{"schema_version":"1","view":"events","data":[{"id":70549,"advisory_id":"a8a19e86-ad58-477a-93fd-e3841f6cf313","group_id":"advisory:a8a19e86-ad58-477a-93fd-e3841f6cf313","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-643f-cx44-q62v","source_published_at":"2026-09-29T12:11:48+00:00","published_at":"2026-10-25T22:16:43.767235+00:00","extraction_method":"structured","technologies":["core-osv","opensearch-fips-3-repository-azure"],"cve_ids":["CVE-2026-83557"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-643f-cx44-q62v","summary":"CGA-643f-cx44-q62v","evidence":"osv:CGA-643f-cx44-q62v","products":[{"name":{"value":"opensearch-fips-3-repository-azure","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.9.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-643f-cx44-q62v","aliases":["CGA-643f-cx44-q62v"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r0"}]}],"package":{"name":"opensearch-fips-3-repository-azure","purl":"pkg:apk/chainguard/opensearch-fips-3-repository-azure?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-643f-cx44-q62v.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/opensearch/plugins/opensearch-repository-azure/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:19:26Z"}]}}],"modified":"2026-10-02T18:25:16.652020081Z","provider":"osv","upstream":["CVE-2026-83557","GHSA-gx83-3vf8-gh7j"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-83557","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"context_update":false,"detail_url":"/events/70549"},{"id":70548,"advisory_id":"f7b3313b-d706-4617-8899-c9cb01c167fb","group_id":"advisory:f7b3313b-d706-4617-8899-c9cb01c167fb","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-659h-mcxm-rq2j","source_published_at":"2026-10-01T12:24:27+00:00","published_at":"2026-10-25T22:16:42.635265+00:00","extraction_method":"structured","technologies":["cadence-web","core-osv"],"cve_ids":["CVE-2026-101916"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-659h-mcxm-rq2j","summary":"CGA-659h-mcxm-rq2j","evidence":"osv:CGA-659h-mcxm-rq2j","products":[{"name":{"value":"cadence-web","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.0.17-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-659h-mcxm-rq2j","aliases":["CGA-659h-mcxm-rq2j"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.17-r1"}]}],"package":{"name":"cadence-web","purl":"pkg:apk/chainguard/cadence-web?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-659h-mcxm-rq2j.json"},"ecosystem_specific":{"components":[{"component_name":"@grpc/grpc-js","component_purl":"pkg:npm/%40grpc%2Fgrpc-js@1.12.7","component_type":"npm","component_version":"1.12.7","component_location":"/app/node_modules/@grpc/grpc-js/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:45:57Z"}]}}],"modified":"2026-10-02T18:25:16.392309884Z","provider":"osv","upstream":["CVE-2026-101916","GHSA-m9gg-hp2v-232j"],"references":["https://github.com/grpc/grpc-node/releases/tag/@grpc/grpc-js%401.14.5","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101916.json","https://github.com/grpc/grpc-node/security/advisories/GHSA-m9gg-hp2v-232j","https://nvd.nist.gov/vuln/detail/CVE-2026-101916","https://github.com/grpc/grpc-node/commit/2a84ec8b01b9db68ed9d2b117a53a81449edb8ee","https://github.com/grpc/grpc-node/commit/b4e0079c6d22a2adedfcac748e0bc083f783bc7c"]},"related_cves":[{"value":"CVE-2026-101916","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101916","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.4,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"grpc-node","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101916","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101916","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"}],"products":[{"name":{"value":"@grpc/grpc-js","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.13.6","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"@grpc/grpc-js","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.14.5","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m9gg-hp2v-232j","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"context_update":false,"detail_url":"/events/70548"},{"id":70547,"advisory_id":"06a90b9d-43fc-4de5-ba78-d83028c91505","group_id":"advisory:06a90b9d-43fc-4de5-ba78-d83028c91505","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-66r2-6vhm-cm92","source_published_at":"2026-10-01T13:01:02+00:00","published_at":"2026-10-25T22:16:40.20031+00:00","extraction_method":"structured","technologies":["core-osv","presidio-analyzer"],"cve_ids":["CVE-2026-97687"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-66r2-6vhm-cm92","summary":"CGA-66r2-6vhm-cm92","evidence":"osv:CGA-66r2-6vhm-cm92","products":[{"name":{"value":"presidio-analyzer","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.2.364-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-66r2-6vhm-cm92","aliases":["CGA-66r2-6vhm-cm92"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.364-r3"}]}],"package":{"name":"presidio-analyzer","purl":"pkg:apk/chainguard/presidio-analyzer?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-66r2-6vhm-cm92.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/presidio-analyzer/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:17:07Z"}]}}],"modified":"2026-10-02T18:25:16.584261338Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"context_update":false,"detail_url":"/events/70547"},{"id":70546,"advisory_id":"737cb5a3-1643-4389-84e4-2d55ac8d35d4","group_id":"advisory:737cb5a3-1643-4389-84e4-2d55ac8d35d4","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-658h-f526-m6g9","source_published_at":"2026-10-01T12:55:17+00:00","published_at":"2026-10-25T22:16:34.993231+00:00","extraction_method":"structured","technologies":["core-osv","infinispan-15-1"],"cve_ids":["CVE-2026-91777"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-658h-f526-m6g9","summary":"CGA-658h-f526-m6g9","evidence":"osv:CGA-658h-f526-m6g9","products":[{"name":{"value":"infinispan-15.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"15.1.7-r31","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-658h-f526-m6g9","aliases":["CGA-658h-f526-m6g9"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.7-r31"}]}],"package":{"name":"infinispan-15.1","purl":"pkg:apk/chainguard/infinispan-15.1?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-658h-f526-m6g9.