{"id":"CVE-2022-46292","aliases":["DEBIAN-CVE-2022-46292","EUVD-2022-49110","GHSA-55f6-pf8r-c2f4","GHSA-hrvg-gx3j-wh53","PYSEC-2026-2771","UBUNTU-CVE-2022-46292","openSUSE-SU-2026:21190-1"],"status":"published","title":"Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION)","description":"Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC file format, inside the Unit Cell Translation section","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.00804,"percentile":0.56954,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-787"],"published":"2023-07-21T20:25:41Z","modified":"2026-11-03T08:04:11Z","fixes":[{"ecosystem":"PyPI","package":"openbabel","fixed_in":["3.2.0"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.1+dfsg-10","3.1.1+dfsg-11","3.1.1+dfsg-12","3.1.1+dfsg-13","3.1.1+dfsg-14","3.1.1+dfsg-15~exp","3.1.1+dfsg-9","3.2.0+dfsg-1","3.2.0+dfsg-1~exp","3.2.0+dfsg-2"]},{"source":"osv","ecosystem":"Debian:13","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.1+dfsg-12","3.1.1+dfsg-13","3.1.1+dfsg-14","3.1.1+dfsg-15~exp","3.2.0+dfsg-1","3.2.0+dfsg-1~exp","3.2.0+dfsg-2"]},{"source":"osv","ecosystem":"Debian:14","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.1+dfsg-12","3.1.1+dfsg-13","3.1.1+dfsg-14","3.1.1+dfsg-15~exp","3.2.0+dfsg-1","3.2.0+dfsg-1~exp","3.2.0+dfsg-2"]},{"source":"osv","ecosystem":"PyPI","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0"}]}],"versions":["1.8","1.8.1","1.8.2","1.8.3","1.8.4","2.4.0","2.4.1","3.0.0","3.0.0a1","3.1.1","3.1.1.1"]},{"source":"osv","ecosystem":"PyPI","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0"}]}],"versions":["1.8","1.8.1","1.8.2","1.8.3","1.8.4","2.4.0","2.4.1","3.0.0","3.0.0a1","3.1.1","3.1.1.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2+dfsg-2.2","2.3.2+dfsg-2.2build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2+dfsg-3build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.1+dfsg-3","2.4.1+dfsg-3build1","2.4.1+dfsg-5.1","2.4.1+dfsg-6","3.0.0+dfsg-3","3.0.0+dfsg-3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.1+dfsg-6ubuntu1","3.1.1+dfsg-6ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.1+dfsg-9build2","3.1.1+dfsg-9ubuntu1","3.1.1+dfsg-9ubuntu2","3.1.1+dfsg-9ubuntu4","3.1.1+dfsg-9ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.1+dfsg-11ubuntu3","3.1.1+dfsg-11ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.1+dfsg-11ubuntu5","3.1.1+dfsg-14ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.1+dfsg-11ubuntu4","3.1.1+dfsg-11ubuntu5"]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"openbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-bp160.1.1"}]}],"bundled":23}],"products":[{"vendor":"open babel","product":"open babel"},{"vendor":"openbabel","product":"open_babel"}],"references":[{"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2022-1666","tags":["x_transferred","Exploit","Technical Description","Third Party Advisory","evidence","web","report"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1666","tags":["web"]},{"url":"https://github.com/openbabel/openbabel/security/advisories/GHSA-55f6-pf8r-c2f4","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46292","tags":["advisory"]},{"url":"https://github.com/openbabel/openbabel/commit/40e852138f21d586b7ccdce6329e7b23a87168bb","tags":["web"]},{"url":"https://github.com/advisories/GHSA-55f6-pf8r-c2f4","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-hrvg-gx3j-wh53"},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-46292","tags":["advisory"]},{"url":"https://github.com/openbabel/openbabel","tags":["package"]},{"url":"https://pypi.org/project/openbabel","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2022-46292","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46292","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1217676","tags":["report"]},{"url":"https://bugzilla.suse.com/1258501","tags":["report"]},{"url":"https://bugzilla.suse.com/1258507","tags":["report"]},{"url":"https://bugzilla.suse.com/1259041","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-43467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-43607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-44451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3408","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-46292","description":"Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC file format, inside the Unit Cell Translation section","status":"published","published":"2023-07-21T20:25:41.19Z","modified":"2025-11-04T19:14:19.871Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:34:31.840191Z"}],"euvd":[{"id":"EUVD-2022-49110","description":"Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC file format, inside the Unit Cell Translation section","status":"published","published":"2023-07-21T20:25:41Z","modified":"2025-11-04T19:14:19Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:49:22.827048Z"}],"ghsa":[{"id":"GHSA-55f6-pf8r-c2f4","title":"Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION)","description":"### Summary\n\nA memory-safety vulnerability in Open Babel's MOPAC output parser\nallowed an out-of-bounds write into the `translationVectors[]` array\nwhen reading the \"UNIT CELL TRANSLATION\" block of a crafted input\nfile.