{
  "generated_for": "security.freesense.org",
  "lines": [
    {
      "key": "1.0",
      "name": "FreeSense 1.0",
      "kind": "frozen",
      "release": "1.0.7",
      "freebsd": "FreeBSD 16 (main snapshot)",
      "pin_commit": "e004ff15f87e6aa8f2aa13cd5600ae13457b95f1",
      "pin_date": "2026-08-03"
    },
    {
      "key": "1.1",
      "name": "FreeSense 1.1",
      "kind": "stable",
      "release": "1.1.9",
      "freebsd": "FreeBSD 16 (main snapshot)",
      "pin_commit": "a52c50b4b7c2652954ef1bd34710a4b1fc8ef391",
      "pin_date": "2026-10-04"
    },
    {
      "key": "1.2",
      "name": "FreeSense 1.2",
      "kind": "development",
      "release": "1.2.0-DEVELOPMENT",
      "freebsd": "FreeBSD 16 (main snapshot)",
      "pin_commit": "a52c50b4b7c2652954ef1bd34710a4b1fc8ef391",
      "pin_date": "2026-10-04"
    }
  ],
  "issues": [
    {
      "id": "freesense#199",
      "url": "https://github.com/FreeSense-org/freesense/issues/199",
      "title": "Security audit 2026-10-17: captive portal file write, CSRF bypass, XML-RPC exec privilege",
      "type": "security",
      "state": "closed",
      "status": "fixed",
      "labels": [
        "bug/cve report"
      ],
      "created": "2026-10-17",
      "closed": "2026-10-17"
    },
    {
      "id": "freesense#194",
      "url": "https://github.com/FreeSense-org/freesense/issues/194",
      "title": "Security audit: CSRF gap on GET state change, legacy MD5 passwords, unsafe unserialize defaults",
      "type": "security",
      "state": "closed",
      "status": "fixed",
      "labels": [
        "bug/cve report"
      ],
      "created": "2026-10-16",
      "closed": "2026-10-17"
    },
    {
      "id": "freesense#42",
      "url": "https://github.com/FreeSense-org/freesense/issues/42",
      "title": "Architectural Proposal: Gradual Rewrite of   OPNsense and Pfsense in Go",
      "type": "issue",
      "state": "closed",
      "status": "not_relevant",
      "labels": [
        "enhancement"
      ],
      "created": "2026-08-09",
      "closed": "2026-08-17"
    }
  ],
  "vulnerabilities": [
    {
      "id": "FreeBSD-SA-26:72.bhyve",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-72.bhyve/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:72.bhyve.asc",
      "topic": "Multiple vulnerabilities in bhyve device models",
      "component": "bhyve",
      "announced": "2026-10-14",
      "cves": [
        "CVE-2026-101309",
        "CVE-2026-101310",
        "CVE-2026-101311"
      ],
      "status": "not_relevant",
      "reviewed": false,
      "reason": "The bhyve hypervisor userland is not built into FreeSense.",
      "lines": [
        {
          "line": "1.0",
          "status": "not_relevant",
          "fixed_in": null
        },
        {
          "line": "1.1",
          "status": "not_relevant",
          "fixed_in": null
        },
        {
          "line": "1.2",
          "status": "not_relevant",
          "fixed_in": null
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:71.sound",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-71.sound/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:71.sound.asc",
      "topic": "TOCTOU race between sound(4) buffer resizing and mmap",
      "component": "sound",
      "announced": "2026-10-14",
      "cves": [
        "CVE-2026-101308"
      ],
      "status": "open",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-10-14, after the FreeBSD source pin of FreeSense 1.0 (pinned 2026-08-03), FreeSense 1.1 (pinned 2026-10-04), FreeSense 1.2 (pinned 2026-10-04). The fix arrives with the next FreeBSD pin of each line that is still updated. No one has checked yet whether FreeSense is exposed in practice.",
      "lines": [
        {
          "line": "1.0",
          "status": "open",
          "fixed_in": null
        },
        {
          "line": "1.1",
          "status": "open",
          "fixed_in": null
        },
        {
          "line": "1.2",
          "status": "open",
          "fixed_in": null
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:70.tcp",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-70.tcp/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:70.tcp.asc",
      "topic": "Remotely triggerable buffer overflow in tcp_rack",
      "component": "tcp_rack",
      "announced": "2026-10-14",
      "cves": [
        "CVE-2026-101307"
      ],
      "status": "open",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-10-14, after the FreeBSD source pin of FreeSense 1.0 (pinned 2026-08-03), FreeSense 1.1 (pinned 2026-10-04), FreeSense 1.2 (pinned 2026-10-04). The fix arrives with the next FreeBSD pin of each line that is still updated. No one has checked yet whether FreeSense is exposed in practice.",
      "lines": [
        {
          "line": "1.0",
          "status": "open",
          "fixed_in": null
        },
        {
          "line": "1.1",
          "status": "open",
          "fixed_in": null
        },
        {
          "line": "1.2",
          "status": "open",
          "fixed_in": null
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:69.udp",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-69.udp/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:69.udp.asc",
      "topic": "IPv6 UDP sendto(2) bypasses jail loopback restriction",
      "component": "udp",
      "announced": "2026-09-29",
      "cves": [
        "CVE-2026-101303"
      ],
      "status": "open",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-09-28, after the FreeBSD source pin of FreeSense 1.0 (pinned 2026-08-03). The fix arrives with the next FreeBSD pin of each line that is still updated. No one has checked yet whether FreeSense is exposed in practice.",
      "lines": [
        {
          "line": "1.0",
          "status": "open",
          "fixed_in": null