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.10","component_type":"java-archive","component_version":"2.18.10","component_location":"/usr/share/java/infinispan/lib/jackson-databind-2.18.10.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:09:58Z"}]}}],"modified":"2026-10-02T18:25:16.300925448Z","provider":"osv","upstream":["CVE-2026-91777","GHSA-cxp5-3px4-pw24"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91777","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"context_update":false,"detail_url":"/events/70546"},{"id":70545,"advisory_id":"683ebba5-7ed3-4050-9c45-72af7c551501","group_id":"advisory:683ebba5-7ed3-4050-9c45-72af7c551501","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6368-mr7h-wrxw","source_published_at":"2026-10-01T12:03:47+00:00","published_at":"2026-10-25T22:16:29.756948+00:00","extraction_method":"structured","technologies":["core-osv","elasticsearch-9-3-iamguarded-fips"],"cve_ids":["CVE-2026-91776"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-6368-mr7h-wrxw","summary":"CGA-6368-mr7h-wrxw","evidence":"osv:CGA-6368-mr7h-wrxw","products":[{"name":{"value":"elasticsearch-9.3-iamguarded-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.3.8-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-6368-mr7h-wrxw","aliases":["CGA-6368-mr7h-wrxw"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.8-r4"}]}],"package":{"name":"elasticsearch-9.3-iamguarded-fips","purl":"pkg:apk/chainguard/elasticsearch-9.3-iamguarded-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6368-mr7h-wrxw.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.10","component_type":"java-archive","component_version":"2.18.10","component_location":"/opt/iamguarded/elasticsearch/modules/x-pack-ent-search/jackson-databind-2.18.10.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:59:05Z"}]}}],"modified":"2026-10-02T18:25:16.193364346Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"context_update":false,"detail_url":"/events/70545"},{"id":70544,"advisory_id":"b1928db7-19c7-44e3-b908-b6f929595888","group_id":"advisory:b1928db7-19c7-44e3-b908-b6f929595888","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5xcv-78wq-rq9w","source_published_at":"2026-09-30T12:56:16+00:00","published_at":"2026-10-25T22:16:28.729539+00:00","extraction_method":"structured","technologies":["core-osv","datadog-agent-7-78-core-integrations"],"cve_ids":["CVE-2026-102273"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5xcv-78wq-rq9w","summary":"CGA-5xcv-78wq-rq9w","evidence":"osv:CGA-5xcv-78wq-rq9w","products":[{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5xcv-78wq-rq9w","aliases":["CGA-5xcv-78wq-rq9w"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.78-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5xcv-78wq-rq9w.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-01T13:59:04Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.78-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5xcv-78wq-rq9w.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-01T13:59:04Z"}]}}],"modified":"2026-10-02T18:25:16.172207442Z","provider":"osv","upstream":["CVE-2026-102273","GHSA-w2cx-738m-mc7w"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102273.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w","https://nvd.nist.gov/vuln/detail/CVE-2026-102273","https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95"]},"related_cves":[{"value":"CVE-2026-102273","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-102273","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.4,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102273","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-102273","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"}],"products":[{"name":{"value":"pyjwt","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.14.0","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.13.0","evidence":"/affected/0/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-w2cx-738m-mc7w","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"context_update":false,"detail_url":"/events/70544"},{"id":70543,"advisory_id":"7cd24fe1-24b1-41aa-88aa-1801965f0778","group_id":"advisory:7cd24fe1-24b1-41aa-88aa-1801965f0778","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5xhc-9vg4-vw4v","source_published_at":"2026-10-01T13:01:34+00:00","published_at":"2026-10-25T22:16:25.623424+00:00","extraction_method":"structured","technologies":["core-osv","opensearch-3-security"],"cve_ids":["CVE-2026-91776"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5xhc-9vg4-vw4v","summary":"CGA-5xhc-9vg4-vw4v","evidence":"osv:CGA-5xhc-9vg4-vw4v","products":[{"name":{"value":"opensearch-3-security","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.9.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-3-security","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.9.0-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5xhc-9vg4-vw4v","aliases":["CGA-5xhc-9vg4-vw4v"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r0"}]}],"package":{"name":"opensearch-3-security","purl":"pkg:apk/chainguard/opensearch-3-security?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5xhc-9vg4-vw4v.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@3.2.1","component_type":"java-archive","component_version":"3.2.1","component_location":"/usr/share/opensearch/plugins/opensearch-security/jackson-databind-3.2.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:29:12Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r0"}]}],"package":{"name":"opensearch-3-security","purl":"pkg:apk/wolfi/opensearch-3-security?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5xhc-9vg4-vw4v.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@3.2.1","component_type":"java-archive","component_version":"3.2.1","component_location":"/usr/share/opensearch/plugins/opensearch-security/jackson-databind-3.2.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:29:12Z"}]}}],"modified":"2026-10-02T18:25:16.169649309Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"context_update":false,"detail_url":"/events/70543"},{"id":70542,"advisory_id":"5a15931d-b08d-4d15-8efb-bd8f99c48506","group_id":"advisory:5a15931d-b08d-4d15-8efb-bd8f99c48506","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5wfm-2wv4-p9vc","source_published_at":"2026-10-01T12:56:57+00:00","published_at":"2026-10-25T22:16:22.353109+00:00","extraction_method":"structured","technologies":["core-osv","kates-fips"],"cve_ids":["CVE-2026-91776"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5wfm-2wv4-p9vc","summary":"CGA-5wfm-2wv4-p9vc","evidence":"osv:CGA-5wfm-2wv4-p9vc","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5wfm-2wv4-p9vc","aliases":["CGA-5wfm-2wv4-p9vc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r2"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5wfm-2wv4-p9vc.