{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"sssd","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":[],"id":"tcs_01M5NPMT7KB18SYG5QR93XH3BJ","modified_at":"2026-10-07T09:47:27.281244808Z","published_at":"2026-10-06T02:17:03.327Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-104041","https://security-tracker.debian.org/tracker/CVE-2026-104041"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-104041","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-104041"}],"summary":"A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch (NSS) responder. Because the negative cache does not limit t"}