Vulnerabilities

Handling and disclosure. Actively exploited is the switch that turns a housekeeping record into an Article 14 duty.

Export CSV + Log one
All 5 Actively exploited 3 No fix yet 2
VulnerabilityProductSeverityExploitedDiscovered (UTC)Fix available (UTC)Disclosure
Memory corruption in the TLS stackCVE-2026-32004 Kestrel Gateway critical yes 2026-11-10 10:37 none — the 14-day clock cannot start private
Deserialization flaw in bundled libsignalprocCVE-2026-30112 Kestrel Gateway high yes 2026-11-08 10:37 none — the 14-day clock cannot start public

Log a vulnerability

Leave blank until it exists. This is what starts the CRA's 14-day final report.
×
Live demo — signed in as the admin, sample data resets hourly.
Own it — one payment →