{"schema_version":"2","view":"grouped","data":[{"id":73175,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-6ccm-3pr5-w3rg","summary":"CGA-6ccm-3pr5-w3rg","evidence":"osv:CGA-6ccm-3pr5-w3rg","products":[{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6ccm-3pr5-w3rg","aliases":["CGA-6ccm-3pr5-w3rg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/chainguard/opensearch-dashboards-3?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6ccm-3pr5-w3rg.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:50:34Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/wolfi/opensearch-dashboards-3?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6ccm-3pr5-w3rg.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:50:34Z"}]}}],"modified":"2026-10-03T10:42:44.716145096Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5d803983-67bc-4b0d-9e96-792249b5cdbf","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6ccm-3pr5-w3rg","advisory_id":"5d803983-67bc-4b0d-9e96-792249b5cdbf","event_types":["advisory"],"published_at":"2026-10-26T03:37:51.448762+00:00","technologies":["core-osv","opensearch-dashboards-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T05:07:13+00:00","detail_url":"/advisories/advisory%3A5d803983-67bc-4b0d-9e96-792249b5cdbf","group":{"id":"advisory:5d803983-67bc-4b0d-9e96-792249b5cdbf","revision":1,"primary_event_id":75190,"change":"published","superseded_by":[],"changed":{"id":75190,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-6ccm-3pr5-w3rg","summary":"CGA-6ccm-3pr5-w3rg","evidence":"osv:CGA-6ccm-3pr5-w3rg","products":[{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6ccm-3pr5-w3rg","aliases":["CGA-6ccm-3pr5-w3rg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/chainguard/opensearch-dashboards-3?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6ccm-3pr5-w3rg.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:50:34Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/wolfi/opensearch-dashboards-3?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6ccm-3pr5-w3rg.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:50:34Z"}]}}],"modified":"2026-10-03T10:42:44.716145096Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5d803983-67bc-4b0d-9e96-792249b5cdbf","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6ccm-3pr5-w3rg","advisory_id":"5d803983-67bc-4b0d-9e96-792249b5cdbf","event_types":["advisory"],"published_at":"2026-10-26T03:37:51.448762+00:00","technologies":["core-osv","opensearch-dashboards-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T05:07:13+00:00","detail_url":"/events/75190"},"members":[{"id":75190,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-6ccm-3pr5-w3rg","summary":"CGA-6ccm-3pr5-w3rg","evidence":"osv:CGA-6ccm-3pr5-w3rg","products":[{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6ccm-3pr5-w3rg","aliases":["CGA-6ccm-3pr5-w3rg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/chainguard/opensearch-dashboards-3?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6ccm-3pr5-w3rg.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:50:34Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/wolfi/opensearch-dashboards-3?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6ccm-3pr5-w3rg.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:50:34Z"}]}}],"modified":"2026-10-03T10:42:44.716145096Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5d803983-67bc-4b0d-9e96-792249b5cdbf","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6ccm-3pr5-w3rg","advisory_id":"5d803983-67bc-4b0d-9e96-792249b5cdbf","event_types":["advisory"],"published_at":"2026-10-26T03:37:51.448762+00:00","technologies":["core-osv","opensearch-dashboards-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T05:07:13+00:00","detail_url":"/events/75190"}]}},{"id":73095,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-rfq9-gj46-6g3v","summary":"CGA-rfq9-gj46-6g3v","evidence":"osv:CGA-rfq9-gj46-6g3v","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rfq9-gj46-6g3v","aliases":["CGA-rfq9-gj46-6g3v"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rfq9-gj46-6g3v.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:08Z"}]}}],"modified":"2026-10-03T10:32:47.652336082Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:fd938e25-ffc3-48c8-9107-45022ca671d5","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rfq9-gj46-6g3v","advisory_id":"fd938e25-ffc3-48c8-9107-45022ca671d5","event_types":["advisory"],"published_at":"2026-10-26T02:52:10.750075+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:53+00:00","detail_url":"/advisories/advisory%3Afd938e25-ffc3-48c8-9107-45022ca671d5","group":{"id":"advisory:fd938e25-ffc3-48c8-9107-45022ca671d5","revision":1,"primary_event_id":74750,"change":"published","superseded_by":[],"changed":{"id":74750,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-rfq9-gj46-6g3v","summary":"CGA-rfq9-gj46-6g3v","evidence":"osv:CGA-rfq9-gj46-6g3v","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rfq9-gj46-6g3v","aliases":["CGA-rfq9-gj46-6g3v"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rfq9-gj46-6g3v.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:08Z"}]}}],"modified":"2026-10-03T10:32:47.652336082Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:fd938e25-ffc3-48c8-9107-45022ca671d5","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rfq9-gj46-6g3v","advisory_id":"fd938e25-ffc3-48c8-9107-45022ca671d5","event_types":["advisory"],"published_at":"2026-10-26T02:52:10.750075+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:53+00:00","detail_url":"/events/74750"},"members":[{"id":74750,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-rfq9-gj46-6g3v","summary":"CGA-rfq9-gj46-6g3v","evidence":"osv:CGA-rfq9-gj46-6g3v","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rfq9-gj46-6g3v","aliases":["CGA-rfq9-gj46-6g3v"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rfq9-gj46-6g3v.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:08Z"}]}}],"modified":"2026-10-03T10:32:47.652336082Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:fd938e25-ffc3-48c8-9107-45022ca671d5","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rfq9-gj46-6g3v","advisory_id":"fd938e25-ffc3-48c8-9107-45022ca671d5","event_types":["advisory"],"published_at":"2026-10-26T02:52:10.750075+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:53+00:00","detail_url":"/events/74750"}]}},{"id":73079,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-r5r2-2xf2-8hcg","summary":"CGA-r5r2-2xf2-8hcg","evidence":"osv:CGA-r5r2-2xf2-8hcg","products":[{"name":{"value":"prism","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"prism","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-r5r2-2xf2-8hcg","aliases":["CGA-r5r2-2xf2-8hcg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/chainguard/prism?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r5r2-2xf2-8hcg.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T00:58:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/wolfi/prism?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r5r2-2xf2-8hcg.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T00:58:28Z"}]}}],"modified":"2026-10-03T10:32:47.147564366Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9c73dc1b-bcf5-4b2d-8598-1c3568e81ce9","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-r5r2-2xf2-8hcg","advisory_id":"9c73dc1b-bcf5-4b2d-8598-1c3568e81ce9","event_types":["advisory"],"published_at":"2026-10-26T02:46:15.881045+00:00","technologies":["core-osv","prism"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:54:23+00:00","detail_url":"/advisories/advisory%3A9c73dc1b-bcf5-4b2d-8598-1c3568e81ce9","group":{"id":"advisory:9c73dc1b-bcf5-4b2d-8598-1c3568e81ce9","revision":1,"primary_event_id":74683,"change":"published","superseded_by":[],"changed":{"id":74683,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-r5r2-2xf2-8hcg","summary":"CGA-r5r2-2xf2-8hcg","evidence":"osv:CGA-r5r2-2xf2-8hcg","products":[{"name":{"value":"prism","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"prism","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-r5r2-2xf2-8hcg","aliases":["CGA-r5r2-2xf2-8hcg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/chainguard/prism?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r5r2-2xf2-8hcg.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T00:58:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/wolfi/prism?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r5r2-2xf2-8hcg.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T00:58:28Z"}]}}],"modified":"2026-10-03T10:32:47.147564366Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9c73dc1b-bcf5-4b2d-8598-1c3568e81ce9","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-r5r2-2xf2-8hcg","advisory_id":"9c73dc1b-bcf5-4b2d-8598-1c3568e81ce9","event_types":["advisory"],"published_at":"2026-10-26T02:46:15.881045+00:00","technologies":["core-osv","prism"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:54:23+00:00","detail_url":"/events/74683"},"members":[{"id":74683,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-r5r2-2xf2-8hcg","summary":"CGA-r5r2-2xf2-8hcg","evidence":"osv:CGA-r5r2-2xf2-8hcg","products":[{"name":{"value":"prism","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"prism","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-r5r2-2xf2-8hcg","aliases":["CGA-r5r2-2xf2-8hcg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/chainguard/prism?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r5r2-2xf2-8hcg.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T00:58:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/wolfi/prism?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r5r2-2xf2-8hcg.