{"id":"CVE-2026-58212","aliases":["DEBIAN-CVE-2026-58212","UBUNTU-CVE-2026-58212"],"status":"rejected","description":"Further research determined the issue is not a vulnerability based on CNA Rule 4.1.12 The act of updating Product dependencies MUST NOT be determined to be a Vulnerability, regardless of whether the dependencies have Vulnerabilities.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2026-07-08T20:16:00Z","modified":"2026-07-15T19:47:48Z","affected":[{"source":"osv","ecosystem":"Ubuntu:25.10","package":"golang-github-nats-io-nkeys","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.4.10-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"nats-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.24-1","2.10.27-1"]}],"references":[{"url":"https://security-tracker.debian.org/tracker/CVE-2026-58212","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-58212","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-58212","tags":["report"]},{"url":"https://github.com/nats-io/nats-server/security/advisories/GHSA-g33f-6538-grxh","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-58212","description":"Further research determined the issue is not a vulnerability based on CNA Rule 4.1.12 The act of updating Product dependencies MUST NOT be determined to be a Vulnerability, regardless of whether the dependencies have Vulnerabilities.","status":"rejected","modified":"2026-07-08T20:10:26.815Z","updated_at":"2026-11-02T13:47:28.691429Z"}],"nvd":[{"id":"CVE-2026-58212","description":"Rejected reason: Further research determined the issue is not a vulnerability based on CNA Rule 4.1.12 The act of updating Product dependencies MUST NOT be determined to be a Vulnerability, regardless of whether the dependencies have Vulnerabilities.","status":"rejected","published":"2026-07-08T20:16:54.1Z","modified":"2026-07-08T20:16:54.1Z","updated_at":"2026-11-02T14:12:28.4135Z"}],"osv":[{"id":"DEBIAN-CVE-2026-58212","status":"withdrawn","published":"2026-07-08T20:16:54.1Z","modified":"2026-07-10T02:00:41.418060943Z","updated_at":"2026-11-02T15:45:57.590991Z"},{"id":"UBUNTU-CVE-2026-58212","description":"Rejected reason: Further research determined the issue is not a vulnerability based on CNA Rule 4.1.12 The act of updating Product dependencies MUST NOT be determined to be a Vulnerability, regardless of whether the dependencies have Vulnerabilities.","status":"published","published":"2026-07-08T20:16:00Z","modified":"2026-07-15T19:47:48.501057352Z","updated_at":"2026-11-02T16:56:41.911783Z"}]}}