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:68.openssl",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-68.openssl/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:68.openssl.asc",
      "topic": "Out-of-bounds read in OpenSSL DTLS retransmission",
      "component": "openssl",
      "announced": "2026-09-29",
      "cves": [
        "CVE-2026-84782"
      ],
      "status": "open",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-09-29, after the FreeBSD source pin of FreeSense 1.0 (pinned 2026-08-03). The fix arrives with the next FreeBSD pin of each line that is still updated. No one has checked yet whether FreeSense is exposed in practice.",
      "lines": [
        {
          "line": "1.0",
          "status": "open",
          "fixed_in": null
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:67.ktls",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-67.ktls/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:67.ktls.asc",
      "topic": "Remote DoS via receive-side kernel TLS",
      "component": "ktls",
      "announced": "2026-09-29",
      "cves": [
        "CVE-2026-101302"
      ],
      "status": "open",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-09-28, after the FreeBSD source pin of FreeSense 1.0 (pinned 2026-08-03). The fix arrives with the next FreeBSD pin of each line that is still updated. No one has checked yet whether FreeSense is exposed in practice.",
      "lines": [
        {
          "line": "1.0",
          "status": "open",
          "fixed_in": null
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:66.jail",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-66.jail/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:66.jail.asc",
      "topic": "Multiple jail filesystem root escapes",
      "component": "jail",
      "announced": "2026-09-29",
      "cves": [
        "CVE-2026-101304",
        "CVE-2026-101305",
        "CVE-2026-101306"
      ],
      "status": "open",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-09-29, after the FreeBSD source pin of FreeSense 1.0 (pinned 2026-08-03). The fix arrives with the next FreeBSD pin of each line that is still updated. No one has checked yet whether FreeSense is exposed in practice.",
      "lines": [
        {
          "line": "1.0",
          "status": "open",
          "fixed_in": null
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:65.kqueue",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-65.kqueue/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:65.kqueue.asc",
      "topic": "Memory safety bugs in kqueue copy-on-fork implementation",
      "component": "kqueue",
      "announced": "2026-09-29",
      "cves": [
        "CVE-2026-58099",
        "CVE-2026-58100"
      ],
      "status": "open",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-09-29, after the FreeBSD source pin of FreeSense 1.0 (pinned 2026-08-03). The fix arrives with the next FreeBSD pin of each line that is still updated. No one has checked yet whether FreeSense is exposed in practice.",
      "lines": [
        {
          "line": "1.0",
          "status": "open",
          "fixed_in": null
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:64.sysvsem",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-64.sysvsem/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:64.sysvsem.asc",
      "topic": "Heap out-of-bounds access in semop(2)",
      "component": "sysvsem",
      "announced": "2026-09-29",
      "cves": [
        "CVE-2026-58098"
      ],
      "status": "open",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-09-29, after the FreeBSD source pin of FreeSense 1.0 (pinned 2026-08-03). The fix arrives with the next FreeBSD pin of each line that is still updated. No one has checked yet whether FreeSense is exposed in practice.",
      "lines": [
        {
          "line": "1.0",
          "status": "open",
          "fixed_in": null
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:63.posixshm",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-63.posixshm/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:63.posixshm.asc",
      "topic": "TOCTOU race in POSIX shared memory large page configuration",
      "component": "posixshm",
      "announced": "2026-08-25",
      "cves": [
        "CVE-2026-58094"
      ],
      "status": "open",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-08-25, after the FreeBSD source pin of FreeSense 1.0 (pinned 2026-08-03). The fix arrives with the next FreeBSD pin of each line that is still updated. No one has checked yet whether FreeSense is exposed in practice.",
      "lines": [
        {
          "line": "1.0",
          "status": "open",
          "fixed_in": null
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:62.tty",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-62.tty/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:62.tty.asc",
      "topic": "Kernel use-after-free via tty ioctls",
      "component": "tty",
      "announced": "2026-08-25",
      "cves": [
        "CVE-2026-58093"
      ],
      "status": "open",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-08-25, after the FreeBSD source pin of FreeSense 1.0 (pinned 2026-08-03). The fix arrives with the next FreeBSD pin of each line that is still updated. No one has checked yet whether FreeSense is exposed in practice.",
      "lines": [
        {
          "line": "1.0",
          "status": "open",
          "fixed_in": null
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:61.openssl",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-61.openssl/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:61.openssl.asc",
      "topic": "Multiple vulnerabilities in OpenSSL",
      "component": "openssl",
      "announced": "2026-08-25",
      "cves": [