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.10","component_type":"java-archive","component_version":"2.18.10","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.10.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:13:07Z"}]}}],"modified":"2026-10-02T18:25:16.100747018Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"context_update":false,"detail_url":"/events/70542"},{"id":70541,"advisory_id":"b86eb50c-0d2b-4291-be30-56bda83e4bc3","group_id":"advisory:b86eb50c-0d2b-4291-be30-56bda83e4bc3","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5whw-x3jx-cwqj","source_published_at":"2026-09-30T08:25:09+00:00","published_at":"2026-10-25T22:16:21.20544+00:00","extraction_method":"structured","technologies":["core-osv","npm-12"],"cve_ids":["CVE-2026-101912"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5whw-x3jx-cwqj","summary":"CGA-5whw-x3jx-cwqj","evidence":"osv:CGA-5whw-x3jx-cwqj","products":[{"name":{"value":"npm-12","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"12.2.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"npm-12","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"12.2.0-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5whw-x3jx-cwqj","aliases":["CGA-5whw-x3jx-cwqj"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-r1"}]}],"package":{"name":"npm-12","purl":"pkg:apk/chainguard/npm-12?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5whw-x3jx-cwqj.json"},"ecosystem_specific":{"components":[{"component_name":"ip-address","component_purl":"pkg:npm/ip-address@10.5.1","component_type":"npm","component_version":"10.5.1","component_location":"/usr/lib/node_modules/npm/node_modules/ip-address/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:45:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-r1"}]}],"package":{"name":"npm-12","purl":"pkg:apk/wolfi/npm-12?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5whw-x3jx-cwqj.json"},"ecosystem_specific":{"components":[{"component_name":"ip-address","component_purl":"pkg:npm/ip-address@10.5.1","component_type":"npm","component_version":"10.5.1","component_location":"/usr/lib/node_modules/npm/node_modules/ip-address/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:45:08Z"}]}}],"modified":"2026-10-02T18:25:16.083200026Z","provider":"osv","upstream":["CVE-2026-101912","GHSA-j6r3-76f7-8jcv"],"references":["https://github.com/beaugunderson/ip-address/releases/tag/v10.7.1","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101912.json","https://github.com/beaugunderson/ip-address/security/advisories/GHSA-j6r3-76f7-8jcv","https://nvd.nist.gov/vuln/detail/CVE-2026-101912","https://github.com/beaugunderson/ip-address/commit/1343629d57fea413644a5c9d41ff1e59619f3f28"]},"related_cves":[{"value":"CVE-2026-101912","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101912","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"ip-address","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101912","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"context_update":false,"detail_url":"/events/70541"},{"id":70540,"advisory_id":"63d624f1-c679-4476-a4a8-075d8ade3cdd","group_id":"advisory:63d624f1-c679-4476-a4a8-075d8ade3cdd","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5vqg-hvgq-p996","source_published_at":"2026-10-01T10:56:26+00:00","published_at":"2026-10-25T22:16:19.954582+00:00","extraction_method":"structured","technologies":["core-osv","librechat"],"cve_ids":["CVE-2026-101905"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5vqg-hvgq-p996","summary":"CGA-5vqg-hvgq-p996","evidence":"osv:CGA-5vqg-hvgq-p996","products":[{"name":{"value":"librechat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.7-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5vqg-hvgq-p996","aliases":["CGA-5vqg-hvgq-p996"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-r16"}]}],"package":{"name":"librechat","purl":"pkg:apk/chainguard/librechat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5vqg-hvgq-p996.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:23:58Z"}]}}],"modified":"2026-10-02T18:25:16.022394907Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"context_update":false,"detail_url":"/events/70540"},{"id":70539,"advisory_id":"042b4506-eaca-4909-b818-c0144d70136f","group_id":"advisory:042b4506-eaca-4909-b818-c0144d70136f","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5w4j-rg5g-q2cv","source_published_at":"2026-10-01T14:20:09+00:00","published_at":"2026-10-25T22:16:19.159297+00:00","extraction_method":"structured","technologies":["core-osv","semaphore"],"cve_ids":["CVE-2026-101900"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5w4j-rg5g-q2cv","summary":"CGA-5w4j-rg5g-q2cv","evidence":"osv:CGA-5w4j-rg5g-q2cv","products":[{"name":{"value":"semaphore","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.12-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5w4j-rg5g-q2cv","aliases":["CGA-5w4j-rg5g-q2cv"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.12-r3"}]}],"package":{"name":"semaphore","purl":"pkg:apk/chainguard/semaphore?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5w4j-rg5g-q2cv.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/semaphore/embedded-ui/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:59:02Z"}]}}],"modified":"2026-10-02T18:25:15.982365124Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"context_update":false,"detail_url":"/events/70539"},{"id":70538,"advisory_id":"67310ad9-84b9-4d57-9014-c2433832cad0","group_id":"advisory:67310ad9-84b9-4d57-9014-c2433832cad0","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5qcv-94qc-hfxm","source_published_at":"2026-09-30T12:16:31+00:00","published_at":"2026-10-25T22:16:18.390887+00:00","extraction_method":"structured","technologies":["authentik-fips-2026-5","core-osv"],"cve_ids":["CVE-2026-101917"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5qcv-94qc-hfxm","summary":"CGA-5qcv-94qc-hfxm","evidence":"osv:CGA-5qcv-94qc-hfxm","products":[{"name":{"value":"authentik-fips-2026.5","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2026.5.7-r7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5qcv-94qc-hfxm","aliases":["CGA-5qcv-94qc-hfxm"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.5.7-r7"}]}],"package":{"name":"authentik-fips-2026.5","purl":"pkg:apk/chainguard/authentik-fips-2026.5?