{"schema_version":"2","view":"grouped","data":[{"id":73182,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-gfqv-g49v-3wjc","summary":"CGA-gfqv-g49v-3wjc","evidence":"osv:CGA-gfqv-g49v-3wjc","products":[{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gfqv-g49v-3wjc","aliases":["CGA-gfqv-g49v-3wjc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/chainguard/opensearch-dashboards-3?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gfqv-g49v-3wjc.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:50:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/wolfi/opensearch-dashboards-3?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gfqv-g49v-3wjc.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:50:32Z"}]}}],"modified":"2026-10-03T10:42:47.022897433Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ee6faae4-47cc-4e6a-a6e3-747eb977531d","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gfqv-g49v-3wjc","advisory_id":"ee6faae4-47cc-4e6a-a6e3-747eb977531d","event_types":["advisory"],"published_at":"2026-10-26T03:37:57.444786+00:00","technologies":["core-osv","opensearch-dashboards-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T05:07:13+00:00","detail_url":"/advisories/advisory%3Aee6faae4-47cc-4e6a-a6e3-747eb977531d","group":{"id":"advisory:ee6faae4-47cc-4e6a-a6e3-747eb977531d","revision":1,"primary_event_id":75197,"change":"published","superseded_by":[],"changed":{"id":75197,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-gfqv-g49v-3wjc","summary":"CGA-gfqv-g49v-3wjc","evidence":"osv:CGA-gfqv-g49v-3wjc","products":[{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gfqv-g49v-3wjc","aliases":["CGA-gfqv-g49v-3wjc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/chainguard/opensearch-dashboards-3?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gfqv-g49v-3wjc.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:50:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/wolfi/opensearch-dashboards-3?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gfqv-g49v-3wjc.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:50:32Z"}]}}],"modified":"2026-10-03T10:42:47.022897433Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ee6faae4-47cc-4e6a-a6e3-747eb977531d","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gfqv-g49v-3wjc","advisory_id":"ee6faae4-47cc-4e6a-a6e3-747eb977531d","event_types":["advisory"],"published_at":"2026-10-26T03:37:57.444786+00:00","technologies":["core-osv","opensearch-dashboards-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T05:07:13+00:00","detail_url":"/events/75197"},"members":[{"id":75197,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-gfqv-g49v-3wjc","summary":"CGA-gfqv-g49v-3wjc","evidence":"osv:CGA-gfqv-g49v-3wjc","products":[{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gfqv-g49v-3wjc","aliases":["CGA-gfqv-g49v-3wjc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/chainguard/opensearch-dashboards-3?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gfqv-g49v-3wjc.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:50:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/wolfi/opensearch-dashboards-3?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gfqv-g49v-3wjc.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:50:32Z"}]}}],"modified":"2026-10-03T10:42:47.022897433Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ee6faae4-47cc-4e6a-a6e3-747eb977531d","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gfqv-g49v-3wjc","advisory_id":"ee6faae4-47cc-4e6a-a6e3-747eb977531d","event_types":["advisory"],"published_at":"2026-10-26T03:37:57.444786+00:00","technologies":["core-osv","opensearch-dashboards-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T05:07:13+00:00","detail_url":"/events/75197"}]}},{"id":73065,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-qm4h-vwg9-hr4j","summary":"CGA-qm4h-vwg9-hr4j","evidence":"osv:CGA-qm4h-vwg9-hr4j","products":[{"name":{"value":"prism","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"prism","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-qm4h-vwg9-hr4j","aliases":["CGA-qm4h-vwg9-hr4j"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/chainguard/prism?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qm4h-vwg9-hr4j.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T00:58:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/wolfi/prism?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qm4h-vwg9-hr4j.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T00:58:30Z"}]}}],"modified":"2026-10-03T10:32:46.627948017Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4616a3b8-b4a1-45f0-8d53-f0076a3d06cf","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qm4h-vwg9-hr4j","advisory_id":"4616a3b8-b4a1-45f0-8d53-f0076a3d06cf","event_types":["advisory"],"published_at":"2026-10-26T02:38:13.696744+00:00","technologies":["core-osv","prism"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:54:22+00:00","detail_url":"/advisories/advisory%3A4616a3b8-b4a1-45f0-8d53-f0076a3d06cf","group":{"id":"advisory:4616a3b8-b4a1-45f0-8d53-f0076a3d06cf","revision":1,"primary_event_id":74605,"change":"published","superseded_by":[],"changed":{"id":74605,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-qm4h-vwg9-hr4j","summary":"CGA-qm4h-vwg9-hr4j","evidence":"osv:CGA-qm4h-vwg9-hr4j","products":[{"name":{"value":"prism","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"prism","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-qm4h-vwg9-hr4j","aliases":["CGA-qm4h-vwg9-hr4j"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/chainguard/prism?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qm4h-vwg9-hr4j.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T00:58:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/wolfi/prism?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qm4h-vwg9-hr4j.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T00:58:30Z"}]}}],"modified":"2026-10-03T10:32:46.627948017Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4616a3b8-b4a1-45f0-8d53-f0076a3d06cf","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qm4h-vwg9-hr4j","advisory_id":"4616a3b8-b4a1-45f0-8d53-f0076a3d06cf","event_types":["advisory"],"published_at":"2026-10-26T02:38:13.696744+00:00","technologies":["core-osv","prism"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:54:22+00:00","detail_url":"/events/74605"},"members":[{"id":74605,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-qm4h-vwg9-hr4j","summary":"CGA-qm4h-vwg9-hr4j","evidence":"osv:CGA-qm4h-vwg9-hr4j","products":[{"name":{"value":"prism","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"prism","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-qm4h-vwg9-hr4j","aliases":["CGA-qm4h-vwg9-hr4j"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/chainguard/prism?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qm4h-vwg9-hr4j.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T00:58:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/wolfi/prism?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qm4h-vwg9-hr4j.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T00:58:30Z"}]}}],"modified":"2026-10-03T10:32:46.627948017Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4616a3b8-b4a1-45f0-8d53-f0076a3d06cf","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qm4h-vwg9-hr4j","advisory_id":"4616a3b8-b4a1-45f0-8d53-f0076a3d06cf","event_types":["advisory"],"published_at":"2026-10-26T02:38:13.696744+00:00","technologies":["core-osv","prism"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:54:22+00:00","detail_url":"/events/74605"}]}},{"id":73047,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-pjh3-v366-3h7m","summary":"CGA-pjh3-v366-3h7m","evidence":"osv:CGA-pjh3-v366-3h7m","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-pjh3-v366-3h7m","aliases":["CGA-pjh3-v366-3h7m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pjh3-v366-3h7m.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:15:35Z"}]}}],"modified":"2026-10-03T10:32:45.850488098Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:97f3dab8-9175-4182-b0a7-b2deaa92a1b9","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-pjh3-v366-3h7m","advisory_id":"97f3dab8-9175-4182-b0a7-b2deaa92a1b9","event_types":["advisory"],"published_at":"2026-10-26T02:32:19.595679+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:30:03+00:00","detail_url":"/advisories/advisory%3A97f3dab8-9175-4182-b0a7-b2deaa92a1b9","group":{"id":"advisory:97f3dab8-9175-4182-b0a7-b2deaa92a1b9","revision":1,"primary_event_id":74539,"change":"published","superseded_by":[],"changed":{"id":74539,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-pjh3-v366-3h7m","summary":"CGA-pjh3-v366-3h7m","evidence":"osv:CGA-pjh3-v366-3h7m","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-pjh3-v366-3h7m","aliases":["CGA-pjh3-v366-3h7m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pjh3-v366-3h7m.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:15:35Z"}]}}],"modified":"2026-10-03T10:32:45.850488098Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:97f3dab8-9175-4182-b0a7-b2deaa92a1b9","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-pjh3-v366-3h7m","advisory_id":"97f3dab8-9175-4182-b0a7-b2deaa92a1b9","event_types":["advisory"],"published_at":"2026-10-26T02:32:19.595679+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:30:03+00:00","detail_url":"/events/74539"},"members":[{"id":74539,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-pjh3-v366-3h7m","summary":"CGA-pjh3-v366-3h7m","evidence":"osv:CGA-pjh3-v366-3h7m","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-pjh3-v366-3h7m","aliases":["CGA-pjh3-v366-3h7m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pjh3-v366-3h7m.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:15:35Z"}]}}],"modified":"2026-10-03T10:32:45.850488098Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:97f3dab8-9175-4182-b0a7-b2deaa92a1b9","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-pjh3-v366-3h7m","advisory_id":"97f3dab8-9175-4182-b0a7-b2deaa92a1b9","event_types":["advisory"],"published_at":"2026-10-26T02:32:19.595679+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:30:03+00:00","detail_url":"/events/74539"}]}},{"id":72985,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-hwpj-jgh5-h5vx","summary":"CGA-hwpj-jgh5-h5vx","evidence":"osv:CGA-hwpj-jgh5-h5vx","products":[{"name":{"value":"prism","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"prism","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-hwpj-jgh5-h5vx","aliases":["CGA-hwpj-jgh5-h5vx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/chainguard/prism?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hwpj-jgh5-h5vx.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:28:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/wolfi/prism?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hwpj-jgh5-h5vx.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:28:27Z"}]}}],"modified":"2026-10-03T10:32:43.099306885Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d9d71068-a804-4484-abc3-65c9655076ef","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hwpj-jgh5-h5vx","advisory_id":"d9d71068-a804-4484-abc3-65c9655076ef","event_types":["advisory"],"published_at":"2026-10-26T02:07:15.372272+00:00","technologies":["core-osv","prism"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:38:28+00:00","detail_url":"/advisories/advisory%3Ad9d71068-a804-4484-abc3-65c9655076ef","group":{"id":"advisory:d9d71068-a804-4484-abc3-65c9655076ef","revision":1,"primary_event_id":74262,"change":"published","superseded_by":[],"changed":{"id":74262,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-hwpj-jgh5-h5vx","summary":"CGA-hwpj-jgh5-h5vx","evidence":"osv:CGA-hwpj-jgh5-h5vx","products":[{"name":{"value":"prism","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"prism","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-hwpj-jgh5-h5vx","aliases":["CGA-hwpj-jgh5-h5vx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/chainguard/prism?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hwpj-jgh5-h5vx.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:28:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/wolfi/prism?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hwpj-jgh5-h5vx.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:28:27Z"}]}}],"modified":"2026-10-03T10:32:43.099306885Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d9d71068-a804-4484-abc3-65c9655076ef","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hwpj-jgh5-h5vx","advisory_id":"d9d71068-a804-4484-abc3-65c9655076ef","event_types":["advisory"],"published_at":"2026-10-26T02:07:15.372272+00:00","technologies":["core-osv","prism"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:38:28+00:00","detail_url":"/events/74262"},"members":[{"id":74262,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-hwpj-jgh5-h5vx","summary":"CGA-hwpj-jgh5-h5vx","evidence":"osv:CGA-hwpj-jgh5-h5vx","products":[{"name":{"value":"prism","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"prism","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-hwpj-jgh5-h5vx","aliases":["CGA-hwpj-jgh5-h5vx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/chainguard/prism?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hwpj-jgh5-h5vx.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:28:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/wolfi/prism?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hwpj-jgh5-h5vx.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:28:27Z"}]}}],"modified":"2026-10-03T10:32:43.099306885Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d9d71068-a804-4484-abc3-65c9655076ef","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hwpj-jgh5-h5vx","advisory_id":"d9d71068-a804-4484-abc3-65c9655076ef","event_types":["advisory"],"published_at":"2026-10-26T02:07:15.372272+00:00","technologies":["core-osv","prism"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:38:28+00:00","detail_url":"/events/74262"}]}},{"id":72978,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-j884-wv9m-c2vq","summary":"CGA-j884-wv9m-c2vq","evidence":"osv:CGA-j884-wv9m-c2vq","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-j884-wv9m-c2vq","aliases":["CGA-j884-wv9m-c2vq"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j884-wv9m-c2vq.