        "CVE-2026-14457",
        "CVE-2026-18798",
        "CVE-2026-54874",
        "CVE-2026-63072",
        "CVE-2026-63073",
        "CVE-2026-63074",
        "CVE-2026-63075",
        "CVE-2026-63076"
      ],
      "status": "open",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-08-25, after the FreeBSD source pin of FreeSense 1.0 (pinned 2026-08-03). The fix arrives with the next FreeBSD pin of each line that is still updated. No one has checked yet whether FreeSense is exposed in practice.",
      "lines": [
        {
          "line": "1.0",
          "status": "open",
          "fixed_in": null
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:60.ppp",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-60.ppp/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:60.ppp.asc",
      "topic": "Multiple vulnerabilities in ppp(8)",
      "component": "ppp",
      "announced": "2026-08-25",
      "cves": [
        "CVE-2026-58095",
        "CVE-2026-58096",
        "CVE-2026-58097"
      ],
      "status": "open",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-08-24, after the FreeBSD source pin of FreeSense 1.0 (pinned 2026-08-03). The fix arrives with the next FreeBSD pin of each line that is still updated. No one has checked yet whether FreeSense is exposed in practice.",
      "lines": [
        {
          "line": "1.0",
          "status": "open",
          "fixed_in": null
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:59.mac_do",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-59.mac_do/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:59.mac_do.asc",
      "topic": "Unauthorized credential switching",
      "component": "mac_do",
      "announced": "2026-08-25",
      "cves": [
        "CVE-2026-58092"
      ],
      "status": "open",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-08-25, after the FreeBSD source pin of FreeSense 1.0 (pinned 2026-08-03). The fix arrives with the next FreeBSD pin of each line that is still updated. No one has checked yet whether FreeSense is exposed in practice.",
      "lines": [
        {
          "line": "1.0",
          "status": "open",
          "fixed_in": null
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:58.sound",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-58.sound/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:58.sound.asc",
      "topic": "Kernel use-after-free via the SNDCTL_DSP_SYNCSTART ioctl",
      "component": "sound",
      "announced": "2026-08-25",
      "cves": [
        "CVE-2026-58091"
      ],
      "status": "open",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-08-25, after the FreeBSD source pin of FreeSense 1.0 (pinned 2026-08-03). The fix arrives with the next FreeBSD pin of each line that is still updated. No one has checked yet whether FreeSense is exposed in practice.",
      "lines": [
        {
          "line": "1.0",
          "status": "open",
          "fixed_in": null
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:57.unix",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-57.unix/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:57.unix.asc",
      "topic": "Use-after-free in unix SOCK_STREAM message handling",
      "component": "unix",
      "announced": "2026-08-25",
      "cves": [
        "CVE-2026-58090"
      ],
      "status": "open",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-08-24, after the FreeBSD source pin of FreeSense 1.0 (pinned 2026-08-03). The fix arrives with the next FreeBSD pin of each line that is still updated. No one has checked yet whether FreeSense is exposed in practice.",
      "lines": [
        {
          "line": "1.0",
          "status": "open",
          "fixed_in": null
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:56.hwpmc",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-56.hwpmc/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:56.hwpmc.asc",
      "topic": "hwpmc fails to detach PMCs during exec credential transitions",
      "component": "hwpmc",
      "announced": "2026-08-25",
      "cves": [
        "CVE-2026-58089"
      ],
      "status": "open",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-08-25, after the FreeBSD source pin of FreeSense 1.0 (pinned 2026-08-03). The fix arrives with the next FreeBSD pin of each line that is still updated. No one has checked yet whether FreeSense is exposed in practice.",
      "lines": [
        {
          "line": "1.0",
          "status": "open",
          "fixed_in": null
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:55.elf",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-55.elf/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:55.elf.asc",
      "topic": "Race condition in ELF core dump segment counting",
      "component": "elf",
      "announced": "2026-07-29",
      "cves": [
        "CVE-2026-58088"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-07-29, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:54.sysvsem",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-54.sysvsem/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:54.sysvsem.asc",
      "topic": "Heap out-of-bounds access in semctl(2)",
      "component": "sysvsem",
      "announced": "2026-07-29",
      "cves": [
        "CVE-2026-58087"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-07-29, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:53.ktrace",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-53.ktrace/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:53.ktrace.asc",
      "topic": "ktrace(2) privilege incorrectly validated in jails",
      "component": "ktrace",
      "announced": "2026-07-29",
      "cves": [
