3602-ossl_punycode_decode/vuln.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3602-ossl_punycode_decode:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-3602-ossl_punycode_decode", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "3b421ebc64c7b52f1b9feb3812bdc7781c784332", "commit_url": "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332", "cve": "CVE-2022-3602", "cwe": "CWE-119", "file": "openssl-cve-2022-3602-ossl_punycode_decode/fixed.c", "function": "ossl_punycode_decode", "id": "openssl-cve-2022-3602-ossl_punycode_decode:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-3602-ossl_punycode_decode", "project": "openssl", "provenance": "human", "relpath": "crypto/punycode.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} +{"class": "null pointer dereference", "commit": "9f0867da4cbf77ed642717b5e703e09ab2c087a0", "commit_url": "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "cve": "CVE-2022-3358", "cwe": "CWE-476", "file": "openssl-cve-2022-3358/vuln.c", "function": "evp_md_init_internal", "id": "openssl-cve-2022-3358:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2022-3358", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/digest.c", "repo": "openssl/openssl", "split": "train", "year": 2022} +{"class": "null pointer dereference", "commit": "5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "commit_url": "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "cve": "CVE-2022-3358", "cwe": "CWE-476", "file": "openssl-cve-2022-3358/fixed.c", "function": "evp_md_init_internal", "id": "openssl-cve-2022-3358:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2022-3358", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/digest.c", "repo": "openssl/openssl", "split": "train", "year": 2022} +{"class": "null pointer dereference", "commit": "9f0867da4cbf77ed642717b5e703e09ab2c087a0", "commit_url": "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "cve": "CVE-2022-3358", "cwe": "CWE-476", "file": "openssl-cve-2022-3358-evp_cipher_init_internal/vuln.c", "function": "evp_cipher_init_internal", "id": "openssl-cve-2022-3358-evp_cipher_init_internal:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2022-3358-evp_cipher_init_internal", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} +{"class": "null pointer dereference", "commit": "5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "commit_url": "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b", "cve": "CVE-2022-3358", "cwe": "CWE-476", "file": "openssl-cve-2022-3358-evp_cipher_init_internal/fixed.c", "function": "evp_cipher_init_internal", "id": "openssl-cve-2022-3358-evp_cipher_init_internal:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2022-3358-evp_cipher_init_internal", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "abebcec7b1a30fbb1fd5c5cbbe8817690c139163", "commit_url": "https://github.com/openssl/openssl/commit/2c9c35870601b4a44d86ddbf512b38df38285cfa", "cve": "CVE-2022-2068", "cwe": "CWE-119", "file": "openssl-cve-2022-2068-hash_dir/vuln.in", "function": "hash_dir", "id": "openssl-cve-2022-2068-hash_dir:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-2068-hash_dir", "project": "openssl", "provenance": "human", "relpath": "tools/c_rehash.in", "repo": "openssl/openssl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "2c9c35870601b4a44d86ddbf512b38df38285cfa", "commit_url": "https://github.com/openssl/openssl/commit/2c9c35870601b4a44d86ddbf512b38df38285cfa", "cve": "CVE-2022-2068", "cwe": "CWE-119", "file": "openssl-cve-2022-2068-hash_dir/fixed.in", "function": "hash_dir", "id": "openssl-cve-2022-2068-hash_dir:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-2068-hash_dir", "project": "openssl", "provenance": "human", "relpath": "tools/c_rehash.in", "repo": "openssl/openssl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "3be529cd2eb4eb3eaaa7913af619fb9c918d4581", "commit_url": "https://github.com/openssl/openssl/commit/373de40f3f76c63e4f2684abd86706f3863347ca", "cve": "CVE-2022-29242", "cwe": "CWE-119", "file": "openssl-cve-2022-29242/vuln.c", "function": "tls_construct_cke_gost18", "id": "openssl-cve-2022-29242:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-29242", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "373de40f3f76c63e4f2684abd86706f3863347ca", "commit_url": "https://github.com/openssl/openssl/commit/373de40f3f76c63e4f2684abd86706f3863347ca", "cve": "CVE-2022-29242", "cwe": "CWE-119", "file": "openssl-cve-2022-29242/fixed.c", "function": "tls_construct_cke_gost18", "id": "openssl-cve-2022-29242:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-29242", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "55c80c222293a972587004c185dc5653ae207a0e", "commit_url": "https://github.com/openssl/openssl/commit/7d56a74a96828985db7354a55227a511615f732b", "cve": "CVE-2022-1434", "cwe": "CWE-119", "file": "openssl-cve-2022-1434/vuln.c", "function": "rc4_hmac_md5_set_ctx_params", "id": "openssl-cve-2022-1434:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-1434", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_rc4_hmac_md5.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "7d56a74a96828985db7354a55227a511615f732b", "commit_url": "https://github.com/openssl/openssl/commit/7d56a74a96828985db7354a55227a511615f732b", "cve": "CVE-2022-1434", "cwe": "CWE-119", "file": "openssl-cve-2022-1434/fixed.c", "function": "rc4_hmac_md5_set_ctx_params", "id": "openssl-cve-2022-1434:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-1434", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/ciphers/cipher_rc4_hmac_md5.c", "repo": "openssl/openssl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "ae3ece03a61e8822fd7ea58f44812871efba82d1", "commit_url": "https://github.com/openssl/openssl/commit/2eda98790c5c2741d76d23cc1e74b0dc4f4b391a", "cve": "CVE-2022-1343", "cwe": "CWE-119", "file": "openssl-cve-2022-1343/vuln.c", "function": "ocsp_verify_signer", "id": "openssl-cve-2022-1343:vuln", "label": "vuln", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-1343", "project": "openssl", "provenance": "human", "relpath": "crypto/ocsp/ocsp_vfy.c", "repo": "openssl/openssl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "2eda98790c5c2741d76d23cc1e74b0dc4f4b391a", "commit_url": "https://github.com/openssl/openssl/commit/2eda98790c5c2741d76d23cc1e74b0dc4f4b391a", "cve": "CVE-2022-1343", "cwe": "CWE-119", "file": "openssl-cve-2022-1343/fixed.c", "function": "ocsp_verify_signer", "id": "openssl-cve-2022-1343:fixed", "label": "fixed", "license": "Apache-2.0", "mechanism": "other", "pair": "openssl-cve-2022-1343", "project": "openssl", "provenance": "human", "relpath": "crypto/ocsp/ocsp_vfy.c", "repo": "openssl/openssl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "758754966791c537ea95241438454aa86f91f256", "commit_url": "https://github.com/openssl/openssl/commit/d69ae8a93bfc0f2489c008fcf303a98d77a6df4d", "cve": "CVE-2021-4044", "cwe": "CWE-119", "file": "openssl-cve-2021-4044/vuln.c", "function": "has_san_id", "id": "openssl-cve-2021-4044:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-4044", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "d69ae8a93bfc0f2489c008fcf303a98d77a6df4d", "commit_url": "https://github.com/openssl/openssl/commit/d69ae8a93bfc0f2489c008fcf303a98d77a6df4d", "cve": "CVE-2021-4044", "cwe": "CWE-119", "file": "openssl-cve-2021-4044/fixed.c", "function": "has_san_id", "id": "openssl-cve-2021-4044:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-4044", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "8e78289c4e6f4c9f2fec073b78443736e689854d", "commit_url": "https://github.com/openssl/openssl/commit/758754966791c537ea95241438454aa86f91f256", "cve": "CVE-2021-4044", "cwe": "CWE-119", "file": "openssl-cve-2021-4044-tls_post_process_server_/vuln.c", "function": "tls_post_process_server_certificate", "id": "openssl-cve-2021-4044-tls_post_process_server_:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-4044-tls_post_process_server_", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "758754966791c537ea95241438454aa86f91f256", "commit_url": "https://github.com/openssl/openssl/commit/758754966791c537ea95241438454aa86f91f256", "cve": "CVE-2021-4044", "cwe": "CWE-119", "file": "openssl-cve-2021-4044-tls_post_process_server_/fixed.c", "function": "tls_post_process_server_certificate", "id": "openssl-cve-2021-4044-tls_post_process_server_:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-4044-tls_post_process_server_", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "4b8a8bb75229b64d1c7598d845fdc3c7e7d7eee2", "commit_url": "https://github.com/openssl/openssl/commit/36cf45ef3ba71e44a8be06ee81cb31aa02cb0010", "cve": "CVE-2021-3711", "cwe": "CWE-119", "file": "openssl-cve-2021-3711-sm2_asym_decrypt/vuln.c", "function": "sm2_asym_decrypt", "id": "openssl-cve-2021-3711-sm2_asym_decrypt:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3711-sm2_asym_decrypt", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/asymciphers/sm2_enc.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "36cf45ef3ba71e44a8be06ee81cb31aa02cb0010", "commit_url": "https://github.com/openssl/openssl/commit/36cf45ef3ba71e44a8be06ee81cb31aa02cb0010", "cve": "CVE-2021-3711", "cwe": "CWE-119", "file": "openssl-cve-2021-3711-sm2_asym_decrypt/fixed.c", "function": "sm2_asym_decrypt", "id": "openssl-cve-2021-3711-sm2_asym_decrypt:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3711-sm2_asym_decrypt", "project": "openssl", "provenance": "human", "relpath": "providers/implementations/asymciphers/sm2_enc.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "98624776c4d501c8badd6f772ab7048ac9191cb9", "commit_url": "https://github.com/openssl/openssl/commit/7c038a6bcd98d4bbfd2c2892a87a1138d2f7c5f3", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-netscape_spki_print/vuln.c", "function": "NETSCAPE_SPKI_print", "id": "openssl-cve-2021-3712-netscape_spki_print:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-netscape_spki_print", "project": "openssl", "provenance": "human", "relpath": "crypto/asn1/t_spki.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "7c038a6bcd98d4bbfd2c2892a87a1138d2f7c5f3", "commit_url": "https://github.com/openssl/openssl/commit/7c038a6bcd98d4bbfd2c2892a87a1138d2f7c5f3", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-netscape_spki_print/fixed.c", "function": "NETSCAPE_SPKI_print", "id": "openssl-cve-2021-3712-netscape_spki_print:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-netscape_spki_print", "project": "openssl", "provenance": "human", "relpath": "crypto/asn1/t_spki.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "1f365708a3318a5f1a395f90c38b584a58d37fb9", "commit_url": "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-append_ia5/vuln.c", "function": "append_ia5", "id": "openssl-cve-2021-3712-append_ia5:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-append_ia5", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "98624776c4d501c8badd6f772ab7048ac9191cb9", "commit_url": "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-append_ia5/fixed.c", "function": "append_ia5", "id": "openssl-cve-2021-3712-append_ia5:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-append_ia5", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_utl.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "d2015a783e64613d8e4a142fa05048d1863df944", "commit_url": "https://github.com/openssl/openssl/commit/95f8c1e142df835d03b5b62521383a462fc5470d", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet/vuln.c", "function": "ossl_cmp_hdr_push1_freeText", "id": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_hdr.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "95f8c1e142df835d03b5b62521383a462fc5470d", "commit_url": "https://github.com/openssl/openssl/commit/95f8c1e142df835d03b5b62521383a462fc5470d", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet/fixed.c", "function": "ossl_cmp_hdr_push1_freeText", "id": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet", "project": "openssl", "provenance": "human", "relpath": "crypto/cmp/cmp_hdr.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "918430ba80d94ec8f05383b43b1872b1ebb13e1a", "commit_url": "https://github.com/openssl/openssl/commit/d2015a783e64613d8e4a142fa05048d1863df944", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-ia5ncasecmp/vuln.c", "function": "ia5ncasecmp", "id": "openssl-cve-2021-3712-ia5ncasecmp:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-ia5ncasecmp", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_ncons.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "d2015a783e64613d8e4a142fa05048d1863df944", "commit_url": "https://github.com/openssl/openssl/commit/d2015a783e64613d8e4a142fa05048d1863df944", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-ia5ncasecmp/fixed.c", "function": "ia5ncasecmp", "id": "openssl-cve-2021-3712-ia5ncasecmp:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-ia5ncasecmp", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_ncons.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd", "commit_url": "https://github.com/openssl/openssl/commit/918430ba80d94ec8f05383b43b1872b1ebb13e1a", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-i2r_pci/vuln.c", "function": "i2r_pci", "id": "openssl-cve-2021-3712-i2r_pci:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-i2r_pci", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_pci.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "918430ba80d94ec8f05383b43b1872b1ebb13e1a", "commit_url": "https://github.com/openssl/openssl/commit/918430ba80d94ec8f05383b43b1872b1ebb13e1a", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-i2r_pci/fixed.c", "function": "i2r_pci", "id": "openssl-cve-2021-3712-i2r_pci:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-i2r_pci", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_pci.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "1747d4658b3830951068a6a6c1fa2b45c4731fb3", "commit_url": "https://github.com/openssl/openssl/commit/b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-general_name_print/vuln.c", "function": "GENERAL_NAME_print", "id": "openssl-cve-2021-3712-general_name_print:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-general_name_print", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_san.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd", "commit_url": "https://github.com/openssl/openssl/commit/b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-general_name_print/fixed.c", "function": "GENERAL_NAME_print", "id": "openssl-cve-2021-3712-general_name_print:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-general_name_print", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_san.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "ad6ac17489241574136b7d035f01f6175dd9c941", "commit_url": "https://github.com/openssl/openssl/commit/1747d4658b3830951068a6a6c1fa2b45c4731fb3", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-print_qualifiers/vuln.c", "function": "print_qualifiers", "id": "openssl-cve-2021-3712-print_qualifiers:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-print_qualifiers", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_cpols.