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:19Z"}]}}],"modified":"2026-10-03T10:32:43.070337576Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1ac340f2-50e3-4be9-a3a3-9c44194e328b","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-j884-wv9m-c2vq","advisory_id":"1ac340f2-50e3-4be9-a3a3-9c44194e328b","event_types":["advisory"],"published_at":"2026-10-26T02:05:49.507748+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:46+00:00","detail_url":"/advisories/advisory%3A1ac340f2-50e3-4be9-a3a3-9c44194e328b","group":{"id":"advisory:1ac340f2-50e3-4be9-a3a3-9c44194e328b","revision":1,"primary_event_id":74248,"change":"published","superseded_by":[],"changed":{"id":74248,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-j884-wv9m-c2vq","summary":"CGA-j884-wv9m-c2vq","evidence":"osv:CGA-j884-wv9m-c2vq","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-j884-wv9m-c2vq","aliases":["CGA-j884-wv9m-c2vq"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j884-wv9m-c2vq.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:19Z"}]}}],"modified":"2026-10-03T10:32:43.070337576Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1ac340f2-50e3-4be9-a3a3-9c44194e328b","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-j884-wv9m-c2vq","advisory_id":"1ac340f2-50e3-4be9-a3a3-9c44194e328b","event_types":["advisory"],"published_at":"2026-10-26T02:05:49.507748+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:46+00:00","detail_url":"/events/74248"},"members":[{"id":74248,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-j884-wv9m-c2vq","summary":"CGA-j884-wv9m-c2vq","evidence":"osv:CGA-j884-wv9m-c2vq","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-j884-wv9m-c2vq","aliases":["CGA-j884-wv9m-c2vq"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j884-wv9m-c2vq.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:19Z"}]}}],"modified":"2026-10-03T10:32:43.070337576Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1ac340f2-50e3-4be9-a3a3-9c44194e328b","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-j884-wv9m-c2vq","advisory_id":"1ac340f2-50e3-4be9-a3a3-9c44194e328b","event_types":["advisory"],"published_at":"2026-10-26T02:05:49.507748+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:46+00:00","detail_url":"/events/74248"}]}},{"id":72977,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-j8f8-7wq2-r6jp","summary":"CGA-j8f8-7wq2-r6jp","evidence":"osv:CGA-j8f8-7wq2-r6jp","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-j8f8-7wq2-r6jp","aliases":["CGA-j8f8-7wq2-r6jp"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j8f8-7wq2-r6jp.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:10Z"}]}}],"modified":"2026-10-03T10:32:43.061285866Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3f22ad37-5f8c-4b52-abb8-11716430fc3e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-j8f8-7wq2-r6jp","advisory_id":"3f22ad37-5f8c-4b52-abb8-11716430fc3e","event_types":["advisory"],"published_at":"2026-10-26T02:05:41.350646+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:40+00:00","detail_url":"/advisories/advisory%3A3f22ad37-5f8c-4b52-abb8-11716430fc3e","group":{"id":"advisory:3f22ad37-5f8c-4b52-abb8-11716430fc3e","revision":1,"primary_event_id":74247,"change":"published","superseded_by":[],"changed":{"id":74247,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-j8f8-7wq2-r6jp","summary":"CGA-j8f8-7wq2-r6jp","evidence":"osv:CGA-j8f8-7wq2-r6jp","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-j8f8-7wq2-r6jp","aliases":["CGA-j8f8-7wq2-r6jp"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j8f8-7wq2-r6jp.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:10Z"}]}}],"modified":"2026-10-03T10:32:43.061285866Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3f22ad37-5f8c-4b52-abb8-11716430fc3e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-j8f8-7wq2-r6jp","advisory_id":"3f22ad37-5f8c-4b52-abb8-11716430fc3e","event_types":["advisory"],"published_at":"2026-10-26T02:05:41.350646+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:40+00:00","detail_url":"/events/74247"},"members":[{"id":74247,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-j8f8-7wq2-r6jp","summary":"CGA-j8f8-7wq2-r6jp","evidence":"osv:CGA-j8f8-7wq2-r6jp","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-j8f8-7wq2-r6jp","aliases":["CGA-j8f8-7wq2-r6jp"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j8f8-7wq2-r6jp.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:10Z"}]}}],"modified":"2026-10-03T10:32:43.061285866Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3f22ad37-5f8c-4b52-abb8-11716430fc3e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-j8f8-7wq2-r6jp","advisory_id":"3f22ad37-5f8c-4b52-abb8-11716430fc3e","event_types":["advisory"],"published_at":"2026-10-26T02:05:41.350646+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:40+00:00","detail_url":"/events/74247"}]}},{"id":72951,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-grpw-j8pf-2697","summary":"CGA-grpw-j8pf-2697","evidence":"osv:CGA-grpw-j8pf-2697","products":[{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-grpw-j8pf-2697","aliases":["CGA-grpw-j8pf-2697"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/chainguard/opensearch-dashboards-3?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-grpw-j8pf-2697.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:10:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/wolfi/opensearch-dashboards-3?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-grpw-j8pf-2697.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:10:28Z"}]}}],"modified":"2026-10-03T10:32:41.644859322Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:607fe0e0-4540-4f99-b35e-43f7b735e7d5","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-grpw-j8pf-2697","advisory_id":"607fe0e0-4540-4f99-b35e-43f7b735e7d5","event_types":["advisory"],"published_at":"2026-10-26T01:48:21.203615+00:00","technologies":["core-osv","opensearch-dashboards-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:20:11+00:00","detail_url":"/advisories/advisory%3A607fe0e0-4540-4f99-b35e-43f7b735e7d5","group":{"id":"advisory:607fe0e0-4540-4f99-b35e-43f7b735e7d5","revision":1,"primary_event_id":74072,"change":"published","superseded_by":[],"changed":{"id":74072,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-grpw-j8pf-2697","summary":"CGA-grpw-j8pf-2697","evidence":"osv:CGA-grpw-j8pf-2697","products":[{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-grpw-j8pf-2697","aliases":["CGA-grpw-j8pf-2697"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/chainguard/opensearch-dashboards-3?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-grpw-j8pf-2697.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:10:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/wolfi/opensearch-dashboards-3?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-grpw-j8pf-2697.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:10:28Z"}]}}],"modified":"2026-10-03T10:32:41.644859322Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:607fe0e0-4540-4f99-b35e-43f7b735e7d5","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-grpw-j8pf-2697","advisory_id":"607fe0e0-4540-4f99-b35e-43f7b735e7d5","event_types":["advisory"],"published_at":"2026-10-26T01:48:21.203615+00:00","technologies":["core-osv","opensearch-dashboards-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:20:11+00:00","detail_url":"/events/74072"},"members":[{"id":74072,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-grpw-j8pf-2697","summary":"CGA-grpw-j8pf-2697","evidence":"osv:CGA-grpw-j8pf-2697","products":[{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-grpw-j8pf-2697","aliases":["CGA-grpw-j8pf-2697"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/chainguard/opensearch-dashboards-3?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-grpw-j8pf-2697.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:10:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/wolfi/opensearch-dashboards-3?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-grpw-j8pf-2697.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:10:28Z"}]}}],"modified":"2026-10-03T10:32:41.644859322Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:607fe0e0-4540-4f99-b35e-43f7b735e7d5","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-grpw-j8pf-2697","advisory_id":"607fe0e0-4540-4f99-b35e-43f7b735e7d5","event_types":["advisory"],"published_at":"2026-10-26T01:48:21.203615+00:00","technologies":["core-osv","opensearch-dashboards-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:20:11+00:00","detail_url":"/events/74072"}]}},{"id":72859,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-9h36-vc47-745m","summary":"CGA-9h36-vc47-745m","evidence":"osv:CGA-9h36-vc47-745m","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-9h36-vc47-745m","aliases":["CGA-9h36-vc47-745m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9h36-vc47-745m.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:23Z"}]}}],"modified":"2026-10-03T10:32:37.872516121Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f61c9cd8-ce43-49f9-8eb3-774b2a0c0cbd","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9h36-vc47-745m","advisory_id":"f61c9cd8-ce43-49f9-8eb3-774b2a0c0cbd","event_types":["advisory"],"published_at":"2026-10-26T01:19:15.665028+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:49+00:00","detail_url":"/advisories/advisory%3Af61c9cd8-ce43-49f9-8eb3-774b2a0c0cbd","group":{"id":"advisory:f61c9cd8-ce43-49f9-8eb3-774b2a0c0cbd","revision":1,"primary_event_id":73741,"change":"published","superseded_by":[],"changed":{"id":73741,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-9h36-vc47-745m","summary":"CGA-9h36-vc47-745m","evidence":"osv:CGA-9h36-vc47-745m","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-9h36-vc47-745m","aliases":["CGA-9h36-vc47-745m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9h36-vc47-745m.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:23Z"}]}}],"modified":"2026-10-03T10:32:37.872516121Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f61c9cd8-ce43-49f9-8eb3-774b2a0c0cbd","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9h36-vc47-745m","advisory_id":"f61c9cd8-ce43-49f9-8eb3-774b2a0c0cbd","event_types":["advisory"],"published_at":"2026-10-26T01:19:15.665028+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:49+00:00","detail_url":"/events/73741"},"members":[{"id":73741,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-9h36-vc47-745m","summary":"CGA-9h36-vc47-745m","evidence":"osv:CGA-9h36-vc47-745m","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-9h36-vc47-745m","aliases":["CGA-9h36-vc47-745m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9h36-vc47-745m.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:23Z"}]}}],"modified":"2026-10-03T10:32:37.872516121Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f61c9cd8-ce43-49f9-8eb3-774b2a0c0cbd","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9h36-vc47-745m","advisory_id":"f61c9cd8-ce43-49f9-8eb3-774b2a0c0cbd","event_types":["advisory"],"published_at":"2026-10-26T01:19:15.665028+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:49+00:00","detail_url":"/events/73741"}]}},{"id":72793,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-83j9-9rwc-3xhc","summary":"CGA-83j9-9rwc-3xhc","evidence":"osv:CGA-83j9-9rwc-3xhc","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-83j9-9rwc-3xhc","aliases":["CGA-83j9-9rwc-3xhc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-83j9-9rwc-3xhc.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:33:43Z"}]}}],"modified":"2026-10-03T10:32:36.080796944Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:aafe0134-6b3a-4a93-b893-9f8093488525","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-83j9-9rwc-3xhc","advisory_id":"aafe0134-6b3a-4a93-b893-9f8093488525","event_types":["advisory"],"published_at":"2026-10-26T01:07:23.071513+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:22:28+00:00","detail_url":"/advisories/advisory%3Aaafe0134-6b3a-4a93-b893-9f8093488525","group":{"id":"advisory:aafe0134-6b3a-4a93-b893-9f8093488525","revision":1,"primary_event_id":73616,"change":"published","superseded_by":[],"changed":{"id":73616,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-83j9-9rwc-3xhc","summary":"CGA-83j9-9rwc-3xhc","evidence":"osv:CGA-83j9-9rwc-3xhc","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-83j9-9rwc-3xhc","aliases":["CGA-83j9-9rwc-3xhc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-83j9-9rwc-3xhc.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:33:43Z"}]}}],"modified":"2026-10-03T10:32:36.080796944Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:aafe0134-6b3a-4a93-b893-9f8093488525","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-83j9-9rwc-3xhc","advisory_id":"aafe0134-6b3a-4a93-b893-9f8093488525","event_types":["advisory"],"published_at":"2026-10-26T01:07:23.071513+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:22:28+00:00","detail_url":"/events/73616"},"members":[{"id":73616,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-83j9-9rwc-3xhc","summary":"CGA-83j9-9rwc-3xhc","evidence":"osv:CGA-83j9-9rwc-3xhc","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-83j9-9rwc-3xhc","aliases":["CGA-83j9-9rwc-3xhc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-83j9-9rwc-3xhc.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:33:43Z"}]}}],"modified":"2026-10-03T10:32:36.080796944Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:aafe0134-6b3a-4a93-b893-9f8093488525","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-83j9-9rwc-3xhc","advisory_id":"aafe0134-6b3a-4a93-b893-9f8093488525","event_types":["advisory"],"published_at":"2026-10-26T01:07:23.071513+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:22:28+00:00","detail_url":"/events/73616"}]}},{"id":72768,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-7qr9-hhjx-3385","summary":"CGA-7qr9-hhjx-3385","evidence":"osv:CGA-7qr9-hhjx-3385","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-7qr9-hhjx-3385","aliases":["CGA-7qr9-hhjx-3385"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7qr9-hhjx-3385.