{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"gawk","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":[],"id":"tcs_01M5NRXWMMVCYA2ERYM25WN701","modified_at":"2026-10-01T03:03:04.982278478Z","published_at":"2026-07-13T13:16:36.907Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-40468","https://security-tracker.debian.org/tracker/CVE-2026-40468"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-40468#Debian:13/gawk","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-40468"}],"summary":"Integer overflow vulnerability has been found in \"builtin.c\" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap met"}