        "CVE-2026-58086"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-07-29, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:52.if_wg",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-52.if_wg/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:52.if_wg.asc",
      "topic": "Missing MAC validation in wg(4) packet decryption",
      "component": "if_wg",
      "announced": "2026-07-29",
      "cves": [
        "CVE-2026-58085"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-07-29, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:51.ktimer",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-51.ktimer/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:51.ktimer.asc",
      "topic": "Kernel stack disclosure via timer_settime(2)",
      "component": "ktimer",
      "announced": "2026-07-29",
      "cves": [
        "CVE-2026-58084"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-07-27, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:50.kqueue",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-50.kqueue/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:50.kqueue.asc",
      "topic": "Use-after-free in kqueue copy-on-fork",
      "component": "kqueue",
      "announced": "2026-07-29",
      "cves": [
        "CVE-2026-58083"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-07-29, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:49.iconv",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-49.iconv/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:49.iconv.asc",
      "topic": "Multiple vulnerabilities in iconv(3)",
      "component": "iconv",
      "announced": "2026-06-30",
      "cves": [
        "CVE-2026-58081",
        "CVE-2026-58082"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-30, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:48.compat32",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-48.compat32/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:48.compat32.asc",
      "topic": "Kernel stack disclosure in 32-bit compatibility support",
      "component": "kernel compat32",
      "announced": "2026-06-30",
      "cves": [
        "CVE-2026-49425"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-03-20, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:47.linux",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-47.linux/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:47.linux.asc",
      "topic": "Kernel stack disclosure in Linux compatibility layer",
      "component": "linux(4)",
      "announced": "2026-06-30",
      "cves": [
        "CVE-2026-49424"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-03-20, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:46.ktls",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-46.ktls/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:46.ktls.asc",
      "topic": "Remote DOS via uninitialized memory access in KTLS receive",
      "component": "ktls",
      "announced": "2026-06-30",
      "cves": [
        "CVE-2026-49423"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-30, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:45.audit",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-45.audit/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:45.audit.asc",
      "topic": "Incorrect audit records for ptrace(2) syscall requests",
      "component": "audit",
      "announced": "2026-06-30",
      "cves": [
        "CVE-2026-49426"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-30, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:44.posixshm",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-44.posixshm/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:44.posixshm.asc",
      "topic": "Multiple vulnerabilities in POSIX largepage objects",
      "component": "posixshm",
      "announced": "2026-06-30",
      "cves": [
        "CVE-2026-49427",
        "CVE-2026-49428"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-30, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:43.tcp",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-43.tcp/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:43.tcp.asc",
      "topic": "Use-after-free in TCP RACK stack option handler",
      "component": "tcp",
      "announced": "2026-06-30",
      "cves": [
        "CVE-2026-49422"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-30, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:42.unlinkat",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-42.unlinkat/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:42.unlinkat.asc",
      "topic": "unlinkat(2) ignores AT_RESOLVE_BENEATH flag",
      "component": "unlinkat",
      "announced": "2026-06-30",
      "cves": [
        "CVE-2026-49421"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-30, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:41.libalias",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-41.libalias/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:41.libalias.asc",
      "topic": "Buffer overflow in libalias RTSP handler",
      "component": "libalias",
      "announced": "2026-06-30",
      "cves": [
        "CVE-2026-49420"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-30, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:40.zfs",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-40.zfs/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:40.zfs.asc",
      "topic": "Multiple vulnerabilities in OpenZFS",
      "component": "openzfs",
      "announced": "2026-06-30",
      "cves": [
        "CVE-2026-49429",
        "CVE-2026-49430",
        "CVE-2026-49431"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-17, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:39.execve",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-39.execve/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:39.execve.asc",
      "topic": "Local privilege escalation via execve(2) TOCTOU race",
      "component": "execve",