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:10Z"}]}}],"modified":"2026-10-03T10:32:35.523460440Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:08f6a99e-2fe1-42f7-82f7-b69ddf4b7372","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7qr9-hhjx-3385","advisory_id":"08f6a99e-2fe1-42f7-82f7-b69ddf4b7372","event_types":["advisory"],"published_at":"2026-10-26T01:02:48.562759+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:51+00:00","detail_url":"/advisories/advisory%3A08f6a99e-2fe1-42f7-82f7-b69ddf4b7372","group":{"id":"advisory:08f6a99e-2fe1-42f7-82f7-b69ddf4b7372","revision":1,"primary_event_id":73566,"change":"published","superseded_by":[],"changed":{"id":73566,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-7qr9-hhjx-3385","summary":"CGA-7qr9-hhjx-3385","evidence":"osv:CGA-7qr9-hhjx-3385","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-7qr9-hhjx-3385","aliases":["CGA-7qr9-hhjx-3385"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7qr9-hhjx-3385.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:10Z"}]}}],"modified":"2026-10-03T10:32:35.523460440Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:08f6a99e-2fe1-42f7-82f7-b69ddf4b7372","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7qr9-hhjx-3385","advisory_id":"08f6a99e-2fe1-42f7-82f7-b69ddf4b7372","event_types":["advisory"],"published_at":"2026-10-26T01:02:48.562759+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:51+00:00","detail_url":"/events/73566"},"members":[{"id":73566,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-7qr9-hhjx-3385","summary":"CGA-7qr9-hhjx-3385","evidence":"osv:CGA-7qr9-hhjx-3385","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-7qr9-hhjx-3385","aliases":["CGA-7qr9-hhjx-3385"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7qr9-hhjx-3385.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:10Z"}]}}],"modified":"2026-10-03T10:32:35.523460440Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:08f6a99e-2fe1-42f7-82f7-b69ddf4b7372","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7qr9-hhjx-3385","advisory_id":"08f6a99e-2fe1-42f7-82f7-b69ddf4b7372","event_types":["advisory"],"published_at":"2026-10-26T01:02:48.562759+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:51+00:00","detail_url":"/events/73566"}]}},{"id":72757,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-795f-wr6q-q7gw","summary":"CGA-795f-wr6q-q7gw","evidence":"osv:CGA-795f-wr6q-q7gw","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-795f-wr6q-q7gw","aliases":["CGA-795f-wr6q-q7gw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-795f-wr6q-q7gw.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:10Z"}]}}],"modified":"2026-10-03T10:32:35.077682510Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9d046d31-c09c-437d-9ff4-b29fc6e0f805","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-795f-wr6q-q7gw","advisory_id":"9d046d31-c09c-437d-9ff4-b29fc6e0f805","event_types":["advisory"],"published_at":"2026-10-26T00:59:51.926539+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:45+00:00","detail_url":"/advisories/advisory%3A9d046d31-c09c-437d-9ff4-b29fc6e0f805","group":{"id":"advisory:9d046d31-c09c-437d-9ff4-b29fc6e0f805","revision":1,"primary_event_id":73534,"change":"published","superseded_by":[],"changed":{"id":73534,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-795f-wr6q-q7gw","summary":"CGA-795f-wr6q-q7gw","evidence":"osv:CGA-795f-wr6q-q7gw","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-795f-wr6q-q7gw","aliases":["CGA-795f-wr6q-q7gw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-795f-wr6q-q7gw.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:10Z"}]}}],"modified":"2026-10-03T10:32:35.077682510Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9d046d31-c09c-437d-9ff4-b29fc6e0f805","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-795f-wr6q-q7gw","advisory_id":"9d046d31-c09c-437d-9ff4-b29fc6e0f805","event_types":["advisory"],"published_at":"2026-10-26T00:59:51.926539+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:45+00:00","detail_url":"/events/73534"},"members":[{"id":73534,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-795f-wr6q-q7gw","summary":"CGA-795f-wr6q-q7gw","evidence":"osv:CGA-795f-wr6q-q7gw","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-795f-wr6q-q7gw","aliases":["CGA-795f-wr6q-q7gw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-795f-wr6q-q7gw.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:10Z"}]}}],"modified":"2026-10-03T10:32:35.077682510Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9d046d31-c09c-437d-9ff4-b29fc6e0f805","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-795f-wr6q-q7gw","advisory_id":"9d046d31-c09c-437d-9ff4-b29fc6e0f805","event_types":["advisory"],"published_at":"2026-10-26T00:59:51.926539+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:45+00:00","detail_url":"/events/73534"}]}},{"id":72742,"cve_ids":["CVE-2026-101898","CVE-2026-101900","CVE-2026-101901","CVE-2026-101902","CVE-2026-101903","CVE-2026-101904","CVE-2026-101905","CVE-2026-101906","CVE-2026-101907","CVE-2026-101908","CVE-2026-101909"],"payload":{"kind":"advisory","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","evidence":"osv:RHSA-2026:74872","products":[{"name":{"value":"grafana13.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:13.2.1-0.9.hum1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"RHSA-2026:74872","aliases":["RHSA-2026:74872"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.2.1-0.9.hum1"}]}],"package":{"name":"grafana13.2","purl":"pkg:rpm/redhat/grafana13.2","ecosystem":"Red Hat:hummingbird:1"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:74872.json"}}],"modified":"2026-10-03T10:32:34.608460980Z","provider":"osv","upstream":["CVE-2026-101898","CVE-2026-101900","CVE-2026-101901","CVE-2026-101902","CVE-2026-101903","CVE-2026-101904","CVE-2026-101905","CVE-2026-101906","CVE-2026-101907","CVE-2026-101908","CVE-2026-101909"],"references":["https://access.redhat.com/errata/RHSA-2026:74872","https://access.redhat.com/security/cve/CVE-2026-101903","https://access.redhat.com/security/updates/classification/","https://images.redhat.com/","https://access.redhat.com/security/cve/CVE-2026-101905","https://access.redhat.com/security/cve/CVE-2026-101902","https://access.redhat.com/security/cve/CVE-2026-101901","https://access.redhat.com/security/cve/CVE-2026-101904","https://access.redhat.com/security/cve/CVE-2026-101906","https://access.redhat.com/security/cve/CVE-2026-101898","https://access.redhat.com/security/cve/CVE-2026-101907","https://access.redhat.com/security/cve/CVE-2026-101908","https://access.redhat.com/security/cve/CVE-2026-101909","https://access.redhat.com/security/cve/CVE-2026-101900","https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74872.json","https://bugzilla.redhat.com/show_bug.cgi?id=2542571","https://www.cve.org/CVERecord?id=CVE-2026-101898","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://bugzilla.redhat.com/show_bug.cgi?id=2542576","https://www.cve.org/CVERecord?id=CVE-2026-101900","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://bugzilla.redhat.com/show_bug.cgi?id=2542577","https://www.cve.org/CVERecord?id=CVE-2026-101901","https://nvd.nist.gov/vuln/detail/CVE-2026-101901","https://github.com/axios/axios/security/advisories/GHSA-542g-h47m-68v8","https://bugzilla.redhat.com/show_bug.cgi?id=2542575","https://www.cve.org/CVERecord?id=CVE-2026-101902","https://nvd.nist.gov/vuln/detail/CVE-2026-101902","https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/security/advisories/GHSA-9fr6-4gfg-395g","https://bugzilla.redhat.com/show_bug.cgi?id=2542580","https://www.cve.org/CVERecord?id=CVE-2026-101903","https://nvd.nist.gov/vuln/detail/CVE-2026-101903","https://github.com/axios/axios/security/advisories/GHSA-c29m-xwm3-cm6r","https://bugzilla.redhat.com/show_bug.cgi?id=2542579","https://www.cve.org/CVERecord?id=CVE-2026-101904","https://nvd.nist.gov/vuln/detail/CVE-2026-101904","https://github.com/axios/axios/security/advisories/GHSA-j8rh-479h-cp32","https://bugzilla.redhat.com/show_bug.cgi?id=2542584","https://www.cve.org/CVERecord?id=CVE-2026-101905","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://bugzilla.redhat.com/show_bug.cgi?id=2542583","https://www.cve.org/CVERecord?id=CVE-2026-101906","https://nvd.nist.gov/vuln/detail/CVE-2026-101906","https://github.com/axios/axios/security/advisories/GHSA-mghh-pgcx-3jjj","https://bugzilla.redhat.com/show_bug.cgi?id=2542586","https://www.cve.org/CVERecord?id=CVE-2026-101907","https://nvd.nist.gov/vuln/detail/CVE-2026-101907","https://github.com/axios/axios/security/advisories/GHSA-r4gj-5m52-g5wh","https://bugzilla.redhat.com/show_bug.cgi?id=2542592","https://www.cve.org/CVERecord?id=CVE-2026-101908","https://nvd.nist.gov/vuln/detail/CVE-2026-101908","https://github.com/axios/axios/security/advisories/GHSA-vh66-26gq-q6x8","https://bugzilla.redhat.com/show_bug.cgi?id=2542593","https://www.cve.org/CVERecord?id=CVE-2026-101909","https://nvd.nist.gov/vuln/detail/CVE-2026-101909","https://github.com/axios/axios/commit/d29be181f85f6fe93397a07b1f69606d9622637b","https://github.com/axios/axios/security/advisories/GHSA-x97p-jq2g-jp4f"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"},{"value":"CVE-2026-101900","evidence":"/upstream"},{"value":"CVE-2026-101901","evidence":"/upstream"},{"value":"CVE-2026-101902","evidence":"/upstream"},{"value":"CVE-2026-101903","evidence":"/upstream"},{"value":"CVE-2026-101904","evidence":"/upstream"},{"value":"CVE-2026-101905","evidence":"/upstream"},{"value":"CVE-2026-101906","evidence":"/upstream"},{"value":"CVE-2026-101907","evidence":"/upstream"},{"value":"CVE-2026-101908","evidence":"/upstream"},{"value":"CVE-2026-101909","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0ef413e4-8008-4c41-897c-014174f3f269","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101901","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-542g-h47m-68v8","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101902","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101902","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101903","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-c29m-xwm3-cm6r","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101904","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101904","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101906","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-mghh-pgcx-3jjj","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101907","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-r4gj-5m52-g5wh","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101908","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101908","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101909","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.34.0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"axios","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-x97p-jq2g-jp4f","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/RHSA-2026%3A74872","advisory_id":"0ef413e4-8008-4c41-897c-014174f3f269","event_types":["advisory"],"published_at":"2026-10-26T00:57:51.165591+00:00","technologies":["core-osv","grafana13-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-03T10:17:01+00:00","detail_url":"/advisories/advisory%3A0ef413e4-8008-4c41-897c-014174f3f269","group":{"id":"advisory:0ef413e4-8008-4c41-897c-014174f3f269","revision":1,"primary_event_id":73507,"change":"published","superseded_by":[],"changed":{"id":73507,"cve_ids":["CVE-2026-101898","CVE-2026-101900","CVE-2026-101901","CVE-2026-101902","CVE-2026-101903","CVE-2026-101904","CVE-2026-101905","CVE-2026-101906","CVE-2026-101907","CVE-2026-101908","CVE-2026-101909"],"payload":{"kind":"advisory","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","evidence":"osv:RHSA-2026:74872","products":[{"name":{"value":"grafana13.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:13.2.1-0.9.hum1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"RHSA-2026:74872","aliases":["RHSA-2026:74872"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.2.1-0.9.hum1"}]}],"package":{"name":"grafana13.2","purl":"pkg:rpm/redhat/grafana13.2","ecosystem":"Red Hat:hummingbird:1"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:74872.json"}}],"modified":"2026-10-03T10:32:34.608460980Z","provider":"osv","upstream":["CVE-2026-101898","CVE-2026-101900","CVE-2026-101901","CVE-2026-101902","CVE-2026-101903","CVE-2026-101904","CVE-2026-101905","CVE-2026-101906","CVE-2026-101907","CVE-2026-101908","CVE-2026-101909"],"references":["https://access.redhat.com/errata/RHSA-2026:74872","https://access.redhat.com/security/cve/CVE-2026-101903","https://access.redhat.com/security/updates/classification/","https://images.redhat.com/","https://access.redhat.com/security/cve/CVE-2026-101905","https://access.redhat.com/security/cve/CVE-2026-101902","https://access.redhat.com/security/cve/CVE-2026-101901","https://access.redhat.com/security/cve/CVE-2026-101904","https://access.redhat.com/security/cve/CVE-2026-101906","https://access.redhat.com/security/cve/CVE-2026-101898","https://access.redhat.com/security/cve/CVE-2026-101907","https://access.redhat.com/security/cve/CVE-2026-101908","https://access.redhat.com/security/cve/CVE-2026-101909","https://access.redhat.com/security/cve/CVE-2026-101900","https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74872.json","https://bugzilla.redhat.com/show_bug.cgi?id=2542571","https://www.cve.org/CVERecord?id=CVE-2026-101898","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://bugzilla.redhat.com/show_bug.cgi?id=2542576","https://www.cve.org/CVERecord?id=CVE-2026-101900","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://bugzilla.redhat.com/show_bug.cgi?id=2542577","https://www.cve.org/CVERecord?id=CVE-2026-101901","https://nvd.nist.gov/vuln/detail/CVE-2026-101901","https://github.com/axios/axios/security/advisories/GHSA-542g-h47m-68v8","https://bugzilla.redhat.com/show_bug.cgi?id=2542575","https://www.cve.org/CVERecord?id=CVE-2026-101902","https://nvd.nist.gov/vuln/detail/CVE-2026-101902","https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/security/advisories/GHSA-9fr6-4gfg-395g","https://bugzilla.redhat.com/show_bug.cgi?id=2542580","https://www.cve.org/CVERecord?id=CVE-2026-101903","https://nvd.nist.gov/vuln/detail/CVE-2026-101903","https://github.com/axios/axios/security/advisories/GHSA-c29m-xwm3-cm6r","https://bugzilla.redhat.com/show_bug.cgi?id=2542579","https://www.cve.org/CVERecord?id=CVE-2026-101904","https://nvd.nist.gov/vuln/detail/CVE-2026-101904","https://github.com/axios/axios/security/advisories/GHSA-j8rh-479h-cp32","https://bugzilla.redhat.com/show_bug.cgi?id=2542584","https://www.cve.org/CVERecord?id=CVE-2026-101905","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://bugzilla.redhat