CVE-2026-71424

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-71424
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-71424.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-71424
Aliases
  • GHSA-q62f-rv3h-f822
Published
2026-08-17T21:28:32Z
Modified
2026-10-28T02:30:54Z
Severity
  • 9.6 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N CVSS Calculator
Summary
Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers
Details

Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/servers and GET /api/mcp/servers/persona/{persona_id} endpoints expose another user's OAuth Authorization header because OnyxTokenStorage.set_tokens and OnyxTokenStorage.set_client_info in backend/onyx/server/features/mcp/api.py copy per-user tokens into a shared admin MCPConnectionConfig row and _db_mcp_server_to_api_mcp_server returns that row through auth_template.headers to any BASIC_ACCESS user. This issue is fixed in versions 3.1.10, 3.2.14, and 4.0.0.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-200",
        "CWE-863"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/71xxx/CVE-2026-71424.json"
}
References

Affected packages

Git / github.com/onyx-dot-app/onyx

Affected ranges

Type
GIT
Repo
https://github.com/onyx-dot-app/onyx
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
3f3d79d1a7722fdc84a1c61c8aa830d890017e9e
Introduced
c4f8d5370b8369176a77f0788da3fc4b133fb2db
Fixed
4001cedd0a8968723bfe95dd188914ed56777910
Introduced
634cb0b07a4c00ebd9ea4a5f2ad2112e1a85cd20
Fixed
d59882f006ba6d060fecfbbfd79aeadd372905d8
Fixed
b103937888fd5008067c2bb6eb6e5424576394f2
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "3.1.10"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "introduced": "3.2.0"
                },
                {
                    "fixed": "3.2.14"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "introduced": "3.3.0-beta.0"
                },
                {
                    "fixed": "4.0.0"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "fixed": "3f3d79d1a7722fdc84a1c61c8aa830d890017e9e"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "4001cedd0a8968723bfe95dd188914ed56777910"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "b103937888fd5008067c2bb6eb6e5424576394f2"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "original_tag": "v4.0.0",
            "range": [
                {
                    "fixed": "d59882f006ba6d060fecfbbfd79aeadd372905d8"
                }
            ],
            "source": "REFERENCES_TAG"
        }
    ]
}

Affected versions

0.*
0.4.5
cli/v0.*
cli/v0.1.0
cli/v0.1.1
cli/v0.3.1
cli/v1.*
cli/v1.0.0
cli/v1.0.1
cli/v1.0.2
cli/v1.0.3
confluence-patch-04.*
confluence-patch-04.1.2025
Other
craft-latest
experimental-1
highspot-special-tag
highspot-special-tag-2
nightly-latest-20240927
nightly-latest-20240928
nightly-latest-20240929
nightly-latest-20240930
nightly-latest-20241001
nightly-latest-20241002
nightly-latest-20241003
nightly-latest-20241004
nightly-latest-20241005
nightly-latest-20241006
nightly-latest-20241007
nightly-latest-20241008
nightly-latest-20241009
nightly-latest-20241010