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "1747d4658b3830951068a6a6c1fa2b45c4731fb3", "commit_url": "https://github.com/openssl/openssl/commit/1747d4658b3830951068a6a6c1fa2b45c4731fb3", "cve": "CVE-2021-3712", "cwe": "CWE-119", "file": "openssl-cve-2021-3712-print_qualifiers/fixed.c", "function": "print_qualifiers", "id": "openssl-cve-2021-3712-print_qualifiers:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3712-print_qualifiers", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/v3_cpols.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "8c74c9d1ade0fbdab5b815ddb747351b8b839641", "commit_url": "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "cve": "CVE-2021-3711", "cwe": "CWE-119", "file": "openssl-cve-2021-3711-pkey_sm2_decrypt/vuln.c", "function": "pkey_sm2_decrypt", "id": "openssl-cve-2021-3711-pkey_sm2_decrypt:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3711-pkey_sm2_decrypt", "project": "openssl", "provenance": "human", "relpath": "crypto/sm2/sm2_pmeth.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "commit_url": "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "cve": "CVE-2021-3711", "cwe": "CWE-119", "file": "openssl-cve-2021-3711-pkey_sm2_decrypt/fixed.c", "function": "pkey_sm2_decrypt", "id": "openssl-cve-2021-3711-pkey_sm2_decrypt:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3711-pkey_sm2_decrypt", "project": "openssl", "provenance": "human", "relpath": "crypto/sm2/sm2_pmeth.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-ssl_generate_master_secr/vuln.c", "function": "ssl_generate_master_secret", "id": "openssl-cve-2021-3449-ssl_generate_master_secr:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-ssl_generate_master_secr", "project": "openssl", "provenance": "human", "relpath": "ssl/s3_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-ssl_generate_master_secr/fixed.c", "function": "ssl_generate_master_secret", "id": "openssl-cve-2021-3449-ssl_generate_master_secr:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-ssl_generate_master_secr", "project": "openssl", "provenance": "human", "relpath": "ssl/s3_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos/vuln.c", "function": "SSL_CTX_set_alpn_protos", "id": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos/fixed.c", "function": "SSL_CTX_set_alpn_protos", "id": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos", "project": "openssl", "provenance": "human", "relpath": "ssl/ssl_lib.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-init_sig_algs_cert/vuln.c", "function": "init_sig_algs_cert", "id": "openssl-cve-2021-3449-init_sig_algs_cert:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-init_sig_algs_cert", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-init_sig_algs_cert/fixed.c", "function": "init_sig_algs_cert", "id": "openssl-cve-2021-3449-init_sig_algs_cert:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-init_sig_algs_cert", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_construct_ctos_early/vuln.c", "function": "tls_construct_ctos_early_data", "id": "openssl-cve-2021-3449-tls_construct_ctos_early:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_construct_ctos_early", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_construct_ctos_early/fixed.c", "function": "tls_construct_ctos_early_data", "id": "openssl-cve-2021-3449-tls_construct_ctos_early:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_construct_ctos_early", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions_clnt.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_process_certificate_/vuln.c", "function": "tls_process_certificate_request", "id": "openssl-cve-2021-3449-tls_process_certificate_:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_process_certificate_", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_process_certificate_/fixed.c", "function": "tls_process_certificate_request", "id": "openssl-cve-2021-3449-tls_process_certificate_:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_process_certificate_", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_clnt.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_handle_alpn/vuln.c", "function": "tls_handle_alpn", "id": "openssl-cve-2021-3449-tls_handle_alpn:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_handle_alpn", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_srvr.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "39a140597d874e554b736885ac4dea16ac40a87a", "commit_url": "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a", "cve": "CVE-2021-3449", "cwe": "CWE-119", "file": "openssl-cve-2021-3449-tls_handle_alpn/fixed.c", "function": "tls_handle_alpn", "id": "openssl-cve-2021-3449-tls_handle_alpn:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3449-tls_handle_alpn", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/statem_srvr.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "null pointer dereference", "commit": "112580c27b829b0ac0874d5c5787195f27c7952c", "commit_url": "https://github.com/openssl/openssl/commit/02b1636fe3db274497304a3e95a4e32ced7e841b", "cve": "CVE-2021-3449", "cwe": "CWE-476", "file": "openssl-cve-2021-3449-init_sig_algs/vuln.c", "function": "init_sig_algs", "id": "openssl-cve-2021-3449-init_sig_algs:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2021-3449-init_sig_algs", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "null pointer dereference", "commit": "02b1636fe3db274497304a3e95a4e32ced7e841b", "commit_url": "https://github.com/openssl/openssl/commit/02b1636fe3db274497304a3e95a4e32ced7e841b", "cve": "CVE-2021-3449", "cwe": "CWE-476", "file": "openssl-cve-2021-3449-init_sig_algs/fixed.c", "function": "init_sig_algs", "id": "openssl-cve-2021-3449-init_sig_algs:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2021-3449-init_sig_algs", "project": "openssl", "provenance": "human", "relpath": "ssl/statem/extensions.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "cfd74383d9b06f85cb1e166180346115a3f9a452", "commit_url": "https://github.com/openssl/openssl/commit/2a40b7bc7b94dd7de897a74571e7024f0cf0d63b", "cve": "CVE-2021-3450", "cwe": "CWE-119", "file": "openssl-cve-2021-3450/vuln.c", "function": "check_chain_extensions", "id": "openssl-cve-2021-3450:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3450", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "2a40b7bc7b94dd7de897a74571e7024f0cf0d63b", "commit_url": "https://github.com/openssl/openssl/commit/2a40b7bc7b94dd7de897a74571e7024f0cf0d63b", "cve": "CVE-2021-3450", "cwe": "CWE-119", "file": "openssl-cve-2021-3450/fixed.c", "function": "check_chain_extensions", "id": "openssl-cve-2021-3450:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2021-3450", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_vfy.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "buffer overflow", "commit": "481a88f13c44996a008195791ea0dc076b968774", "commit_url": "https://github.com/openssl/openssl/commit/6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1", "cve": "CVE-2021-23840", "cwe": "CWE-119", "file": "openssl-cve-2021-23840-evp_encryptdecryptupdate/vuln.c", "function": "evp_EncryptDecryptUpdate", "id": "openssl-cve-2021-23840-evp_encryptdecryptupdate:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2021-23840-evp_encryptdecryptupdate", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "buffer overflow", "commit": "6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1", "commit_url": "https://github.com/openssl/openssl/commit/6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1", "cve": "CVE-2021-23840", "cwe": "CWE-119", "file": "openssl-cve-2021-23840-evp_encryptdecryptupdate/fixed.c", "function": "evp_EncryptDecryptUpdate", "id": "openssl-cve-2021-23840-evp_encryptdecryptupdate:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "unchecked_length_copy", "pair": "openssl-cve-2021-23840-evp_encryptdecryptupdate", "project": "openssl", "provenance": "human", "relpath": "crypto/evp/evp_enc.c", "repo": "openssl/openssl", "split": "holdout", "year": 2021} +{"class": "null pointer dereference", "commit": "c8c6e7438c03b2fc24e7ead460feeaef04911fb4", "commit_url": "https://github.com/openssl/openssl/commit/122a19ab48091c657f7cb1fb3af9fc07bd557bbf", "cve": "CVE-2021-23841", "cwe": "CWE-476", "file": "openssl-cve-2021-23841/vuln.c", "function": "X509_issuer_and_serial_hash", "id": "openssl-cve-2021-23841:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2021-23841", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_cmp.