.com/show_bug.cgi?id=2542583","https://www.cve.org/CVERecord?id=CVE-2026-101906","https://nvd.nist.gov/vuln/detail/CVE-2026-101906","https://github.com/axios/axios/security/advisories/GHSA-mghh-pgcx-3jjj","https://bugzilla.redhat.com/show_bug.cgi?id=2542586","https://www.cve.org/CVERecord?id=CVE-2026-101907","https://nvd.nist.gov/vuln/detail/CVE-2026-101907","https://github.com/axios/axios/security/advisories/GHSA-r4gj-5m52-g5wh","https://bugzilla.redhat.com/show_bug.cgi?id=2542592","https://www.cve.org/CVERecord?id=CVE-2026-101908","https://nvd.nist.gov/vuln/detail/CVE-2026-101908","https://github.com/axios/axios/security/advisories/GHSA-vh66-26gq-q6x8","https://bugzilla.redhat.com/show_bug.cgi?id=2542593","https://www.cve.org/CVERecord?id=CVE-2026-101909","https://nvd.nist.gov/vuln/detail/CVE-2026-101909","https://github.com/axios/axios/commit/d29be181f85f6fe93397a07b1f69606d9622637b","https://github.com/axios/axios/security/advisories/GHSA-x97p-jq2g-jp4f"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"},{"value":"CVE-2026-101900","evidence":"/upstream"},{"value":"CVE-2026-101901","evidence":"/upstream"},{"value":"CVE-2026-101902","evidence":"/upstream"},{"value":"CVE-2026-101903","evidence":"/upstream"},{"value":"CVE-2026-101904","evidence":"/upstream"},{"value":"CVE-2026-101905","evidence":"/upstream"},{"value":"CVE-2026-101906","evidence":"/upstream"},{"value":"CVE-2026-101907","evidence":"/upstream"},{"value":"CVE-2026-101908","evidence":"/upstream"},{"value":"CVE-2026-101909","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0ef413e4-8008-4c41-897c-014174f3f269","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101901","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-542g-h47m-68v8","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101902","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101902","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101903","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-c29m-xwm3-cm6r","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101904","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101904","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101906","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-mghh-pgcx-3jjj","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101907","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-r4gj-5m52-g5wh","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101908","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101908","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101909","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.34.0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"axios","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-x97p-jq2g-jp4f","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/RHSA-2026%3A74872","advisory_id":"0ef413e4-8008-4c41-897c-014174f3f269","event_types":["advisory"],"published_at":"2026-10-26T00:57:51.165591+00:00","technologies":["core-osv","grafana13-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-03T10:17:01+00:00","detail_url":"/events/73507"},"members":[{"id":73507,"cve_ids":["CVE-2026-101898","CVE-2026-101900","CVE-2026-101901","CVE-2026-101902","CVE-2026-101903","CVE-2026-101904","CVE-2026-101905","CVE-2026-101906","CVE-2026-101907","CVE-2026-101908","CVE-2026-101909"],"payload":{"kind":"advisory","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","evidence":"osv:RHSA-2026:74872","products":[{"name":{"value":"grafana13.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:13.2.1-0.9.hum1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"RHSA-2026:74872","aliases":["RHSA-2026:74872"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.2.1-0.9.hum1"}]}],"package":{"name":"grafana13.2","purl":"pkg:rpm/redhat/grafana13.2","ecosystem":"Red Hat:hummingbird:1"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:74872.json"}}],"modified":"2026-10-03T10:32:34.608460980Z","provider":"osv","upstream":["CVE-2026-101898","CVE-2026-101900","CVE-2026-101901","CVE-2026-101902","CVE-2026-101903","CVE-2026-101904","CVE-2026-101905","CVE-2026-101906","CVE-2026-101907","CVE-2026-101908","CVE-2026-101909"],"references":["https://access.redhat.com/errata/RHSA-2026:74872","https://access.redhat.com/security/cve/CVE-2026-101903","https://access.redhat.com/security/updates/classification/","https://images.redhat.com/","https://access.redhat.com/security/cve/CVE-2026-101905","https://access.redhat.com/security/cve/CVE-2026-101902","https://access.redhat.com/security/cve/CVE-2026-101901","https://access.redhat.com/security/cve/CVE-2026-101904","https://access.redhat.com/security/cve/CVE-2026-101906","https://access.redhat.com/security/cve/CVE-2026-101898","https://access.redhat.com/security/cve/CVE-2026-101907","https://access.redhat.com/security/cve/CVE-2026-101908","https://access.redhat.com/security/cve/CVE-2026-101909","https://access.redhat.com/security/cve/CVE-2026-101900","https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74872.json","https://bugzilla.redhat.com/show_bug.cgi?id=2542571","https://www.cve.org/CVERecord?id=CVE-2026-101898","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://bugzilla.redhat.com/show_bug.cgi?id=2542576","https://www.cve.org/CVERecord?id=CVE-2026-101900","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://bugzilla.redhat.com/show_bug.cgi?id=2542577","https://www.cve.org/CVERecord?id=CVE-2026-101901","https://nvd.nist.gov/vuln/detail/CVE-2026-101901","https://github.com/axios/axios/security/advisories/GHSA-542g-h47m-68v8","https://bugzilla.redhat.com/show_bug.cgi?id=2542575","https://www.cve.org/CVERecord?id=CVE-2026-101902","https://nvd.nist.gov/vuln/detail/CVE-2026-101902","https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/security/advisories/GHSA-9fr6-4gfg-395g","https://bugzilla.redhat.com/show_bug.cgi?id=2542580","https://www.cve.org/CVERecord?id=CVE-2026-101903","https://nvd.nist.gov/vuln/detail/CVE-2026-101903","https://github.com/axios/axios/security/advisories/GHSA-c29m-xwm3-cm6r","https://bugzilla.redhat.com/show_bug.cgi?id=2542579","https://www.cve.org/CVERecord?id=CVE-2026-101904","https://nvd.nist.gov/vuln/detail/CVE-2026-101904","https://github.com/axios/axios/security/advisories/GHSA-j8rh-479h-cp32","https://bugzilla.redhat.com/show_bug.cgi?id=2542584","https://www.cve.org/CVERecord?id=CVE-2026-101905","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://bugzilla.redhat.com/show_bug.cgi?id=2542583","https://www.cve.org/CVERecord?id=CVE-2026-101906","https://nvd.nist.gov/vuln/detail/CVE-2026-101906","https://github.com/axios/axios/security/advisories/GHSA-mghh-pgcx-3jjj","https://bugzilla.redhat.com/show_bug.cgi?id=2542586","https://www.cve.org/CVERecord?id=CVE-2026-101907","https://nvd.nist.gov/vuln/detail/CVE-2026-101907","https://github.com/axios/axios/security/advisories/GHSA-r4gj-5m52-g5wh","https://bugzilla.redhat.com/show_bug.cgi?id=2542592","https://www.cve.org/CVERecord?id=CVE-2026-101908","https://nvd.nist.gov/vuln/detail/CVE-2026-101908","https://github.com/axios/axios/security/advisories/GHSA-vh66-26gq-q6x8","https://bugzilla.redhat.com/show_bug.cgi?id=2542593","https://www.cve.org/CVERecord?id=CVE-2026-101909","https://nvd.nist.gov/vuln/detail/CVE-2026-101909","https://github.com/axios/axios/commit/d29be181f85f6fe93397a07b1f69606d9622637b","https://github.com/axios/axios/security/advisories/GHSA-x97p-jq2g-jp4f"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"},{"value":"CVE-2026-101900","evidence":"/upstream"},{"value":"CVE-2026-101901","evidence":"/upstream"},{"value":"CVE-2026-101902","evidence":"/upstream"},{"value":"CVE-2026-101903","evidence":"/upstream"},{"value":"CVE-2026-101904","evidence":"/upstream"},{"value":"CVE-2026-101905","evidence":"/upstream"},{"value":"CVE-2026-101906","evidence":"/upstream"},{"value":"CVE-2026-101907","evidence":"/upstream"},{"value":"CVE-2026-101908","evidence":"/upstream"},{"value":"CVE-2026-101909","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0ef413e4-8008-4c41-897c-014174f3f269","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101901","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-542g-h47m-68v8","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101902","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101902","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101903","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-c29m-xwm3-cm6r","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101904","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101904","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101906","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-mghh-pgcx-3jjj","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101907","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-r4gj-5m52-g5wh","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101908","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101908","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101909","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.34.0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"axios","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-x97p-jq2g-jp4f","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/RHSA-2026%3A74872","advisory_id":"0ef413e4-8008-4c41-897c-014174f3f269","event_types":["advisory"],"published_at":"2026-10-26T00:57:51.165591+00:00","technologies":["core-osv","grafana13-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-03T10:17:01+00:00","detail_url":"/events/73507"}]}},{"id":72591,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-hgqv-fwfx-7qg9","summary":"CGA-hgqv-fwfx-7qg9","evidence":"osv:CGA-hgqv-fwfx-7qg9","products":[{"name":{"value":"airflow-core-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-hgqv-fwfx-7qg9","aliases":["CGA-hgqv-fwfx-7qg9"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-core-2","purl":"pkg:apk/chainguard/airflow-core-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hgqv-fwfx-7qg9.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.13.6","component_type":"npm","component_version":"1.13.6","component_location":"/home/airflow/.local/lib/python3.12/site-packages/airflow/www/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:42:22Z"}]}}],"modified":"2026-10-03T10:31:44.973503536Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0eee118a-b52d-461a-90ae-4d2e246a32e4","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hgqv-fwfx-7qg9","advisory_id":"0eee118a-b52d-461a-90ae-4d2e246a32e4","event_types":["advisory"],"published_at":"2026-10-26T00:36:04.36581+00:00","technologies":["airflow-core-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:08:56+00:00","detail_url":"/advisories/advisory%3A0eee118a-b52d-461a-90ae-4d2e246a32e4","group":{"id":"advisory:0eee118a-b52d-461a-90ae-4d2e246a32e4","revision":1,"primary_event_id":73275,"change":"published","superseded_by":[],"changed":{"id":73275,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-hgqv-fwfx-7qg9","summary":"CGA-hgqv-fwfx-7qg9","evidence":"osv:CGA-hgqv-fwfx-7qg9","products":[{"name":{"value":"airflow-core-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-hgqv-fwfx-7qg9","aliases":["CGA-hgqv-fwfx-7qg9"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-core-2","purl":"pkg:apk/chainguard/airflow-core-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hgqv-fwfx-7qg9.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.13.6","component_type":"npm","component_version":"1.13.6","component_location":"/home/airflow/.local/lib/python3.12/site-packages/airflow/www/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:42:22Z"}]}}],"modified":"2026-10-03T10:31:44.973503536Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0eee118a-b52d-461a-90ae-4d2e246a32e4","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hgqv-fwfx-7qg9","advisory_id":"0eee118a-b52d-461a-90ae-4d2e246a32e4","event_types":["advisory"],"published_at":"2026-10-26T00:36:04.36581+00:00","technologies":["airflow-core-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:08:56+00:00","detail_url":"/events/73275"},"members":[{"id":73275,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-hgqv-fwfx-7qg9","summary":"CGA-hgqv-fwfx-7qg9","evidence":"osv:CGA-hgqv-fwfx-7qg9","products":[{"name":{"value":"airflow-core-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-hgqv-fwfx-7qg9","aliases":["CGA-hgqv-fwfx-7qg9"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-core-2","purl":"pkg:apk/chainguard/airflow-core-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hgqv-fwfx-7qg9.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.13.6","component_type":"npm","component_version":"1.13.6","component_location":"/home/airflow/.local/lib/python3.12/site-packages/airflow/www/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:42:22Z"}]}}],"modified":"2026-10-03T10:31:44.973503536Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0eee118a-b52d-461a-90ae-4d2e246a32e4","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hgqv-fwfx-7qg9","advisory_id":"0eee118a-b52d-461a-90ae-4d2e246a32e4","event_types":["advisory"],"published_at":"2026-10-26T00:36:04.36581+00:00","technologies":["airflow-core-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:08:56+00:00","detail_url":"/events/73275"}]}},{"id":72573,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-wmhg-5wpp-wx54","summary":"CGA-wmhg-5wpp-wx54","evidence":"osv:CGA-wmhg-5wpp-wx54","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wmhg-5wpp-wx54","aliases":["CGA-wmhg-5wpp-wx54"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wmhg-5wpp-wx54.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:21Z"}]}}],"modified":"2026-10-03T10:31:38.096216267Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9cfceee2-f025-400b-b001-25655895b523","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wmhg-5wpp-wx54","advisory_id":"9cfceee2-f025-400b-b001-25655895b523","event_types":["advisory"],"published_at":"2026-10-26T00:33:19.491102+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:53+00:00","detail_url":"/advisories/advisory%3A9cfceee2-f025-400b-b001-25655895b523","group":{"id":"advisory:9cfceee2-f025-400b-b001-25655895b523","revision":1,"primary_event_id":73250,"change":"published","superseded_by":[],"changed":{"id":73250,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-wmhg-5wpp-wx54","summary":"CGA-wmhg-5wpp-wx54","evidence":"osv:CGA-wmhg-5wpp-wx54","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wmhg-5wpp-wx54","aliases":["CGA-wmhg-5wpp-wx54"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wmhg-5wpp-wx54.