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5qcv-94qc-hfxm.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/usr/share/authentik-2026.5/venv/lib/python3.14/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:30:56Z"}]}}],"modified":"2026-10-02T18:25:15.843566500Z","provider":"osv","upstream":["CVE-2026-101917","GHSA-2gx3-rcp4-g85q"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101917.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-2gx3-rcp4-g85q","https://nvd.nist.gov/vuln/detail/CVE-2026-101917","https://github.com/jpadilla/pyjwt/commit/ba4853a75fb9676362da17f67d0f64bd18afd4e1"]},"related_cves":[{"value":"CVE-2026-101917","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101917","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101917","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"context_update":false,"detail_url":"/events/70538"},{"id":70537,"advisory_id":"604a31ee-d6d0-4ce7-a81d-0bb8c2fb0917","group_id":"advisory:604a31ee-d6d0-4ce7-a81d-0bb8c2fb0917","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5vgj-w29x-wc52","source_published_at":"2026-10-01T12:23:41+00:00","published_at":"2026-10-25T22:16:17.25353+00:00","extraction_method":"structured","technologies":["confluent-docker-utils","core-osv"],"cve_ids":["CVE-2026-97687"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5vgj-w29x-wc52","summary":"CGA-5vgj-w29x-wc52","evidence":"osv:CGA-5vgj-w29x-wc52","products":[{"name":{"value":"confluent-docker-utils","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.0.172-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"confluent-docker-utils","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.0.172-r4","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5vgj-w29x-wc52","aliases":["CGA-5vgj-w29x-wc52"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.172-r4"}]}],"package":{"name":"confluent-docker-utils","purl":"pkg:apk/chainguard/confluent-docker-utils?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5vgj-w29x-wc52.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/confluent-docker-utils/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:41:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.172-r4"}]}],"package":{"name":"confluent-docker-utils","purl":"pkg:apk/wolfi/confluent-docker-utils?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5vgj-w29x-wc52.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/confluent-docker-utils/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:41:31Z"}]}}],"modified":"2026-10-02T18:25:15.957959155Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"context_update":false,"detail_url":"/events/70537"},{"id":70536,"advisory_id":"7b769801-cce8-46de-8c0b-f411efc8cd7e","group_id":"advisory:7b769801-cce8-46de-8c0b-f411efc8cd7e","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5pm7-922p-wpgm","source_published_at":"2026-10-01T13:14:46+00:00","published_at":"2026-10-25T22:16:16.305938+00:00","extraction_method":"structured","technologies":["core-osv","mlrun-api"],"cve_ids":["CVE-2026-101918"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5pm7-922p-wpgm","summary":"CGA-5pm7-922p-wpgm","evidence":"osv:CGA-5pm7-922p-wpgm","products":[{"name":{"value":"mlrun-api","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.12.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5pm7-922p-wpgm","aliases":["CGA-5pm7-922p-wpgm"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-r1"}]}],"package":{"name":"mlrun-api","purl":"pkg:apk/chainguard/mlrun-api?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5pm7-922p-wpgm.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/usr/lib/python3.11/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T09:06:59Z"}]}}],"modified":"2026-10-02T18:25:15.850114377Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"context_update":false,"detail_url":"/events/70536"},{"id":70535,"advisory_id":"3c1c77bf-45ff-47c5-bcf4-637b4fe2e6fe","group_id":"advisory:3c1c77bf-45ff-47c5-bcf4-637b4fe2e6fe","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5mrx-x56j-8q66","source_published_at":"2026-09-29T10:02:07+00:00","published_at":"2026-10-25T22:16:15.31821+00:00","extraction_method":"structured","technologies":["core-osv","opensearch-3-anomaly-detection"],"cve_ids":["CVE-2026-68497"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5mrx-x56j-8q66","summary":"CGA-5mrx-x56j-8q66","evidence":"osv:CGA-5mrx-x56j-8q66","products":[{"name":{"value":"opensearch-3-anomaly-detection","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.9.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-3-anomaly-detection","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.9.0-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5mrx-x56j-8q66","aliases":["CGA-5mrx-x56j-8q66"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r0"}]}],"package":{"name":"opensearch-3-anomaly-detection","purl":"pkg:apk/chainguard/opensearch-3-anomaly-detection?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5mrx-x56j-8q66.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/opensearch/plugins/opensearch-anomaly-detection/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:58:13Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r0"}]}],"package":{"name":"opensearch-3-anomaly-detection","purl":"pkg:apk/wolfi/opensearch-3-anomaly-detection?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5mrx-x56j-8q66.