      "announced": "2026-06-30",
      "cves": [
        "CVE-2026-49415"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-26, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:38.jail",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-38.jail/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:38.jail.asc",
      "topic": "Jail reference count underflow",
      "component": "jail",
      "announced": "2026-06-30",
      "cves": [
        "CVE-2026-49419"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-12, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:37.vm",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-37.vm/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:37.vm.asc",
      "topic": "Use-after-free in device pager page list",
      "component": "vm",
      "announced": "2026-06-30",
      "cves": [
        "CVE-2026-49418"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-30, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:36.ldns",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-36.ldns/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:36.ldns.asc",
      "topic": "Insufficient response validation in the ldns stub resolver",
      "component": "ldns",
      "announced": "2026-06-09",
      "cves": [
        "CVE-2026-10846"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-09, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:35.openssl",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-35.openssl/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:35.openssl.asc",
      "topic": "Multiple vulnerabilities in OpenSSL",
      "component": "openssl",
      "announced": "2026-06-09",
      "cves": [
        "CVE-2026-7383",
        "CVE-2026-9076",
        "CVE-2026-34180",
        "CVE-2026-34181",
        "CVE-2026-34182",
        "CVE-2026-34183",
        "CVE-2026-42764",
        "CVE-2026-42766",
        "CVE-2026-42767",
        "CVE-2026-42768",
        "CVE-2026-42769",
        "CVE-2026-42770",
        "CVE-2026-45445",
        "CVE-2026-45446",
        "CVE-2026-45447"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-09, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:34.vt",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-34.vt/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:34.vt.asc",
      "topic": "Integer overflow in vt(4) CONS_HISTORY ioctl",
      "component": "vt",
      "announced": "2026-06-09",
      "cves": [
        "CVE-2026-49416"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-07, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:33.unbound",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-33.unbound/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:33.unbound.asc",
      "topic": "Multiple vulnerabilities in unbound",
      "component": "unbound",
      "announced": "2026-06-09",
      "cves": [
        "CVE-2026-32792",
        "CVE-2026-33278",
        "CVE-2026-40622",
        "CVE-2026-41292",
        "CVE-2026-42534",
        "CVE-2026-42923",
        "CVE-2026-42944",
        "CVE-2026-42959",
        "CVE-2026-42960",
        "CVE-2026-44390",
        "CVE-2026-44608"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-05-26, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:32.elf",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-32.elf/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:32.elf.asc",
      "topic": "ASLR bypass for setuid executables via procctl(2)",
      "component": "kernel",
      "announced": "2026-06-09",
      "cves": [
        "CVE-2026-49414"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-09, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:31.arm64",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-31.arm64/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:31.arm64.asc",
      "topic": "Arm CPU errata may bypass page table permission changes",
      "component": "arm64",
      "announced": "2026-06-09",
      "cves": [
        "CVE-2025-10263"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-09, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:30.linux",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-30.linux/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:30.linux.asc",
      "topic": "Flaw in Linuxulator execution of setugid binaries",
      "component": "linux",
      "announced": "2026-06-09",
      "cves": [
        "CVE-2026-49413"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-09, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:29.ip6_multicast",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-29.ip6_multicast/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:29.ip6_multicast.asc",
      "topic": "Use-after-free bug in the IPV6_MSFILTER socket option handler",
      "component": "ip6_multicast",
      "announced": "2026-06-09",
      "cves": [
        "CVE-2026-49412"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-09, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:28.capsicum",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-28.capsicum/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:28.capsicum.asc",
      "topic": "sigqueue(2) missing capability mode restriction",
      "component": "capsicum",
      "announced": "2026-06-09",
      "cves": [
        "CVE-2026-45259"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-05-29, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:27.sound",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-27.sound/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:27.sound.asc",
      "topic": "Multiple vulnerabilities in the sound(4) mmap path",
      "component": "sound",
      "announced": "2026-06-09",
      "cves": [
        "CVE-2026-45258",