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "null pointer dereference", "commit": "122a19ab48091c657f7cb1fb3af9fc07bd557bbf", "commit_url": "https://github.com/openssl/openssl/commit/122a19ab48091c657f7cb1fb3af9fc07bd557bbf", "cve": "CVE-2021-23841", "cwe": "CWE-476", "file": "openssl-cve-2021-23841/fixed.c", "function": "X509_issuer_and_serial_hash", "id": "openssl-cve-2021-23841:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2021-23841", "project": "openssl", "provenance": "human", "relpath": "crypto/x509/x509_cmp.c", "repo": "openssl/openssl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "aa0ad2011d3e7ad8a611da274ef7d9c7706e289b", "commit_url": "https://github.com/openssl/openssl/commit/f960d81215ebf3f65e03d4d5d857fb9b666d6920", "cve": "CVE-2020-1971", "cwe": "CWE-119", "file": "openssl-cve-2020-1971-general_name_cmp/vuln.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2020-1971-general_name_cmp:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2020-1971-general_name_cmp", "project": "openssl", "provenance": "human", "relpath": "crypto/x509v3/v3_genn.c", "repo": "openssl/openssl", "split": "train", "year": 2020} +{"class": "security fix", "commit": "f960d81215ebf3f65e03d4d5d857fb9b666d6920", "commit_url": "https://github.com/openssl/openssl/commit/f960d81215ebf3f65e03d4d5d857fb9b666d6920", "cve": "CVE-2020-1971", "cwe": "CWE-119", "file": "openssl-cve-2020-1971-general_name_cmp/fixed.c", "function": "GENERAL_NAME_cmp", "id": "openssl-cve-2020-1971-general_name_cmp:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "other", "pair": "openssl-cve-2020-1971-general_name_cmp", "project": "openssl", "provenance": "human", "relpath": "crypto/x509v3/v3_genn.c", "repo": "openssl/openssl", "split": "train", "year": 2020} +{"class": "null pointer dereference", "commit": "3656c08ab4b1b892730cb5e808b6f4298b08a2e6", "commit_url": "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4", "cve": "CVE-2020-1967", "cwe": "CWE-476", "file": "openssl-cve-2020-1967-tls1_check_sig_alg/vuln.c", "function": "tls1_check_sig_alg", "id": "openssl-cve-2020-1967-tls1_check_sig_alg:vuln", "label": "vuln", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2020-1967-tls1_check_sig_alg", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2020} +{"class": "null pointer dereference", "commit": "a87f3fe01a5a894aa27ccd6a239155fd129988e4", "commit_url": "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4", "cve": "CVE-2020-1967", "cwe": "CWE-476", "file": "openssl-cve-2020-1967-tls1_check_sig_alg/fixed.c", "function": "tls1_check_sig_alg", "id": "openssl-cve-2020-1967-tls1_check_sig_alg:fixed", "label": "fixed", "license": "OpenSSL License", "mechanism": "null_deref_unguarded", "pair": "openssl-cve-2020-1967-tls1_check_sig_alg", "project": "openssl", "provenance": "human", "relpath": "ssl/t1_lib.c", "repo": "openssl/openssl", "split": "train", "year": 2020} +{"class": "security fix", "commit": "f746780a1e548b4b93790b58d70c3b22fde5360d", "commit_url": "https://github.com/curl/curl/commit/e9a2b0dc72dd3a9aa3a5210e89079a3b719475dc", "cve": "CVE-2026-9080", "cwe": "CWE-119", "file": "curl-cve-2026-9080/vuln.c", "function": "mev_forget_socket", "id": "curl-cve-2026-9080:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2026-9080", "project": "curl", "provenance": "human", "relpath": "lib/multi_ev.c", "repo": "curl/curl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "e9a2b0dc72dd3a9aa3a5210e89079a3b719475dc", "commit_url": "https://github.com/curl/curl/commit/e9a2b0dc72dd3a9aa3a5210e89079a3b719475dc", "cve": "CVE-2026-9080", "cwe": "CWE-119", "file": "curl-cve-2026-9080/fixed.c", "function": "mev_forget_socket", "id": "curl-cve-2026-9080:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2026-9080", "project": "curl", "provenance": "human", "relpath": "lib/multi_ev.c", "repo": "curl/curl", "split": "holdout", "year": 2026} +{"class": "security fix", "commit": "09e25b9d94f4106eac8ca3a43b221bdc66f405e4", "commit_url": "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147", "cve": "CVE-2023-38545", "cwe": "CWE-119", "file": "curl-cve-2023-38545-do_socks5/vuln.c", "function": "do_SOCKS5", "id": "curl-cve-2023-38545-do_socks5:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2023-38545-do_socks5", "project": "curl", "provenance": "human", "relpath": "lib/socks.c", "repo": "curl/curl", "split": "train", "year": 2023} +{"class": "security fix", "commit": "fb4415d8aee6c1045be932a34fe6107c2f5ed147", "commit_url": "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147", "cve": "CVE-2023-38545", "cwe": "CWE-119", "file": "curl-cve-2023-38545-do_socks5/fixed.c", "function": "do_SOCKS5", "id": "curl-cve-2023-38545-do_socks5:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2023-38545-do_socks5", "project": "curl", "provenance": "human", "relpath": "lib/socks.c", "repo": "curl/curl", "split": "train", "year": 2023} +{"class": "security fix", "commit": "46f8911d3942dc06fdd67e9f6f3908982e5d2fb4", "commit_url": "https://github.com/curl/curl/commit/20f9dd6bae50b7223171b17ba7798946e74f877f", "cve": "CVE-2022-32207", "cwe": "CWE-119", "file": "curl-cve-2022-32207/vuln.c", "function": "cookie_output", "id": "curl-cve-2022-32207:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-32207", "project": "curl", "provenance": "human", "relpath": "lib/cookie.c", "repo": "curl/curl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "20f9dd6bae50b7223171b17ba7798946e74f877f", "commit_url": "https://github.com/curl/curl/commit/20f9dd6bae50b7223171b17ba7798946e74f877f", "cve": "CVE-2022-32207", "cwe": "CWE-119", "file": "curl-cve-2022-32207/fixed.c", "function": "cookie_output", "id": "curl-cve-2022-32207:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-32207", "project": "curl", "provenance": "human", "relpath": "lib/cookie.c", "repo": "curl/curl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "6ecdf5136b52af747e7bda08db9a748256b1cd09", "commit_url": "https://github.com/curl/curl/commit/3a09fbb7f264c67c438d01a30669ce325aa508e2", "cve": "CVE-2022-32206", "cwe": "CWE-119", "file": "curl-cve-2022-32206/vuln.c", "function": "Curl_build_unencoding_stack", "id": "curl-cve-2022-32206:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-32206", "project": "curl", "provenance": "human", "relpath": "lib/content_encoding.c", "repo": "curl/curl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "3a09fbb7f264c67c438d01a30669ce325aa508e2", "commit_url": "https://github.com/curl/curl/commit/3a09fbb7f264c67c438d01a30669ce325aa508e2", "cve": "CVE-2022-32206", "cwe": "CWE-119", "file": "curl-cve-2022-32206/fixed.c", "function": "Curl_build_unencoding_stack", "id": "curl-cve-2022-32206:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-32206", "project": "curl", "provenance": "human", "relpath": "lib/content_encoding.c", "repo": "curl/curl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "2b67a0a1129b20a56ed04859fec8999f5c0c4280", "commit_url": "https://github.com/curl