nightly-latest-20241011
nightly-latest-20241012
nightly-latest-20241013
nightly-latest-20241014
nightly-latest-20241015
nightly-latest-20241016
nightly-latest-20241017
nightly-latest-20241018
nightly-latest-20241019
nightly-latest-20241020
nightly-latest-20241021
nightly-latest-20241022
nightly-latest-20241023
nightly-latest-20241024
nightly-latest-20241025
nightly-latest-20241026
nightly-latest-20241027
nightly-latest-20241028
nightly-latest-20241029
nightly-latest-20241030
nightly-latest-20241031
nightly-latest-20241101
nightly-latest-20241102
nightly-latest-20241103
nightly-latest-20241104
nightly-latest-20241105
nightly-latest-20241106
nightly-latest-20241107
nightly-latest-20241108
nightly-latest-20241109
nightly-latest-20241110
nightly-latest-20241111
nightly-latest-20241112
nightly-latest-20241113
nightly-latest-20241114
nightly-latest-20241115
nightly-latest-20241116
nightly-latest-20241117
nightly-latest-20241118
nightly-latest-20241119
nightly-latest-20241120
nightly-latest-20241121
nightly-latest-20241122
nightly-latest-20241123
nightly-latest-20241124
nightly-latest-20241125
nightly-latest-20241126
nightly-latest-20241127
nightly-latest-20241128
nightly-latest-20241129
nightly-latest-20241130
nightly-latest-20241201
nightly-latest-20241202
nightly-latest-20241203
nightly-latest-20241204
nightly-latest-20241205
nightly-latest-20241206
nightly-latest-20241207
nightly-latest-20241208
nightly-latest-20241209
nightly-latest-20241210
nightly-latest-20241211
nightly-latest-20241212
nightly-latest-20241213
nightly-latest-20241215
nightly-latest-20241216
nightly-latest-20241217
nightly-latest-20241218
nightly-latest-20241219
nightly-latest-20241220
nightly-latest-20241221
nightly-latest-20241222
nightly-latest-20241223
nightly-latest-20241224
nightly-latest-20241225
nightly-latest-20241226
nightly-latest-20241227
nightly-latest-20241228
nightly-latest-20241229
nightly-latest-20241230
nightly-latest-20241231
nightly-latest-20250101
nightly-latest-20250102
nightly-latest-20250103
nightly-latest-20250104
nightly-latest-20250105
nightly-latest-20250106
nightly-latest-20250107
nightly-latest-20250108
nightly-latest-20250109
nightly-latest-20250110
nightly-latest-20250111
nightly-latest-20250112
nightly-latest-20250113
nightly-latest-20250114
nightly-latest-20250115
nightly-latest-20250116
nightly-latest-20250117
nightly-latest-20250118
nightly-latest-20250119
nightly-latest-20250120
nightly-latest-20250121
nightly-latest-20250122
nightly-latest-20250123
nightly-latest-20250124
nightly-latest-20250125
nightly-latest-20250126
nightly-latest-20250127
nightly-latest-20250128
nightly-latest-20250129
nightly-latest-20250130
nightly-latest-20250131
nightly-latest-20250201
nightly-latest-20250202
nightly-latest-20250203
nightly-latest-20250204
nightly-latest-20250205
nightly-latest-20250206
nightly-latest-20250207
nightly-latest-20250208
nightly-latest-20250209
nightly-latest-20250210
nightly-latest-20250211
nightly-latest-20250212
nightly-latest-20250212-early
nightly-latest-20250213
nightly-latest-20250214
nightly-latest-20250215
nightly-latest-20250216
nightly-latest-20250217
nightly-latest-20250218
