CVE-2026-42277

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-42277
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-42277.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-42277
Aliases
  • GHSA-vg3h-35f7-7w6r
Published
2026-05-08T03:51:11.520Z
Modified
2026-07-15T01:48:53.611522846Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
Onyx: IDOR in /chat/file/{file_id} allows any authenticated user to download other users files
Details

Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the GET /chat/file/{file_id} endpoint allows any authenticated user to download any other user's uploaded files by providing the file UUID. The endpoint verifies the caller is authenticated but never checks that the file belongs to them. An attacker who knows or obtains a file UUID can access confidential documents, chat attachments, and other files uploaded by any user in the system. This issue has been patched in versions 3.0.9, 3.1.6, and 3.2.6.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42277.json",
    "cwe_ids": [
        "CWE-639"
    ],
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/onyx-dot-app/onyx

Affected ranges

Type
GIT
Repo
https://github.com/onyx-dot-app/onyx
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
90aecacbebe5f08e19a9b4ae1ee9b4737991d573
Introduced
b9e84c42a8b796e1b94e553abf079ffddfbb444c
Fixed
b51c9970aaa1c87b80c6653079405cc051ee4778
Introduced
c4f8d5370b8369176a77f0788da3fc4b133fb2db
Fixed
87f8e5d3cca6dd4d277d9dfff1e367ee0772540b
Database specific 
{
    "cpe": "cpe:2.3:a:onyx:onyx:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "3.0.9"
        },
        {
            "introduced": "3.1.0"
        },
        {
            "fixed": "3.1.6"
        },
        {
            "introduced": "3.2.0"
        },
        {
            "fixed": "3.2.6"
        }
    ]
}

Affected versions

0.*
0.4.5
cli/v0.*
cli/v0.1.0
cli/v0.1.1
confluence-patch-04.*
confluence-patch-04.1.2025
Other
craft-latest
experimental-1
highspot-special-tag
highspot-special-tag-2
nightly-latest-20240927
nightly-latest-20240928
nightly-latest-20240929
nightly-latest-20240930
nightly-latest-20241001
nightly-latest-20241002
nightly-latest-20241003
nightly-latest-20241004
nightly-latest-20241005
nightly-latest-20241006
nightly-latest-20241007
nightly-latest-20241008
nightly-latest-20241009
nightly-latest-20241010
nightly-latest-20241011
nightly-latest-20241012
nightly-latest-20241013
nightly-latest-20241014
nightly-latest-20241015
nightly-latest-20241016
nightly-latest-20241017
nightly-latest-20241018
nightly-latest-20241019
nightly-latest-20241020
nightly-latest-20241021
nightly-latest-20241022
nightly-latest-20241023
nightly-latest-20241024
nightly-latest-20241025
nightly-latest-20241026
nightly-latest-20241027
nightly-latest-20241028
nightly-latest-20241029
nightly-latest-20241030