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T00:58:28Z"}]}}],"modified":"2026-10-03T10:32:47.147564366Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9c73dc1b-bcf5-4b2d-8598-1c3568e81ce9","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-r5r2-2xf2-8hcg","advisory_id":"9c73dc1b-bcf5-4b2d-8598-1c3568e81ce9","event_types":["advisory"],"published_at":"2026-10-26T02:46:15.881045+00:00","technologies":["core-osv","prism"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:54:23+00:00","detail_url":"/events/74683"}]}},{"id":73060,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-q77j-x379-8p3c","summary":"CGA-q77j-x379-8p3c","evidence":"osv:CGA-q77j-x379-8p3c","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-q77j-x379-8p3c","aliases":["CGA-q77j-x379-8p3c"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q77j-x379-8p3c.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:14Z"}]}}],"modified":"2026-10-03T10:32:46.437590179Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:fc38d1f9-3de2-45c3-9c4b-18308c19adc7","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q77j-x379-8p3c","advisory_id":"fc38d1f9-3de2-45c3-9c4b-18308c19adc7","event_types":["advisory"],"published_at":"2026-10-26T02:37:20.711574+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:46+00:00","detail_url":"/advisories/advisory%3Afc38d1f9-3de2-45c3-9c4b-18308c19adc7","group":{"id":"advisory:fc38d1f9-3de2-45c3-9c4b-18308c19adc7","revision":1,"primary_event_id":74596,"change":"published","superseded_by":[],"changed":{"id":74596,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-q77j-x379-8p3c","summary":"CGA-q77j-x379-8p3c","evidence":"osv:CGA-q77j-x379-8p3c","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-q77j-x379-8p3c","aliases":["CGA-q77j-x379-8p3c"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q77j-x379-8p3c.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:14Z"}]}}],"modified":"2026-10-03T10:32:46.437590179Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:fc38d1f9-3de2-45c3-9c4b-18308c19adc7","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q77j-x379-8p3c","advisory_id":"fc38d1f9-3de2-45c3-9c4b-18308c19adc7","event_types":["advisory"],"published_at":"2026-10-26T02:37:20.711574+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:46+00:00","detail_url":"/events/74596"},"members":[{"id":74596,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-q77j-x379-8p3c","summary":"CGA-q77j-x379-8p3c","evidence":"osv:CGA-q77j-x379-8p3c","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-q77j-x379-8p3c","aliases":["CGA-q77j-x379-8p3c"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q77j-x379-8p3c.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:14Z"}]}}],"modified":"2026-10-03T10:32:46.437590179Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:fc38d1f9-3de2-45c3-9c4b-18308c19adc7","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q77j-x379-8p3c","advisory_id":"fc38d1f9-3de2-45c3-9c4b-18308c19adc7","event_types":["advisory"],"published_at":"2026-10-26T02:37:20.711574+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:46+00:00","detail_url":"/events/74596"}]}},{"id":72998,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-jmhf-6xgq-v56v","summary":"CGA-jmhf-6xgq-v56v","evidence":"osv:CGA-jmhf-6xgq-v56v","products":[{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-jmhf-6xgq-v56v","aliases":["CGA-jmhf-6xgq-v56v"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/chainguard/opensearch-dashboards-3?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jmhf-6xgq-v56v.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:10:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/wolfi/opensearch-dashboards-3?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jmhf-6xgq-v56v.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:10:30Z"}]}}],"modified":"2026-10-03T10:32:43.902212446Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ea181743-a56e-4486-a4e4-a6725b0cc460","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jmhf-6xgq-v56v","advisory_id":"ea181743-a56e-4486-a4e4-a6725b0cc460","event_types":["advisory"],"published_at":"2026-10-26T02:12:22.554297+00:00","technologies":["core-osv","opensearch-dashboards-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:20:12+00:00","detail_url":"/advisories/advisory%3Aea181743-a56e-4486-a4e4-a6725b0cc460","group":{"id":"advisory:ea181743-a56e-4486-a4e4-a6725b0cc460","revision":1,"primary_event_id":74319,"change":"published","superseded_by":[],"changed":{"id":74319,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-jmhf-6xgq-v56v","summary":"CGA-jmhf-6xgq-v56v","evidence":"osv:CGA-jmhf-6xgq-v56v","products":[{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-jmhf-6xgq-v56v","aliases":["CGA-jmhf-6xgq-v56v"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/chainguard/opensearch-dashboards-3?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jmhf-6xgq-v56v.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:10:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/wolfi/opensearch-dashboards-3?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jmhf-6xgq-v56v.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:10:30Z"}]}}],"modified":"2026-10-03T10:32:43.902212446Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ea181743-a56e-4486-a4e4-a6725b0cc460","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jmhf-6xgq-v56v","advisory_id":"ea181743-a56e-4486-a4e4-a6725b0cc460","event_types":["advisory"],"published_at":"2026-10-26T02:12:22.554297+00:00","technologies":["core-osv","opensearch-dashboards-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:20:12+00:00","detail_url":"/events/74319"},"members":[{"id":74319,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-jmhf-6xgq-v56v","summary":"CGA-jmhf-6xgq-v56v","evidence":"osv:CGA-jmhf-6xgq-v56v","products":[{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-jmhf-6xgq-v56v","aliases":["CGA-jmhf-6xgq-v56v"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/chainguard/opensearch-dashboards-3?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jmhf-6xgq-v56v.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:10:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/wolfi/opensearch-dashboards-3?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jmhf-6xgq-v56v.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:10:30Z"}]}}],"modified":"2026-10-03T10:32:43.902212446Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ea181743-a56e-4486-a4e4-a6725b0cc460","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jmhf-6xgq-v56v","advisory_id":"ea181743-a56e-4486-a4e4-a6725b0cc460","event_types":["advisory"],"published_at":"2026-10-26T02:12:22.554297+00:00","technologies":["core-osv","opensearch-dashboards-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:20:12+00:00","detail_url":"/events/74319"}]}},{"id":72994,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-hwpm-4gv9-vf8v","summary":"CGA-hwpm-4gv9-vf8v","evidence":"osv:CGA-hwpm-4gv9-vf8v","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hwpm-4gv9-vf8v","aliases":["CGA-hwpm-4gv9-vf8v"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hwpm-4gv9-vf8v.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:15Z"}]}}],"modified":"2026-10-03T10:32:43.134790074Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8d60992d-efd2-4377-bb6b-5aa06b7a7498","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hwpm-4gv9-vf8v","advisory_id":"8d60992d-efd2-4377-bb6b-5aa06b7a7498","event_types":["advisory"],"published_at":"2026-10-26T02:08:06.485005+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:50+00:00","detail_url":"/advisories/advisory%3A8d60992d-efd2-4377-bb6b-5aa06b7a7498","group":{"id":"advisory:8d60992d-efd2-4377-bb6b-5aa06b7a7498","revision":1,"primary_event_id":74273,"change":"published","superseded_by":[],"changed":{"id":74273,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-hwpm-4gv9-vf8v","summary":"CGA-hwpm-4gv9-vf8v","evidence":"osv:CGA-hwpm-4gv9-vf8v","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hwpm-4gv9-vf8v","aliases":["CGA-hwpm-4gv9-vf8v"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hwpm-4gv9-vf8v.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:15Z"}]}}],"modified":"2026-10-03T10:32:43.134790074Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8d60992d-efd2-4377-bb6b-5aa06b7a7498","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hwpm-4gv9-vf8v","advisory_id":"8d60992d-efd2-4377-bb6b-5aa06b7a7498","event_types":["advisory"],"published_at":"2026-10-26T02:08:06.485005+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:50+00:00","detail_url":"/events/74273"},"members":[{"id":74273,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-hwpm-4gv9-vf8v","summary":"CGA-hwpm-4gv9-vf8v","evidence":"osv:CGA-hwpm-4gv9-vf8v","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hwpm-4gv9-vf8v","aliases":["CGA-hwpm-4gv9-vf8v"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hwpm-4gv9-vf8v.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:15Z"}]}}],"modified":"2026-10-03T10:32:43.134790074Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8d60992d-efd2-4377-bb6b-5aa06b7a7498","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hwpm-4gv9-vf8v","advisory_id":"8d60992d-efd2-4377-bb6b-5aa06b7a7498","event_types":["advisory"],"published_at":"2026-10-26T02:08:06.485005+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:50+00:00","detail_url":"/events/74273"}]}},{"id":72803,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-8fvf-5fcw-g95j","summary":"CGA-8fvf-5fcw-g95j","evidence":"osv:CGA-8fvf-5fcw-g95j","products":[{"name":{"value":"prism","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"prism","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8fvf-5fcw-g95j","aliases":["CGA-8fvf-5fcw-g95j"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/chainguard/prism?