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:21Z"}]}}],"modified":"2026-10-03T10:31:38.096216267Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9cfceee2-f025-400b-b001-25655895b523","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wmhg-5wpp-wx54","advisory_id":"9cfceee2-f025-400b-b001-25655895b523","event_types":["advisory"],"published_at":"2026-10-26T00:33:19.491102+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:53+00:00","detail_url":"/events/73250"},"members":[{"id":73250,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-wmhg-5wpp-wx54","summary":"CGA-wmhg-5wpp-wx54","evidence":"osv:CGA-wmhg-5wpp-wx54","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wmhg-5wpp-wx54","aliases":["CGA-wmhg-5wpp-wx54"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wmhg-5wpp-wx54.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:21Z"}]}}],"modified":"2026-10-03T10:31:38.096216267Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9cfceee2-f025-400b-b001-25655895b523","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wmhg-5wpp-wx54","advisory_id":"9cfceee2-f025-400b-b001-25655895b523","event_types":["advisory"],"published_at":"2026-10-26T00:33:19.491102+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:53+00:00","detail_url":"/events/73250"}]}},{"id":72109,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-3r9g-jcq7-7wc9","summary":"CGA-3r9g-jcq7-7wc9","evidence":"osv:CGA-3r9g-jcq7-7wc9","products":[{"name":{"value":"kibana-8.19","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-3r9g-jcq7-7wc9","aliases":["CGA-3r9g-jcq7-7wc9"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19","purl":"pkg:apk/chainguard/kibana-8.19?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3r9g-jcq7-7wc9.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:00:10Z"}]}}],"modified":"2026-10-02T23:12:53.888121990Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2ecddedd-05ae-4034-8f6c-8fbb9407de83","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3r9g-jcq7-7wc9","advisory_id":"2ecddedd-05ae-4034-8f6c-8fbb9407de83","event_types":["advisory"],"published_at":"2026-10-26T00:16:59.662443+00:00","technologies":["core-osv","kibana-8-19"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:35:18+00:00","detail_url":"/advisories/advisory%3A2ecddedd-05ae-4034-8f6c-8fbb9407de83","group":{"id":"advisory:2ecddedd-05ae-4034-8f6c-8fbb9407de83","revision":1,"primary_event_id":72740,"change":"published","superseded_by":[],"changed":{"id":72740,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-3r9g-jcq7-7wc9","summary":"CGA-3r9g-jcq7-7wc9","evidence":"osv:CGA-3r9g-jcq7-7wc9","products":[{"name":{"value":"kibana-8.19","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-3r9g-jcq7-7wc9","aliases":["CGA-3r9g-jcq7-7wc9"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19","purl":"pkg:apk/chainguard/kibana-8.19?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3r9g-jcq7-7wc9.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:00:10Z"}]}}],"modified":"2026-10-02T23:12:53.888121990Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2ecddedd-05ae-4034-8f6c-8fbb9407de83","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3r9g-jcq7-7wc9","advisory_id":"2ecddedd-05ae-4034-8f6c-8fbb9407de83","event_types":["advisory"],"published_at":"2026-10-26T00:16:59.662443+00:00","technologies":["core-osv","kibana-8-19"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:35:18+00:00","detail_url":"/events/72740"},"members":[{"id":72740,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-3r9g-jcq7-7wc9","summary":"CGA-3r9g-jcq7-7wc9","evidence":"osv:CGA-3r9g-jcq7-7wc9","products":[{"name":{"value":"kibana-8.19","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-3r9g-jcq7-7wc9","aliases":["CGA-3r9g-jcq7-7wc9"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19","purl":"pkg:apk/chainguard/kibana-8.19?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3r9g-jcq7-7wc9.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:00:10Z"}]}}],"modified":"2026-10-02T23:12:53.888121990Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2ecddedd-05ae-4034-8f6c-8fbb9407de83","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3r9g-jcq7-7wc9","advisory_id":"2ecddedd-05ae-4034-8f6c-8fbb9407de83","event_types":["advisory"],"published_at":"2026-10-26T00:16:59.662443+00:00","technologies":["core-osv","kibana-8-19"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:35:18+00:00","detail_url":"/events/72740"}]}},{"id":72104,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-7j9j-2vvv-q695","summary":"CGA-7j9j-2vvv-q695","evidence":"osv:CGA-7j9j-2vvv-q695","products":[{"name":{"value":"kibana-8.19-bitnami","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-7j9j-2vvv-q695","aliases":["CGA-7j9j-2vvv-q695"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19-bitnami","purl":"pkg:apk/chainguard/kibana-8.19-bitnami?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7j9j-2vvv-q695.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/opt/bitnami/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:45:29Z"}]}}],"modified":"2026-10-02T23:12:53.118755839Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c310ee15-0aee-4374-ac23-f631963d366f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7j9j-2vvv-q695","advisory_id":"c310ee15-0aee-4374-ac23-f631963d366f","event_types":["advisory"],"published_at":"2026-10-26T00:16:49.995063+00:00","technologies":["core-osv","kibana-8-19-bitnami"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:42:13+00:00","detail_url":"/advisories/advisory%3Ac310ee15-0aee-4374-ac23-f631963d366f","group":{"id":"advisory:c310ee15-0aee-4374-ac23-f631963d366f","revision":1,"primary_event_id":72735,"change":"published","superseded_by":[],"changed":{"id":72735,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-7j9j-2vvv-q695","summary":"CGA-7j9j-2vvv-q695","evidence":"osv:CGA-7j9j-2vvv-q695","products":[{"name":{"value":"kibana-8.19-bitnami","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-7j9j-2vvv-q695","aliases":["CGA-7j9j-2vvv-q695"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19-bitnami","purl":"pkg:apk/chainguard/kibana-8.19-bitnami?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7j9j-2vvv-q695.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/opt/bitnami/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:45:29Z"}]}}],"modified":"2026-10-02T23:12:53.118755839Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c310ee15-0aee-4374-ac23-f631963d366f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7j9j-2vvv-q695","advisory_id":"c310ee15-0aee-4374-ac23-f631963d366f","event_types":["advisory"],"published_at":"2026-10-26T00:16:49.995063+00:00","technologies":["core-osv","kibana-8-19-bitnami"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:42:13+00:00","detail_url":"/events/72735"},"members":[{"id":72735,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-7j9j-2vvv-q695","summary":"CGA-7j9j-2vvv-q695","evidence":"osv:CGA-7j9j-2vvv-q695","products":[{"name":{"value":"kibana-8.19-bitnami","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-7j9j-2vvv-q695","aliases":["CGA-7j9j-2vvv-q695"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19-bitnami","purl":"pkg:apk/chainguard/kibana-8.19-bitnami?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7j9j-2vvv-q695.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/opt/bitnami/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:45:29Z"}]}}],"modified":"2026-10-02T23:12:53.118755839Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c310ee15-0aee-4374-ac23-f631963d366f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7j9j-2vvv-q695","advisory_id":"c310ee15-0aee-4374-ac23-f631963d366f","event_types":["advisory"],"published_at":"2026-10-26T00:16:49.995063+00:00","technologies":["core-osv","kibana-8-19-bitnami"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:42:13+00:00","detail_url":"/events/72735"}]}},{"id":72088,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-wc9p-qjxm-hr6f","summary":"CGA-wc9p-qjxm-hr6f","evidence":"osv:CGA-wc9p-qjxm-hr6f","products":[{"name":{"value":"kibana-8.19-bitnami","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wc9p-qjxm-hr6f","aliases":["CGA-wc9p-qjxm-hr6f"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19-bitnami","purl":"pkg:apk/chainguard/kibana-8.19-bitnami?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wc9p-qjxm-hr6f.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/opt/bitnami/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:04:11Z"}]}}],"modified":"2026-10-02T23:12:51.864913964Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ca8b1f5c-7fd2-42c2-89d7-20ef92603a0a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wc9p-qjxm-hr6f","advisory_id":"ca8b1f5c-7fd2-42c2-89d7-20ef92603a0a","event_types":["advisory"],"published_at":"2026-10-26T00:16:31.460901+00:00","technologies":["core-osv","kibana-8-19-bitnami"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:23:13+00:00","detail_url":"/advisories/advisory%3Aca8b1f5c-7fd2-42c2-89d7-20ef92603a0a","group":{"id":"advisory:ca8b1f5c-7fd2-42c2-89d7-20ef92603a0a","revision":1,"primary_event_id":72719,"change":"published","superseded_by":[],"changed":{"id":72719,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-wc9p-qjxm-hr6f","summary":"CGA-wc9p-qjxm-hr6f","evidence":"osv:CGA-wc9p-qjxm-hr6f","products":[{"name":{"value":"kibana-8.19-bitnami","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wc9p-qjxm-hr6f","aliases":["CGA-wc9p-qjxm-hr6f"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19-bitnami","purl":"pkg:apk/chainguard/kibana-8.19-bitnami?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wc9p-qjxm-hr6f.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/opt/bitnami/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:04:11Z"}]}}],"modified":"2026-10-02T23:12:51.864913964Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ca8b1f5c-7fd2-42c2-89d7-20ef92603a0a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wc9p-qjxm-hr6f","advisory_id":"ca8b1f5c-7fd2-42c2-89d7-20ef92603a0a","event_types":["advisory"],"published_at":"2026-10-26T00:16:31.460901+00:00","technologies":["core-osv","kibana-8-19-bitnami"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:23:13+00:00","detail_url":"/events/72719"},"members":[{"id":72719,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-wc9p-qjxm-hr6f","summary":"CGA-wc9p-qjxm-hr6f","evidence":"osv:CGA-wc9p-qjxm-hr6f","products":[{"name":{"value":"kibana-8.19-bitnami","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wc9p-qjxm-hr6f","aliases":["CGA-wc9p-qjxm-hr6f"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19-bitnami","purl":"pkg:apk/chainguard/kibana-8.19-bitnami?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wc9p-qjxm-hr6f.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/opt/bitnami/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:04:11Z"}]}}],"modified":"2026-10-02T23:12:51.864913964Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ca8b1f5c-7fd2-42c2-89d7-20ef92603a0a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wc9p-qjxm-hr6f","advisory_id":"ca8b1f5c-7fd2-42c2-89d7-20ef92603a0a","event_types":["advisory"],"published_at":"2026-10-26T00:16:31.460901+00:00","technologies":["core-osv","kibana-8-19-bitnami"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:23:13+00:00","detail_url":"/events/72719"}]}},{"id":71979,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-v6cr-pjvh-cr57","summary":"CGA-v6cr-pjvh-cr57","evidence":"osv:CGA-v6cr-pjvh-cr57","products":[{"name":{"value":"kibana-8.19","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-v6cr-pjvh-cr57","aliases":["CGA-v6cr-pjvh-cr57"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19","purl":"pkg:apk/chainguard/kibana-8.19?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v6cr-pjvh-cr57.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:56:10Z"}]}}],"modified":"2026-10-02T23:01:47.511257411Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:563100b2-716e-44fa-b592-90f64579c104","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v6cr-pjvh-cr57","advisory_id":"563100b2-716e-44fa-b592-90f64579c104","event_types":["advisory"],"published_at":"2026-10-26T00:03:16.794411+00:00","technologies":["core-osv","kibana-8-19"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:33:47+00:00","detail_url":"/advisories/advisory%3A563100b2-716e-44fa-b592-90f64579c104","group":{"id":"advisory:563100b2-716e-44fa-b592-90f64579c104","revision":1,"primary_event_id":72552,"change":"published","superseded_by":[],"changed":{"id":72552,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-v6cr-pjvh-cr57","summary":"CGA-v6cr-pjvh-cr57","evidence":"osv:CGA-v6cr-pjvh-cr57","products":[{"name":{"value":"kibana-8.19","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-v6cr-pjvh-cr57","aliases":["CGA-v6cr-pjvh-cr57"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19","purl":"pkg:apk/chainguard/kibana-8.19?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v6cr-pjvh-cr57.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:56:10Z"}]}}],"modified":"2026-10-02T23:01:47.511257411Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:563100b2-716e-44fa-b592-90f64579c104","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v6cr-pjvh-cr57","advisory_id":"563100b2-716e-44fa-b592-90f64579c104","event_types":["advisory"],"published_at":"2026-10-26T00:03:16.794411+00:00","technologies":["core-osv","kibana-8-19"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:33:47+00:00","detail_url":"/events/72552"},"members":[{"id":72552,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-v6cr-pjvh-cr57","summary":"CGA-v6cr-pjvh-cr57","evidence":"osv:CGA-v6cr-pjvh-cr57","products":[{"name":{"value":"kibana-8.19","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-v6cr-pjvh-cr57","aliases":["CGA-v6cr-pjvh-cr57"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19","purl":"pkg:apk/chainguard/kibana-8.19?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v6cr-pjvh-cr57.