\n\n### Details\n\nThe MOPAC output reader stored translation vectors from the UNIT CELL\nTRANSLATION block into a fixed-size `translationVectors[]` array. A\nmalformed block could push more vectors than the array had slots,\ncausing a write past the end of the array. One of five\n`translationVectors[]` OOB writes in the TALOS 2022 batch.\n\n### Impact\n\nOpen Babel is a C++ library and CLI used to read and write chemistry\nfile formats; it is shipped by Linux distributions and embedded in\nservices that may parse untrusted input. Triggering this vulnerability\nrequires the victim to open a malicious MOPAC output file with the\n`obabel` tool, the `OBConversion` API, or any of the language\nbindings (Python, Ruby, Java, R, Perl, C#, PHP).\n\n### Affected versions\n\nAll releases up to and including 3.1.1.\n\n### Patched version\n\n3.2.0 (released 2026-05-26).\n\n### Patch\n\nFix commit: https://github.com/openbabel/openbabel/commit/40e85213\n\nA minimized reproducer for this CVE is checked in under\n`test/files/fuzz_regress/` and is exercised on every CI build under\nASAN+UBSAN by the `fuzzregresstest` harness.\n\n### Credit\n\nReported by Cisco TALOS.","status":"published","published":"2026-07-06T16:41:43Z","modified":"2026-07-06T16:41:44Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T14:40:39.314643Z"},{"id":"GHSA-hrvg-gx3j-wh53","title":"Duplicate Advisory: Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION)","description":"## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-55f6-pf8r-c2f4. This link is maintained to preserve external references.\n\n## Original Description\nMultiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC file format, inside the Unit Cell Translation section","status":"withdrawn","published":"2023-07-21T21:30:32Z","modified":"2026-07-06T16:38:10Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T14:40:39.314643Z"}],"nvd":[{"id":"CVE-2022-46292","description":"Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC file format, inside the Unit Cell Translation section","status":"published","published":"2023-07-21T21:15:10.993Z","modified":"2026-06-17T05:11:26.85Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T14:07:38.721429Z"}],"osv":[{"id":"CVE-2022-46292","description":"Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC file format, inside the Unit Cell Translation section","status":"published","published":"2023-07-21T21:15:10.993Z","modified":"2026-07-13T16:43:48.418993517Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:27.481647Z"},{"id":"DEBIAN-CVE-2022-46292","description":"Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC file format, inside the Unit Cell Translation section","status":"published","published":"2023-07-21T21:15:10.993Z","modified":"2026-11-03T08:04:11.514259747Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:23:07.763774Z"},{"id":"GHSA-55f6-pf8r-c2f4","title":"Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION)","description":"### Summary\n\nA memory-safety vulnerability in Open Babel's MOPAC output parser\nallowed an out-of-bounds write into the `translationVectors[]` array\nwhen reading the \"UNIT CELL TRANSLATION\" block of a crafted input\nfile.\n\n### Details\n\nThe MOPAC output reader stored translation vectors from the UNIT CELL\nTRANSLATION block into a fixed-size `translationVectors[]` array. A\nmalformed block could push more vectors than the array had slots,\ncausing a write past the end of the array. One of five\n`translationVectors[]` OOB writes in the TALOS 2022 batch.\n\n### Impact\n\nOpen Babel is a C++ library and CLI used to read and write chemistry\nfile formats; it is shipped by Linux distributions and embedded in\nservices that may parse untrusted input. Triggering this vulnerability\nrequires the victim to open a malicious MOPAC output file with the\n`obabel` tool, the `OBConversion` API, or any of the language\nbindings (Python, Ruby, Java, R, Perl, C#, PHP).