/curl/commit/6ecdf5136b52af747e7bda08db9a748256b1cd09", "cve": "CVE-2022-32208", "cwe": "CWE-119", "file": "curl-cve-2022-32208/vuln.c", "function": "read_data", "id": "curl-cve-2022-32208:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-32208", "project": "curl", "provenance": "human", "relpath": "lib/krb5.c", "repo": "curl/curl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "6ecdf5136b52af747e7bda08db9a748256b1cd09", "commit_url": "https://github.com/curl/curl/commit/6ecdf5136b52af747e7bda08db9a748256b1cd09", "cve": "CVE-2022-32208", "cwe": "CWE-119", "file": "curl-cve-2022-32208/fixed.c", "function": "read_data", "id": "curl-cve-2022-32208:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-32208", "project": "curl", "provenance": "human", "relpath": "lib/krb5.c", "repo": "curl/curl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "7e92d12b4e6911f424678a133b19de670e183a59", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-curl_init_userdefined/vuln.c", "function": "Curl_init_userdefined", "id": "curl-cve-2022-27782-curl_init_userdefined:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-curl_init_userdefined", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "f18af4f874cecab82a9797e8c7541e0990c7a64c", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-curl_init_userdefined/fixed.c", "function": "Curl_init_userdefined", "id": "curl-cve-2022-27782-curl_init_userdefined:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-curl_init_userdefined", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "7e92d12b4e6911f424678a133b19de670e183a59", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-gtls_shutdown/vuln.c", "function": "gtls_shutdown", "id": "curl-cve-2022-27782-gtls_shutdown:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-gtls_shutdown", "project": "curl", "provenance": "human", "relpath": "lib/vtls/gtls.c", "repo": "curl/curl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "f18af4f874cecab82a9797e8c7541e0990c7a64c", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-gtls_shutdown/fixed.c", "function": "gtls_shutdown", "id": "curl-cve-2022-27782-gtls_shutdown:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-gtls_shutdown", "project": "curl", "provenance": "human", "relpath": "lib/vtls/gtls.c", "repo": "curl/curl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "7e92d12b4e6911f424678a133b19de670e183a59", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-nss_setup_connect/vuln.c", "function": "nss_setup_connect", "id": "curl-cve-2022-27782-nss_setup_connect:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-nss_setup_connect", "project": "curl", "provenance": "human", "relpath": "lib/vtls/nss.c", "repo": "curl/curl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "f18af4f874cecab82a9797e8c7541e0990c7a64c", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-nss_setup_connect/fixed.c", "function": "nss_setup_connect", "id": "curl-cve-2022-27782-nss_setup_connect:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-nss_setup_connect", "project": "curl", "provenance": "human", "relpath": "lib/vtls/nss.c", "repo": "curl/curl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "7e92d12b4e6911f424678a133b19de670e183a59", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-ossl_connect_step1/vuln.c", "function": "ossl_connect_step1", "id": "curl-cve-2022-27782-ossl_connect_step1:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-ossl_connect_step1", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "f18af4f874cecab82a9797e8c7541e0990c7a64c", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-ossl_connect_step1/fixed.c", "function": "ossl_connect_step1", "id": "curl-cve-2022-27782-ossl_connect_step1:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-ossl_connect_step1", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "7e92d12b4e6911f424678a133b19de670e183a59", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-curl_free_primary_ssl_co/vuln.c", "function": "Curl_free_primary_ssl_config", "id": "curl-cve-2022-27782-curl_free_primary_ssl_co:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-curl_free_primary_ssl_co", "project": "curl", "provenance": "human", "relpath": "lib/vtls/vtls.c", "repo": "curl/curl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "f18af4f874cecab82a9797e8c7541e0990c7a64c", "commit_url": "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c", "cve": "CVE-2022-27782", "cwe": "CWE-119", "file": "curl-cve-2022-27782-curl_free_primary_ssl_co/fixed.c", "function": "Curl_free_primary_ssl_config", "id": "curl-cve-2022-27782-curl_free_primary_ssl_co:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27782-curl_free_primary_ssl_co", "project": "curl", "provenance": "human", "relpath": "lib/vtls/vtls.c", "repo": "curl/curl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "fae6fea209a2d4db1582f608bd8cc8000721733a", "commit_url": "https://github.com/curl/curl/commit/8c7ee9083d0d719d0a77ab20d9cc2ae84eeea7f3", "cve": "CVE-2022-27778", "cwe": "CWE-119", "file": "curl-cve-2022-27778/vuln.c", "function": "post_per_transfer", "id": "curl-cve-2022-27778:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27778", "project": "curl", "provenance": "human", "relpath": "src/tool_operate.c", "repo": "curl/curl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "8c7ee9083d0d719d0a77ab20d9cc2ae84eeea7f3", "commit_url": "https://github.com/curl/curl/commit/8c7ee9083d0d719d0a77ab20d9cc2ae84eeea7f3", "cve": "CVE-2022-27778", "cwe": "CWE-119", "file": "curl-cve-2022-27778/fixed.c", "function": "post_per_transfer", "id": "curl-cve-2022-27778:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27778", "project": "curl", "provenance": "human", "relpath": "src/tool_operate.c", "repo": "curl/curl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "ff3ee510c328db03bf171cae6179bb9463fb054f", "commit_url": "https://github.com/curl/curl/commit/fae6fea209a2d4db1582f608bd8cc8000721733a", "cve": "CVE-2022-30115", "cwe": "CWE-119", "file": "curl-cve-2022-30115/vuln.c", "function": "hsts_create", "id": "curl-cve-2022-30115:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-30115", "project": "curl", "provenance": "human", "relpath": "lib/hsts.c", "repo": "curl/curl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "fae6fea209a2d4db1582f608bd8cc8000721733a", "commit_url": "https://github.com/curl/curl/commit/fae6fea209a2d4db1582f608bd8cc8000721733a", "cve": "CVE-2022-30115", "cwe": "CWE-119", "file": "curl-cve-2022-30115/fixed.c", "function": "hsts_create", "id": "curl-cve-2022-30115:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-30115", "project": "curl", "provenance": "human", "relpath": "lib/hsts.c", "repo": "curl/curl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "5c7da89d404bf59c8dd82a001119a16d18365917", "commit_url": "https://github.com/curl/curl/commit/914aaab9153764ef8fa4178215b8ad89d3ac263a", "cve": "CVE-2022-27780", "cwe": "CWE-119", "file": "curl-cve-2022-27780/vuln.c", "function": "hostname_check", "id": "curl-cve-2022-27780:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27780", "project": "curl", "provenance": "human", "relpath": "lib/urlapi.c", "repo": "curl/curl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "914aaab9153764ef8fa4178215b8ad89d3ac263a", "commit_url": "https://github.com/curl/curl/commit/914aaab9153764ef8fa4178215b8ad89d3ac263a", "cve": "CVE-2022-27780", "cwe": "CWE-119", "file": "curl-cve-2022-27780/fixed.c", "function": "hostname_check", "id": "curl-cve-2022-27780:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27780", "project": "curl", "provenance": "human", "relpath": "lib/urlapi.c", "repo": "curl/curl