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:56:10Z"}]}}],"modified":"2026-10-02T23:01:47.511257411Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:563100b2-716e-44fa-b592-90f64579c104","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v6cr-pjvh-cr57","advisory_id":"563100b2-716e-44fa-b592-90f64579c104","event_types":["advisory"],"published_at":"2026-10-26T00:03:16.794411+00:00","technologies":["core-osv","kibana-8-19"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:33:47+00:00","detail_url":"/events/72552"}]}},{"id":71567,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-5h3v-qvhw-wc2r","summary":"CGA-5h3v-qvhw-wc2r","evidence":"osv:CGA-5h3v-qvhw-wc2r","products":[{"name":{"value":"airflow-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5h3v-qvhw-wc2r","aliases":["CGA-5h3v-qvhw-wc2r"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-2","purl":"pkg:apk/chainguard/airflow-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5h3v-qvhw-wc2r.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.13.6","component_type":"npm","component_version":"1.13.6","component_location":"/opt/airflow/lib/python3.12/site-packages/airflow/www/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T16:29:16Z"}]}}],"modified":"2026-10-02T23:01:06.152380341Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6477ae06-4377-480b-9baf-f2642038191a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5h3v-qvhw-wc2r","advisory_id":"6477ae06-4377-480b-9baf-f2642038191a","event_types":["advisory"],"published_at":"2026-10-25T23:19:49.351231+00:00","technologies":["airflow-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:38:35+00:00","detail_url":"/advisories/advisory%3A6477ae06-4377-480b-9baf-f2642038191a","group":{"id":"advisory:6477ae06-4377-480b-9baf-f2642038191a","revision":1,"primary_event_id":71984,"change":"published","superseded_by":[],"changed":{"id":71984,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-5h3v-qvhw-wc2r","summary":"CGA-5h3v-qvhw-wc2r","evidence":"osv:CGA-5h3v-qvhw-wc2r","products":[{"name":{"value":"airflow-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5h3v-qvhw-wc2r","aliases":["CGA-5h3v-qvhw-wc2r"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-2","purl":"pkg:apk/chainguard/airflow-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5h3v-qvhw-wc2r.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.13.6","component_type":"npm","component_version":"1.13.6","component_location":"/opt/airflow/lib/python3.12/site-packages/airflow/www/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T16:29:16Z"}]}}],"modified":"2026-10-02T23:01:06.152380341Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6477ae06-4377-480b-9baf-f2642038191a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5h3v-qvhw-wc2r","advisory_id":"6477ae06-4377-480b-9baf-f2642038191a","event_types":["advisory"],"published_at":"2026-10-25T23:19:49.351231+00:00","technologies":["airflow-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:38:35+00:00","detail_url":"/events/71984"},"members":[{"id":71984,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-5h3v-qvhw-wc2r","summary":"CGA-5h3v-qvhw-wc2r","evidence":"osv:CGA-5h3v-qvhw-wc2r","products":[{"name":{"value":"airflow-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5h3v-qvhw-wc2r","aliases":["CGA-5h3v-qvhw-wc2r"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-2","purl":"pkg:apk/chainguard/airflow-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5h3v-qvhw-wc2r.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.13.6","component_type":"npm","component_version":"1.13.6","component_location":"/opt/airflow/lib/python3.12/site-packages/airflow/www/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T16:29:16Z"}]}}],"modified":"2026-10-02T23:01:06.152380341Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6477ae06-4377-480b-9baf-f2642038191a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5h3v-qvhw-wc2r","advisory_id":"6477ae06-4377-480b-9baf-f2642038191a","event_types":["advisory"],"published_at":"2026-10-25T23:19:49.351231+00:00","technologies":["airflow-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:38:35+00:00","detail_url":"/events/71984"}]}},{"id":70950,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-5m2c-xccj-3r8c","summary":"CGA-5m2c-xccj-3r8c","evidence":"osv:CGA-5m2c-xccj-3r8c","products":[{"name":{"value":"opensearch-dashboards-3-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5m2c-xccj-3r8c","aliases":["CGA-5m2c-xccj-3r8c"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r5"}]}],"package":{"name":"opensearch-dashboards-3-fips","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5m2c-xccj-3r8c.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:09:02Z"}]}}],"modified":"2026-10-02T18:28:03.576077013Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9edbdc32-f817-41bf-8691-5c351da99c07","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5m2c-xccj-3r8c","advisory_id":"9edbdc32-f817-41bf-8691-5c351da99c07","event_types":["advisory"],"published_at":"2026-10-25T22:45:24.080796+00:00","technologies":["core-osv","opensearch-dashboards-3-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:50:10+00:00","detail_url":"/advisories/advisory%3A9edbdc32-f817-41bf-8691-5c351da99c07","group":{"id":"advisory:9edbdc32-f817-41bf-8691-5c351da99c07","revision":1,"primary_event_id":71321,"change":"published","superseded_by":[],"changed":{"id":71321,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-5m2c-xccj-3r8c","summary":"CGA-5m2c-xccj-3r8c","evidence":"osv:CGA-5m2c-xccj-3r8c","products":[{"name":{"value":"opensearch-dashboards-3-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5m2c-xccj-3r8c","aliases":["CGA-5m2c-xccj-3r8c"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r5"}]}],"package":{"name":"opensearch-dashboards-3-fips","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5m2c-xccj-3r8c.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:09:02Z"}]}}],"modified":"2026-10-02T18:28:03.576077013Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9edbdc32-f817-41bf-8691-5c351da99c07","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5m2c-xccj-3r8c","advisory_id":"9edbdc32-f817-41bf-8691-5c351da99c07","event_types":["advisory"],"published_at":"2026-10-25T22:45:24.080796+00:00","technologies":["core-osv","opensearch-dashboards-3-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:50:10+00:00","detail_url":"/events/71321"},"members":[{"id":71321,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-5m2c-xccj-3r8c","summary":"CGA-5m2c-xccj-3r8c","evidence":"osv:CGA-5m2c-xccj-3r8c","products":[{"name":{"value":"opensearch-dashboards-3-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5m2c-xccj-3r8c","aliases":["CGA-5m2c-xccj-3r8c"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r5"}]}],"package":{"name":"opensearch-dashboards-3-fips","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5m2c-xccj-3r8c.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:09:02Z"}]}}],"modified":"2026-10-02T18:28:03.576077013Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9edbdc32-f817-41bf-8691-5c351da99c07","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5m2c-xccj-3r8c","advisory_id":"9edbdc32-f817-41bf-8691-5c351da99c07","event_types":["advisory"],"published_at":"2026-10-25T22:45:24.080796+00:00","technologies":["core-osv","opensearch-dashboards-3-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:50:10+00:00","detail_url":"/events/71321"}]}},{"id":70946,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-2vhh-5v8f-hh9c","summary":"CGA-2vhh-5v8f-hh9c","evidence":"osv:CGA-2vhh-5v8f-hh9c","products":[{"name":{"value":"opensearch-dashboards-3-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-2vhh-5v8f-hh9c","aliases":["CGA-2vhh-5v8f-hh9c"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r5"}]}],"package":{"name":"opensearch-dashboards-3-fips","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2vhh-5v8f-hh9c.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:49:09Z"}]}}],"modified":"2026-10-02T18:28:02.967385157Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d6539010-a0b5-4fe4-b118-69dee8e5c321","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2vhh-5v8f-hh9c","advisory_id":"d6539010-a0b5-4fe4-b118-69dee8e5c321","event_types":["advisory"],"published_at":"2026-10-25T22:45:15.010384+00:00","technologies":["core-osv","opensearch-dashboards-3-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:15:27+00:00","detail_url":"/advisories/advisory%3Ad6539010-a0b5-4fe4-b118-69dee8e5c321","group":{"id":"advisory:d6539010-a0b5-4fe4-b118-69dee8e5c321","revision":1,"primary_event_id":71317,"change":"published","superseded_by":[],"changed":{"id":71317,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-2vhh-5v8f-hh9c","summary":"CGA-2vhh-5v8f-hh9c","evidence":"osv:CGA-2vhh-5v8f-hh9c","products":[{"name":{"value":"opensearch-dashboards-3-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-2vhh-5v8f-hh9c","aliases":["CGA-2vhh-5v8f-hh9c"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r5"}]}],"package":{"name":"opensearch-dashboards-3-fips","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2vhh-5v8f-hh9c.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:49:09Z"}]}}],"modified":"2026-10-02T18:28:02.967385157Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d6539010-a0b5-4fe4-b118-69dee8e5c321","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2vhh-5v8f-hh9c","advisory_id":"d6539010-a0b5-4fe4-b118-69dee8e5c321","event_types":["advisory"],"published_at":"2026-10-25T22:45:15.010384+00:00","technologies":["core-osv","opensearch-dashboards-3-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:15:27+00:00","detail_url":"/events/71317"},"members":[{"id":71317,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-2vhh-5v8f-hh9c","summary":"CGA-2vhh-5v8f-hh9c","evidence":"osv:CGA-2vhh-5v8f-hh9c","products":[{"name":{"value":"opensearch-dashboards-3-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-2vhh-5v8f-hh9c","aliases":["CGA-2vhh-5v8f-hh9c"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r5"}]}],"package":{"name":"opensearch-dashboards-3-fips","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2vhh-5v8f-hh9c.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:49:09Z"}]}}],"modified":"2026-10-02T18:28:02.967385157Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d6539010-a0b5-4fe4-b118-69dee8e5c321","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2vhh-5v8f-hh9c","advisory_id":"d6539010-a0b5-4fe4-b118-69dee8e5c321","event_types":["advisory"],"published_at":"2026-10-25T22:45:15.010384+00:00","technologies":["core-osv","opensearch-dashboards-3-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:15:27+00:00","detail_url":"/events/71317"}]}},{"id":70778,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-v3c3-vmr7-w3x8","summary":"CGA-v3c3-vmr7-w3x8","evidence":"osv:CGA-v3c3-vmr7-w3x8","products":[{"name":{"value":"semaphore","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.12-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-v3c3-vmr7-w3x8","aliases":["CGA-v3c3-vmr7-w3x8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.12-r3"}]}],"package":{"name":"semaphore","purl":"pkg:apk/chainguard/semaphore?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v3c3-vmr7-w3x8.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/semaphore/embedded-ui/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:59:07Z"}]}}],"modified":"2026-10-02T18:25:45.625702530Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:94aecb88-ef81-42dc-9aa8-c7130f4a83bf","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v3c3-vmr7-w3x8","advisory_id":"94aecb88-ef81-42dc-9aa8-c7130f4a83bf","event_types":["advisory"],"published_at":"2026-10-25T22:39:09.275555+00:00","technologies":["core-osv","semaphore"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:20:09+00:00","detail_url":"/advisories/advisory%3A94aecb88-ef81-42dc-9aa8-c7130f4a83bf","group":{"id":"advisory:94aecb88-ef81-42dc-9aa8-c7130f4a83bf","revision":1,"primary_event_id":71149,"change":"published","superseded_by":[],"changed":{"id":71149,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-v3c3-vmr7-w3x8","summary":"CGA-v3c3-vmr7-w3x8","evidence":"osv:CGA-v3c3-vmr7-w3x8","products":[{"name":{"value":"semaphore","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.12-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-v3c3-vmr7-w3x8","aliases":["CGA-v3c3-vmr7-w3x8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.12-r3"}]}],"package":{"name":"semaphore","purl":"pkg:apk/chainguard/semaphore?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v3c3-vmr7-w3x8.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/semaphore/embedded-ui/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:59:07Z"}]}}],"modified":"2026-10-02T18:25:45.625702530Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:94aecb88-ef81-42dc-9aa8-c7130f4a83bf","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v3c3-vmr7-w3x8","advisory_id":"94aecb88-ef81-42dc-9aa8-c7130f4a83bf","event_types":["advisory"],"published_at":"2026-10-25T22:39:09.275555+00:00","technologies":["core-osv","semaphore"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:20:09+00:00","detail_url":"/events/71149"},"members":[{"id":71149,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-v3c3-vmr7-w3x8","summary":"CGA-v3c3-vmr7-w3x8","evidence":"osv:CGA-v3c3-vmr7-w3x8","products":[{"name":{"value":"semaphore","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.12-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-v3c3-vmr7-w3x8","aliases":["CGA-v3c3-vmr7-w3x8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.12-r3"}]}],"package":{"name":"semaphore","purl":"pkg:apk/chainguard/semaphore?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v3c3-vmr7-w3x8.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/semaphore/embedded-ui/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:59:07Z"}]}}],"modified":"2026-10-02T18:25:45.625702530Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:94aecb88-ef81-42dc-9aa8-c7130f4a83bf","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v3c3-vmr7-w3x8","advisory_id":"94aecb88-ef81-42dc-9aa8-c7130f4a83bf","event_types":["advisory"],"published_at":"2026-10-25T22:39:09.275555+00:00","technologies":["core-osv","semaphore"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:20:09+00:00","detail_url":"/events/71149"}]}},{"id":70725,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-q3wj-6pc4-8qvx","summary":"CGA-q3wj-6pc4-8qvx","evidence":"osv:CGA-q3wj-6pc4-8qvx","products":[{"name":{"value":"nextcloud-server-33","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"33.0.9-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"nextcloud-server-33","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"33.0.9-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-q3wj-6pc4-8qvx","aliases":["CGA-q3wj-6pc4-8qvx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33.0.9-r1"}]}],"package":{"name":"nextcloud-server-33","purl":"pkg:apk/chainguard/nextcloud-server-33?