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/opensearch/plugins/opensearch-anomaly-detection/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:58:13Z"}]}}],"modified":"2026-10-02T18:25:15.758944145Z","provider":"osv","upstream":["CVE-2026-68497","GHSA-q4xh-88c3-wmh7"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-68497","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"context_update":false,"detail_url":"/events/70535"},{"id":70534,"advisory_id":"a4ce3529-192d-4309-aee0-dbb5af0666bb","group_id":"advisory:a4ce3529-192d-4309-aee0-dbb5af0666bb","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5p5j-v38w-hqfq","source_published_at":"2026-10-01T12:18:50+00:00","published_at":"2026-10-25T22:16:12.407911+00:00","extraction_method":"structured","technologies":["core-osv","cruise-control-jars"],"cve_ids":["CVE-2026-91776"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5p5j-v38w-hqfq","summary":"CGA-5p5j-v38w-hqfq","evidence":"osv:CGA-5p5j-v38w-hqfq","products":[{"name":{"value":"cruise-control-jars","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.5.146-r6","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5p5j-v38w-hqfq","aliases":["CGA-5p5j-v38w-hqfq"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.146-r6"}]}],"package":{"name":"cruise-control-jars","purl":"pkg:apk/chainguard/cruise-control-jars?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5p5j-v38w-hqfq.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.10","component_type":"java-archive","component_version":"2.18.10","component_location":"/usr/share/java/cruise-control/cruise-control/build/dependant-libs/jackson-databind-2.18.10.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:50:43Z"}]}}],"modified":"2026-10-02T18:25:15.748915729Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"context_update":false,"detail_url":"/events/70534"},{"id":70533,"advisory_id":"4e239222-e253-497d-b40c-6d0c38b41700","group_id":"advisory:4e239222-e253-497d-b40c-6d0c38b41700","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5p46-f497-4gmw","source_published_at":"2026-10-01T13:09:27+00:00","published_at":"2026-10-25T22:16:11.542129+00:00","extraction_method":"structured","technologies":["core-osv","langfuse-fips-4"],"cve_ids":["CVE-2026-101906"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5p46-f497-4gmw","summary":"CGA-5p46-f497-4gmw","evidence":"osv:CGA-5p46-f497-4gmw","products":[{"name":{"value":"langfuse-fips-4","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.49.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5p46-f497-4gmw","aliases":["CGA-5p46-f497-4gmw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.49.0-r0"}]}],"package":{"name":"langfuse-fips-4","purl":"pkg:apk/chainguard/langfuse-fips-4?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5p46-f497-4gmw.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/node_modules/.pnpm/axios@1.18.0_debug@4.4.3_supports-color@8.1.1__supports-color@8.1.1/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:29:38Z"}]}}],"modified":"2026-10-02T18:25:15.727628270Z","provider":"osv","upstream":["CVE-2026-101906","GHSA-mghh-pgcx-3jjj"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101906.json","https://github.com/axios/axios/security/advisories/GHSA-mghh-pgcx-3jjj","https://nvd.nist.gov/vuln/detail/CVE-2026-101906","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101906","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101906","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101906","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-mghh-pgcx-3jjj","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"context_update":false,"detail_url":"/events/70533"},{"id":70532,"advisory_id":"631af3ea-095a-46e3-967d-e4609366febc","group_id":"advisory:631af3ea-095a-46e3-967d-e4609366febc","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5mjg-94jh-3vgr","source_published_at":"2026-09-29T09:56:48+00:00","published_at":"2026-10-25T22:16:10.592961+00:00","extraction_method":"structured","technologies":["core-osv","opensearch-3-neural-search"],"cve_ids":["CVE-2026-68497"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5mjg-94jh-3vgr","summary":"CGA-5mjg-94jh-3vgr","evidence":"osv:CGA-5mjg-94jh-3vgr","products":[{"name":{"value":"opensearch-3-neural-search","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.9.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-3-neural-search","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.9.0-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5mjg-94jh-3vgr","aliases":["CGA-5mjg-94jh-3vgr"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r0"}]}],"package":{"name":"opensearch-3-neural-search","purl":"pkg:apk/chainguard/opensearch-3-neural-search?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5mjg-94jh-3vgr.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@3.2.1","component_type":"java-archive","component_version":"3.2.1","component_location":"/usr/share/opensearch/plugins/opensearch-neural-search/jackson-databind-3.2.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r0"}]}],"package":{"name":"opensearch-3-neural-search","purl":"pkg:apk/wolfi/opensearch-3-neural-search?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5mjg-94jh-3vgr.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@3.2.1","component_type":"java-archive","component_version":"3.2.1","component_location":"/usr/share/opensearch/plugins/opensearch-neural-search/jackson-databind-3.2.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:09Z"}]}}],"modified":"2026-10-02T18:25:15.488135317Z","provider":"osv","upstream":["CVE-2026-68497","GHSA-q4xh-88c3-wmh7"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-68497","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"context_update":false,"detail_url":"/events/70532"},{"id":70531,"advisory_id":"26a5f84d-f92c-4332-8e6a-8b2925c0d8ff","group_id":"advisory:26a5f84d-f92c-4332-8e6a-8b2925c0d8ff","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5m27-qj2j-633v","source_published_at":"2026-10-01T14:11:59+00:00","published_at":"2026-10-25T22:16:07.694851+00:00","extraction_method":"structured","technologies":["core-osv","elasticsearch-9-3-iamguarded-fips"],"cve_ids":["CVE-2026-91776"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5m27-qj2j-633v","summary":"CGA-5m27-qj2j-633v","evidence":"osv:CGA-5m27-qj2j-633v","products":[{"name":{"value":"elasticsearch-9.3-iamguarded-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.3.8-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5m27-qj2j-633v","aliases":["CGA-5m27-qj2j-633v"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.8-r4"}]}],"package":{"name":"elasticsearch-9.3-iamguarded-fips","purl":"pkg:apk/chainguard/elasticsearch-9.3-iamguarded-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5m27-qj2j-633v.