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8fvf-5fcw-g95j.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:28:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/wolfi/prism?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8fvf-5fcw-g95j.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:28:27Z"}]}}],"modified":"2026-10-03T10:32:36.484242208Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7dfc0edf-eada-404c-8fcb-264b53943e19","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8fvf-5fcw-g95j","advisory_id":"7dfc0edf-eada-404c-8fcb-264b53943e19","event_types":["advisory"],"published_at":"2026-10-26T01:08:17.812356+00:00","technologies":["core-osv","prism"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:38:29+00:00","detail_url":"/advisories/advisory%3A7dfc0edf-eada-404c-8fcb-264b53943e19","group":{"id":"advisory:7dfc0edf-eada-404c-8fcb-264b53943e19","revision":1,"primary_event_id":73628,"change":"published","superseded_by":[],"changed":{"id":73628,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-8fvf-5fcw-g95j","summary":"CGA-8fvf-5fcw-g95j","evidence":"osv:CGA-8fvf-5fcw-g95j","products":[{"name":{"value":"prism","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"prism","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8fvf-5fcw-g95j","aliases":["CGA-8fvf-5fcw-g95j"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/chainguard/prism?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8fvf-5fcw-g95j.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:28:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/wolfi/prism?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8fvf-5fcw-g95j.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:28:27Z"}]}}],"modified":"2026-10-03T10:32:36.484242208Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7dfc0edf-eada-404c-8fcb-264b53943e19","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8fvf-5fcw-g95j","advisory_id":"7dfc0edf-eada-404c-8fcb-264b53943e19","event_types":["advisory"],"published_at":"2026-10-26T01:08:17.812356+00:00","technologies":["core-osv","prism"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:38:29+00:00","detail_url":"/events/73628"},"members":[{"id":73628,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-8fvf-5fcw-g95j","summary":"CGA-8fvf-5fcw-g95j","evidence":"osv:CGA-8fvf-5fcw-g95j","products":[{"name":{"value":"prism","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"prism","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8fvf-5fcw-g95j","aliases":["CGA-8fvf-5fcw-g95j"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/chainguard/prism?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8fvf-5fcw-g95j.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:28:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/wolfi/prism?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8fvf-5fcw-g95j.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:28:27Z"}]}}],"modified":"2026-10-03T10:32:36.484242208Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7dfc0edf-eada-404c-8fcb-264b53943e19","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8fvf-5fcw-g95j","advisory_id":"7dfc0edf-eada-404c-8fcb-264b53943e19","event_types":["advisory"],"published_at":"2026-10-26T01:08:17.812356+00:00","technologies":["core-osv","prism"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:38:29+00:00","detail_url":"/events/73628"}]}},{"id":72794,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-8432-55pc-wj97","summary":"CGA-8432-55pc-wj97","evidence":"osv:CGA-8432-55pc-wj97","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8432-55pc-wj97","aliases":["CGA-8432-55pc-wj97"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8432-55pc-wj97.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:33:42Z"}]}}],"modified":"2026-10-03T10:32:36.090162219Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:85fc95d3-a033-478a-9860-9c7d900f3079","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8432-55pc-wj97","advisory_id":"85fc95d3-a033-478a-9860-9c7d900f3079","event_types":["advisory"],"published_at":"2026-10-26T01:07:24.364288+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:22:29+00:00","detail_url":"/advisories/advisory%3A85fc95d3-a033-478a-9860-9c7d900f3079","group":{"id":"advisory:85fc95d3-a033-478a-9860-9c7d900f3079","revision":1,"primary_event_id":73617,"change":"published","superseded_by":[],"changed":{"id":73617,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-8432-55pc-wj97","summary":"CGA-8432-55pc-wj97","evidence":"osv:CGA-8432-55pc-wj97","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8432-55pc-wj97","aliases":["CGA-8432-55pc-wj97"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8432-55pc-wj97.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:33:42Z"}]}}],"modified":"2026-10-03T10:32:36.090162219Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:85fc95d3-a033-478a-9860-9c7d900f3079","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8432-55pc-wj97","advisory_id":"85fc95d3-a033-478a-9860-9c7d900f3079","event_types":["advisory"],"published_at":"2026-10-26T01:07:24.364288+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:22:29+00:00","detail_url":"/events/73617"},"members":[{"id":73617,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-8432-55pc-wj97","summary":"CGA-8432-55pc-wj97","evidence":"osv:CGA-8432-55pc-wj97","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8432-55pc-wj97","aliases":["CGA-8432-55pc-wj97"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8432-55pc-wj97.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:33:42Z"}]}}],"modified":"2026-10-03T10:32:36.090162219Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:85fc95d3-a033-478a-9860-9c7d900f3079","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8432-55pc-wj97","advisory_id":"85fc95d3-a033-478a-9860-9c7d900f3079","event_types":["advisory"],"published_at":"2026-10-26T01:07:24.364288+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:22:29+00:00","detail_url":"/events/73617"}]}},{"id":72766,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-7fj6-r494-p7r5","summary":"CGA-7fj6-r494-p7r5","evidence":"osv:CGA-7fj6-r494-p7r5","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-7fj6-r494-p7r5","aliases":["CGA-7fj6-r494-p7r5"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7fj6-r494-p7r5.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:15:35Z"}]}}],"modified":"2026-10-03T10:32:35.230538123Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c2a2650b-f62a-4e67-9e40-f8cb6a22be43","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7fj6-r494-p7r5","advisory_id":"c2a2650b-f62a-4e67-9e40-f8cb6a22be43","event_types":["advisory"],"published_at":"2026-10-26T01:02:26.257104+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:30:03+00:00","detail_url":"/advisories/advisory%3Ac2a2650b-f62a-4e67-9e40-f8cb6a22be43","group":{"id":"advisory:c2a2650b-f62a-4e67-9e40-f8cb6a22be43","revision":1,"primary_event_id":73560,"change":"published","superseded_by":[],"changed":{"id":73560,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-7fj6-r494-p7r5","summary":"CGA-7fj6-r494-p7r5","evidence":"osv:CGA-7fj6-r494-p7r5","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-7fj6-r494-p7r5","aliases":["CGA-7fj6-r494-p7r5"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7fj6-r494-p7r5.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:15:35Z"}]}}],"modified":"2026-10-03T10:32:35.230538123Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c2a2650b-f62a-4e67-9e40-f8cb6a22be43","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7fj6-r494-p7r5","advisory_id":"c2a2650b-f62a-4e67-9e40-f8cb6a22be43","event_types":["advisory"],"published_at":"2026-10-26T01:02:26.257104+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:30:03+00:00","detail_url":"/events/73560"},"members":[{"id":73560,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-7fj6-r494-p7r5","summary":"CGA-7fj6-r494-p7r5","evidence":"osv:CGA-7fj6-r494-p7r5","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-7fj6-r494-p7r5","aliases":["CGA-7fj6-r494-p7r5"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7fj6-r494-p7r5.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:15:35Z"}]}}],"modified":"2026-10-03T10:32:35.230538123Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c2a2650b-f62a-4e67-9e40-f8cb6a22be43","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7fj6-r494-p7r5","advisory_id":"c2a2650b-f62a-4e67-9e40-f8cb6a22be43","event_types":["advisory"],"published_at":"2026-10-26T01:02:26.257104+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:30:03+00:00","detail_url":"/events/73560"}]}},{"id":72742,"cve_ids":["CVE-2026-101898","CVE-2026-101900","CVE-2026-101901","CVE-2026-101902","CVE-2026-101903","CVE-2026-101904","CVE-2026-101905","CVE-2026-101906","CVE-2026-101907","CVE-2026-101908","CVE-2026-101909"],"payload":{"kind":"advisory","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","evidence":"osv:RHSA-2026:74872","products":[{"name":{"value":"grafana13.