nightly-latest-20250219
nightly-latest-20250220
nightly-latest-20250221
nightly-latest-20250222
nightly-latest-20250223
nightly-latest-20250224
nightly-latest-20250225
nightly-latest-20250226
nightly-latest-20250227
nightly-latest-20250228
nightly-latest-20250301
nightly-latest-20250302
nightly-latest-20250303
nightly-latest-20250304
nightly-latest-20250305
nightly-latest-20250306
nightly-latest-20250307
nightly-latest-20250308
nightly-latest-20250309
nightly-latest-20250310
nightly-latest-20250311
nightly-latest-20250312
nightly-latest-20250313
nightly-latest-20250314
nightly-latest-20250315
nightly-latest-20250316
nightly-latest-20250317
nightly-latest-20250318
nightly-latest-20250319
nightly-latest-20250320
nightly-latest-20250321
nightly-latest-20250322
nightly-latest-20250323
nightly-latest-20250324
nightly-latest-20250325
nightly-latest-20250326
nightly-latest-20250327
nightly-latest-20250328
nightly-latest-20250329
nightly-latest-20250330
nightly-latest-20250331
nightly-latest-20250402
nightly-latest-20250403
nightly-latest-20250404
nightly-latest-20250405
nightly-latest-20250406
nightly-latest-20250407
nightly-latest-20250408
nightly-latest-20250409
nightly-latest-20250410
nightly-latest-20250411
nightly-latest-20250412
nightly-latest-20250413
nightly-latest-20250414
nightly-latest-20250415
nightly-latest-20250416
nightly-latest-20250417
nightly-latest-20250418
nightly-latest-20250419
nightly-latest-20250420
nightly-latest-20250421
nightly-latest-20250422
nightly-latest-20250423
nightly-latest-20250424
nightly-latest-20250425
nightly-latest-20250426
nightly-latest-20250427
nightly-latest-20250428
nightly-latest-20250429
nightly-latest-20250430
nightly-latest-20250501
nightly-latest-20250502
nightly-latest-20250503
nightly-latest-20250504
nightly-latest-20250505
nightly-latest-20250506
nightly-latest-20250507
nightly-latest-20250508
nightly-latest-20250509
nightly-latest-20250510
nightly-latest-20250511
nightly-latest-20250512
nightly-latest-20250513
nightly-latest-20250514
nightly-latest-20250515
nightly-latest-20250516
nightly-latest-20250517
nightly-latest-20250518
nightly-latest-20250519
nightly-latest-20250520
nightly-latest-20250521
nightly-latest-20250522
nightly-latest-20250523
nightly-latest-20250524
nightly-latest-20250525
nightly-latest-20250526
nightly-latest-20250527
nightly-latest-20250528
nightly-latest-20250529
nightly-latest-20250530
nightly-latest-20250531
nightly-latest-20250601
nightly-latest-20250602
nightly-latest-20250603
nightly-latest-20250604
nightly-latest-20250605
nightly-latest-20250606
nightly-latest-20250607
nightly-latest-20250608
nightly-latest-20250609
nightly-latest-20250610
nightly-latest-20250611
nightly-latest-20250612
nightly-latest-20250613
nightly-latest-20250614
nightly-latest-20250615
nightly-latest-20250616
nightly-latest-20250617
nightly-latest-20250618
nightly-latest-20250619
nightly-latest-20250620
nightly-latest-20250621
nightly-latest-20250622
nightly-latest-20250623
nightly-latest-20250624
nightly-latest-20250625
nightly-latest-20250626
nightly-latest-20250627
nightly-latest-20250628
nightly-latest-20250629