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.10","component_type":"java-archive","component_version":"2.18.10","component_location":"/opt/iamguarded/elasticsearch/modules/repository-azure/jackson-databind-2.18.10.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:56:57Z"}]}}],"modified":"2026-10-02T18:25:15.333640410Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"context_update":false,"detail_url":"/events/70531"},{"id":70530,"advisory_id":"0c78fcad-ee37-48e4-8553-28ddfd7b2c38","group_id":"advisory:0c78fcad-ee37-48e4-8553-28ddfd7b2c38","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5hq2-8f3r-pm25","source_published_at":"2026-09-29T11:57:32+00:00","published_at":"2026-10-25T22:16:06.747431+00:00","extraction_method":"structured","technologies":["core-osv","opensearch-3-observability"],"cve_ids":["CVE-2026-68497"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5hq2-8f3r-pm25","summary":"CGA-5hq2-8f3r-pm25","evidence":"osv:CGA-5hq2-8f3r-pm25","products":[{"name":{"value":"opensearch-3-observability","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.9.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-3-observability","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.9.0-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5hq2-8f3r-pm25","aliases":["CGA-5hq2-8f3r-pm25"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r0"}]}],"package":{"name":"opensearch-3-observability","purl":"pkg:apk/chainguard/opensearch-3-observability?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5hq2-8f3r-pm25.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@3.2.1","component_type":"java-archive","component_version":"3.2.1","component_location":"/usr/share/opensearch/plugins/opensearch-observability/jackson-databind-3.2.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:48:57Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r0"}]}],"package":{"name":"opensearch-3-observability","purl":"pkg:apk/wolfi/opensearch-3-observability?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5hq2-8f3r-pm25.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@3.2.1","component_type":"java-archive","component_version":"3.2.1","component_location":"/usr/share/opensearch/plugins/opensearch-observability/jackson-databind-3.2.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:48:57Z"}]}}],"modified":"2026-10-02T18:25:15.291354992Z","provider":"osv","upstream":["CVE-2026-68497","GHSA-q4xh-88c3-wmh7"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-68497","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"context_update":false,"detail_url":"/events/70530"},{"id":70529,"advisory_id":"c016f89c-6ed2-4f65-a965-b4983744777a","group_id":"advisory:c016f89c-6ed2-4f65-a965-b4983744777a","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5jrx-7qp8-xj8f","source_published_at":"2026-10-01T10:39:13+00:00","published_at":"2026-10-25T22:16:05.547434+00:00","extraction_method":"structured","technologies":["core-osv","py3-14-airflow-core-3"],"cve_ids":["CVE-2026-97689"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5jrx-7qp8-xj8f","summary":"CGA-5jrx-7qp8-xj8f","evidence":"osv:CGA-5jrx-7qp8-xj8f","products":[{"name":{"value":"py3.14-airflow-core-3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.3.2-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5jrx-7qp8-xj8f","aliases":["CGA-5jrx-7qp8-xj8f"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-r3"}]}],"package":{"name":"py3.14-airflow-core-3","purl":"pkg:apk/chainguard/py3.14-airflow-core-3?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5jrx-7qp8-xj8f.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/home/airflow/.local/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:17:49Z"}]}}],"modified":"2026-10-02T18:25:15.289928872Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"context_update":false,"detail_url":"/events/70529"},{"id":70528,"advisory_id":"926e5cc2-40cd-4498-8c64-4ee676de4ec5","group_id":"advisory:926e5cc2-40cd-4498-8c64-4ee676de4ec5","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5hh7-cmfx-xmqr","source_published_at":"2026-09-29T12:20:27+00:00","published_at":"2026-10-25T22:16:04.677544+00:00","extraction_method":"structured","technologies":["core-osv","opensearch-3-security"],"cve_ids":["CVE-2026-19032"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5hh7-cmfx-xmqr","summary":"CGA-5hh7-cmfx-xmqr","evidence":"osv:CGA-5hh7-cmfx-xmqr","products":[{"name":{"value":"opensearch-3-security","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.9.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-3-security","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.9.0-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5hh7-cmfx-xmqr","aliases":["CGA-5hh7-cmfx-xmqr"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r0"}]}],"package":{"name":"opensearch-3-security","purl":"pkg:apk/chainguard/opensearch-3-security?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5hh7-cmfx-xmqr.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/opensearch/plugins/opensearch-security/opensaml-3.8.0.0-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:29:14Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r0"}]}],"package":{"name":"opensearch-3-security","purl":"pkg:apk/wolfi/opensearch-3-security?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5hh7-cmfx-xmqr.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/opensearch/plugins/opensearch-security/opensaml-3.8.0.0-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:29:14Z"}]}}],"modified":"2026-10-02T18:25:15.285633726Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"context_update":false,"detail_url":"/events/70528"},{"id":70527,"advisory_id":"2aa9e6be-b0bc-43d5-bd3d-fe1761d603e1","group_id":"advisory:2aa9e6be-b0bc-43d5-bd3d-fe1761d603e1","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5jwj-249m-8897","source_published_at":"2026-10-01T14:13:05+00:00","published_at":"2026-10-25T22:16:00.282061+00:00","extraction_method":"structured","technologies":["core-osv","eco-java-gradle-7-5"],"cve_ids":["CVE-2026-91776"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5jwj-249m-8897","summary":"CGA-5jwj-249m-8897","evidence":"osv:CGA-5jwj-249m-8897","products":[{"name":{"value":"eco-java-gradle-7.5","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5jwj-249m-8897","aliases":["CGA-5jwj-249m-8897"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"eco-java-gradle-7.5","purl":"pkg:apk/chainguard/eco-java-gradle-7.5?