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:13.2.1-0.9.hum1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"RHSA-2026:74872","aliases":["RHSA-2026:74872"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.2.1-0.9.hum1"}]}],"package":{"name":"grafana13.2","purl":"pkg:rpm/redhat/grafana13.2","ecosystem":"Red Hat:hummingbird:1"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:74872.json"}}],"modified":"2026-10-03T10:32:34.608460980Z","provider":"osv","upstream":["CVE-2026-101898","CVE-2026-101900","CVE-2026-101901","CVE-2026-101902","CVE-2026-101903","CVE-2026-101904","CVE-2026-101905","CVE-2026-101906","CVE-2026-101907","CVE-2026-101908","CVE-2026-101909"],"references":["https://access.redhat.com/errata/RHSA-2026:74872","https://access.redhat.com/security/cve/CVE-2026-101903","https://access.redhat.com/security/updates/classification/","https://images.redhat.com/","https://access.redhat.com/security/cve/CVE-2026-101905","https://access.redhat.com/security/cve/CVE-2026-101902","https://access.redhat.com/security/cve/CVE-2026-101901","https://access.redhat.com/security/cve/CVE-2026-101904","https://access.redhat.com/security/cve/CVE-2026-101906","https://access.redhat.com/security/cve/CVE-2026-101898","https://access.redhat.com/security/cve/CVE-2026-101907","https://access.redhat.com/security/cve/CVE-2026-101908","https://access.redhat.com/security/cve/CVE-2026-101909","https://access.redhat.com/security/cve/CVE-2026-101900","https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74872.json","https://bugzilla.redhat.com/show_bug.cgi?id=2542571","https://www.cve.org/CVERecord?id=CVE-2026-101898","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://bugzilla.redhat.com/show_bug.cgi?id=2542576","https://www.cve.org/CVERecord?id=CVE-2026-101900","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://bugzilla.redhat.com/show_bug.cgi?id=2542577","https://www.cve.org/CVERecord?id=CVE-2026-101901","https://nvd.nist.gov/vuln/detail/CVE-2026-101901","https://github.com/axios/axios/security/advisories/GHSA-542g-h47m-68v8","https://bugzilla.redhat.com/show_bug.cgi?id=2542575","https://www.cve.org/CVERecord?id=CVE-2026-101902","https://nvd.nist.gov/vuln/detail/CVE-2026-101902","https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/security/advisories/GHSA-9fr6-4gfg-395g","https://bugzilla.redhat.com/show_bug.cgi?id=2542580","https://www.cve.org/CVERecord?id=CVE-2026-101903","https://nvd.nist.gov/vuln/detail/CVE-2026-101903","https://github.com/axios/axios/security/advisories/GHSA-c29m-xwm3-cm6r","https://bugzilla.redhat.com/show_bug.cgi?id=2542579","https://www.cve.org/CVERecord?id=CVE-2026-101904","https://nvd.nist.gov/vuln/detail/CVE-2026-101904","https://github.com/axios/axios/security/advisories/GHSA-j8rh-479h-cp32","https://bugzilla.redhat.com/show_bug.cgi?id=2542584","https://www.cve.org/CVERecord?id=CVE-2026-101905","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://bugzilla.redhat.com/show_bug.cgi?id=2542583","https://www.cve.org/CVERecord?id=CVE-2026-101906","https://nvd.nist.gov/vuln/detail/CVE-2026-101906","https://github.com/axios/axios/security/advisories/GHSA-mghh-pgcx-3jjj","https://bugzilla.redhat.com/show_bug.cgi?id=2542586","https://www.cve.org/CVERecord?id=CVE-2026-101907","https://nvd.nist.gov/vuln/detail/CVE-2026-101907","https://github.com/axios/axios/security/advisories/GHSA-r4gj-5m52-g5wh","https://bugzilla.redhat.com/show_bug.cgi?id=2542592","https://www.cve.org/CVERecord?id=CVE-2026-101908","https://nvd.nist.gov/vuln/detail/CVE-2026-101908","https://github.com/axios/axios/security/advisories/GHSA-vh66-26gq-q6x8","https://bugzilla.redhat.com/show_bug.cgi?id=2542593","https://www.cve.org/CVERecord?id=CVE-2026-101909","https://nvd.nist.gov/vuln/detail/CVE-2026-101909","https://github.com/axios/axios/commit/d29be181f85f6fe93397a07b1f69606d9622637b","https://github.com/axios/axios/security/advisories/GHSA-x97p-jq2g-jp4f"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"},{"value":"CVE-2026-101900","evidence":"/upstream"},{"value":"CVE-2026-101901","evidence":"/upstream"},{"value":"CVE-2026-101902","evidence":"/upstream"},{"value":"CVE-2026-101903","evidence":"/upstream"},{"value":"CVE-2026-101904","evidence":"/upstream"},{"value":"CVE-2026-101905","evidence":"/upstream"},{"value":"CVE-2026-101906","evidence":"/upstream"},{"value":"CVE-2026-101907","evidence":"/upstream"},{"value":"CVE-2026-101908","evidence":"/upstream"},{"value":"CVE-2026-101909","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0ef413e4-8008-4c41-897c-014174f3f269","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101901","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-542g-h47m-68v8","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101902","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101902","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101903","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-c29m-xwm3-cm6r","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101904","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101904","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101906","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-mghh-pgcx-3jjj","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101907","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-r4gj-5m52-g5wh","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101908","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101908","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101909","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.34.0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"axios","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-x97p-jq2g-jp4f","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/RHSA-2026%3A74872","advisory_id":"0ef413e4-8008-4c41-897c-014174f3f269","event_types":["advisory"],"published_at":"2026-10-26T00:57:51.165591+00:00","technologies":["core-osv","grafana13-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-03T10:17:01+00:00","detail_url":"/advisories/advisory%3A0ef413e4-8008-4c41-897c-014174f3f269","group":{"id":"advisory:0ef413e4-8008-4c41-897c-014174f3f269","revision":1,"primary_event_id":73507,"change":"published","superseded_by":[],"changed":{"id":73507,"cve_ids":["CVE-2026-101898","CVE-2026-101900","CVE-2026-101901","CVE-2026-101902","CVE-2026-101903","CVE-2026-101904","CVE-2026-101905","CVE-2026-101906","CVE-2026-101907","CVE-2026-101908","CVE-2026-101909"],"payload":{"kind":"advisory","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","evidence":"osv:RHSA-2026:74872","products":[{"name":{"value":"grafana13.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:13.2.1-0.9.hum1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"RHSA-2026:74872","aliases":["RHSA-2026:74872"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.2.1-0.9.hum1"}]}],"package":{"name":"grafana13.2","purl":"pkg:rpm/redhat/grafana13.2","ecosystem":"Red Hat:hummingbird:1"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:74872.json"}}],"modified":"2026-10-03T10:32:34.608460980Z","provider":"osv","upstream":["CVE-2026-101898","CVE-2026-101900","CVE-2026-101901","CVE-2026-101902","CVE-2026-101903","CVE-2026-101904","CVE-2026-101905","CVE-2026-101906","CVE-2026-101907","CVE-2026-101908","CVE-2026-101909"],"references":["https://access.redhat.com/errata/RHSA-2026:74872","https://access.redhat.com/security/cve/CVE-2026-101903","https://access.redhat.com/security/updates/classification/","https://images.redhat.com/","https://access.redhat.com/security/cve/CVE-2026-101905","https://access.redhat.com/security/cve/CVE-2026-101902","https://access.redhat.com/security/cve/CVE-2026-101901","https://access.redhat.com/security/cve/CVE-2026-101904","https://access.redhat.com/security/cve/CVE-2026-101906","https://access.redhat.com/security/cve/CVE-2026-101898","https://access.redhat.com/security/cve/CVE-2026-101907","https://access.redhat.com/security/cve/CVE-2026-101908","https://access.redhat.com/security/cve/CVE-2026-101909","https://access.redhat.com/security/cve/CVE-2026-101900","https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74872.json","https://bugzilla.redhat.com/show_bug.cgi?id=2542571","https://www.cve.org/CVERecord?id=CVE-2026-101898","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://bugzilla.redhat.com/show_bug.cgi?id=2542576","https://www.cve.org/CVERecord?id=CVE-2026-101900","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://bugzilla.redhat.com/show_bug.cgi?id=2542577","https://www.cve.org/CVERecord?id=CVE-2026-101901","https://nvd.nist.gov/vuln/detail/CVE-2026-101901","https://github.com/axios/axios/security/advisories/GHSA-542g-h47m-68v8","https://bugzilla.redhat.com/show_bug.cgi?id=2542575","https://www.cve.org/CVERecord?id=CVE-2026-101902","https://nvd.nist.gov/vuln/detail/CVE-2026-101902","https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/security/advisories/GHSA-9fr6-4gfg-395g","https://bugzilla.redhat.com/show_bug.cgi?id=2542580","https://www.cve.org/CVERecord?id=CVE-2026-101903","https://nvd.nist.gov/vuln/detail/CVE-2026-101903","https://github.com/axios/axios/security/advisories/GHSA-c29m-xwm3-cm6r","https://bugzilla.redhat.com/show_bug.cgi?id=2542579","https://www.cve.org/CVERecord?id=CVE-2026-101904","https://nvd.nist.gov/vuln/detail/CVE-2026-101904","https://github.com/axios/axios/security/advisories/GHSA-j8rh-479h-cp32","https://bugzilla.redhat.com/show_bug.cgi?id=2542584","https://www.cve.org/CVERecord?id=CVE-2026-101905","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://bugzilla.redhat.com/show_bug.cgi?id=2542583","https://www.cve.org/CVERecord?id=CVE-2026-101906","https://nvd.nist.gov/vuln/detail/CVE-2026-101906","https://github.com/axios/axios/security/advisories/GHSA-mghh-pgcx-3jjj","https://bugzilla.redhat.com/show_bug.cgi?id=2542586","https://www.cve.org/CVERecord?id=CVE-2026-101907","https://nvd.nist.gov/vuln/detail/CVE-2026-101907","https://github.com/axios/axios/security/advisories/GHSA-r4gj-5m52-g5wh","https://bugzilla.redhat.com/show_bug.cgi?id=2542592","https://www.cve.org/CVERecord?id=CVE-2026-101908","https://nvd.nist.gov/vuln/detail/CVE-2026-101908","https://github.com/axios/axios/security/advisories/GHSA-vh66-26gq-