nightly-latest-20241031
nightly-latest-20241101
nightly-latest-20241102
nightly-latest-20241103
nightly-latest-20241104
nightly-latest-20241105
nightly-latest-20241106
nightly-latest-20241107
nightly-latest-20241108
nightly-latest-20241109
nightly-latest-20241110
nightly-latest-20241111
nightly-latest-20241112
nightly-latest-20241113
nightly-latest-20241114
nightly-latest-20241115
nightly-latest-20241116
nightly-latest-20241117
nightly-latest-20241118
nightly-latest-20241119
nightly-latest-20241120
nightly-latest-20241121
nightly-latest-20241122
nightly-latest-20241123
nightly-latest-20241124
nightly-latest-20241125
nightly-latest-20241126
nightly-latest-20241127
nightly-latest-20241128
nightly-latest-20241129
nightly-latest-20241130
nightly-latest-20241201
nightly-latest-20241202
nightly-latest-20241203
nightly-latest-20241204
nightly-latest-20241205
nightly-latest-20241206
nightly-latest-20241207
nightly-latest-20241208
nightly-latest-20241209
nightly-latest-20241210
nightly-latest-20241211
nightly-latest-20241212
nightly-latest-20241213
nightly-latest-20241215
nightly-latest-20241216
nightly-latest-20241217
nightly-latest-20241218
nightly-latest-20241219
nightly-latest-20241220
nightly-latest-20241221
nightly-latest-20241222
nightly-latest-20241223
nightly-latest-20241224
nightly-latest-20241225
nightly-latest-20241226
nightly-latest-20241227
nightly-latest-20241228
nightly-latest-20241229
nightly-latest-20241230
nightly-latest-20241231
nightly-latest-20250101
nightly-latest-20250102
nightly-latest-20250103
nightly-latest-20250104
nightly-latest-20250105
nightly-latest-20250106
nightly-latest-20250107
nightly-latest-20250108
nightly-latest-20250109
nightly-latest-20250110
nightly-latest-20250111
nightly-latest-20250112
nightly-latest-20250113
nightly-latest-20250114
nightly-latest-20250115
nightly-latest-20250116
nightly-latest-20250117
nightly-latest-20250118
nightly-latest-20250119
nightly-latest-20250120
nightly-latest-20250121
nightly-latest-20250122
nightly-latest-20250123
nightly-latest-20250124
nightly-latest-20250125
nightly-latest-20250126
nightly-latest-20250127
nightly-latest-20250128
nightly-latest-20250129
nightly-latest-20250130
nightly-latest-20250131
nightly-latest-20250201
nightly-latest-20250202
nightly-latest-20250203
nightly-latest-20250204
nightly-latest-20250205
nightly-latest-20250206
nightly-latest-20250207
nightly-latest-20250208
nightly-latest-20250209
nightly-latest-20250210
nightly-latest-20250211
nightly-latest-20250212
nightly-latest-20250212-early
nightly-latest-20250213
nightly-latest-20250214
nightly-latest-20250215
nightly-latest-20250216
nightly-latest-20250217
nightly-latest-20250218
nightly-latest-20250219
nightly-latest-20250220
nightly-latest-20250221
nightly-latest-20250222
nightly-latest-20250223
nightly-latest-20250224
nightly-latest-20250225
nightly-latest-20250226