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "08b8ef4e726ba10f45081ecda5b3cea788d3c839", "commit_url": "https://github.com/curl/curl/commit/620ea21410030a9977396b4661806bc187231b79", "cve": "CVE-2022-27774", "cwe": "CWE-119", "file": "curl-cve-2022-27774/vuln.c", "function": "Curl_follow", "id": "curl-cve-2022-27774:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27774", "project": "curl", "provenance": "human", "relpath": "lib/transfer.c", "repo": "curl/curl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "620ea21410030a9977396b4661806bc187231b79", "commit_url": "https://github.com/curl/curl/commit/620ea21410030a9977396b4661806bc187231b79", "cve": "CVE-2022-27774", "cwe": "CWE-119", "file": "curl-cve-2022-27774/fixed.c", "function": "Curl_follow", "id": "curl-cve-2022-27774:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27774", "project": "curl", "provenance": "human", "relpath": "lib/transfer.c", "repo": "curl/curl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "8f2079154f80561ccffcaa954268798b658e66b6", "commit_url": "https://github.com/curl/curl/commit/6e659993952aa5f90f48864be84a1bbb047fc258", "cve": "CVE-2022-27776", "cwe": "CWE-119", "file": "curl-cve-2022-27776/vuln.c", "function": "Curl_add_custom_headers", "id": "curl-cve-2022-27776:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27776", "project": "curl", "provenance": "human", "relpath": "lib/http.c", "repo": "curl/curl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "6e659993952aa5f90f48864be84a1bbb047fc258", "commit_url": "https://github.com/curl/curl/commit/6e659993952aa5f90f48864be84a1bbb047fc258", "cve": "CVE-2022-27776", "cwe": "CWE-119", "file": "curl-cve-2022-27776/fixed.c", "function": "Curl_add_custom_headers", "id": "curl-cve-2022-27776:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27776", "project": "curl", "provenance": "human", "relpath": "lib/http.c", "repo": "curl/curl", "split": "holdout", "year": 2022} +{"class": "security fix", "commit": "852aa5ad351ea53e5f01d2f44b5b4370c2bf5425", "commit_url": "https://github.com/curl/curl/commit/058f98dc3fe595f21dc26a5b9b1699e519ba5705", "cve": "CVE-2022-27775", "cwe": "CWE-119", "file": "curl-cve-2022-27775/vuln.c", "function": "hashkey", "id": "curl-cve-2022-27775:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27775", "project": "curl", "provenance": "human", "relpath": "lib/conncache.c", "repo": "curl/curl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "058f98dc3fe595f21dc26a5b9b1699e519ba5705", "commit_url": "https://github.com/curl/curl/commit/058f98dc3fe595f21dc26a5b9b1699e519ba5705", "cve": "CVE-2022-27775", "cwe": "CWE-119", "file": "curl-cve-2022-27775/fixed.c", "function": "hashkey", "id": "curl-cve-2022-27775:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-27775", "project": "curl", "provenance": "human", "relpath": "lib/conncache.c", "repo": "curl/curl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "ff2f3e836702daa82e2356195482fcc95f4257dc", "commit_url": "https://github.com/curl/curl/commit/852aa5ad351ea53e5f01d2f44b5b4370c2bf5425", "cve": "CVE-2022-22576", "cwe": "CWE-119", "file": "curl-cve-2022-22576-conn_free/vuln.c", "function": "conn_free", "id": "curl-cve-2022-22576-conn_free:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-22576-conn_free", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "852aa5ad351ea53e5f01d2f44b5b4370c2bf5425", "commit_url": "https://github.com/curl/curl/commit/852aa5ad351ea53e5f01d2f44b5b4370c2bf5425", "cve": "CVE-2022-22576", "cwe": "CWE-119", "file": "curl-cve-2022-22576-conn_free/fixed.c", "function": "conn_free", "id": "curl-cve-2022-22576-conn_free:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2022-22576-conn_free", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "split": "train", "year": 2022} +{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947/vuln.c", "function": "ftp_statemachine", "id": "curl-cve-2021-22947:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947", "project": "curl", "provenance": "human", "relpath": "lib/ftp.c", "repo": "curl/curl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "8ef147c43646e91fdaad5d0e7b60351f842e5c68", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947/fixed.c", "function": "ftp_statemachine", "id": "curl-cve-2021-22947:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947", "project": "curl", "provenance": "human", "relpath": "lib/ftp.c", "repo": "curl/curl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-imap_state_starttls_resp/vuln.c", "function": "imap_state_starttls_resp", "id": "curl-cve-2021-22947-imap_state_starttls_resp:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947-imap_state_starttls_resp", "project": "curl", "provenance": "human", "relpath": "lib/imap.c", "repo": "curl/curl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "8ef147c43646e91fdaad5d0e7b60351f842e5c68", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-imap_state_starttls_resp/fixed.c", "function": "imap_state_starttls_resp", "id": "curl-cve-2021-22947-imap_state_starttls_resp:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947-imap_state_starttls_resp", "project": "curl", "provenance": "human", "relpath": "lib/imap.c", "repo": "curl/curl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-pop3_state_starttls_resp/vuln.c", "function": "pop3_state_starttls_resp", "id": "curl-cve-2021-22947-pop3_state_starttls_resp:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947-pop3_state_starttls_resp", "project": "curl", "provenance": "human", "relpath": "lib/pop3.c", "repo": "curl/curl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "8ef147c43646e91fdaad5d0e7b60351f842e5c68", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-pop3_state_starttls_resp/fixed.c", "function": "pop3_state_starttls_resp", "id": "curl-cve-2021-22947-pop3_state_starttls_resp:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947-pop3_state_starttls_resp", "project": "curl", "provenance": "human", "relpath": "lib/pop3.c", "repo": "curl/curl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-smtp_state_starttls_resp/vuln.c", "function": "smtp_state_starttls_resp", "id": "curl-cve-2021-22947-smtp_state_starttls_resp:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947-smtp_state_starttls_resp", "project": "curl", "provenance": "human", "relpath": "lib/smtp.c", "repo": "curl/curl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "8ef147c43646e91fdaad5d0e7b60351f842e5c68", "commit_url": "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68", "cve": "CVE-2021-22947", "cwe": "CWE-119", "file": "curl-cve-2021-22947-smtp_state_starttls_resp/fixed.c", "function": "smtp_state_starttls_resp", "id": "curl-cve-2021-22947-smtp_state_starttls_resp:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22947-smtp_state_starttls_resp", "project": "curl", "provenance": "human", "relpath": "lib/smtp.c", "repo": "curl/curl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "43157490a5054bd24256fe12876931e8abc9df49", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946/vuln.c", "function": "ftp_statemachine", "id": "curl-cve-2021-22946:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22946", "project": "curl", "provenance": "human", "relpath": "lib/ftp.c", "repo": "curl/curl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946/fixed.c", "function": "ftp_statemachine", "id": "curl-cve-2021-22946:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22946", "project": "curl", "provenance": "human", "relpath": "lib/ftp.c", "repo": "curl/curl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "43157490a5054bd24256fe12876931e8abc9df49", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