q6x8","https://bugzilla.redhat.com/show_bug.cgi?id=2542593","https://www.cve.org/CVERecord?id=CVE-2026-101909","https://nvd.nist.gov/vuln/detail/CVE-2026-101909","https://github.com/axios/axios/commit/d29be181f85f6fe93397a07b1f69606d9622637b","https://github.com/axios/axios/security/advisories/GHSA-x97p-jq2g-jp4f"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"},{"value":"CVE-2026-101900","evidence":"/upstream"},{"value":"CVE-2026-101901","evidence":"/upstream"},{"value":"CVE-2026-101902","evidence":"/upstream"},{"value":"CVE-2026-101903","evidence":"/upstream"},{"value":"CVE-2026-101904","evidence":"/upstream"},{"value":"CVE-2026-101905","evidence":"/upstream"},{"value":"CVE-2026-101906","evidence":"/upstream"},{"value":"CVE-2026-101907","evidence":"/upstream"},{"value":"CVE-2026-101908","evidence":"/upstream"},{"value":"CVE-2026-101909","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0ef413e4-8008-4c41-897c-014174f3f269","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101901","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-542g-h47m-68v8","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101902","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101902","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101903","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-c29m-xwm3-cm6r","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101904","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101904","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101906","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-mghh-pgcx-3jjj","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101907","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-r4gj-5m52-g5wh","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101908","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101908","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101909","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.34.0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"axios","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-x97p-jq2g-jp4f","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/RHSA-2026%3A74872","advisory_id":"0ef413e4-8008-4c41-897c-014174f3f269","event_types":["advisory"],"published_at":"2026-10-26T00:57:51.165591+00:00","technologies":["core-osv","grafana13-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-03T10:17:01+00:00","detail_url":"/events/73507"},"members":[{"id":73507,"cve_ids":["CVE-2026-101898","CVE-2026-101900","CVE-2026-101901","CVE-2026-101902","CVE-2026-101903","CVE-2026-101904","CVE-2026-101905","CVE-2026-101906","CVE-2026-101907","CVE-2026-101908","CVE-2026-101909"],"payload":{"kind":"advisory","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","evidence":"osv:RHSA-2026:74872","products":[{"name":{"value":"grafana13.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:13.2.1-0.9.hum1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"RHSA-2026:74872","aliases":["RHSA-2026:74872"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.2.1-0.9.hum1"}]}],"package":{"name":"grafana13.2","purl":"pkg:rpm/redhat/grafana13.2","ecosystem":"Red Hat:hummingbird:1"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:74872.json"}}],"modified":"2026-10-03T10:32:34.608460980Z","provider":"osv","upstream":["CVE-2026-101898","CVE-2026-101900","CVE-2026-101901","CVE-2026-101902","CVE-2026-101903","CVE-2026-101904","CVE-2026-101905","CVE-2026-101906","CVE-2026-101907","CVE-2026-101908","CVE-2026-101909"],"references":["https://access.redhat.com/errata/RHSA-2026:74872","https://access.redhat.com/security/cve/CVE-2026-101903","https://access.redhat.com/security/updates/classification/","https://images.redhat.com/","https://access.redhat.com/security/cve/CVE-2026-101905","https://access.redhat.com/security/cve/CVE-2026-101902","https://access.redhat.com/security/cve/CVE-2026-101901","https://access.redhat.com/security/cve/CVE-2026-101904","https://access.redhat.com/security/cve/CVE-2026-101906","https://access.redhat.com/security/cve/CVE-2026-101898","https://access.redhat.com/security/cve/CVE-2026-101907","https://access.redhat.com/security/cve/CVE-2026-101908","https://access.redhat.com/security/cve/CVE-2026-101909","https://access.redhat.com/security/cve/CVE-2026-101900","https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74872.json","https://bugzilla.redhat.com/show_bug.cgi?id=2542571","https://www.cve.org/CVERecord?id=CVE-2026-101898","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://bugzilla.redhat.com/show_bug.cgi?id=2542576","https://www.cve.org/CVERecord?id=CVE-2026-101900","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://bugzilla.redhat.com/show_bug.cgi?id=2542577","https://www.cve.org/CVERecord?id=CVE-2026-101901","https://nvd.nist.gov/vuln/detail/CVE-2026-101901","https://github.com/axios/axios/security/advisories/GHSA-542g-h47m-68v8","https://bugzilla.redhat.com/show_bug.cgi?id=2542575","https://www.cve.org/CVERecord?id=CVE-2026-101902","https://nvd.nist.gov/vuln/detail/CVE-2026-101902","https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/security/advisories/GHSA-9fr6-4gfg-395g","https://bugzilla.redhat.com/show_bug.cgi?id=2542580","https://www.cve.org/CVERecord?id=CVE-2026-101903","https://nvd.nist.gov/vuln/detail/CVE-2026-101903","https://github.com/axios/axios/security/advisories/GHSA-c29m-xwm3-cm6r","https://bugzilla.redhat.com/show_bug.cgi?id=2542579","https://www.cve.org/CVERecord?id=CVE-2026-101904","https://nvd.nist.gov/vuln/detail/CVE-2026-101904","https://github.com/axios/axios/security/advisories/GHSA-j8rh-479h-cp32","https://bugzilla.redhat.com/show_bug.cgi?id=2542584","https://www.cve.org/CVERecord?id=CVE-2026-101905","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://bugzilla.redhat.com/show_bug.cgi?id=2542583","https://www.cve.org/CVERecord?id=CVE-2026-101906","https://nvd.nist.gov/vuln/detail/CVE-2026-101906","https://github.com/axios/axios/security/advisories/GHSA-mghh-pgcx-3jjj","https://bugzilla.redhat.com/show_bug.cgi?id=2542586","https://www.cve.org/CVERecord?id=CVE-2026-101907","https://nvd.nist.gov/vuln/detail/CVE-2026-101907","https://github.com/axios/axios/security/advisories/GHSA-r4gj-5m52-g5wh","https://bugzilla.redhat.com/show_bug.cgi?id=2542592","https://www.cve.org/CVERecord?id=CVE-2026-101908","https://nvd.nist.gov/vuln/detail/CVE-2026-101908","https://github.com/axios/axios/security/advisories/GHSA-vh66-26gq-q6x8","https://bugzilla.redhat.com/show_bug.cgi?id=2542593","https://www.cve.org/CVERecord?id=CVE-2026-101909","https://nvd.nist.gov/vuln/detail/CVE-2026-101909","https://github.com/axios/axios/commit/d29be181f85f6fe93397a07b1f69606d9622637b","https://github.com/axios/axios/security/advisories/GHSA-x97p-jq2g-jp4f"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"},{"value":"CVE-2026-101900","evidence":"/upstream"},{"value":"CVE-2026-101901","evidence":"/upstream"},{"value":"CVE-2026-101902","evidence":"/upstream"},{"value":"CVE-2026-101903","evidence":"/upstream"},{"value":"CVE-2026-101904","evidence":"/upstream"},{"value":"CVE-2026-101905","evidence":"/upstream"},{"value":"CVE-2026-101906","evidence":"/upstream"},{"value":"CVE-2026-101907","evidence":"/upstream"},{"value":"CVE-2026-101908","evidence":"/upstream"},{"value":"CVE-2026-101909","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0ef413e4-8008-4c41-897c-014174f3f269","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101901","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-542g-h47m-68v8","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101902","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101902","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101903","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-c29m-xwm3-cm6r","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101904","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101904","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101906","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-mghh-pgcx-3jjj","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101907","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-r4gj-5m52-g5wh","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101908","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101908","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101909","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.34.0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"axios","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-x97p-jq2g-jp4f","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/RHSA-2026%3A74872","advisory_id":"0ef413e4-8008-4c41-897c-014174f3f269","event_types":["advisory"],"published_at":"2026-10-26T00:57:51.165591+00:00","technologies":["core-osv","grafana13-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-03T10:17:01+00:00","detail_url":"/events/73507"}]}},{"id":72728,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-5vpx-wmwg-9g62","summary":"CGA-5vpx-wmwg-9g62","evidence":"osv:CGA-5vpx-wmwg-9g62","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5vpx-wmwg-9g62","aliases":["CGA-5vpx-wmwg-9g62"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5vpx-wmwg-9g62.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:11Z"}]}}],"modified":"2026-10-03T10:32:33.203904078Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7928e816-c73b-492b-b234-00f27988c827","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5vpx-wmwg-9g62","advisory_id":"7928e816-c73b-492b-b234-00f27988c827","event_types":["advisory"],"published_at":"2026-10-26T00:54:19.266957+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:46+00:00","detail_url":"/advisories/advisory%3A7928e816-c73b-492b-b234-00f27988c827","group":{"id":"advisory:7928e816-c73b-492b-b234-00f27988c827","revision":1,"primary_event_id":73475,"change":"published","superseded_by":[],"changed":{"id":73475,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-5vpx-wmwg-9g62","summary":"CGA-5vpx-wmwg-9g62","evidence":"osv:CGA-5vpx-wmwg-9g62","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5vpx-wmwg-9g62","aliases":["CGA-5vpx-wmwg-9g62"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5vpx-wmwg-9g62.