nightly-latest-20250227
nightly-latest-20250228
nightly-latest-20250301
nightly-latest-20250302
nightly-latest-20250303
nightly-latest-20250304
nightly-latest-20250305
nightly-latest-20250306
nightly-latest-20250307
nightly-latest-20250308
nightly-latest-20250309
nightly-latest-20250310
nightly-latest-20250311
nightly-latest-20250312
nightly-latest-20250313
nightly-latest-20250314
nightly-latest-20250315
nightly-latest-20250316
nightly-latest-20250317
nightly-latest-20250318
nightly-latest-20250319
nightly-latest-20250320
nightly-latest-20250321
nightly-latest-20250322
nightly-latest-20250323
nightly-latest-20250324
nightly-latest-20250325
nightly-latest-20250326
nightly-latest-20250327
nightly-latest-20250328
nightly-latest-20250329
nightly-latest-20250330
nightly-latest-20250331
nightly-latest-20250402
nightly-latest-20250403
nightly-latest-20250404
nightly-latest-20250405
nightly-latest-20250406
nightly-latest-20250407
nightly-latest-20250408
nightly-latest-20250409
nightly-latest-20250410
nightly-latest-20250411
nightly-latest-20250412
nightly-latest-20250413
nightly-latest-20250414
nightly-latest-20250415
nightly-latest-20250416
nightly-latest-20250417
nightly-latest-20250418
nightly-latest-20250419
nightly-latest-20250420
nightly-latest-20250421
nightly-latest-20250422
nightly-latest-20250423
nightly-latest-20250424
nightly-latest-20250425
nightly-latest-20250426
nightly-latest-20250427
nightly-latest-20250428
nightly-latest-20250429
nightly-latest-20250430
nightly-latest-20250501
nightly-latest-20250502
nightly-latest-20250503
nightly-latest-20250504
nightly-latest-20250505
nightly-latest-20250506
nightly-latest-20250507
nightly-latest-20250508
nightly-latest-20250509
nightly-latest-20250510
nightly-latest-20250511
nightly-latest-20250512
nightly-latest-20250513
nightly-latest-20250514
nightly-latest-20250515
nightly-latest-20250516
nightly-latest-20250517
nightly-latest-20250518
nightly-latest-20250519
nightly-latest-20250520
nightly-latest-20250521
nightly-latest-20250522
nightly-latest-20250523
nightly-latest-20250524
nightly-latest-20250525
nightly-latest-20250526
nightly-latest-20250527
nightly-latest-20250528
nightly-latest-20250529
nightly-latest-20250530
nightly-latest-20250531
nightly-latest-20250601
nightly-latest-20250602
nightly-latest-20250603
nightly-latest-20250604
nightly-latest-20250605
nightly-latest-20250606
nightly-latest-20250607
nightly-latest-20250608
nightly-latest-20250609
nightly-latest-20250610
nightly-latest-20250611
nightly-latest-20250612
nightly-latest-20250613
nightly-latest-20250614
nightly-latest-20250615
nightly-latest-20250616
nightly-latest-20250617
nightly-latest-20250618
nightly-latest-20250619
nightly-latest-20250620
nightly-latest-20250621
nightly-latest-20250622
nightly-latest-20250623
nightly-latest-20250624
nightly-latest-20250625