        "CVE-2026-49417"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-09, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:26.ktls",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-26.ktls/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:26.ktls.asc",
      "topic": "Arbitrary file overwrite via the KTLS receive path",
      "component": "ktls",
      "announced": "2026-06-09",
      "cves": [
        "CVE-2026-45257"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-09, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:25.thr",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-25.thr/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:25.thr.asc",
      "topic": "Missing permission check in thr_kill2(2)",
      "component": "thr",
      "announced": "2026-06-09",
      "cves": [
        "CVE-2026-45256"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-06-09, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:24.cap_net",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-24.cap_net/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:24.cap_net.asc",
      "topic": "Incorrect libcap_net limitation list manipulation",
      "component": "libcap_net",
      "announced": "2026-05-20",
      "cves": [
        "CVE-2026-45254"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-05-19, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:23.bsdinstall",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-23.bsdinstall/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:23.bsdinstall.asc",
      "topic": "Remote code execution via installer Wi-Fi access point scans",
      "component": "bsdinstall",
      "announced": "2026-05-20",
      "cves": [
        "CVE-2026-45255"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-05-20, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:22.libcasper",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-22.libcasper/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:22.libcasper.asc",
      "topic": "select(2) file descriptor set overflow causes stack overflow",
      "component": "libcasper",
      "announced": "2026-05-20",
      "cves": [
        "CVE-2026-39461"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-05-20, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:21.ptrace",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-21.ptrace/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:21.ptrace.asc",
      "topic": "Missing validation in ptrace(PT_SC_REMOTE)",
      "component": "ptrace",
      "announced": "2026-05-20",
      "cves": [
        "CVE-2026-45253"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-05-20, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:20.fusefs",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-20.fusefs/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:20.fusefs.asc",
      "topic": "Heap overflow in FUSE_LISTXATTR",
      "component": "fusefs",
      "announced": "2026-05-20",
      "cves": [
        "CVE-2026-45252"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-05-20, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:19.file",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-19.file/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:19.file.asc",
      "topic": "Kernel use-after-free via file descriptor syscalls",
      "component": "file",
      "announced": "2026-05-20",
      "cves": [
        "CVE-2026-45251"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-05-20, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:18.setcred",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-18.setcred/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:18.setcred.asc",
      "topic": "Stack buffer overflow via setcred(2)",
      "component": "setcred",
      "announced": "2026-05-20",
      "cves": [
        "CVE-2026-45250"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-01-06, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:17.libnv",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-17.libnv/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:17.libnv.asc",
      "topic": "Heap overflow in libnv",
      "component": "libnv",
      "announced": "2026-04-29",
      "cves": [
        "CVE-2026-35547"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-04-29, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:16.libnv",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-16.libnv/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:16.libnv.asc",
      "topic": "Stack overflow via select() file descriptor set overflow",
      "component": "libnv",
      "announced": "2026-04-29",
      "cves": [
        "CVE-2026-39457"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-04-29, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:15.dhclient",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-15.dhclient/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:15.dhclient.asc",
      "topic": "Remotely triggerable out-of-bounds heap write in dhclient",
      "component": "dhclient",
      "announced": "2026-04-29",
      "cves": [
        "CVE-2026-42512"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-04-29, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:14.pf",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-14.pf/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:14.pf.asc",
      "topic": "pf can overflow the stack parsing crafted SCTP packets",
      "component": "pf",
      "announced": "2026-04-29",
      "cves": [
        "CVE-2026-7164"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-04-29, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:13.exec",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-13.exec/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:13.exec.asc",
      "topic": "Local privilege escalation via execve()",
      "component": "execve(2)",
      "announced": "2026-04-29",
      "cves": [