946-imap_state_capability_re/vuln.c", "function": "imap_state_capability_resp", "id": "curl-cve-2021-22946-imap_state_capability_re:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22946-imap_state_capability_re", "project": "curl", "provenance": "human", "relpath": "lib/imap.c", "repo": "curl/curl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946-imap_state_capability_re/fixed.c", "function": "imap_state_capability_resp", "id": "curl-cve-2021-22946-imap_state_capability_re:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22946-imap_state_capability_re", "project": "curl", "provenance": "human", "relpath": "lib/imap.c", "repo": "curl/curl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "43157490a5054bd24256fe12876931e8abc9df49", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946-pop3_state_capa_resp/vuln.c", "function": "pop3_state_capa_resp", "id": "curl-cve-2021-22946-pop3_state_capa_resp:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22946-pop3_state_capa_resp", "project": "curl", "provenance": "human", "relpath": "lib/pop3.c", "repo": "curl/curl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "364f174724ef115c63d5e5dc1d3342c8a43b1cca", "commit_url": "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca", "cve": "CVE-2021-22946", "cwe": "CWE-119", "file": "curl-cve-2021-22946-pop3_state_capa_resp/fixed.c", "function": "pop3_state_capa_resp", "id": "curl-cve-2021-22946-pop3_state_capa_resp:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22946-pop3_state_capa_resp", "project": "curl", "provenance": "human", "relpath": "lib/pop3.c", "repo": "curl/curl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "409a4412409371db00af0a3fe987e517bfab3d19", "commit_url": "https://github.com/curl/curl/commit/43157490a5054bd24256fe12876931e8abc9df49", "cve": "CVE-2021-22945", "cwe": "CWE-119", "file": "curl-cve-2021-22945/vuln.c", "function": "mqtt_send", "id": "curl-cve-2021-22945:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22945", "project": "curl", "provenance": "human", "relpath": "lib/mqtt.c", "repo": "curl/curl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "43157490a5054bd24256fe12876931e8abc9df49", "commit_url": "https://github.com/curl/curl/commit/43157490a5054bd24256fe12876931e8abc9df49", "cve": "CVE-2021-22945", "cwe": "CWE-119", "file": "curl-cve-2021-22945/fixed.c", "function": "mqtt_send", "id": "curl-cve-2021-22945:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22945", "project": "curl", "provenance": "human", "relpath": "lib/mqtt.c", "repo": "curl/curl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "fd9b40bf8dfd43edcbc0d254d613d95a11061c05", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924/vuln.c", "function": "create_conn", "id": "curl-cve-2021-22924:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22924", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "5ea3145850ebff1dc2b13d17440300a01ca38161", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924/fixed.c", "function": "create_conn", "id": "curl-cve-2021-22924:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22924", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "fd9b40bf8dfd43edcbc0d254d613d95a11061c05", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924-nss_do_connect/vuln.c", "function": "nss_do_connect", "id": "curl-cve-2021-22924-nss_do_connect:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22924-nss_do_connect", "project": "curl", "provenance": "human", "relpath": "lib/vtls/nss.c", "repo": "curl/curl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "5ea3145850ebff1dc2b13d17440300a01ca38161", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924-nss_do_connect/fixed.c", "function": "nss_do_connect", "id": "curl-cve-2021-22924-nss_do_connect:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22924-nss_do_connect", "project": "curl", "provenance": "human", "relpath": "lib/vtls/nss.c", "repo": "curl/curl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "fd9b40bf8dfd43edcbc0d254d613d95a11061c05", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924-servercert/vuln.c", "function": "servercert", "id": "curl-cve-2021-22924-servercert:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22924-servercert", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "5ea3145850ebff1dc2b13d17440300a01ca38161", "commit_url": "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161", "cve": "CVE-2021-22924", "cwe": "CWE-119", "file": "curl-cve-2021-22924-servercert/fixed.c", "function": "servercert", "id": "curl-cve-2021-22924-servercert:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22924-servercert", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "12284e008bad5156b67d0ac253331a96d77201d1", "commit_url": "https://github.com/curl/curl/commit/894f6ec730597eb243618d33cc84d71add8d6a8a", "cve": "CVE-2021-22925", "cwe": "CWE-119", "file": "curl-cve-2021-22925/vuln.c", "function": "suboption", "id": "curl-cve-2021-22925:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22925", "project": "curl", "provenance": "human", "relpath": "lib/telnet.c", "repo": "curl/curl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "894f6ec730597eb243618d33cc84d71add8d6a8a", "commit_url": "https://github.com/curl/curl/commit/894f6ec730597eb243618d33cc84d71add8d6a8a", "cve": "CVE-2021-22925", "cwe": "CWE-119", "file": "curl-cve-2021-22925/fixed.c", "function": "suboption", "id": "curl-cve-2021-22925:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22925", "project": "curl", "provenance": "human", "relpath": "lib/telnet.c", "repo": "curl/curl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "39ce47f219b09c380b81f89fe54ac586c8db6bde", "commit_url": "https://github.com/curl/curl/commit/7f4a9a9b2a49547eae24d2e19bc5c346e9026479", "cve": "CVE-2021-22901", "cwe": "CWE-119", "file": "curl-cve-2021-22901-ossl_connect_step1/vuln.c", "function": "ossl_connect_step1", "id": "curl-cve-2021-22901-ossl_connect_step1:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22901-ossl_connect_step1", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "7f4a9a9b2a49547eae24d2e19bc5c346e9026479", "commit_url": "https://github.com/curl/curl/commit/7f4a9a9b2a49547eae24d2e19bc5c346e9026479", "cve": "CVE-2021-22901", "cwe": "CWE-119", "file": "curl-cve-2021-22901-ossl_connect_step1/fixed.c", "function": "ossl_connect_step1", "id": "curl-cve-2021-22901-ossl_connect_step1:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22901-ossl_connect_step1", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "bbb71507b7bab52002f9b1e0880bed6a32834511", "commit_url": "https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde", "cve": "CVE-2021-22898", "cwe": "CWE-119", "file": "curl-cve-2021-22898/vuln.c", "function": "suboption", "id": "curl-cve-2021-22898:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22898", "project": "curl", "provenance": "human", "relpath": "lib/telnet.c", "repo": "curl/curl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "39ce47f219b09c380b81f89fe54ac586c8db6bde", "commit_url": "https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde", "cve": "CVE-2021-22898", "cwe": "CWE-119", "file": "curl-cve-2021-22898/fixed.c", "function": "suboption", "id": "curl-cve-2021-22898:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22898", "project": "curl", "provenance": "human", "relpath": "lib/telnet.c", "repo": "curl/curl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "7214288898f5625a6cc196e22a74232eada7861c", "commit_url": "https://github.com/curl/curl/commit/b09c8ee15771c614c4bf3ddac893cdb12187c844", "cve": "CVE-2021-22890", "cwe": "CWE-119", "file": "curl-cve-2021-22890/vuln.c", "function": "bearssl_connect_step1", "id": "curl-cve-2021-22890:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22890", "project": "curl", "provenance": "human", "relpath": "lib/vtls/bearssl.c", "repo": "curl/curl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "b09c8ee15771c614c4bf3ddac893cdb12187c844", "commit_url": "https://github.com/curl/curl/commit/b09c8ee15771c614c4bf3ddac893cdb12187c844", "cve": "CVE-2021-22890", "cwe": "CWE-119", "file": "curl-cve-2021-22890/fixed.c", "function": "bearssl_connect_step1", "id": "curl-cve-2021-22890:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22890", "project": "curl", "provenance": "human", "relpath": "lib/vtls/bearssl.c", "repo": "curl/curl", "split": "holdout", "year": 