nightly-latest-20250626
nightly-latest-20250627
nightly-latest-20250628
nightly-latest-20250629
nightly-latest-20250630
nightly-latest-20250701
nightly-latest-20250702
nightly-latest-20250703
nightly-latest-20250704
nightly-latest-20250705
nightly-latest-20250706
nightly-latest-20250707
nightly-latest-20250708
nightly-latest-20250709
nightly-latest-20250710
nightly-latest-20250711
nightly-latest-20250712
nightly-latest-20250713
nightly-latest-20250714
nightly-latest-20250715
nightly-latest-20250716
nightly-latest-20250717
nightly-latest-20250718
nightly-latest-20250719
nightly-latest-20250720
nightly-latest-20250721
nightly-latest-20250722
nightly-latest-20250723
nightly-latest-20250724
nightly-latest-20250725
nightly-latest-20250726
nightly-latest-20250727
nightly-latest-20250728
nightly-latest-20250729
nightly-latest-20250730
nightly-latest-20250731
nightly-latest-20250801
nightly-latest-20250802
nightly-latest-20250803
nightly-latest-20250804
nightly-latest-20250805
nightly-latest-20250806
nightly-latest-20250807
nightly-latest-20250808
nightly-latest-20250809
nightly-latest-20250810
nightly-latest-20250811
nightly-latest-20250812
nightly-latest-20250813
nightly-latest-20250814
nightly-latest-20250815
nightly-latest-20250816
nightly-latest-20250817
nightly-latest-20250818
nightly-latest-20250819
nightly-latest-20250820
nightly-latest-20250821
nightly-latest-20250822
nightly-latest-20250823
nightly-latest-20250824
nightly-latest-20250825
nightly-latest-20250826
nightly-latest-20250827
nightly-latest-20250828
nightly-latest-20250829
nightly-latest-20250830
nightly-latest-20250831
nightly-latest-20250901
nightly-latest-20250902
nightly-latest-20250903
nightly-latest-20250904
nightly-latest-20250905
nightly-latest-20250906
nightly-latest-20250907
nightly-latest-20250908
nightly-latest-20250909
nightly-latest-20250910
nightly-latest-20250911
nightly-latest-20250912
nightly-latest-20250913
nightly-latest-20250914
nightly-latest-20250915
nightly-latest-20250916
nightly-latest-20250917
nightly-latest-20250918
nightly-latest-20250919
nightly-latest-20250920
nightly-latest-20250921
nightly-latest-20250922
nightly-latest-20250923
nightly-latest-20250924
nightly-latest-20250925
nightly-latest-20250926
nightly-latest-20250927
nightly-latest-20250928
nightly-latest-20250929
nightly-latest-20250930
nightly-latest-20251001
nightly-latest-20251002
nightly-latest-20251003
nightly-latest-20251004
nightly-latest-20251005
nightly-latest-20251006
nightly-latest-20251007
nightly-latest-20251008
nightly-latest-20251009
nightly-latest-20251010
nightly-latest-20251011
nightly-latest-20251012
nightly-latest-20251013
nightly-latest-20251014
nightly-latest-20251015
nightly-latest-20251016
nightly-latest-20251017
nightly-latest-20251018
nightly-latest-20251019
nightly-latest-20251020
nightly-latest-20251021
nightly-latest-20251022