nightly-latest-20250630
nightly-latest-20250701
nightly-latest-20250702
nightly-latest-20250703
nightly-latest-20250704
nightly-latest-20250705
nightly-latest-20250706
nightly-latest-20250707
nightly-latest-20250708
nightly-latest-20250709
nightly-latest-20250710
nightly-latest-20250711
nightly-latest-20250712
nightly-latest-20250713
nightly-latest-20250714
nightly-latest-20250715
nightly-latest-20250716
nightly-latest-20250717
nightly-latest-20250718
nightly-latest-20250719
nightly-latest-20250720
nightly-latest-20250721
nightly-latest-20250722
nightly-latest-20250723
nightly-latest-20250724
nightly-latest-20250725
nightly-latest-20250726
nightly-latest-20250727
nightly-latest-20250728
nightly-latest-20250729
nightly-latest-20250730
nightly-latest-20250731
nightly-latest-20250801
nightly-latest-20250802
nightly-latest-20250803
nightly-latest-20250804
nightly-latest-20250805
nightly-latest-20250806
nightly-latest-20250807
nightly-latest-20250808
nightly-latest-20250809
nightly-latest-20250810
nightly-latest-20250811
nightly-latest-20250812
nightly-latest-20250813
nightly-latest-20250814
nightly-latest-20250815
nightly-latest-20250816
nightly-latest-20250817
nightly-latest-20250818
nightly-latest-20250819
nightly-latest-20250820
nightly-latest-20250821
nightly-latest-20250822
nightly-latest-20250823
nightly-latest-20250824
nightly-latest-20250825
nightly-latest-20250826
nightly-latest-20250827
nightly-latest-20250828
nightly-latest-20250829
nightly-latest-20250830
nightly-latest-20250831
nightly-latest-20250901
nightly-latest-20250902
nightly-latest-20250903
nightly-latest-20250904
nightly-latest-20250905
nightly-latest-20250906
nightly-latest-20250907
nightly-latest-20250908
nightly-latest-20250909
nightly-latest-20250910
nightly-latest-20250911
nightly-latest-20250912
nightly-latest-20250913
nightly-latest-20250914
nightly-latest-20250915
nightly-latest-20250916
nightly-latest-20250917
nightly-latest-20250918
nightly-latest-20250919
nightly-latest-20250920
nightly-latest-20250921
nightly-latest-20250922
nightly-latest-20250923
nightly-latest-20250924
nightly-latest-20250925
nightly-latest-20250926
nightly-latest-20250927
nightly-latest-20250928
nightly-latest-20250929
nightly-latest-20250930
nightly-latest-20251001
nightly-latest-20251002
nightly-latest-20251003
nightly-latest-20251004
nightly-latest-20251005
nightly-latest-20251006
nightly-latest-20251007
nightly-latest-20251008
nightly-latest-20251009
nightly-latest-20251010
nightly-latest-20251011
nightly-latest-20251012
nightly-latest-20251013
nightly-latest-20251014
nightly-latest-20251015
nightly-latest-20251016
nightly-latest-20251017
nightly-latest-20251018
nightly-latest-20251019
nightly-latest-20251020
nightly-latest-20251021
nightly-latest-20251022
nightly-latest-20251023
nightly-latest-20251024
nightly-latest-20251025
nightly-latest-20251026
nightly-latest-20251027
nightly-latest-20251028
nightly-latest-20251029
nightly-latest-20251030
nightly-latest-20251031
nightly-latest-20251101
nightly-latest-20251102
nightly-latest-20251103
nightly-latest-20251104
nightly-latest-20251105
nightly-latest-20251106
nightly-latest-20251107