        "CVE-2026-7270"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-04-29, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:12.dhclient",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-12.dhclient/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:12.dhclient.asc",
      "topic": "Remote code execution via malicious DHCP options",
      "component": "dhclient",
      "announced": "2026-04-29",
      "cves": [
        "CVE-2026-42511"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-04-29, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:11.amd64",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-11.amd64/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:11.amd64.asc",
      "topic": "Missing large page handling in pmap_pkru_update_range()",
      "component": "amd64",
      "announced": "2026-04-21",
      "cves": [
        "CVE-2026-6386"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-04-21, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:10.tty",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-10.tty/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:10.tty.asc",
      "topic": "Kernel use-after-free bug in the TIOCNOTTY handler",
      "component": "tty",
      "announced": "2026-04-21",
      "cves": [
        "CVE-2026-5398"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-04-21, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:08.rpcsec_gss",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-08.rpcsec_gss/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:08.rpcsec_gss.asc",
      "topic": "Remote code execution via RPCSEC_GSS packet validation",
      "component": "rpcsec_gss",
      "announced": "2026-03-26",
      "cves": [
        "CVE-2026-4747"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-03-26, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:07.nvmf",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-07.nvmf/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:07.nvmf.asc",
      "topic": "Remote denial of service via null pointer dereference",
      "component": "nvmf",
      "announced": "2026-03-26",
      "cves": [
        "CVE-2026-4652"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-03-25, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:06.tcp",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-06.tcp/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:06.tcp.asc",
      "topic": "TCP: remotely exploitable DoS vector (mbuf leak)",
      "component": "tcp",
      "announced": "2026-03-26",
      "cves": [
        "CVE-2026-4247"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-03-26, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:09.pf",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-09.pf/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:09.pf.asc",
      "topic": "pf silently ignores certain rules",
      "component": "pf",
      "announced": "2026-03-25",
      "cves": [
        "CVE-2026-4748"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-03-25, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:05.route",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-05.route/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:05.route.asc",
      "topic": "Local DoS and possible privilege escalation via routing sockets",
      "component": "route",
      "announced": "2026-02-24",
      "cves": [
        "CVE-2026-3038"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-02-24, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:04.jail",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-04.jail/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:04.jail.asc",
      "topic": "Jail chroot escape via fd exchange with a different jail",
      "component": "jail",
      "announced": "2026-02-24",
      "cves": [
        "CVE-2025-15576"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2025-07-29, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:03.blocklistd",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-03.blocklistd/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:03.blocklistd.asc",
      "topic": "blocklistd(8) socket leak",
      "component": "blocklistd",
      "announced": "2026-02-10",
      "cves": [
        "CVE-2026-2261"
      ],
      "status": "not_relevant",
      "reviewed": false,
      "reason": "blocklistd is not built into FreeSense.",
      "lines": [
        {
          "line": "1.0",
          "status": "not_relevant",
          "fixed_in": null
        },
        {
          "line": "1.1",
          "status": "not_relevant",
          "fixed_in": null
        },
        {
          "line": "1.2",
          "status": "not_relevant",
          "fixed_in": null
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:02.jail",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-02.jail/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:02.jail.asc",
      "topic": "Jail escape by a privileged user via nullfs",
      "component": "jail",
      "announced": "2026-01-27",
      "cves": [
        "CVE-2025-15547"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2025-06-30, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-26:01.openssl",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-26-01.openssl/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:01.openssl.asc",
      "topic": "Multiple vulnerabilities in OpenSSL",
      "component": "openssl",
      "announced": "2026-01-27",
      "cves": [
        "CVE-2025-11187",
        "CVE-2025-15467",
        "CVE-2025-15468",
        "CVE-2025-15469",
        "CVE-2025-66199",
        "CVE-2025-68160",
        "CVE-2025-69418",
        "CVE-2025-69419",
        "CVE-2025-69420",
        "CVE-2025-69421",
        "CVE-2026-22795",