nightly-latest-20251023
nightly-latest-20251024
nightly-latest-20251025
nightly-latest-20251026
nightly-latest-20251027
nightly-latest-20251028
nightly-latest-20251029
nightly-latest-20251030
nightly-latest-20251031
nightly-latest-20251101
nightly-latest-20251102
nightly-latest-20251103
nightly-latest-20251104
nightly-latest-20251105
nightly-latest-20251106
nightly-latest-20251107
nightly-latest-20251108
nightly-latest-20251109
nightly-latest-20251110
nightly-latest-20251111
nightly-latest-20251112
nightly-latest-20251113
nightly-latest-20251114
nightly-latest-20251115
nightly-latest-20251116
nightly-latest-20251117
nightly-latest-20251118
nightly-latest-20251119
nightly-latest-20251121
nightly-latest-20251122
nightly-latest-20251123
nightly-latest-20251124
nightly-latest-20251125
nightly-latest-20251126
nightly-latest-20251127
nightly-latest-20251128
nightly-latest-20251129
nightly-latest-20251130
nightly-latest-20251201
nightly-latest-20251202
nightly-latest-20251203
nightly-latest-20251204
nightly-latest-20251205
nightly-latest-20251206
nightly-latest-20251207
nightly-latest-20251208
nightly-latest-20251209
nightly-latest-20251210
nightly-latest-20251211
nightly-latest-20251212
nightly-latest-20251213
nightly-latest-20251214
nightly-latest-20251215
nightly-latest-20251216
nightly-latest-20251217
nightly-latest-20251218
nightly-latest-20251219
nightly-latest-20251220
nightly-latest-20251221
nightly-latest-20251222
nightly-latest-20251223
nightly-latest-20251224
nightly-latest-20251225
nightly-latest-20251226
nightly-latest-20251227
nightly-latest-20251228
nightly-latest-20251229
nightly-latest-20251230
nightly-latest-20251231
nightly-latest-20260101
nightly-latest-20260102
nightly-latest-20260103
nightly-latest-20260104
nightly-latest-20260105
nightly-latest-20260106
nightly-latest-20260107
nightly-latest-20260108
nightly-latest-20260109
nightly-latest-20260110
nightly-latest-20260111
nightly-latest-20260112
nightly-latest-20260113
nightly-latest-20260114
nightly-latest-20260115
nightly-latest-20260116
nightly-latest-20260117
nightly-latest-20260118
nightly-latest-20260119
nightly-latest-20260120
nightly-latest-20260121
nightly-latest-20260122
nightly-latest-20260123
nightly-latest-20260124
nightly-latest-20260125
nightly-latest-20260126
nightly-latest-20260127
nightly-latest-20260128
nightly-latest-20260129
nightly-latest-20260130
nightly-latest-20260131
nightly-latest-20260201
nightly-latest-20260202
nightly-latest-20260203
nightly-latest-20260204
nightly-latest-20260205
nightly-latest-20260206
nightly-latest-20260207
nightly-latest-20260208
nightly-latest-20260209
nightly-latest-20260210
nightly-latest-20260211
nightly-latest-20260212
nightly-latest-20260213
nightly-latest-20260214
nightly-latest-20260215
nightly-latest-20260216
nightly-latest-20260217
nightly-latest-20260218
nightly-latest-20260219