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5jwj-249m-8897.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.13.3","component_type":"java-archive","component_version":"2.13.3","component_location":"/usr/lib/gradle/7.5/lib/plugins/jackson-databind-2.13.3.jar","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-01T14:13:05Z"}]}}],"modified":"2026-10-02T18:25:15.276711702Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"context_update":false,"detail_url":"/events/70527"},{"id":70526,"advisory_id":"ff818764-003d-4dd3-9990-b27c15952f48","group_id":"advisory:ff818764-003d-4dd3-9990-b27c15952f48","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5gpj-8pv9-2w7m","source_published_at":"2026-09-29T10:11:11+00:00","published_at":"2026-10-25T22:15:59.092641+00:00","extraction_method":"structured","technologies":["core-osv","flyway"],"cve_ids":["CVE-2026-68497"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5gpj-8pv9-2w7m","summary":"CGA-5gpj-8pv9-2w7m","evidence":"osv:CGA-5gpj-8pv9-2w7m","products":[{"name":{"value":"flyway","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"13.9.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"flyway","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"13.9.0-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5gpj-8pv9-2w7m","aliases":["CGA-5gpj-8pv9-2w7m"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.9.0-r0"}]}],"package":{"name":"flyway","purl":"pkg:apk/chainguard/flyway?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5gpj-8pv9-2w7m.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/share/java/flyway/lib/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:59Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.9.0-r0"}]}],"package":{"name":"flyway","purl":"pkg:apk/wolfi/flyway?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5gpj-8pv9-2w7m.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/share/java/flyway/lib/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:59Z"}]}}],"modified":"2026-10-02T18:25:15.275354968Z","provider":"osv","upstream":["CVE-2026-68497","GHSA-q4xh-88c3-wmh7"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-68497","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"context_update":false,"detail_url":"/events/70526"},{"id":70525,"advisory_id":"47d06f98-6da8-4d02-a3ee-07ad25eeca4f","group_id":"advisory:47d06f98-6da8-4d02-a3ee-07ad25eeca4f","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5j23-jqcg-f7qc","source_published_at":"2026-10-01T12:59:54+00:00","published_at":"2026-10-25T22:15:57.632917+00:00","extraction_method":"structured","technologies":["core-osv","openstack-manila-2026-1"],"cve_ids":["CVE-2026-97687"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5j23-jqcg-f7qc","summary":"CGA-5j23-jqcg-f7qc","evidence":"osv:CGA-5j23-jqcg-f7qc","products":[{"name":{"value":"openstack-manila-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"22.0.1_git20260905-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5j23-jqcg-f7qc","aliases":["CGA-5j23-jqcg-f7qc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.0.1_git20260905-r2"}]}],"package":{"name":"openstack-manila-2026.1","purl":"pkg:apk/chainguard/openstack-manila-2026.1?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5j23-jqcg-f7qc.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-manila-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:29:07Z"}]}}],"modified":"2026-10-02T18:25:15.248131979Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"context_update":false,"detail_url":"/events/70525"},{"id":70524,"advisory_id":"7ef9208c-ec32-401c-8db8-0816d936456b","group_id":"advisory:7ef9208c-ec32-401c-8db8-0816d936456b","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5gm8-q5g3-6vf2","source_published_at":"2026-09-29T11:09:11+00:00","published_at":"2026-10-25T22:15:56.765982+00:00","extraction_method":"structured","technologies":["core-osv","opensearch-fips-3-notifications"],"cve_ids":["CVE-2026-19032"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5gm8-q5g3-6vf2","summary":"CGA-5gm8-q5g3-6vf2","evidence":"osv:CGA-5gm8-q5g3-6vf2","products":[{"name":{"value":"opensearch-fips-3-notifications","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.9.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5gm8-q5g3-6vf2","aliases":["CGA-5gm8-q5g3-6vf2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r0"}]}],"package":{"name":"opensearch-fips-3-notifications","purl":"pkg:apk/chainguard/opensearch-fips-3-notifications?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5gm8-q5g3-6vf2.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@3.2.1","component_type":"java-archive","component_version":"3.2.1","component_location":"/usr/share/opensearch/plugins/opensearch-notifications-core/jackson-databind-3.2.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:12:53Z"}]}}],"modified":"2026-10-02T18:25:15.188912219Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"context_update":false,"detail_url":"/events/70524"},{"id":70523,"advisory_id":"c522531f-e1d8-425a-8a4e-c4156a676925","group_id":"advisory:c522531f-e1d8-425a-8a4e-c4156a676925","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5fj6-8646-r75w","source_published_at":"2026-09-29T13:37:20+00:00","published_at":"2026-10-25T22:15:56.014496+00:00","extraction_method":"structured","technologies":["core-osv","librechat"],"cve_ids":["CVE-2026-101913"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5fj6-8646-r75w","summary":"CGA-5fj6-8646-r75w","evidence":"osv:CGA-5fj6-8646-r75w","products":[{"name":{"value":"librechat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.7-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5fj6-8646-r75w","aliases":["CGA-5fj6-8646-r75w"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-r16"}]}],"package":{"name":"librechat","purl":"pkg:apk/chainguard/librechat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5fj6-8646-r75w.json"},"ecosystem_specific":{"components":[{"component_name":"ip-address","component_purl":"pkg:npm/ip-address@10.4.0","component_type":"npm","component_version":"10.4.0","component_location":"/app/node_modules/ip-address/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:24:15Z"}]}}],"modified":"2026-10-02T18:25:15.164092252Z","provider":"osv","upstream":["CVE-2026-101913","GHSA-rpw4-54j3-4h4q"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