nightly-latest-20251108
nightly-latest-20251109
nightly-latest-20251110
nightly-latest-20251111
nightly-latest-20251112
nightly-latest-20251113
nightly-latest-20251114
nightly-latest-20251115
nightly-latest-20251116
nightly-latest-20251117
nightly-latest-20251118
nightly-latest-20251119
nightly-latest-20251121
nightly-latest-20251122
nightly-latest-20251123
nightly-latest-20251124
nightly-latest-20251125
nightly-latest-20251126
nightly-latest-20251127
nightly-latest-20251128
nightly-latest-20251129
nightly-latest-20251130
nightly-latest-20251201
nightly-latest-20251202
nightly-latest-20251203
nightly-latest-20251204
nightly-latest-20251205
nightly-latest-20251206
nightly-latest-20251207
nightly-latest-20251208
nightly-latest-20251209
nightly-latest-20251210
nightly-latest-20251211
nightly-latest-20251212
nightly-latest-20251213
nightly-latest-20251214
nightly-latest-20251215
nightly-latest-20251216
nightly-latest-20251217
nightly-latest-20251218
nightly-latest-20251219
nightly-latest-20251220
nightly-latest-20251221
nightly-latest-20251222
nightly-latest-20251223
nightly-latest-20251224
nightly-latest-20251225
nightly-latest-20251226
nightly-latest-20251227
nightly-latest-20251228
nightly-latest-20251229
nightly-latest-20251230
nightly-latest-20251231
nightly-latest-20260101
nightly-latest-20260102
nightly-latest-20260103
nightly-latest-20260104
nightly-latest-20260105
nightly-latest-20260106
nightly-latest-20260107
nightly-latest-20260108
nightly-latest-20260109
nightly-latest-20260110
nightly-latest-20260111
nightly-latest-20260112
nightly-latest-20260113
nightly-latest-20260114
nightly-latest-20260115
nightly-latest-20260116
nightly-latest-20260117
nightly-latest-20260118
nightly-latest-20260119
nightly-latest-20260120
nightly-latest-20260121
nightly-latest-20260122
nightly-latest-20260123
nightly-latest-20260124
nightly-latest-20260125
nightly-latest-20260126
nightly-latest-20260127
nightly-latest-20260128
nightly-latest-20260129
nightly-latest-20260130
nightly-latest-20260131
nightly-latest-20260201
nightly-latest-20260202
nightly-latest-20260203
nightly-latest-20260204
nightly-latest-20260205
nightly-latest-20260206
nightly-latest-20260207
nightly-latest-20260208
nightly-latest-20260209
nightly-latest-20260210
nightly-latest-20260211
nightly-latest-20260212
nightly-latest-20260213
nightly-latest-20260214
nightly-latest-20260215
nightly-latest-20260216
nightly-latest-20260217
nightly-latest-20260218
nightly-latest-20260219
nightly-latest-20260220
nightly-latest-20260221
nightly-latest-20260222
nightly-latest-20260223
nightly-latest-20260224
nightly-latest-20260225
nightly-latest-20260226
nightly-latest-20260227
nightly-latest-20260228
nightly-latest-20260301
nightly-latest-20260302
nightly-latest-20260303
nightly-latest-20260304
nightly-latest-20260305
nightly-latest-20260306
nightly-latest-20260307
nightly-latest-20260308
nightly-latest-20260309
nightly-latest-20260310
nightly-latest-20260311
nightly-latest-20260312
nightly-latest-20260313
nightly-latest-20260314
nightly-latest-20260315
nightly-latest-20260316
nightly-latest-20260317
nightly-latest-20260318
nightly-latest-20260319