        "CVE-2026-22796"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2026-01-27, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-25:12.rtsold",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-25-12.rtsold/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-25:12.rtsold.asc",
      "topic": "Remote code execution via ND6 Router Advertisements",
      "component": "rtsold",
      "announced": "2025-12-16",
      "cves": [
        "CVE-2025-14558"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2025-12-16, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-25:11.ipfw",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-25-11.ipfw/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-25:11.ipfw.asc",
      "topic": "ipfw denial of service",
      "component": "ipfw",
      "announced": "2025-12-16",
      "cves": [
        "CVE-2025-14769"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2025-11-04, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-25:10.unbound",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-25-10.unbound/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-25:10.unbound.asc",
      "topic": "Cache poison in local-unbound service",
      "component": "unbound",
      "announced": "2025-11-26",
      "cves": [
        "CVE-2025-11411"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2025-11-26, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-25:09.netinet",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-25-09.netinet/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-25:09.netinet.asc",
      "topic": "SO_REUSEPORT_LB breaks connect(2) for UDP sockets",
      "component": "netinet",
      "announced": "2025-10-22",
      "cves": [
        "CVE-2025-24934"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2025-10-22, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-25:08.openssl",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-25-08.openssl/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-25:08.openssl.asc",
      "topic": "Multiple vulnerabilities in OpenSSL",
      "component": "openssl",
      "announced": "2025-09-30",
      "cves": [
        "CVE-2025-9230",
        "CVE-2025-9231",
        "CVE-2025-9232"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2025-09-30, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-25:07.libarchive",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-25-07.libarchive/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-25:07.libarchive.asc",
      "topic": "Integer overflow in libarchive leading to double free",
      "component": "libarchive",
      "announced": "2025-08-08",
      "cves": [
        "CVE-2025-5914"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2025-06-19, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-25:06.xz",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-25-06.xz/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-25:06.xz.asc",
      "topic": "Use-after-free in multi-threaded xz decoder",
      "component": "xz",
      "announced": "2025-07-02",
      "cves": [
        "CVE-2025-31115"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2025-05-07, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-25:05.openssh",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-25-05.openssh/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-25:05.openssh.asc",
      "topic": "Multiple vulnerabilities in OpenSSH",
      "component": "openssh",
      "announced": "2025-02-21",
      "cves": [
        "CVE-2025-26465",
        "CVE-2025-26466"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2025-02-19, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-25:04.ktrace",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-25-04.ktrace/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-25:04.ktrace.asc",
      "topic": "Uninitialized kernel memory disclosure via ktrace(2)",
      "component": "ktrace",
      "announced": "2025-01-29",
      "cves": [
        "CVE-2025-0662"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2025-01-20, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-25:03.etcupdate",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-25-03.etcupdate/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-25:03.etcupdate.asc",
      "topic": "Unprivileged access to system files",
      "component": "etcupdate",
      "announced": "2025-01-29",
      "cves": [
        "CVE-2025-0374"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2025-01-28, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-25:02.fs",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-25-02.fs/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-25:02.fs.asc",
      "topic": "Buffer overflow in some filesystems via NFS",
      "component": "fs",
      "announced": "2025-01-29",
      "cves": [
        "CVE-2025-0373"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2025-01-17, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    },
    {
      "id": "FreeBSD-SA-25:01.openssh",
      "url": "https://security.freesense.org/vulnerability/FreeBSD-SA-25-01.openssh/",
      "source": "https://www.freebsd.org/security/advisories/FreeBSD-SA-25:01.openssh.asc",
      "topic": "OpenSSH Keystroke Obfuscation Bypass",
      "component": "openssh",
      "announced": "2025-01-29",
      "cves": [
        "CVE-2024-39894"
      ],
      "status": "fixed",
      "reviewed": false,
      "reason": "FreeBSD corrected this on 2024-07-15, before the FreeBSD source pin of every FreeSense version.",
      "lines": [
        {
          "line": "1.0",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-08-03"
        },
        {
          "line": "1.1",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        },
        {
          "line": "1.2",
          "status": "fixed",
          "fixed_in": "FreeBSD pin of 2026-10-04"
        }
      ]
    }
  ]
}