{"id":"EUVD-2026-85884","enisaUuid":"cc9a8588-854a-3321-8a99-0e05d5b338d6","description":"This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.","datePublished":"Sep 24, 2026, 1:51:58 PM","dateUpdated":"Oct 12, 2026, 7:33:32 PM","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":"","aliases":"CVE-2026-97058\nGHSA-hp3w-g68c-fv3c\n","assigner":"VulnCheck","epss":0.4,"enisaIdProduct":[],"enisaIdVendor":[],"enisaIdVulnerability":[{"id":"975e6d04-eaec-381c-86ab-a2b0bcbdca4b","vulnerability":{"id":"CVE-2026-97058","description":"This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.","datePublished":"Sep 24, 2026, 1:51:58 PM","dateUpdated":"Oct 12, 2026, 7:33:32 PM","status":"REJECTED","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":"","enisa_id":"EUVD-2026-85884\n","assigner":"VulnCheck","epss":0.4,"dataProcessed":"Nov 1, 2026, 1:45:22 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"a3d9127f-f4c0-3653-ae82-f39b7a8ed91b","vulnerability":{"id":"GHSA-hp3w-g68c-fv3c","description":"Withdrawn Advisory: sprintf-js vulnerable to denial of service through unbounded precision specifiers","datePublished":"Sep 24, 2026, 3:31:31 PM","dateUpdated":"Oct 22, 2026, 7:21:04 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-97058\nhttps://github.com/alexei/sprintf.js/issues/237\nhttps://github.com/alexei/sprintf.js/issues/237#issuecomment-6159075240\nhttps://github.com/alexei/sprintf.js\nhttps://github.com/alexei/sprintf.js/blob/3a0d8c26d291b5bd9f1974877ecc50739921d6f5/src/sprintf.js#L17\nhttps://github.com/alexei/sprintf.js/blob/3a0d8c26d291b5bd9f1974877ecc50739921d6f5/src/sprintf.js#L84-L90\nhttps://www.vulncheck.com/advisories/sprintf-js-through-1.1.3-denial-of-service-via-unbounded-precision\n","enisa_id":"EUVD-2026-85884\n","aliases":"CVE-2026-97058\nGHSA-hp3w-g68c-fv3c\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:06:27 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"ddb05f65-2621-30de-ad04-e01d1da38c74","advisory":{"id":"msrc_CVE-2026-97058","description":"sprintf-js through 1.1.3 Denial of Service via Unbounded Precision","datePublished":"Oct 1, 2026, 1:19:49 AM","dateUpdated":"Oct 16, 2026, 1:46:11 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-97058.json\n","aliases":"CVE-2026-97058\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"3714f45d-579d-31e7-9205-60a4646c8019","product":{"name":"azl3 python-tensorboard 0:2.16.2-6.azl3","vendor":{"name":"Microsoft"}}},{"id":"4956b03e-d023-365a-a6b5-38c5f0376481","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}},{"id":"bb210bda-bbd8-3ded-8dca-c94b108d0762","product":{"name":"3.0","vendor":{"name":"Wind River"}}}]}}]}