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:11Z"}]}}],"modified":"2026-10-03T10:32:33.203904078Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7928e816-c73b-492b-b234-00f27988c827","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5vpx-wmwg-9g62","advisory_id":"7928e816-c73b-492b-b234-00f27988c827","event_types":["advisory"],"published_at":"2026-10-26T00:54:19.266957+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:46+00:00","detail_url":"/events/73475"},"members":[{"id":73475,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-5vpx-wmwg-9g62","summary":"CGA-5vpx-wmwg-9g62","evidence":"osv:CGA-5vpx-wmwg-9g62","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5vpx-wmwg-9g62","aliases":["CGA-5vpx-wmwg-9g62"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5vpx-wmwg-9g62.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:11Z"}]}}],"modified":"2026-10-03T10:32:33.203904078Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7928e816-c73b-492b-b234-00f27988c827","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5vpx-wmwg-9g62","advisory_id":"7928e816-c73b-492b-b234-00f27988c827","event_types":["advisory"],"published_at":"2026-10-26T00:54:19.266957+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:46+00:00","detail_url":"/events/73475"}]}},{"id":72603,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-3r98-4jjv-9jx2","summary":"CGA-3r98-4jjv-9jx2","evidence":"osv:CGA-3r98-4jjv-9jx2","products":[{"name":{"value":"airflow-core-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3r98-4jjv-9jx2","aliases":["CGA-3r98-4jjv-9jx2"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-core-2","purl":"pkg:apk/chainguard/airflow-core-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3r98-4jjv-9jx2.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.13.6","component_type":"npm","component_version":"1.13.6","component_location":"/home/airflow/.local/lib/python3.12/site-packages/airflow/www/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:42:22Z"}]}}],"modified":"2026-10-03T10:31:52.852401773Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0136a881-0bfc-4716-bda1-cb07de6957af","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3r98-4jjv-9jx2","advisory_id":"0136a881-0bfc-4716-bda1-cb07de6957af","event_types":["advisory"],"published_at":"2026-10-26T00:37:16.202993+00:00","technologies":["airflow-core-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:08:56+00:00","detail_url":"/advisories/advisory%3A0136a881-0bfc-4716-bda1-cb07de6957af","group":{"id":"advisory:0136a881-0bfc-4716-bda1-cb07de6957af","revision":1,"primary_event_id":73293,"change":"published","superseded_by":[],"changed":{"id":73293,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-3r98-4jjv-9jx2","summary":"CGA-3r98-4jjv-9jx2","evidence":"osv:CGA-3r98-4jjv-9jx2","products":[{"name":{"value":"airflow-core-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3r98-4jjv-9jx2","aliases":["CGA-3r98-4jjv-9jx2"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-core-2","purl":"pkg:apk/chainguard/airflow-core-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3r98-4jjv-9jx2.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.13.6","component_type":"npm","component_version":"1.13.6","component_location":"/home/airflow/.local/lib/python3.12/site-packages/airflow/www/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:42:22Z"}]}}],"modified":"2026-10-03T10:31:52.852401773Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0136a881-0bfc-4716-bda1-cb07de6957af","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3r98-4jjv-9jx2","advisory_id":"0136a881-0bfc-4716-bda1-cb07de6957af","event_types":["advisory"],"published_at":"2026-10-26T00:37:16.202993+00:00","technologies":["airflow-core-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:08:56+00:00","detail_url":"/events/73293"},"members":[{"id":73293,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-3r98-4jjv-9jx2","summary":"CGA-3r98-4jjv-9jx2","evidence":"osv:CGA-3r98-4jjv-9jx2","products":[{"name":{"value":"airflow-core-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3r98-4jjv-9jx2","aliases":["CGA-3r98-4jjv-9jx2"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-core-2","purl":"pkg:apk/chainguard/airflow-core-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3r98-4jjv-9jx2.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.13.6","component_type":"npm","component_version":"1.13.6","component_location":"/home/airflow/.local/lib/python3.12/site-packages/airflow/www/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:42:22Z"}]}}],"modified":"2026-10-03T10:31:52.852401773Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0136a881-0bfc-4716-bda1-cb07de6957af","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3r98-4jjv-9jx2","advisory_id":"0136a881-0bfc-4716-bda1-cb07de6957af","event_types":["advisory"],"published_at":"2026-10-26T00:37:16.202993+00:00","technologies":["airflow-core-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:08:56+00:00","detail_url":"/events/73293"}]}},{"id":72592,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-hf6v-g4qq-248w","summary":"CGA-hf6v-g4qq-248w","evidence":"osv:CGA-hf6v-g4qq-248w","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hf6v-g4qq-248w","aliases":["CGA-hf6v-g4qq-248w"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hf6v-g4qq-248w.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:11Z"}]}}],"modified":"2026-10-03T10:31:45.003857123Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7b6d85b4-21dc-4e46-b781-043482e0a000","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hf6v-g4qq-248w","advisory_id":"7b6d85b4-21dc-4e46-b781-043482e0a000","event_types":["advisory"],"published_at":"2026-10-26T00:36:05.606955+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:52+00:00","detail_url":"/advisories/advisory%3A7b6d85b4-21dc-4e46-b781-043482e0a000","group":{"id":"advisory:7b6d85b4-21dc-4e46-b781-043482e0a000","revision":1,"primary_event_id":73276,"change":"published","superseded_by":[],"changed":{"id":73276,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-hf6v-g4qq-248w","summary":"CGA-hf6v-g4qq-248w","evidence":"osv:CGA-hf6v-g4qq-248w","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hf6v-g4qq-248w","aliases":["CGA-hf6v-g4qq-248w"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hf6v-g4qq-248w.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:11Z"}]}}],"modified":"2026-10-03T10:31:45.003857123Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7b6d85b4-21dc-4e46-b781-043482e0a000","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hf6v-g4qq-248w","advisory_id":"7b6d85b4-21dc-4e46-b781-043482e0a000","event_types":["advisory"],"published_at":"2026-10-26T00:36:05.606955+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:52+00:00","detail_url":"/events/73276"},"members":[{"id":73276,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-hf6v-g4qq-248w","summary":"CGA-hf6v-g4qq-248w","evidence":"osv:CGA-hf6v-g4qq-248w","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hf6v-g4qq-248w","aliases":["CGA-hf6v-g4qq-248w"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hf6v-g4qq-248w.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:11Z"}]}}],"modified":"2026-10-03T10:31:45.003857123Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7b6d85b4-21dc-4e46-b781-043482e0a000","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hf6v-g4qq-248w","advisory_id":"7b6d85b4-21dc-4e46-b781-043482e0a000","event_types":["advisory"],"published_at":"2026-10-26T00:36:05.606955+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:52+00:00","detail_url":"/events/73276"}]}},{"id":72558,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-353m-rv9w-8r55","summary":"CGA-353m-rv9w-8r55","evidence":"osv:CGA-353m-rv9w-8r55","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-353m-rv9w-8r55","aliases":["CGA-353m-rv9w-8r55"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-353m-rv9w-8r55.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:11Z"}]}}],"modified":"2026-10-03T10:31:31.212741678Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:32c76533-d419-4b96-9f8e-3c794b0b5d3e","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-353m-rv9w-8r55","advisory_id":"32c76533-d419-4b96-9f8e-3c794b0b5d3e","event_types":["advisory"],"published_at":"2026-10-26T00:32:07.806789+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:41+00:00","detail_url":"/advisories/advisory%3A32c76533-d419-4b96-9f8e-3c794b0b5d3e","group":{"id":"advisory:32c76533-d419-4b96-9f8e-3c794b0b5d3e","revision":1,"primary_event_id":73232,"change":"published","superseded_by":[],"changed":{"id":73232,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-353m-rv9w-8r55","summary":"CGA-353m-rv9w-8r55","evidence":"osv:CGA-353m-rv9w-8r55","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-353m-rv9w-8r55","aliases":["CGA-353m-rv9w-8r55"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-353m-rv9w-8r55.