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q3wj-6pc4-8qvx.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/nextcloud/build/frontend-legacy/package-lock.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T01:37:46Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33.0.9-r1"}]}],"package":{"name":"nextcloud-server-33","purl":"pkg:apk/wolfi/nextcloud-server-33?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q3wj-6pc4-8qvx.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/nextcloud/build/frontend-legacy/package-lock.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T01:37:46Z"}]}}],"modified":"2026-10-02T18:25:42.993272299Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:41ebafcb-e1f4-4aae-a562-eaf1d26cff2f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q3wj-6pc4-8qvx","advisory_id":"41ebafcb-e1f4-4aae-a562-eaf1d26cff2f","event_types":["advisory"],"published_at":"2026-10-25T22:36:17.097942+00:00","technologies":["core-osv","nextcloud-server-33"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:23:40+00:00","detail_url":"/advisories/advisory%3A41ebafcb-e1f4-4aae-a562-eaf1d26cff2f","group":{"id":"advisory:41ebafcb-e1f4-4aae-a562-eaf1d26cff2f","revision":1,"primary_event_id":71096,"change":"published","superseded_by":[],"changed":{"id":71096,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-q3wj-6pc4-8qvx","summary":"CGA-q3wj-6pc4-8qvx","evidence":"osv:CGA-q3wj-6pc4-8qvx","products":[{"name":{"value":"nextcloud-server-33","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"33.0.9-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"nextcloud-server-33","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"33.0.9-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-q3wj-6pc4-8qvx","aliases":["CGA-q3wj-6pc4-8qvx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33.0.9-r1"}]}],"package":{"name":"nextcloud-server-33","purl":"pkg:apk/chainguard/nextcloud-server-33?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q3wj-6pc4-8qvx.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/nextcloud/build/frontend-legacy/package-lock.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T01:37:46Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33.0.9-r1"}]}],"package":{"name":"nextcloud-server-33","purl":"pkg:apk/wolfi/nextcloud-server-33?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q3wj-6pc4-8qvx.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/nextcloud/build/frontend-legacy/package-lock.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T01:37:46Z"}]}}],"modified":"2026-10-02T18:25:42.993272299Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:41ebafcb-e1f4-4aae-a562-eaf1d26cff2f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q3wj-6pc4-8qvx","advisory_id":"41ebafcb-e1f4-4aae-a562-eaf1d26cff2f","event_types":["advisory"],"published_at":"2026-10-25T22:36:17.097942+00:00","technologies":["core-osv","nextcloud-server-33"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:23:40+00:00","detail_url":"/events/71096"},"members":[{"id":71096,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-q3wj-6pc4-8qvx","summary":"CGA-q3wj-6pc4-8qvx","evidence":"osv:CGA-q3wj-6pc4-8qvx","products":[{"name":{"value":"nextcloud-server-33","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"33.0.9-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"nextcloud-server-33","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"33.0.9-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-q3wj-6pc4-8qvx","aliases":["CGA-q3wj-6pc4-8qvx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33.0.9-r1"}]}],"package":{"name":"nextcloud-server-33","purl":"pkg:apk/chainguard/nextcloud-server-33?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q3wj-6pc4-8qvx.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/nextcloud/build/frontend-legacy/package-lock.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T01:37:46Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33.0.9-r1"}]}],"package":{"name":"nextcloud-server-33","purl":"pkg:apk/wolfi/nextcloud-server-33?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q3wj-6pc4-8qvx.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/nextcloud/build/frontend-legacy/package-lock.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T01:37:46Z"}]}}],"modified":"2026-10-02T18:25:42.993272299Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:41ebafcb-e1f4-4aae-a562-eaf1d26cff2f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q3wj-6pc4-8qvx","advisory_id":"41ebafcb-e1f4-4aae-a562-eaf1d26cff2f","event_types":["advisory"],"published_at":"2026-10-25T22:36:17.097942+00:00","technologies":["core-osv","nextcloud-server-33"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:23:40+00:00","detail_url":"/events/71096"}]}},{"id":70631,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-h3wv-mm93-225p","summary":"CGA-h3wv-mm93-225p","evidence":"osv:CGA-h3wv-mm93-225p","products":[{"name":{"value":"langfuse-fips-4-worker","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.49.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-h3wv-mm93-225p","aliases":["CGA-h3wv-mm93-225p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.49.0-r0"}]}],"package":{"name":"langfuse-fips-4-worker","purl":"pkg:apk/chainguard/langfuse-fips-4-worker?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h3wv-mm93-225p.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/pnpm-lock.yaml","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:20:26Z"}]}}],"modified":"2026-10-02T18:25:39.187761224Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:87c35927-dc46-47b3-89a4-c579e2108dfa","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-h3wv-mm93-225p","advisory_id":"87c35927-dc46-47b3-89a4-c579e2108dfa","event_types":["advisory"],"published_at":"2026-10-25T22:32:29.981206+00:00","technologies":["core-osv","langfuse-fips-4-worker"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:44:22+00:00","detail_url":"/advisories/advisory%3A87c35927-dc46-47b3-89a4-c579e2108dfa","group":{"id":"advisory:87c35927-dc46-47b3-89a4-c579e2108dfa","revision":1,"primary_event_id":71001,"change":"published","superseded_by":[],"changed":{"id":71001,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-h3wv-mm93-225p","summary":"CGA-h3wv-mm93-225p","evidence":"osv:CGA-h3wv-mm93-225p","products":[{"name":{"value":"langfuse-fips-4-worker","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.49.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-h3wv-mm93-225p","aliases":["CGA-h3wv-mm93-225p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.49.0-r0"}]}],"package":{"name":"langfuse-fips-4-worker","purl":"pkg:apk/chainguard/langfuse-fips-4-worker?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h3wv-mm93-225p.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/pnpm-lock.yaml","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:20:26Z"}]}}],"modified":"2026-10-02T18:25:39.187761224Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:87c35927-dc46-47b3-89a4-c579e2108dfa","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-h3wv-mm93-225p","advisory_id":"87c35927-dc46-47b3-89a4-c579e2108dfa","event_types":["advisory"],"published_at":"2026-10-25T22:32:29.981206+00:00","technologies":["core-osv","langfuse-fips-4-worker"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:44:22+00:00","detail_url":"/events/71001"},"members":[{"id":71001,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-h3wv-mm93-225p","summary":"CGA-h3wv-mm93-225p","evidence":"osv:CGA-h3wv-mm93-225p","products":[{"name":{"value":"langfuse-fips-4-worker","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.49.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-h3wv-mm93-225p","aliases":["CGA-h3wv-mm93-225p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.49.0-r0"}]}],"package":{"name":"langfuse-fips-4-worker","purl":"pkg:apk/chainguard/langfuse-fips-4-worker?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h3wv-mm93-225p.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/pnpm-lock.yaml","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:20:26Z"}]}}],"modified":"2026-10-02T18:25:39.187761224Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:87c35927-dc46-47b3-89a4-c579e2108dfa","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-h3wv-mm93-225p","advisory_id":"87c35927-dc46-47b3-89a4-c579e2108dfa","event_types":["advisory"],"published_at":"2026-10-25T22:32:29.981206+00:00","technologies":["core-osv","langfuse-fips-4-worker"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:44:22+00:00","detail_url":"/events/71001"}]}},{"id":70629,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-gwx2-f85p-2h7q","summary":"CGA-gwx2-f85p-2h7q","evidence":"osv:CGA-gwx2-f85p-2h7q","products":[{"name":{"value":"langfuse-fips-4","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.49.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gwx2-f85p-2h7q","aliases":["CGA-gwx2-f85p-2h7q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.49.0-r0"}]}],"package":{"name":"langfuse-fips-4","purl":"pkg:apk/chainguard/langfuse-fips-4?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gwx2-f85p-2h7q.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/node_modules/.pnpm/axios@1.18.0_debug@4.4.3_supports-color@8.1.1__supports-color@8.1.1/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:29:39Z"}]}}],"modified":"2026-10-02T18:25:38.991870356Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ea03a8c8-2f56-448b-8be4-54fd2acafc2a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gwx2-f85p-2h7q","advisory_id":"ea03a8c8-2f56-448b-8be4-54fd2acafc2a","event_types":["advisory"],"published_at":"2026-10-25T22:32:27.645579+00:00","technologies":["core-osv","langfuse-fips-4"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:09:24+00:00","detail_url":"/advisories/advisory%3Aea03a8c8-2f56-448b-8be4-54fd2acafc2a","group":{"id":"advisory:ea03a8c8-2f56-448b-8be4-54fd2acafc2a","revision":1,"primary_event_id":70999,"change":"published","superseded_by":[],"changed":{"id":70999,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-gwx2-f85p-2h7q","summary":"CGA-gwx2-f85p-2h7q","evidence":"osv:CGA-gwx2-f85p-2h7q","products":[{"name":{"value":"langfuse-fips-4","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.49.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gwx2-f85p-2h7q","aliases":["CGA-gwx2-f85p-2h7q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.49.0-r0"}]}],"package":{"name":"langfuse-fips-4","purl":"pkg:apk/chainguard/langfuse-fips-4?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gwx2-f85p-2h7q.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/node_modules/.pnpm/axios@1.18.0_debug@4.4.3_supports-color@8.1.1__supports-color@8.1.1/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:29:39Z"}]}}],"modified":"2026-10-02T18:25:38.991870356Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ea03a8c8-2f56-448b-8be4-54fd2acafc2a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gwx2-f85p-2h7q","advisory_id":"ea03a8c8-2f56-448b-8be4-54fd2acafc2a","event_types":["advisory"],"published_at":"2026-10-25T22:32:27.645579+00:00","technologies":["core-osv","langfuse-fips-4"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:09:24+00:00","detail_url":"/events/70999"},"members":[{"id":70999,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-gwx2-f85p-2h7q","summary":"CGA-gwx2-f85p-2h7q","evidence":"osv:CGA-gwx2-f85p-2h7q","products":[{"name":{"value":"langfuse-fips-4","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.49.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gwx2-f85p-2h7q","aliases":["CGA-gwx2-f85p-2h7q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.49.0-r0"}]}],"package":{"name":"langfuse-fips-4","purl":"pkg:apk/chainguard/langfuse-fips-4?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gwx2-f85p-2h7q.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/node_modules/.pnpm/axios@1.18.0_debug@4.4.3_supports-color@8.1.1__supports-color@8.1.1/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:29:39Z"}]}}],"modified":"2026-10-02T18:25:38.991870356Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ea03a8c8-2f56-448b-8be4-54fd2acafc2a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gwx2-f85p-2h7q","advisory_id":"ea03a8c8-2f56-448b-8be4-54fd2acafc2a","event_types":["advisory"],"published_at":"2026-10-25T22:32:27.645579+00:00","technologies":["core-osv","langfuse-fips-4"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:09:24+00:00","detail_url":"/events/70999"}]}},{"id":70487,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-7v56-mh2x-v93m","summary":"CGA-7v56-mh2x-v93m","evidence":"osv:CGA-7v56-mh2x-v93m","products":[{"name":{"value":"librechat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.7-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-7v56-mh2x-v93m","aliases":["CGA-7v56-mh2x-v93m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-r16"}]}],"package":{"name":"librechat","purl":"pkg:apk/chainguard/librechat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7v56-mh2x-v93m.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/package-lock.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:24:06Z"}]}}],"modified":"2026-10-02T18:25:31.835784346Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:dff69fda-3de8-4479-ac3c-b4e18509519b","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7v56-mh2x-v93m","advisory_id":"dff69fda-3de8-4479-ac3c-b4e18509519b","event_types":["advisory"],"published_at":"2026-10-25T22:26:29.139319+00:00","technologies":["core-osv","librechat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:56:26+00:00","detail_url":"/advisories/advisory%3Adff69fda-3de8-4479-ac3c-b4e18509519b","group":{"id":"advisory:dff69fda-3de8-4479-ac3c-b4e18509519b","revision":1,"primary_event_id":70857,"change":"published","superseded_by":[],"changed":{"id":70857,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-7v56-mh2x-v93m","summary":"CGA-7v56-mh2x-v93m","evidence":"osv:CGA-7v56-mh2x-v93m","products":[{"name":{"value":"librechat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.7-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-7v56-mh2x-v93m","aliases":["CGA-7v56-mh2x-v93m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-r16"}]}],"package":{"name":"librechat","purl":"pkg:apk/chainguard/librechat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7v56-mh2x-v93m.