nightly-latest-20260320
nightly-latest-20260321
nightly-latest-20260322
nightly-latest-20260323
nightly-latest-20260324
nightly-latest-20260325
nightly-latest-20260326
nightly-latest-20260429
nightly-latest-20260430
nightly-latest-20260501
nightly-latest-20260502
nightly-latest-20260503
nightly-latest-20260504
nightly-latest-20260505
nightly-latest-20260506
nightly-latest-20260507
nightly-latest-20260508
nightly-latest-20260509
nightly-latest-20260510
nightly-latest-20260511
nightly-latest-20260512
nightly-latest-20260513
nightly-latest-20260514
nightly-latest-20260515
nightly-latest-20260516
nightly-latest-20260517
nightly-latest-20260518
nightly-latest-20260519
nightly-latest-20260520
notion-patch-20241022
teams-improvements
vespa-more-retries
experimental-cc4a.*
experimental-cc4a.15
experimental-cc4a.16
experimental-cc4a.18
experimental-cc4a.19
experimental-cc4a.20
experimental-cc4a.21
experimental-cc4a.91
experimental-cc4a.92
experimental-cc4a.93
experimental-cc4a.94
nightly-latest-20250321-patch.*
nightly-latest-20250321-patch.1
nightly-latest-20250331.*
nightly-latest-20250331.1
nightly-latest-20250522.*
nightly-latest-20250522.1
nightly-latest-20251121.*
nightly-latest-20251121.1
ods/v0.*
ods/v0.0.2
ods/v0.1.0
ods/v0.1.1
ods/v0.2.1
ods/v0.3.0
ods/v0.3.1
ods/v0.3.2
ods/v0.4.0
ods/v0.4.1
ods/v0.5.0
ods/v0.5.1
ods/v0.5.2
ods/v0.5.3
ods/v0.6.0
ods/v0.6.1
ods/v0.6.2
ods/v0.6.3
ods/v0.6.4
ods/v0.7.0
ods/v0.7.1
ods/v0.7.7
onyx-stack-0.*
onyx-stack-0.2.4
onyx-stack-0.2.5
opal/v0.*
opal/v0.1.1
opal/v0.1.2
opal/v0.1.3
v0.*
v0.1.0
v0.1.1
v0.1.2
v0.1.3
v0.1.4
v0.1.5
v0.1.6
v0.1.7
v0.1.8
v0.1.9
v0.10.0-beta.1
v0.10.0-beta.2
v0.10.0-beta.3
v0.10.0-beta.4
v0.10.0-beta.5
v0.10.0-beta.6
v0.10.0-cloud.beta.10
v0.10.0-cloud.beta.5
v0.10.0-cloud.beta.6
v0.10.0-cloud.beta.7
v0.10.0-cloud.beta.8
v0.10.0-cloud.beta.9
v0.11.0-beta.1
v0.11.0-cloud.beta.1
v0.11.0-cloud.beta.5
v0.11.0-cloud.beta.6
v0.12.0-beta.1
v0.12.0-cloud.beta.0
v0.12.0-cloud.beta.16
v0.12.0-cloud.beta.17
v0.13.0-beta.1
v0.13.0-cloud.beta.2
v0.14.0-beta.1
v0.14.0-cloud.beta.0
v0.15.0-beta.1
v0.15.0-cloud.beta.1
v0.15.0-cloud.beta.12
v0.15.0-cloud.beta.13
v0.15.0-cloud.beta.15
v0.15.0-cloud.beta.17
v0.15.0-cloud.beta.19
v0.15.0-cloud.beta.2
v0.15.0-cloud.beta.20
v0.15.0-cloud.beta.21
v0.15.0-cloud.beta.23
v0.15.0-cloud.beta.4
v0.15.0-cloud.beta.7
v0.15.0-cloud.beta.8
v0.16.0-beta.1
v0.18.0
v0.18.0-beta.1
v0.18.0-beta.2
v0.18.0-cloud.1
v0.18.0-cloud.10
v0.18.0-cloud.11
v0.18.0-cloud.12
v0.18.0-cloud.13
v0.18.0-cloud.15
v0.18.0-cloud.19
v0.18.0-cloud.20
v0.18.0-cloud.22
v0.18.0-cloud.23
v0.18.0-cloud.3
v0.18.0-cloud.31
v0.18.0-cloud.34
v0.18.0-cloud.6
v0.18.0-cloud.8
v0.18.0-cloud.9
v0.19.0-beta.1
v0.19.0-cloud.10
v0.19.0-cloud.13
v0.19.0-cloud.15
v0.19.0-cloud.18
v0.19.0-cloud.26
v0.19.0-cloud.39
v0.19.0-cloud.41
v0.19.0-cloud.45
v0.19.0-cloud.58
v0.19.0-cloud.59
v0.19.0-cloud.62
v0.19.0-cloud.65
v0.19.0-cloud.66
v0.19.0-cloud.67
v0.19.0-cloud.68
v0.19.0-cloud.71
v0.19.0-cloud.73
v0.19.0-cloud.74
v0.19.0-cloud.75
v0.2.0
v0.2.1
v0.2.10
v0.2.11
v0.2.12
v0.2.13
v0.2.14
v0.2.15
v0.2.16
v0.2.17
v0.2.18
v0.2.19
v0.2.2
v0.2.20