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:11Z"}]}}],"modified":"2026-10-03T10:31:31.212741678Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:32c76533-d419-4b96-9f8e-3c794b0b5d3e","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-353m-rv9w-8r55","advisory_id":"32c76533-d419-4b96-9f8e-3c794b0b5d3e","event_types":["advisory"],"published_at":"2026-10-26T00:32:07.806789+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:41+00:00","detail_url":"/events/73232"},"members":[{"id":73232,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-353m-rv9w-8r55","summary":"CGA-353m-rv9w-8r55","evidence":"osv:CGA-353m-rv9w-8r55","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-353m-rv9w-8r55","aliases":["CGA-353m-rv9w-8r55"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-353m-rv9w-8r55.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:11Z"}]}}],"modified":"2026-10-03T10:31:31.212741678Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:32c76533-d419-4b96-9f8e-3c794b0b5d3e","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-353m-rv9w-8r55","advisory_id":"32c76533-d419-4b96-9f8e-3c794b0b5d3e","event_types":["advisory"],"published_at":"2026-10-26T00:32:07.806789+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:41+00:00","detail_url":"/events/73232"}]}},{"id":72120,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-x7xm-xv9g-6wjx","summary":"CGA-x7xm-xv9g-6wjx","evidence":"osv:CGA-x7xm-xv9g-6wjx","products":[{"name":{"value":"kibana-8.19-bitnami","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-x7xm-xv9g-6wjx","aliases":["CGA-x7xm-xv9g-6wjx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19-bitnami","purl":"pkg:apk/chainguard/kibana-8.19-bitnami?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x7xm-xv9g-6wjx.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/opt/bitnami/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:04:13Z"}]}}],"modified":"2026-10-02T23:12:54.980010527Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7d0d65e5-73d8-4b60-a094-30a0fc20979d","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x7xm-xv9g-6wjx","advisory_id":"7d0d65e5-73d8-4b60-a094-30a0fc20979d","event_types":["advisory"],"published_at":"2026-10-26T00:17:14.244846+00:00","technologies":["core-osv","kibana-8-19-bitnami"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:23:13+00:00","detail_url":"/advisories/advisory%3A7d0d65e5-73d8-4b60-a094-30a0fc20979d","group":{"id":"advisory:7d0d65e5-73d8-4b60-a094-30a0fc20979d","revision":1,"primary_event_id":72751,"change":"published","superseded_by":[],"changed":{"id":72751,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-x7xm-xv9g-6wjx","summary":"CGA-x7xm-xv9g-6wjx","evidence":"osv:CGA-x7xm-xv9g-6wjx","products":[{"name":{"value":"kibana-8.19-bitnami","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-x7xm-xv9g-6wjx","aliases":["CGA-x7xm-xv9g-6wjx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19-bitnami","purl":"pkg:apk/chainguard/kibana-8.19-bitnami?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x7xm-xv9g-6wjx.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/opt/bitnami/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:04:13Z"}]}}],"modified":"2026-10-02T23:12:54.980010527Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7d0d65e5-73d8-4b60-a094-30a0fc20979d","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x7xm-xv9g-6wjx","advisory_id":"7d0d65e5-73d8-4b60-a094-30a0fc20979d","event_types":["advisory"],"published_at":"2026-10-26T00:17:14.244846+00:00","technologies":["core-osv","kibana-8-19-bitnami"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:23:13+00:00","detail_url":"/events/72751"},"members":[{"id":72751,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-x7xm-xv9g-6wjx","summary":"CGA-x7xm-xv9g-6wjx","evidence":"osv:CGA-x7xm-xv9g-6wjx","products":[{"name":{"value":"kibana-8.19-bitnami","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-x7xm-xv9g-6wjx","aliases":["CGA-x7xm-xv9g-6wjx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19-bitnami","purl":"pkg:apk/chainguard/kibana-8.19-bitnami?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x7xm-xv9g-6wjx.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/opt/bitnami/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:04:13Z"}]}}],"modified":"2026-10-02T23:12:54.980010527Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7d0d65e5-73d8-4b60-a094-30a0fc20979d","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x7xm-xv9g-6wjx","advisory_id":"7d0d65e5-73d8-4b60-a094-30a0fc20979d","event_types":["advisory"],"published_at":"2026-10-26T00:17:14.244846+00:00","technologies":["core-osv","kibana-8-19-bitnami"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:23:13+00:00","detail_url":"/events/72751"}]}},{"id":72116,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-83cp-c3g7-f83q","summary":"CGA-83cp-c3g7-f83q","evidence":"osv:CGA-83cp-c3g7-f83q","products":[{"name":{"value":"kibana-8.19","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-83cp-c3g7-f83q","aliases":["CGA-83cp-c3g7-f83q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19","purl":"pkg:apk/chainguard/kibana-8.19?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-83cp-c3g7-f83q.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:00:11Z"}]}}],"modified":"2026-10-02T23:12:54.433476678Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f5b2a5ca-d44e-4adb-b21b-7191ecc71fe4","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-83cp-c3g7-f83q","advisory_id":"f5b2a5ca-d44e-4adb-b21b-7191ecc71fe4","event_types":["advisory"],"published_at":"2026-10-26T00:17:10.901335+00:00","technologies":["core-osv","kibana-8-19"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:35:18+00:00","detail_url":"/advisories/advisory%3Af5b2a5ca-d44e-4adb-b21b-7191ecc71fe4","group":{"id":"advisory:f5b2a5ca-d44e-4adb-b21b-7191ecc71fe4","revision":1,"primary_event_id":72747,"change":"published","superseded_by":[],"changed":{"id":72747,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-83cp-c3g7-f83q","summary":"CGA-83cp-c3g7-f83q","evidence":"osv:CGA-83cp-c3g7-f83q","products":[{"name":{"value":"kibana-8.19","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-83cp-c3g7-f83q","aliases":["CGA-83cp-c3g7-f83q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19","purl":"pkg:apk/chainguard/kibana-8.19?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-83cp-c3g7-f83q.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:00:11Z"}]}}],"modified":"2026-10-02T23:12:54.433476678Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f5b2a5ca-d44e-4adb-b21b-7191ecc71fe4","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-83cp-c3g7-f83q","advisory_id":"f5b2a5ca-d44e-4adb-b21b-7191ecc71fe4","event_types":["advisory"],"published_at":"2026-10-26T00:17:10.901335+00:00","technologies":["core-osv","kibana-8-19"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:35:18+00:00","detail_url":"/events/72747"},"members":[{"id":72747,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-83cp-c3g7-f83q","summary":"CGA-83cp-c3g7-f83q","evidence":"osv:CGA-83cp-c3g7-f83q","products":[{"name":{"value":"kibana-8.19","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-83cp-c3g7-f83q","aliases":["CGA-83cp-c3g7-f83q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19","purl":"pkg:apk/chainguard/kibana-8.19?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-83cp-c3g7-f83q.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:00:11Z"}]}}],"modified":"2026-10-02T23:12:54.433476678Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f5b2a5ca-d44e-4adb-b21b-7191ecc71fe4","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-83cp-c3g7-f83q","advisory_id":"f5b2a5ca-d44e-4adb-b21b-7191ecc71fe4","event_types":["advisory"],"published_at":"2026-10-26T00:17:10.901335+00:00","technologies":["core-osv","kibana-8-19"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:35:18+00:00","detail_url":"/events/72747"}]}},{"id":72110,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-f76h-9wc4-4vhg","summary":"CGA-f76h-9wc4-4vhg","evidence":"osv:CGA-f76h-9wc4-4vhg","products":[{"name":{"value":"kibana-8.19-bitnami","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-f76h-9wc4-4vhg","aliases":["CGA-f76h-9wc4-4vhg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19-bitnami","purl":"pkg:apk/chainguard/kibana-8.19-bitnami?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f76h-9wc4-4vhg.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/opt/bitnami/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:45:29Z"}]}}],"modified":"2026-10-02T23:12:53.654235874Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:435a7422-5993-4ba4-a82f-c08031553f90","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f76h-9wc4-4vhg","advisory_id":"435a7422-5993-4ba4-a82f-c08031553f90","event_types":["advisory"],"published_at":"2026-10-26T00:17:00.507617+00:00","technologies":["core-osv","kibana-8-19-bitnami"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:42:14+00:00","detail_url":"/advisories/advisory%3A435a7422-5993-4ba4-a82f-c08031553f90","group":{"id":"advisory:435a7422-5993-4ba4-a82f-c08031553f90","revision":1,"primary_event_id":72741,"change":"published","superseded_by":[],"changed":{"id":72741,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-f76h-9wc4-4vhg","summary":"CGA-f76h-9wc4-4vhg","evidence":"osv:CGA-f76h-9wc4-4vhg","products":[{"name":{"value":"kibana-8.19-bitnami","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-f76h-9wc4-4vhg","aliases":["CGA-f76h-9wc4-4vhg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19-bitnami","purl":"pkg:apk/chainguard/kibana-8.19-bitnami?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f76h-9wc4-4vhg.