2021} +{"class": "security fix", "commit": "184ffc0bdfcab17eb96d1dd64f9c0cecc139e3e9", "commit_url": "https://github.com/curl/curl/commit/7214288898f5625a6cc196e22a74232eada7861c", "cve": "CVE-2021-22876", "cwe": "CWE-119", "file": "curl-cve-2021-22876/vuln.c", "function": "Curl_follow", "id": "curl-cve-2021-22876:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22876", "project": "curl", "provenance": "human", "relpath": "lib/transfer.c", "repo": "curl/curl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "7214288898f5625a6cc196e22a74232eada7861c", "commit_url": "https://github.com/curl/curl/commit/7214288898f5625a6cc196e22a74232eada7861c", "cve": "CVE-2021-22876", "cwe": "CWE-119", "file": "curl-cve-2021-22876/fixed.c", "function": "Curl_follow", "id": "curl-cve-2021-22876:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2021-22876", "project": "curl", "provenance": "human", "relpath": "lib/transfer.c", "repo": "curl/curl", "split": "train", "year": 2021} +{"class": "security fix", "commit": "69a358f2186e04cf44698b5100332cbf1ee7f01d", "commit_url": "https://github.com/curl/curl/commit/d9d01672785b8ac04aab1abb6de95fe3072ae199", "cve": "CVE-2020-8286", "cwe": "CWE-119", "file": "curl-cve-2020-8286/vuln.c", "function": "verifystatus", "id": "curl-cve-2020-8286:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8286", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "split": "holdout", "year": 2020} +{"class": "security fix", "commit": "d9d01672785b8ac04aab1abb6de95fe3072ae199", "commit_url": "https://github.com/curl/curl/commit/d9d01672785b8ac04aab1abb6de95fe3072ae199", "cve": "CVE-2020-8286", "cwe": "CWE-119", "file": "curl-cve-2020-8286/fixed.c", "function": "verifystatus", "id": "curl-cve-2020-8286:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8286", "project": "curl", "provenance": "human", "relpath": "lib/vtls/openssl.c", "repo": "curl/curl", "split": "holdout", "year": 2020} +{"class": "security fix", "commit": "abd846c374c5269809ce11740754bc6f00a0b193", "commit_url": "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "cve": "CVE-2020-8284", "cwe": "CWE-119", "file": "curl-cve-2020-8284/vuln.c", "function": "Curl_init_userdefined", "id": "curl-cve-2020-8284:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8284", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "split": "holdout", "year": 2020} +{"class": "security fix", "commit": "ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "commit_url": "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "cve": "CVE-2020-8284", "cwe": "CWE-119", "file": "curl-cve-2020-8284/fixed.c", "function": "Curl_init_userdefined", "id": "curl-cve-2020-8284:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8284", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "split": "holdout", "year": 2020} +{"class": "security fix", "commit": "abd846c374c5269809ce11740754bc6f00a0b193", "commit_url": "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "cve": "CVE-2020-8284", "cwe": "CWE-119", "file": "curl-cve-2020-8284-config_init/vuln.c", "function": "config_init", "id": "curl-cve-2020-8284-config_init:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8284-config_init", "project": "curl", "provenance": "human", "relpath": "src/tool_cfgable.c", "repo": "curl/curl", "split": "train", "year": 2020} +{"class": "security fix", "commit": "ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "commit_url": "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46", "cve": "CVE-2020-8284", "cwe": "CWE-119", "file": "curl-cve-2020-8284-config_init/fixed.c", "function": "config_init", "id": "curl-cve-2020-8284-config_init:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8284-config_init", "project": "curl", "provenance": "human", "relpath": "src/tool_cfgable.c", "repo": "curl/curl", "split": "train", "year": 2020} +{"class": "security fix", "commit": "687908c6e6332b2bf4ba74b271e795f9c65a5a61", "commit_url": "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22", "cve": "CVE-2020-8231", "cwe": "CWE-119", "file": "curl-cve-2020-8231-curl_multi_add_handle/vuln.c", "function": "curl_multi_add_handle", "id": "curl-cve-2020-8231-curl_multi_add_handle:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8231-curl_multi_add_handle", "project": "curl", "provenance": "human", "relpath": "lib/multi.c", "repo": "curl/curl", "split": "holdout", "year": 2020} +{"class": "security fix", "commit": "3c9e021f86872baae412a427e807fbfa2f3e8a22", "commit_url": "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22", "cve": "CVE-2020-8231", "cwe": "CWE-119", "file": "curl-cve-2020-8231-curl_multi_add_handle/fixed.c", "function": "curl_multi_add_handle", "id": "curl-cve-2020-8231-curl_multi_add_handle:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8231-curl_multi_add_handle", "project": "curl", "provenance": "human", "relpath": "lib/multi.c", "repo": "curl/curl", "split": "holdout", "year": 2020} +{"class": "security fix", "commit": "687908c6e6332b2bf4ba74b271e795f9c65a5a61", "commit_url": "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22", "cve": "CVE-2020-8231", "cwe": "CWE-119", "file": "curl-cve-2020-8231-curl_open/vuln.c", "function": "Curl_open", "id": "curl-cve-2020-8231-curl_open:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8231-curl_open", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "split": "train", "year": 2020} +{"class": "security fix", "commit": "3c9e021f86872baae412a427e807fbfa2f3e8a22", "commit_url": "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22", "cve": "CVE-2020-8231", "cwe": "CWE-119", "file": "curl-cve-2020-8231-curl_open/fixed.c", "function": "Curl_open", "id": "curl-cve-2020-8231-curl_open:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8231-curl_open", "project": "curl", "provenance": "human", "relpath": "lib/url.c", "repo": "curl/curl", "split": "train", "year": 2020} +{"class": "security fix", "commit": "26d2755d7c3181e90e46014778941bff53d2309f", "commit_url": "https://github.com/curl/curl/commit/8236aba58542c5f89f1d41ca09d84579efb05e22", "cve": "CVE-2020-8177", "cwe": "CWE-119", "file": "curl-cve-2020-8177/vuln.c", "function": "tool_header_cb", "id": "curl-cve-2020-8177:vuln", "label": "vuln", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8177", "project": "curl", "provenance": "human", "relpath": "src/tool_cb_hdr.c", "repo": "curl/curl", "split": "train", "year": 2020} +{"class": "security fix", "commit": "8236aba58542c5f89f1d41ca09d84579efb05e22", "commit_url": "https://github.com/curl/curl/commit/8236aba58542c5f89f1d41ca09d84579efb05e22", "cve": "CVE-2020-8177", "cwe": "CWE-119", "file": "curl-cve-2020-8177/fixed.c", "function": "tool_header_cb", "id": "curl-cve-2020-8177:fixed", "label": "fixed", "license": "curl", "mechanism": "other", "pair": "curl-cve-2020-8177", "project": "curl", "provenance": "human", "relpath": "src/tool_cb_hdr.c", "repo": "curl/curl", "split": "train", "year": 2020}