nightly-latest-20260220
nightly-latest-20260221
nightly-latest-20260222
nightly-latest-20260223
nightly-latest-20260224
nightly-latest-20260225
nightly-latest-20260226
nightly-latest-20260227
nightly-latest-20260228
nightly-latest-20260301
nightly-latest-20260302
nightly-latest-20260303
nightly-latest-20260304
nightly-latest-20260305
nightly-latest-20260306
notion-patch-20241022
teams-improvements
vespa-more-retries
craft-latest-3.*
craft-latest-3.0.1
experimental-cc4a.*
experimental-cc4a.15
experimental-cc4a.16
experimental-cc4a.18
experimental-cc4a.19
experimental-cc4a.20
experimental-cc4a.21
nightly-latest-20250321-patch.*
nightly-latest-20250321-patch.1
nightly-latest-20250331.*
nightly-latest-20250331.1
nightly-latest-20250522.*
nightly-latest-20250522.1
nightly-latest-20251121.*
nightly-latest-20251121.1
ods/v0.*
ods/v0.0.2
ods/v0.1.0
ods/v0.1.1
ods/v0.2.1
ods/v0.3.0
ods/v0.3.1
ods/v0.3.2
ods/v0.4.0
ods/v0.4.1
ods/v0.5.0
ods/v0.5.1
ods/v0.5.2
ods/v0.5.3
ods/v0.6.0
ods/v0.6.1
ods/v0.6.2
ods/v0.6.3
onyx-stack-0.*
onyx-stack-0.2.4
onyx-stack-0.2.5
v0.*
v0.1.0
v0.1.1
v0.1.2
v0.1.3
v0.1.4
v0.1.5
v0.1.6
v0.1.7
v0.1.8
v0.1.9
v0.10.0-beta.1
v0.10.0-beta.2
v0.10.0-beta.3
v0.10.0-beta.4
v0.10.0-beta.5
v0.10.0-beta.6
v0.10.0-cloud.beta.10
v0.10.0-cloud.beta.5
v0.10.0-cloud.beta.6
v0.10.0-cloud.beta.7
v0.10.0-cloud.beta.8
v0.10.0-cloud.beta.9
v0.11.0-beta.1
v0.11.0-cloud.beta.1
v0.11.0-cloud.beta.5
v0.11.0-cloud.beta.6
v0.12.0-beta.1
v0.12.0-cloud.beta.0
v0.12.0-cloud.beta.16
v0.12.0-cloud.beta.17
v0.13.0-beta.1
v0.13.0-cloud.beta.2
v0.14.0-beta.1
v0.14.0-cloud.beta.0
v0.15.0-beta.1
v0.15.0-cloud.beta.1
v0.15.0-cloud.beta.12
v0.15.0-cloud.beta.13
v0.15.0-cloud.beta.15
v0.15.0-cloud.beta.17
v0.15.0-cloud.beta.19
v0.15.0-cloud.beta.2
v0.15.0-cloud.beta.20
v0.15.0-cloud.beta.21
v0.15.0-cloud.beta.23
v0.15.0-cloud.beta.4
v0.15.0-cloud.beta.7
v0.15.0-cloud.beta.8
v0.16.0-beta.1
v0.18.0
v0.18.0-beta.1
v0.18.0-beta.2
v0.18.0-cloud.1
v0.18.0-cloud.10
v0.18.0-cloud.11
v0.18.0-cloud.12
v0.18.0-cloud.13
v0.18.0-cloud.15
v0.18.0-cloud.19
v0.18.0-cloud.20
v0.18.0-cloud.22
v0.18.0-cloud.23
v0.18.0-cloud.3
v0.18.0-cloud.31
v0.18.0-cloud.34
v0.18.0-cloud.6
v0.18.0-cloud.8
v0.18.0-cloud.9
v0.19.0-beta.1
v0.19.0-cloud.10
v0.19.0-cloud.13
v0.19.0-cloud.15
v0.19.0-cloud.18
v0.19.0-cloud.26
v0.19.0-cloud.39
v0.19.0-cloud.41
v0.19.0-cloud.45
v0.19.0-cloud.58
v0.19.0-cloud.59
v0.19.0-cloud.62
v0.19.0-cloud.65
v0.19.0-cloud.66
v0.19.0-cloud.67
v0.19.0-cloud.68
v0.19.0-cloud.71
v0.19.0-cloud.73
v0.19.0-cloud.74
v0.19.0-cloud.75
v0.2.0
v0.2.1
v0.2.10
v0.2.11
v0.2.12
v0.2.13
v0.2.14
v0.2.15
v0.2.16
v0.2.17
v0.2.18
v0.2.19
v0.2.2
v0.2.20
v0.2.21
v0.2.22
v0.2.23
v0.2.24
v0.2.25
v0.2.26
v0.2.27
v0.2.28
v0.2.29
v0.2.3
v0.2.30
v0.2.31
v0.2.32
v0.2.33
v0.2.34
v0.2.35
v0.2.36
v0.2.37
v0.2.38
v0.2.39
v0.2.4
v0.2.40
v0.2.41
v0.2.43
v0.2.44
v0.2.45