101913.json","https://github.com/beaugunderson/ip-address/commit/d03e960c7cc3179ef25c8a44b4f94dd499625546","https://github.com/beaugunderson/ip-address/releases/tag/v10.5.1","https://github.com/beaugunderson/ip-address/security/advisories/GHSA-rpw4-54j3-4h4q","https://nvd.nist.gov/vuln/detail/CVE-2026-101913"]},"related_cves":[{"value":"CVE-2026-101913","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101913","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"LOW"}}],"products":[{"name":{"value":"ip-address","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101913","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"context_update":false,"detail_url":"/events/70523"},{"id":70522,"advisory_id":"ce02cc6b-8aa7-47f3-aa97-86f6c10541c8","group_id":"advisory:ce02cc6b-8aa7-47f3-aa97-86f6c10541c8","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5fff-2vmp-mp9p","source_published_at":"2026-10-01T11:33:14+00:00","published_at":"2026-10-25T22:15:53.238889+00:00","extraction_method":"structured","technologies":["core-osv","floci-az"],"cve_ids":["CVE-2026-91777"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5fff-2vmp-mp9p","summary":"CGA-5fff-2vmp-mp9p","evidence":"osv:CGA-5fff-2vmp-mp9p","products":[{"name":{"value":"floci-az","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.13.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5fff-2vmp-mp9p","aliases":["CGA-5fff-2vmp-mp9p"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-r3"}]}],"package":{"name":"floci-az","purl":"pkg:apk/chainguard/floci-az?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5fff-2vmp-mp9p.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/share/java/floci-az/lib/main/com.fasterxml.jackson.core.jackson-databind-2.21.6.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:12:47Z"}]}}],"modified":"2026-10-02T18:25:15.094895337Z","provider":"osv","upstream":["CVE-2026-91777","GHSA-cxp5-3px4-pw24"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91777","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"context_update":false,"detail_url":"/events/70522"},{"id":70521,"advisory_id":"d44f9dda-6d5b-4da5-a3e5-ff248cdf24ea","group_id":"advisory:d44f9dda-6d5b-4da5-a3e5-ff248cdf24ea","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5fc3-cmmf-jg4v","source_published_at":"2026-09-29T10:20:34+00:00","published_at":"2026-10-25T22:15:52.328343+00:00","extraction_method":"structured","technologies":["core-osv","opensearch-fips-3-ml-commons"],"cve_ids":["CVE-2026-19032"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-5fc3-cmmf-jg4v","summary":"CGA-5fc3-cmmf-jg4v","evidence":"osv:CGA-5fc3-cmmf-jg4v","products":[{"name":{"value":"opensearch-fips-3-ml-commons","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.9.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5fc3-cmmf-jg4v","aliases":["CGA-5fc3-cmmf-jg4v"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-r0"}]}],"package":{"name":"opensearch-fips-3-ml-commons","purl":"pkg:apk/chainguard/opensearch-fips-3-ml-commons?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5fc3-cmmf-jg4v.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/opensearch/plugins/opensearch-ml/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:17:12Z"}]}}],"modified":"2026-10-02T18:25:15.082463483Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"context_update":false,"detail_url":"/events/70521"},{"id":70520,"advisory_id":"45bce884-2e52-444a-9262-9b560a01df75","group_id":"advisory:45bce884-2e52-444a-9262-9b560a01df75","revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-599j-r3p9-7mg8","source_published_at":"2026-10-01T12:24:26+00:00","published_at":"2026-10-25T22:15:51.315007+00:00","extraction_method":"structured","technologies":["cadence-web","core-osv"],"cve_ids":["CVE-2026-101915"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CGA-599j-r3p9-7mg8","summary":"CGA-599j-r3p9-7mg8","evidence":"osv:CGA-599j-r3p9-7mg8","products":[{"name":{"value":"cadence-web","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.0.17-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"low","structured":{"id":"CGA-599j-r3p9-7mg8","aliases":["CGA-599j-r3p9-7mg8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.17-r1"}]}],"package":{"name":"cadence-web","purl":"pkg:apk/chainguard/cadence-web?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-599j-r3p9-7mg8.json"},"ecosystem_specific":{"components":[{"component_name":"@grpc/grpc-js","component_purl":"pkg:npm/%40grpc%2Fgrpc-js@1.12.7","component_type":"npm","component_version":"1.12.7","component_location":"/app/node_modules/@grpc/grpc-js/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:45:57Z"}]}}],"modified":"2026-10-02T18:25:14.795762828Z","provider":"osv","upstream":["CVE-2026-101915","GHSA-f596-whhp-79r4"],"references":["https://github.com/grpc/grpc-node/releases/tag/@grpc/grpc-js%401.13.6","https://github.com/grpc/grpc-node/releases/tag/@grpc/grpc-js%401.14.5","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101915.json","https://github.com/grpc/grpc-node/security/advisories/GHSA-f596-whhp-79r4","https://nvd.nist.gov/vuln/detail/CVE-2026-101915","https://github.com/grpc/grpc-node/commit/350de32860428cc62473a00bee4035360690ffea","https://github.com/grpc/grpc-node/commit/7c5c5181159c6ddd292805881ef2cdec29bb475f","https://github.com/grpc/grpc-node/commit/e8329b122ca99ba10877e990c2f6edd40224fd0d"]},"related_cves":[{"value":"CVE-2026-101915","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"priority":{"reasons":[],"severity":"low","linked_cves":[{"cve":"CVE-2026-101915","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"products":[{"name":{"value":"grpc-node","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101915","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101915","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"products":[{"name":{"value":"@grpc/grpc-js","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.13.6","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"@grpc/grpc-js","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.14.5","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"low","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-f596-whhp-79r4","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"low"},"context_update":false,"detail_url":"/events/70520"}],"next_after":70549,"next_before":70520}