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/package-lock.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:24:06Z"}]}}],"modified":"2026-10-02T18:25:31.835784346Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:dff69fda-3de8-4479-ac3c-b4e18509519b","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7v56-mh2x-v93m","advisory_id":"dff69fda-3de8-4479-ac3c-b4e18509519b","event_types":["advisory"],"published_at":"2026-10-25T22:26:29.139319+00:00","technologies":["core-osv","librechat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:56:26+00:00","detail_url":"/events/70857"},"members":[{"id":70857,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-7v56-mh2x-v93m","summary":"CGA-7v56-mh2x-v93m","evidence":"osv:CGA-7v56-mh2x-v93m","products":[{"name":{"value":"librechat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.7-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-7v56-mh2x-v93m","aliases":["CGA-7v56-mh2x-v93m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-r16"}]}],"package":{"name":"librechat","purl":"pkg:apk/chainguard/librechat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7v56-mh2x-v93m.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/package-lock.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:24:06Z"}]}}],"modified":"2026-10-02T18:25:31.835784346Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:dff69fda-3de8-4479-ac3c-b4e18509519b","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7v56-mh2x-v93m","advisory_id":"dff69fda-3de8-4479-ac3c-b4e18509519b","event_types":["advisory"],"published_at":"2026-10-25T22:26:29.139319+00:00","technologies":["core-osv","librechat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:56:26+00:00","detail_url":"/events/70857"}]}},{"id":69974,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"MINI-vq4g-f7fg-g3r3","summary":"MINI-vq4g-f7fg-g3r3","evidence":"osv:MINI-vq4g-f7fg-g3r3","products":[{"name":{"value":"unleash-server","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.2.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-vq4g-f7fg-g3r3","aliases":["MINI-vq4g-f7fg-g3r3"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.0-r0"}]}],"package":{"name":"unleash-server","purl":"pkg:apk/minimos/unleash-server","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-vq4g-f7fg-g3r3.json"}}],"modified":"2026-10-02T18:23:30.495901166Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":[]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:09e29b78-8953-40ff-9e03-8cfb8700c58b","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-vq4g-f7fg-g3r3","advisory_id":"09e29b78-8953-40ff-9e03-8cfb8700c58b","event_types":["advisory"],"published_at":"2026-10-25T22:11:11.064753+00:00","technologies":["core-osv","unleash-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:12:26+00:00","detail_url":"/advisories/advisory%3A09e29b78-8953-40ff-9e03-8cfb8700c58b","group":{"id":"advisory:09e29b78-8953-40ff-9e03-8cfb8700c58b","revision":1,"primary_event_id":70344,"change":"published","superseded_by":[],"changed":{"id":70344,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"MINI-vq4g-f7fg-g3r3","summary":"MINI-vq4g-f7fg-g3r3","evidence":"osv:MINI-vq4g-f7fg-g3r3","products":[{"name":{"value":"unleash-server","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.2.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-vq4g-f7fg-g3r3","aliases":["MINI-vq4g-f7fg-g3r3"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.0-r0"}]}],"package":{"name":"unleash-server","purl":"pkg:apk/minimos/unleash-server","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-vq4g-f7fg-g3r3.json"}}],"modified":"2026-10-02T18:23:30.495901166Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":[]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:09e29b78-8953-40ff-9e03-8cfb8700c58b","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-vq4g-f7fg-g3r3","advisory_id":"09e29b78-8953-40ff-9e03-8cfb8700c58b","event_types":["advisory"],"published_at":"2026-10-25T22:11:11.064753+00:00","technologies":["core-osv","unleash-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:12:26+00:00","detail_url":"/events/70344"},"members":[{"id":70344,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"MINI-vq4g-f7fg-g3r3","summary":"MINI-vq4g-f7fg-g3r3","evidence":"osv:MINI-vq4g-f7fg-g3r3","products":[{"name":{"value":"unleash-server","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.2.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-vq4g-f7fg-g3r3","aliases":["MINI-vq4g-f7fg-g3r3"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.0-r0"}]}],"package":{"name":"unleash-server","purl":"pkg:apk/minimos/unleash-server","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-vq4g-f7fg-g3r3.json"}}],"modified":"2026-10-02T18:23:30.495901166Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":[]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:09e29b78-8953-40ff-9e03-8cfb8700c58b","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-vq4g-f7fg-g3r3","advisory_id":"09e29b78-8953-40ff-9e03-8cfb8700c58b","event_types":["advisory"],"published_at":"2026-10-25T22:11:11.064753+00:00","technologies":["core-osv","unleash-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:12:26+00:00","detail_url":"/events/70344"}]}},{"id":69733,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-x73g-mfhg-q2j6","summary":"CGA-x73g-mfhg-q2j6","evidence":"osv:CGA-x73g-mfhg-q2j6","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x73g-mfhg-q2j6","aliases":["CGA-x73g-mfhg-q2j6"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x73g-mfhg-q2j6.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T11:10:34Z"}]}}],"modified":"2026-10-02T17:16:50.434017331Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:76aded5e-e48d-499d-8486-f24ab5f1bc8e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x73g-mfhg-q2j6","advisory_id":"76aded5e-e48d-499d-8486-f24ab5f1bc8e","event_types":["advisory"],"published_at":"2026-10-25T22:06:29.015497+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:43:13+00:00","detail_url":"/advisories/advisory%3A76aded5e-e48d-499d-8486-f24ab5f1bc8e","group":{"id":"advisory:76aded5e-e48d-499d-8486-f24ab5f1bc8e","revision":1,"primary_event_id":70103,"change":"published","superseded_by":[],"changed":{"id":70103,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-x73g-mfhg-q2j6","summary":"CGA-x73g-mfhg-q2j6","evidence":"osv:CGA-x73g-mfhg-q2j6","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x73g-mfhg-q2j6","aliases":["CGA-x73g-mfhg-q2j6"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x73g-mfhg-q2j6.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T11:10:34Z"}]}}],"modified":"2026-10-02T17:16:50.434017331Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:76aded5e-e48d-499d-8486-f24ab5f1bc8e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x73g-mfhg-q2j6","advisory_id":"76aded5e-e48d-499d-8486-f24ab5f1bc8e","event_types":["advisory"],"published_at":"2026-10-25T22:06:29.015497+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:43:13+00:00","detail_url":"/events/70103"},"members":[{"id":70103,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-x73g-mfhg-q2j6","summary":"CGA-x73g-mfhg-q2j6","evidence":"osv:CGA-x73g-mfhg-q2j6","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x73g-mfhg-q2j6","aliases":["CGA-x73g-mfhg-q2j6"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x73g-mfhg-q2j6.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T11:10:34Z"}]}}],"modified":"2026-10-02T17:16:50.434017331Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:76aded5e-e48d-499d-8486-f24ab5f1bc8e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x73g-mfhg-q2j6","advisory_id":"76aded5e-e48d-499d-8486-f24ab5f1bc8e","event_types":["advisory"],"published_at":"2026-10-25T22:06:29.015497+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:43:13+00:00","detail_url":"/events/70103"}]}},{"id":69723,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-wr89-j265-rm9p","summary":"CGA-wr89-j265-rm9p","evidence":"osv:CGA-wr89-j265-rm9p","products":[{"name":{"value":"airflow-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wr89-j265-rm9p","aliases":["CGA-wr89-j265-rm9p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-2","purl":"pkg:apk/chainguard/airflow-2?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wr89-j265-rm9p.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.13.6","component_type":"npm","component_version":"1.13.6","component_location":"/opt/airflow/lib/python3.12/site-packages/airflow/www/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:18:42Z"}]}}],"modified":"2026-10-02T17:16:49.969646466Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e788f713-4fe0-4356-85bb-b825284deb18","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wr89-j265-rm9p","advisory_id":"e788f713-4fe0-4356-85bb-b825284deb18","event_types":["advisory"],"published_at":"2026-10-25T22:06:18.5595+00:00","technologies":["airflow-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:32:25+00:00","detail_url":"/advisories/advisory%3Ae788f713-4fe0-4356-85bb-b825284deb18","group":{"id":"advisory:e788f713-4fe0-4356-85bb-b825284deb18","revision":1,"primary_event_id":70093,"change":"published","superseded_by":[],"changed":{"id":70093,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-wr89-j265-rm9p","summary":"CGA-wr89-j265-rm9p","evidence":"osv:CGA-wr89-j265-rm9p","products":[{"name":{"value":"airflow-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wr89-j265-rm9p","aliases":["CGA-wr89-j265-rm9p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-2","purl":"pkg:apk/chainguard/airflow-2?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wr89-j265-rm9p.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.13.6","component_type":"npm","component_version":"1.13.6","component_location":"/opt/airflow/lib/python3.12/site-packages/airflow/www/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:18:42Z"}]}}],"modified":"2026-10-02T17:16:49.969646466Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e788f713-4fe0-4356-85bb-b825284deb18","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wr89-j265-rm9p","advisory_id":"e788f713-4fe0-4356-85bb-b825284deb18","event_types":["advisory"],"published_at":"2026-10-25T22:06:18.5595+00:00","technologies":["airflow-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:32:25+00:00","detail_url":"/events/70093"},"members":[{"id":70093,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-wr89-j265-rm9p","summary":"CGA-wr89-j265-rm9p","evidence":"osv:CGA-wr89-j265-rm9p","products":[{"name":{"value":"airflow-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wr89-j265-rm9p","aliases":["CGA-wr89-j265-rm9p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-2","purl":"pkg:apk/chainguard/airflow-2?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wr89-j265-rm9p.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.13.6","component_type":"npm","component_version":"1.13.6","component_location":"/opt/airflow/lib/python3.12/site-packages/airflow/www/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:18:42Z"}]}}],"modified":"2026-10-02T17:16:49.969646466Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e788f713-4fe0-4356-85bb-b825284deb18","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wr89-j265-rm9p","advisory_id":"e788f713-4fe0-4356-85bb-b825284deb18","event_types":["advisory"],"published_at":"2026-10-25T22:06:18.5595+00:00","technologies":["airflow-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:32:25+00:00","detail_url":"/events/70093"}]}},{"id":69715,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-w4xj-q4x4-8x7m","summary":"CGA-w4xj-q4x4-8x7m","evidence":"osv:CGA-w4xj-q4x4-8x7m","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-w4xj-q4x4-8x7m","aliases":["CGA-w4xj-q4x4-8x7m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w4xj-q4x4-8x7m.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T11:10:27Z"}]}}],"modified":"2026-10-02T17:16:49.177073404Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ef30cff6-517f-4408-b262-452f396605c0","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w4xj-q4x4-8x7m","advisory_id":"ef30cff6-517f-4408-b262-452f396605c0","event_types":["advisory"],"published_at":"2026-10-25T22:06:08.864059+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:43:17+00:00","detail_url":"/advisories/advisory%3Aef30cff6-517f-4408-b262-452f396605c0","group":{"id":"advisory:ef30cff6-517f-4408-b262-452f396605c0","revision":1,"primary_event_id":70085,"change":"published","superseded_by":[],"changed":{"id":70085,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-w4xj-q4x4-8x7m","summary":"CGA-w4xj-q4x4-8x7m","evidence":"osv:CGA-w4xj-q4x4-8x7m","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-w4xj-q4x4-8x7m","aliases":["CGA-w4xj-q4x4-8x7m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w4xj-q4x4-8x7m.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T11:10:27Z"}]}}],"modified":"2026-10-02T17:16:49.177073404Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ef30cff6-517f-4408-b262-452f396605c0","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w4xj-q4x4-8x7m","advisory_id":"ef30cff6-517f-4408-b262-452f396605c0","event_types":["advisory"],"published_at":"2026-10-25T22:06:08.864059+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:43:17+00:00","detail_url":"/events/70085"},"members":[{"id":70085,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-w4xj-q4x4-8x7m","summary":"CGA-w4xj-q4x4-8x7m","evidence":"osv:CGA-w4xj-q4x4-8x7m","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-w4xj-q4x4-8x7m","aliases":["CGA-w4xj-q4x4-8x7m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w4xj-q4x4-8x7m.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T11:10:27Z"}]}}],"modified":"2026-10-02T17:16:49.177073404Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ef30cff6-517f-4408-b262-452f396605c0","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w4xj-q4x4-8x7m","advisory_id":"ef30cff6-517f-4408-b262-452f396605c0","event_types":["advisory"],"published_at":"2026-10-25T22:06:08.864059+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:43:17+00:00","detail_url":"/events/70085"}]}}],"next_after":73182,"next_before":69715}