v0.2.46
v0.2.47
v0.2.48
v0.2.49
v0.2.5
v0.2.50
v0.2.51
v0.2.52
v0.2.53
v0.2.54
v0.2.55
v0.2.56
v0.2.57
v0.2.58
v0.2.59
v0.2.6
v0.2.60
v0.2.61
v0.2.62
v0.2.63
v0.2.64
v0.2.65
v0.2.66
v0.2.67
v0.2.68
v0.2.69
v0.2.7
v0.2.70
v0.2.71
v0.2.72
v0.2.73
v0.2.74
v0.2.75
v0.2.76
v0.2.77
v0.2.78
v0.2.79
v0.2.8
v0.2.9
v0.20.0
v0.20.0-beta.1
v0.20.0-cloud.28
v0.20.0-cloud.31
v0.20.0-cloud.35
v0.20.0-cloud.36
v0.20.0-cloud.41
v0.20.0-cloud.5
v0.20.0-cloud.57
v0.20.0-cloud.6
v0.20.0-cloud.73
v0.20.0-cloud.76
v0.20.0-cloud.84
v0.21.0
v0.21.0-beta.1
v0.22.0-beta.1
v0.23.0
v0.23.0-beta.1
v0.23.0-cloud.0
v0.23.0-cloud.1
v0.23.0-cloud.3
v0.23.0-cloud.4
v0.24.0-beta.1
v0.24.0-cloud.1
v0.24.0-cloud.23
v0.24.0-cloud.24
v0.24.0-cloud.25
v0.24.0-cloud.26
v0.24.0-cloud.27
v0.24.0-cloud.29
v0.24.0-cloud.30
v0.24.0-cloud.31
v0.24.0-cloud.32
v0.24.0-cloud.33
v0.24.0-cloud.45
v0.24.0-cloud.46
v0.24.0-cloud.47
v0.24.0-cloud.48
v0.24.0-cloud.49
v0.24.0-cloud.5
v0.24.0-cloud.50
v0.24.0-cloud.51
v0.24.0-cloud.55
v0.24.0-cloud.56
v0.24.0-cloud.58
v0.24.0-cloud.6
v0.24.0-cloud.60
v0.24.0-cloud.61
v0.24.0-cloud.63
v0.24.0-cloud.64
v0.25.0-beta.1
v0.26.0
v0.26.0-beta.2
v0.27.0
v0.27.0-beta.1
v0.28.0
v0.28.0-beta.1
v0.28.0-candidate
v0.29.0
v0.29.0-beta.1
v0.29.0-cloud.1
v0.29.0-cloud.12
v0.29.0-cloud.13
v0.29.0-cloud.14
v0.29.0-cloud.15
v0.29.0-cloud.16
v0.29.0-cloud.17
v0.29.0-cloud.19
v0.29.0-cloud.2
v0.29.0-cloud.20
v0.29.0-cloud.21
v0.29.0-cloud.22
v0.29.0-cloud.23
v0.29.0-cloud.24
v0.29.0-cloud.4
v0.29.0-cloud.5
v0.3.0
v0.3.1
v0.3.10
v0.3.11
v0.3.12
v0.3.13
v0.3.14
v0.3.15
v0.3.16
v0.3.17
v0.3.18
v0.3.19
v0.3.2
v0.3.20
v0.3.21
v0.3.22
v0.3.23
v0.3.24
v0.3.25
v0.3.26
v0.3.29
v0.3.3
v0.3.30
v0.3.31
v0.3.32
v0.3.33
v0.3.34
v0.3.35
v0.3.36
v0.3.37
v0.3.38
v0.3.39
v0.3.4
v0.3.40
v0.3.41
v0.3.42
v0.3.43
v0.3.44
v0.3.45
v0.3.46
v0.3.47
v0.3.48
v0.3.49
v0.3.5
v0.3.50
v0.3.51
v0.3.52
v0.3.53
v0.3.54
v0.3.55
v0.3.56
v0.3.57
v0.3.58
v0.3.59
v0.3.6
v0.3.60
v0.3.61
v0.3.62
v0.3.65
v0.3.66
v0.3.67
v0.3.68
v0.3.69
v0.3.7
v0.3.70
v0.3.71
v0.3.72
v0.3.73
v0.3.74
v0.3.75
v0.3.76
v0.3.77
v0.3.78
v0.3.79
v0.3.8
v0.3.80
v0.3.81
v0.3.82
v0.3.85
v0.3.86
v0.3.87
v0.3.88
v0.3.89
v0.3.9
v0.3.90
v0.3.91
v0.3.92
v0.3.93
v0.3.94
v0.3.95
v0.30.0-beta.1
v0.4.1
v0.4.10
v0.4.11
v0.4.12
v0.4.13
v0.4.14
v0.4.15
v0.4.16
v0.4.17
v0.4.18
v0.4.19
v0.4.2
v0.4.20
v0.4.21
v0.4.22
v0.4.23
v0.4.25
v0.4.26
v0.4.27
v0.4.28
v0.4.3
v0.4.4
v0.4.5
v0.4.6
v0.4.7
v0.4.8
v0.4.9
v0.5.0
v0.5.1
v0.5.10
v0.5.11
v0.5.13
v0.5.14
v0.5.15
v0.5.16
v0.5.17
v0.5.18
v0.5.19
v0.5.2
v0.5.20
v0.5.21
v0.5.22
v0.5.23
v0.5.24
v0.5.25
v0.5.26
v0.5.3
v0.5.4
v0.5.5
v0.5.6
v0.5.7
v0.5.8
v0.5.9
v0.6.0-beta.1
v0.7.0-beta.1
v0.7.5
v0.7.6
v0.7.7
v0.7.8
v0.8.0-beta.1
v0.9.0
v0.9.0-beta.1
v0.9.0-beta.2
v0.9.0-beta.3
v0.9.0-beta.4
v0.9.0-beta.5
v0.9.0-beta.6
v1.*
v1.0.0
v1.0.0-candidate
v1.0.0-cloud.1
v1.0.0-cloud.15