v0.2.21
v0.2.22
v0.2.23
v0.2.24
v0.2.25
v0.2.26
v0.2.27
v0.2.28
v0.2.29
v0.2.3
v0.2.30
v0.2.31
v0.2.32
v0.2.33
v0.2.34
v0.2.35
v0.2.36
v0.2.37
v0.2.38
v0.2.39
v0.2.4
v0.2.40
v0.2.41
v0.2.43
v0.2.44
v0.2.45
v0.2.46
v0.2.47
v0.2.48
v0.2.49
v0.2.5
v0.2.50
v0.2.51
v0.2.52
v0.2.53
v0.2.54
v0.2.55
v0.2.56
v0.2.57
v0.2.58
v0.2.59
v0.2.6
v0.2.60
v0.2.61
v0.2.62
v0.2.63
v0.2.64
v0.2.65
v0.2.66
v0.2.67
v0.2.68
v0.2.69
v0.2.7
v0.2.70
v0.2.71
v0.2.72
v0.2.73
v0.2.74
v0.2.75
v0.2.76
v0.2.77
v0.2.78
v0.2.79
v0.2.8
v0.2.9
v0.20.0
v0.20.0-beta.1
v0.20.0-cloud.28
v0.20.0-cloud.31
v0.20.0-cloud.35
v0.20.0-cloud.36
v0.20.0-cloud.41
v0.20.0-cloud.5
v0.20.0-cloud.57
v0.20.0-cloud.6
v0.20.0-cloud.73
v0.20.0-cloud.76
v0.20.0-cloud.84
v0.21.0
v0.21.0-beta.1
v0.22.0-beta.1
v0.23.0
v0.23.0-beta.1
v0.23.0-cloud.0
v0.23.0-cloud.1
v0.23.0-cloud.3
v0.23.0-cloud.4
v0.24.0-beta.1
v0.24.0-cloud.1
v0.24.0-cloud.23
v0.24.0-cloud.24
v0.24.0-cloud.25
v0.24.0-cloud.26
v0.24.0-cloud.27
v0.24.0-cloud.29
v0.24.0-cloud.30
v0.24.0-cloud.31
v0.24.0-cloud.32
v0.24.0-cloud.33
v0.24.0-cloud.45
v0.24.0-cloud.46
v0.24.0-cloud.47
v0.24.0-cloud.48
v0.24.0-cloud.49
v0.24.0-cloud.5
v0.24.0-cloud.50
v0.24.0-cloud.51
v0.24.0-cloud.55
v0.24.0-cloud.56
v0.24.0-cloud.58
v0.24.0-cloud.6
v0.24.0-cloud.60
v0.24.0-cloud.61
v0.24.0-cloud.63
v0.24.0-cloud.64
v0.25.0-beta.1
v0.26.0
v0.26.0-beta.2
v0.27.0
v0.27.0-beta.1
v0.28.0
v0.28.0-beta.1
v0.28.0-candidate
v0.29.0
v0.29.0-beta.1
v0.29.0-cloud.1
v0.29.0-cloud.12
v0.29.0-cloud.13
v0.29.0-cloud.14
v0.29.0-cloud.15
v0.29.0-cloud.16
v0.29.0-cloud.17
v0.29.0-cloud.19
v0.29.0-cloud.2
v0.29.0-cloud.20
v0.29.0-cloud.21
v0.29.0-cloud.22
v0.29.0-cloud.23
v0.29.0-cloud.24
v0.29.0-cloud.4
v0.29.0-cloud.5
v0.3.0
v0.3.1
v0.3.10
v0.3.11
v0.3.12
v0.3.13
v0.3.14
v0.3.15
v0.3.16
v0.3.17
v0.3.18
v0.3.19
v0.3.2
v0.3.20
v0.3.21
v0.3.22
v0.3.23
v0.3.24
v0.3.25
v0.3.26
v0.3.29
v0.3.3
v0.3.30
v0.3.31
v0.3.32
v0.3.33
v0.3.34
v0.3.35
v0.3.36
v0.3.37
v0.3.38
v0.3.39
v0.3.4
v0.3.40
v0.3.41
v0.3.42
v0.3.43
v0.3.44
v0.3.45
v0.3.46
v0.3.47
v0.3.48
v0.3.49
v0.3.5
v0.3.50
v0.3.51
v0.3.52
v0.3.53
v0.3.54
v0.3.55
v0.3.56
v0.3.57
v0.3.58
v0.3.59
v0.3.6
v0.3.60
v0.3.61
v0.3.62
v0.3.65
v0.3.66
v0.3.67
v0.3.68
v0.3.69
v0.3.7
v0.3.70
v0.3.71
v0.3.72
v0.3.73
v0.3.74
v0.3.75
v0.3.76
v0.3.77
v0.3.78
v0.3.79
v0.3.8
v0.3.80
v0.3.81
v0.3.82
v0.3.85
v0.3.86
v0.3.87
v0.3.88
v0.3.89
v0.3.9
v0.3.90
v0.3.91
v0.3.92
v0.3.93
v0.3.94
v0.3.95
v0.30.0-beta.1
v0.4.1
v0.4.10
v0.4.11
v0.4.12
v0.4.13
v0.4.14
v0.4.15
v0.4.16
v0.4.17
v0.4.18
v0.4.19
v0.4.2
v0.4.20
v0.4.21
v0.4.22
v0.4.23
v0.4.25
v0.4.26
v0.4.27
v0.4.28
v0.4.3
v0.4.4
v0.4.5
v0.4.6
v0.4.7
v0.4.8
v0.4.9
v0.5.0
v0.5.1
v0.5.10
v0.5.11
v0.5.13
v0.5.14
v0.5.15
v0.5.16
v0.5.17
v0.5.18
v0.5.19
v0.5.2
v0.5.20
v0.5.21
v0.5.22
v0.5.23
v0.5.24
v0.5.25
v0.5.26
v0.5.3
v0.5.4
v0.5.5
v0.5.6
v0.5.7
v0.5.8
v0.5.9
v0.6.0-beta.1
v0.7.0-beta.1
v0.7.5
v0.7.6
v0.7.7
v0.7.8
v0.8.0-beta.1
v0.9.0
v0.9.0-beta.1
v0.9.0-beta.2
v0.9.0-beta.3
v0.9.0-beta.4
v0.9.0-beta.5
v0.9.0-beta.6
v1.*
v1.0.0
v1.0.0-candidate
v1.0.0-cloud.1
v1.0.0-cloud.15
v1.0.0-cloud.16
v1.0.0-cloud.17
v1.0.0-cloud.2
v1.0.0-cloud.3
v1.0.0-cloud.34
