{"items":[{"id":"CVE-2024-11991","published":"2024-12-09T14:38:07.288Z","updated":"2024-12-09T15:07:37.640Z","title":"Uninitialized memory access in Motoko incremental garbage collector","severity":"MEDIUM","score":5.6,"vendor":"Internet Computer","product":"Motoko","kev":false,"epss":0.00244,"kevAdded":null},{"id":"CVE-2024-7884","published":"2024-09-05T13:01:20.585Z","updated":"2024-09-05T14:42:09.085Z","title":"Memory leak when calling a canister method via `ic_cdk::call`","severity":"HIGH","score":7.5,"vendor":"Internet Computer","product":"ic-cdk","kev":false,"epss":0.00693,"kevAdded":null},{"id":"CVE-2024-4435","published":"2024-05-21T09:41:35.242Z","updated":"2024-08-01T20:40:47.180Z","title":"BTreeMap memory leak when deallocating nodes with overflows","severity":"MEDIUM","score":5.9,"vendor":"Internet Computer","product":"ic-stable-structures","kev":false,"epss":0.00515,"kevAdded":null},{"id":"CVE-2024-1631","published":"2024-02-21T02:12:38.403Z","updated":"2024-08-16T14:55:17.037Z","title":"agent-js: Insecure Key Generation in `Ed25519KeyIdentity.generate`","severity":"CRITICAL","score":9.1,"vendor":"Internet Computer","product":"agent-js","kev":false,"epss":0.00882,"kevAdded":null},{"id":"CVE-2023-6245","published":"2023-12-08T14:26:09.331Z","updated":"2024-12-02T14:33:16.496Z","title":"Infinite decoding loop through specially crafted payload","severity":"HIGH","score":7.5,"vendor":"Internet Computer","product":"Candid","kev":false,"epss":0.01212,"kevAdded":null}]}