v1.0.0-cloud.16
v1.0.0-cloud.17
v1.0.0-cloud.2
v1.0.0-cloud.3
v1.0.0-cloud.34
v1.0.0-cloud.35
v1.0.0-cloud.36
v1.0.0-cloud.4
v1.0.0-cloud.5
v1.0.0-cloud.7
v1.1.0-beta
v1.10.0
v1.10.0-beta.0
v1.10.0-cloud.1
v1.10.0-cloud.2
v1.11.0-beta.0
v1.2.0
v1.2.0-beta
v1.2.0-cloud.1
v1.2.1-cloud.2
v1.3.0-beta
v1.4.0-beta.0
v1.4.0-cloud.1
v1.5.0
v1.5.0-beta.0
v1.6.0-beta.0
v1.6.0-cloud.1
v1.6.0-cloud.3
v1.7.0
v1.7.0-beta.0
v1.7.0-cloud.1
v1.7.0-cloud.2
v1.7.0-cloud.3
v1.7.0-cloud.4
v1.7.0-cloud.5
v1.7.0-cloud.6
v1.8.0
v1.8.0-beta.0
v1.8.0-beta.1
v1.8.0-cloud.0
v1.8.0-cloud.1
v1.8.0-cloud.3
v1.8.0-cloud.4
v1.9.0-beta.0
v1.9.0-cloud.0
v1.9.0-cloud.1
v1.9.0-cloud.2
v1.9.0-cloud.3
v1.9.0-cloud.4
v1.9.0-cloud.5
v1.9.0-cloud.6
v2.*
v2.0.0-beta.0
v2.0.2-cloud.0
v2.0.3
v2.0.3-cloud.0
v2.1.0
v2.1.0-beta.0
v2.1.0-beta.2
v2.10.0-beta.0
v2.11.0-beta
v2.11.0-beta.15
v2.11.0-cloud.0
v2.11.0-cloud.1
v2.11.0-cloud.10
v2.11.0-cloud.11
v2.11.0-cloud.12
v2.11.0-cloud.13
v2.11.0-cloud.14
v2.11.0-cloud.15
v2.11.0-cloud.16
v2.11.0-cloud.2
v2.11.0-cloud.3
v2.11.0-cloud.4
v2.11.0-cloud.5
v2.11.0-cloud.6
v2.11.0-cloud.7
v2.11.0-cloud.8
v2.11.0-cloud.9
v2.12.0-beta
v2.12.0-beta-test-captcha
v2.12.0-cloud.0
v2.12.0-cloud.1
v2.12.0-cloud.10
v2.12.0-cloud.11
v2.12.0-cloud.12
v2.12.0-cloud.13
v2.12.0-cloud.14
v2.12.0-cloud.2
v2.12.0-cloud.3
v2.12.0-cloud.4
v2.12.0-cloud.5
v2.12.0-cloud.6
v2.12.0-cloud.7
v2.12.0-cloud.8
v2.12.0-cloud.9
v2.12.0-sharepoint-gov2
v2.12.0-sharepoint-gov4
v2.2.0
v2.2.0-beta.0
v2.2.0-beta.1
v2.2.0-beta.2
v2.2.0-cloud.0
v2.2.0-cloud.1
v2.2.0-cloud.2
v2.2.1
v2.3.0-beta.0
v2.3.0-beta.1
v2.3.0-beta.2
v2.3.0-beta.3
v2.3.0-cloud.0
v2.3.0-cloud.1
v2.3.0-cloud.2
v2.4.0
v2.4.0-beta.0
v2.4.0-cloud.0
v2.4.0-cloud.1
v2.4.0-cloud.2
v2.4.0-cloud.3
v2.4.0-cloud.4
v2.4.1
v2.4.2
v2.4.4-cloud.0
v2.4.5-cloud.0
v2.5.0
v2.5.0-beta.0
v2.5.0-cloud.0
v2.5.1
v2.5.2
v2.5.3
v2.5.4
v2.6.0
v2.6.0-beta.0
v2.6.0-beta.1
v2.6.0-beta.10
v2.6.0-beta.11
v2.6.0-beta.12
v2.6.0-beta.13
v2.6.0-beta.14
v2.6.0-beta.15
v2.6.0-beta.16
v2.6.0-beta.17
v2.6.0-beta.18
v2.6.0-beta.19
v2.6.0-beta.2
v2.6.0-beta.3
v2.6.0-beta.4
v2.6.0-beta.5
v2.6.0-beta.6
v2.6.0-beta.7
v2.6.0-beta.8
v2.6.0-beta.9
v2.6.0-cloud.0
v2.6.1
v2.6.1-cloud.0
v2.6.2
v2.6.2-cloud.0
v2.7.0
v2.7.0-beta.0
v2.7.0-beta.1
v2.7.0-beta.2
v2.7.0-beta.3
v2.7.0-beta.4
v2.7.0-beta.5
v2.7.0-cloud.0
v2.7.0-cloud.1
v2.7.1
v2.8.0
v2.8.0-beta.0
v2.8.0-beta.1
v2.8.0-cloud.0
v2.8.0-cloud.10
v2.8.0-cloud.4
v2.8.0-cloud.5
v2.8.0-cloud.6
v2.8.0-cloud.7
v2.9.0
v2.9.0-beta.0
v2.9.0-beta.1
v3.*
v3.0.0
v3.0.0-beta
v3.0.0-cloud.1
v3.0.0-cloud.2
v3.0.0-cloud.3
v3.0.0-cloud.4
v3.0.0-cloud.5
v3.0.0-scim-testing
v3.0.1
v3.0.2
v3.0.3
v3.0.4
v3.0.5
v3.0.6
v3.0.7
v3.0.8
v3.1.0
v3.1.1
v3.1.2
v3.1.3
v3.1.4
v3.1.5
v3.2.0
v3.2.0-beta
v3.2.1
v3.2.2
v3.2.3
v3.2.4
v3.2.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-42277.json"