v1.0.0-cloud.35
v1.0.0-cloud.36
v1.0.0-cloud.4
v1.0.0-cloud.5
v1.0.0-cloud.7
v1.1.0-beta
v1.10.0
v1.10.0-beta.0
v1.10.0-cloud.1
v1.10.0-cloud.2
v1.11.0-beta.0
v1.2.0
v1.2.0-beta
v1.2.0-cloud.1
v1.2.1-cloud.2
v1.3.0-beta
v1.4.0-beta.0
v1.4.0-cloud.1
v1.5.0
v1.5.0-beta.0
v1.6.0-beta.0
v1.6.0-cloud.1
v1.6.0-cloud.3
v1.7.0
v1.7.0-beta.0
v1.7.0-cloud.1
v1.7.0-cloud.2
v1.7.0-cloud.3
v1.7.0-cloud.4
v1.7.0-cloud.5
v1.7.0-cloud.6
v1.8.0
v1.8.0-beta.0
v1.8.0-beta.1
v1.8.0-cloud.0
v1.8.0-cloud.1
v1.8.0-cloud.3
v1.8.0-cloud.4
v1.9.0-beta.0
v1.9.0-cloud.0
v1.9.0-cloud.1
v1.9.0-cloud.2
v1.9.0-cloud.3
v1.9.0-cloud.4
v1.9.0-cloud.5
v1.9.0-cloud.6
v2.*
v2.0.0-beta.0
v2.0.2-cloud.0
v2.0.3
v2.0.3-cloud.0
v2.1.0
v2.1.0-beta.0
v2.1.0-beta.2
v2.10.0-beta.0
v2.11.0-beta
v2.11.0-beta.15
v2.11.0-cloud.0
v2.11.0-cloud.1
v2.11.0-cloud.10
v2.11.0-cloud.11
v2.11.0-cloud.12
v2.11.0-cloud.13
v2.11.0-cloud.14
v2.11.0-cloud.15
v2.11.0-cloud.16
v2.11.0-cloud.2
v2.11.0-cloud.3
v2.11.0-cloud.4
v2.11.0-cloud.5
v2.11.0-cloud.6
v2.11.0-cloud.7
v2.11.0-cloud.8
v2.11.0-cloud.9
v2.12.0-beta
v2.12.0-beta-test-captcha
v2.12.0-cloud.0
v2.12.0-cloud.1
v2.12.0-cloud.10
v2.12.0-cloud.11
v2.12.0-cloud.12
v2.12.0-cloud.13
v2.12.0-cloud.14
v2.12.0-cloud.2
v2.12.0-cloud.3
v2.12.0-cloud.4
v2.12.0-cloud.5
v2.12.0-cloud.6
v2.12.0-cloud.7
v2.12.0-cloud.8
v2.12.0-cloud.9
v2.12.0-sharepoint-gov2
v2.12.0-sharepoint-gov4
v2.2.0
v2.2.0-beta.0
v2.2.0-beta.1
v2.2.0-beta.2
v2.2.0-cloud.0
v2.2.0-cloud.1
v2.2.0-cloud.2
v2.2.1
v2.3.0-beta.0
v2.3.0-beta.1
v2.3.0-beta.2
v2.3.0-beta.3
v2.3.0-cloud.0
v2.3.0-cloud.1
v2.3.0-cloud.2
v2.4.0
v2.4.0-beta.0
v2.4.0-cloud.0
v2.4.0-cloud.1
v2.4.0-cloud.2
v2.4.0-cloud.3
v2.4.0-cloud.4
v2.4.1
v2.4.2
v2.4.4-cloud.0
v2.4.5-cloud.0
v2.5.0
v2.5.0-beta.0
v2.5.0-cloud.0
v2.5.1
v2.5.2
v2.5.3
v2.5.4
v2.6.0
v2.6.0-beta.0
v2.6.0-beta.1
v2.6.0-beta.10
v2.6.0-beta.11
v2.6.0-beta.12
v2.6.0-beta.13
v2.6.0-beta.14
v2.6.0-beta.15
v2.6.0-beta.16
v2.6.0-beta.17
v2.6.0-beta.18
v2.6.0-beta.19
v2.6.0-beta.2
v2.6.0-beta.3
v2.6.0-beta.4
v2.6.0-beta.5
v2.6.0-beta.6
v2.6.0-beta.7
v2.6.0-beta.8
v2.6.0-beta.9
v2.6.0-cloud.0
v2.6.1
v2.6.1-cloud.0
v2.6.2
v2.6.2-cloud.0
v2.7.0
v2.7.0-beta.0
v2.7.0-beta.1
v2.7.0-beta.2
v2.7.0-beta.3
v2.7.0-beta.4
v2.7.0-beta.5
v2.7.0-cloud.0
v2.7.0-cloud.1
v2.7.1
v2.8.0
v2.8.0-beta.0
v2.8.0-beta.1
v2.8.0-cloud.0
v2.8.0-cloud.10
v2.8.0-cloud.4
v2.8.0-cloud.5
v2.8.0-cloud.6
v2.8.0-cloud.7
v2.9.0
v2.9.0-beta.0
v2.9.0-beta.1
v3.*
v3.0.0-beta
v3.0.0-cloud.1
v3.0.0-cloud.10
v3.0.0-cloud.11
v3.0.0-cloud.12
v3.0.0-cloud.13
v3.0.0-cloud.2
v3.0.0-cloud.3
v3.0.0-cloud.4
v3.0.0-cloud.5
v3.0.0-cloud.6
v3.0.0-cloud.7
v3.0.0-cloud.8
v3.0.0-cloud.9
v3.0.0-scim-testing
v3.1.0
v3.1.0-cloud.1
v3.1.1
v3.1.2
v3.1.3
v3.1.4
v3.1.5
v3.1.6
v3.1.7
v3.1.8
v3.1.9
v3.2.0
v3.2.0-beta
v3.2.1
v3.2.10
v3.2.11
v3.2.12
v3.2.13
v3.2.2
v3.2.3
v3.2.4
v3.2.5
v3.2.6
v3.2.7
v3.2.8
v3.2.9
v3.3.0-beta.0
v3.3.0-cloud.10
v3.3.0-cloud.11
v3.3.0-cloud.12
v3.3.0-cloud.13
v3.3.0-cloud.14
v3.3.0-cloud.15
v3.3.0-cloud.8
v3.3.0-cloud.9
v3.3.6-confluence-dc-rest3
v4.*
v4.0.0-beta.0
v4.0.0-cloud.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-71424.json"