\n\n### Affected versions\n\nAll releases up to and including 3.1.1.\n\n### Patched version\n\n3.2.0 (released 2026-05-26).\n\n### Patch\n\nFix commit: https://github.com/openbabel/openbabel/commit/40e85213\n\nA minimized reproducer for this CVE is checked in under\n`test/files/fuzz_regress/` and is exercised on every CI build under\nASAN+UBSAN by the `fuzzregresstest` harness.\n\n### Credit\n\nReported by Cisco TALOS.","status":"published","published":"2026-07-06T16:41:43Z","modified":"2026-07-20T05:15:25.412809796Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T15:46:37.864461Z"},{"id":"GHSA-hrvg-gx3j-wh53","title":"Duplicate Advisory: Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION)","description":"## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-55f6-pf8r-c2f4. This link is maintained to preserve external references.\n\n## Original Description\nMultiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC file format, inside the Unit Cell Translation section","status":"withdrawn","published":"2023-07-21T21:30:32Z","modified":"2026-07-06T16:45:19.346524269Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T15:46:49.621585Z"},{"id":"PYSEC-2026-2771","title":"Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION)","description":"### Summary\n\nA memory-safety vulnerability in Open Babel's MOPAC output parser\nallowed an out-of-bounds write into the `translationVectors[]` array\nwhen reading the \"UNIT CELL TRANSLATION\" block of a crafted input\nfile.\n\n### Details\n\nThe MOPAC output reader stored translation vectors from the UNIT CELL\nTRANSLATION block into a fixed-size `translationVectors[]` array. A\nmalformed block could push more vectors than the array had slots,\ncausing a write past the end of the array. One of five\n`translationVectors[]` OOB writes in the TALOS 2022 batch.\n\n### Impact\n\nOpen Babel is a C++ library and CLI used to read and write chemistry\nfile formats; it is shipped by Linux distributions and embedded in\nservices that may parse untrusted input. Triggering this vulnerability\nrequires the victim to open a malicious MOPAC output file with the\n`obabel` tool, the `OBConversion` API, or any of the language\nbindings (Python, Ruby, Java, R, Perl, C#, PHP).\n\n### Affected versions\n\nAll releases up to and including 3.1.1.\n\n### Patched version\n\n3.2.0 (released 2026-05-26).\n\n### Patch\n\nFix commit: https://github.com/openbabel/openbabel/commit/40e85213\n\nA minimized reproducer for this CVE is checked in under\n`test/files/fuzz_regress/` and is exercised on every CI build under\nASAN+UBSAN by the `fuzzregresstest` harness.\n\n### Credit\n\nReported by Cisco TALOS.","status":"published","published":"2026-07-13T15:46:27.963877Z","modified":"2026-07-13T16:32:05.788302313Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:55.961245Z"},{"id":"UBUNTU-CVE-2022-46292","description":"Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC file format, inside the Unit Cell Translation section","status":"published","published":"2023-07-21T21:15:00Z","modified":"2026-10-17T12:56:03.487560668Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:56.473586Z"},{"id":"openSUSE-SU-2026:21190-1","title":"Security update for openbabel","description":"This update for openbabel fixes the following issues:\n\nChanges in openbabel:\n\n- Update to version 3.2.0:\n  * Add an L-BFGS optimizer, used by default for gen3d and\n    conformer searches\n  * New macrocycle ring builder (Dale codes) for better initial\n    3D geometry of large rings\n  * Add KET (Ketcher JSON) and ChemicalJSON (.cjson) format\n    support\n  * Drop Python 2 support; Python 3.13 supported\n  * Faster, vectorized distance-geometry implementation\n  * Full CMake 4 compatibility and modernized build\n  * Backwards compatible with 3.0 and 3.1\n  * Fix many crash and memory-safety bugs found via OSS-Fuzz\n    and TALOS, including the following security issues:\n    CVE-2022-37331 (boo#1217676), CVE-2022-41793, CVE-2022-42885,\n    CVE-2022-43467, CVE-2022-43607, CVE-2022-44451,\n    CVE-2022-46280, CVE-2022-46289, CVE-2022-46290,\n    CVE-2022-46291, CVE-2022-46292, CVE-2022-46294,\n    CVE-2022-46295, CVE-2025-10994, CVE-2025-10995,\n    CVE-2025-10996, CVE-2025-10997, CVE-2025-10998,\n    CVE-2025-10999, CVE-2025-11000,\n    CVE-2026-2704 (boo#1258501), CVE-2026-2705 (boo#1258507) and\n    CVE-2026-3408 (boo#1259041)\n","status":"published","published":"2026-07-01T09:21:23Z","modified":"2026-07-03T18:24:23.69365859Z","updated_at":"2026-11-02T16:58:41.885092Z"}]}}