Fault register

Every advisory in the graph, ordered by how much of the estate can actually reach it. Reach is a traversal, not a lookup: an application counts as exposed when a dependency path exists from it to an affected release, however many hops away.

Classcritical high medium low

Clear

Filtered

2 records

ClsAdvisoryPackageFixed inApplications reached

USY-2026-0112 · Regular expression denial of service · 3.7Backtracking on unterminated escape sequencesansi-regex · 19 Feb 2026ansi-regex4 affected releases5.0.19 USY-2026-0121 · Regular expression denial of service · 3.1Backtracking in namespace matching — no fixed release

Every advisory here is invented for this demonstration and carries a USY-prefix so it cannot be mistaken for a published GHSA or CVE record.