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/opt/bitnami/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:45:29Z"}]}}],"modified":"2026-10-02T23:12:53.654235874Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:435a7422-5993-4ba4-a82f-c08031553f90","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f76h-9wc4-4vhg","advisory_id":"435a7422-5993-4ba4-a82f-c08031553f90","event_types":["advisory"],"published_at":"2026-10-26T00:17:00.507617+00:00","technologies":["core-osv","kibana-8-19-bitnami"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:42:14+00:00","detail_url":"/events/72741"},"members":[{"id":72741,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-f76h-9wc4-4vhg","summary":"CGA-f76h-9wc4-4vhg","evidence":"osv:CGA-f76h-9wc4-4vhg","products":[{"name":{"value":"kibana-8.19-bitnami","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-f76h-9wc4-4vhg","aliases":["CGA-f76h-9wc4-4vhg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19-bitnami","purl":"pkg:apk/chainguard/kibana-8.19-bitnami?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f76h-9wc4-4vhg.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/opt/bitnami/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:45:29Z"}]}}],"modified":"2026-10-02T23:12:53.654235874Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:435a7422-5993-4ba4-a82f-c08031553f90","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f76h-9wc4-4vhg","advisory_id":"435a7422-5993-4ba4-a82f-c08031553f90","event_types":["advisory"],"published_at":"2026-10-26T00:17:00.507617+00:00","technologies":["core-osv","kibana-8-19-bitnami"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:42:14+00:00","detail_url":"/events/72741"}]}},{"id":71851,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-hg55-m543-5gf8","summary":"CGA-hg55-m543-5gf8","evidence":"osv:CGA-hg55-m543-5gf8","products":[{"name":{"value":"airflow-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hg55-m543-5gf8","aliases":["CGA-hg55-m543-5gf8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-2","purl":"pkg:apk/chainguard/airflow-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hg55-m543-5gf8.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.13.6","component_type":"npm","component_version":"1.13.6","component_location":"/opt/airflow/lib/python3.12/site-packages/airflow/www/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T16:29:16Z"}]}}],"modified":"2026-10-02T23:01:34.182087753Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:798e77f6-78ba-46a3-b15f-d555e4c2fb6a","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hg55-m543-5gf8","advisory_id":"798e77f6-78ba-46a3-b15f-d555e4c2fb6a","event_types":["advisory"],"published_at":"2026-10-25T23:44:17.158195+00:00","technologies":["airflow-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:38:36+00:00","detail_url":"/advisories/advisory%3A798e77f6-78ba-46a3-b15f-d555e4c2fb6a","group":{"id":"advisory:798e77f6-78ba-46a3-b15f-d555e4c2fb6a","revision":1,"primary_event_id":72345,"change":"published","superseded_by":[],"changed":{"id":72345,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-hg55-m543-5gf8","summary":"CGA-hg55-m543-5gf8","evidence":"osv:CGA-hg55-m543-5gf8","products":[{"name":{"value":"airflow-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hg55-m543-5gf8","aliases":["CGA-hg55-m543-5gf8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-2","purl":"pkg:apk/chainguard/airflow-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hg55-m543-5gf8.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.13.6","component_type":"npm","component_version":"1.13.6","component_location":"/opt/airflow/lib/python3.12/site-packages/airflow/www/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T16:29:16Z"}]}}],"modified":"2026-10-02T23:01:34.182087753Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:798e77f6-78ba-46a3-b15f-d555e4c2fb6a","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hg55-m543-5gf8","advisory_id":"798e77f6-78ba-46a3-b15f-d555e4c2fb6a","event_types":["advisory"],"published_at":"2026-10-25T23:44:17.158195+00:00","technologies":["airflow-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:38:36+00:00","detail_url":"/events/72345"},"members":[{"id":72345,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-hg55-m543-5gf8","summary":"CGA-hg55-m543-5gf8","evidence":"osv:CGA-hg55-m543-5gf8","products":[{"name":{"value":"airflow-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hg55-m543-5gf8","aliases":["CGA-hg55-m543-5gf8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-2","purl":"pkg:apk/chainguard/airflow-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hg55-m543-5gf8.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.13.6","component_type":"npm","component_version":"1.13.6","component_location":"/opt/airflow/lib/python3.12/site-packages/airflow/www/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T16:29:16Z"}]}}],"modified":"2026-10-02T23:01:34.182087753Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:798e77f6-78ba-46a3-b15f-d555e4c2fb6a","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hg55-m543-5gf8","advisory_id":"798e77f6-78ba-46a3-b15f-d555e4c2fb6a","event_types":["advisory"],"published_at":"2026-10-25T23:44:17.158195+00:00","technologies":["airflow-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:38:36+00:00","detail_url":"/events/72345"}]}},{"id":71657,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-x7vp-jg7g-qwvq","summary":"CGA-x7vp-jg7g-qwvq","evidence":"osv:CGA-x7vp-jg7g-qwvq","products":[{"name":{"value":"kibana-8.19","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-x7vp-jg7g-qwvq","aliases":["CGA-x7vp-jg7g-qwvq"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19","purl":"pkg:apk/chainguard/kibana-8.19?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x7vp-jg7g-qwvq.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:56:09Z"}]}}],"modified":"2026-10-02T23:01:15.002394570Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4fc7c456-55b0-4d8c-b64c-0eb0ef3952d1","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x7vp-jg7g-qwvq","advisory_id":"4fc7c456-55b0-4d8c-b64c-0eb0ef3952d1","event_types":["advisory"],"published_at":"2026-10-25T23:27:13.098288+00:00","technologies":["core-osv","kibana-8-19"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:33:48+00:00","detail_url":"/advisories/advisory%3A4fc7c456-55b0-4d8c-b64c-0eb0ef3952d1","group":{"id":"advisory:4fc7c456-55b0-4d8c-b64c-0eb0ef3952d1","revision":1,"primary_event_id":72092,"change":"published","superseded_by":[],"changed":{"id":72092,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-x7vp-jg7g-qwvq","summary":"CGA-x7vp-jg7g-qwvq","evidence":"osv:CGA-x7vp-jg7g-qwvq","products":[{"name":{"value":"kibana-8.19","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-x7vp-jg7g-qwvq","aliases":["CGA-x7vp-jg7g-qwvq"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19","purl":"pkg:apk/chainguard/kibana-8.19?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x7vp-jg7g-qwvq.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:56:09Z"}]}}],"modified":"2026-10-02T23:01:15.002394570Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4fc7c456-55b0-4d8c-b64c-0eb0ef3952d1","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x7vp-jg7g-qwvq","advisory_id":"4fc7c456-55b0-4d8c-b64c-0eb0ef3952d1","event_types":["advisory"],"published_at":"2026-10-25T23:27:13.098288+00:00","technologies":["core-osv","kibana-8-19"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:33:48+00:00","detail_url":"/events/72092"},"members":[{"id":72092,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-x7vp-jg7g-qwvq","summary":"CGA-x7vp-jg7g-qwvq","evidence":"osv:CGA-x7vp-jg7g-qwvq","products":[{"name":{"value":"kibana-8.19","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-x7vp-jg7g-qwvq","aliases":["CGA-x7vp-jg7g-qwvq"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19","purl":"pkg:apk/chainguard/kibana-8.19?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x7vp-jg7g-qwvq.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:56:09Z"}]}}],"modified":"2026-10-02T23:01:15.002394570Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4fc7c456-55b0-4d8c-b64c-0eb0ef3952d1","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x7vp-jg7g-qwvq","advisory_id":"4fc7c456-55b0-4d8c-b64c-0eb0ef3952d1","event_types":["advisory"],"published_at":"2026-10-25T23:27:13.098288+00:00","technologies":["core-osv","kibana-8-19"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:33:48+00:00","detail_url":"/events/72092"}]}},{"id":70875,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-7cfq-7976-wm52","summary":"CGA-7cfq-7976-wm52","evidence":"osv:CGA-7cfq-7976-wm52","products":[{"name":{"value":"opensearch-dashboards-3-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-7cfq-7976-wm52","aliases":["CGA-7cfq-7976-wm52"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r5"}]}],"package":{"name":"opensearch-dashboards-3-fips","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7cfq-7976-wm52.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:59Z"}]}}],"modified":"2026-10-02T18:27:45.637835632Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b2644ad5-f766-4024-8fff-d5fa1a06d4a1","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7cfq-7976-wm52","advisory_id":"b2644ad5-f766-4024-8fff-d5fa1a06d4a1","event_types":["advisory"],"published_at":"2026-10-25T22:43:21.25227+00:00","technologies":["core-osv","opensearch-dashboards-3-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:50:11+00:00","detail_url":"/advisories/advisory%3Ab2644ad5-f766-4024-8fff-d5fa1a06d4a1","group":{"id":"advisory:b2644ad5-f766-4024-8fff-d5fa1a06d4a1","revision":1,"primary_event_id":71246,"change":"published","superseded_by":[],"changed":{"id":71246,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-7cfq-7976-wm52","summary":"CGA-7cfq-7976-wm52","evidence":"osv:CGA-7cfq-7976-wm52","products":[{"name":{"value":"opensearch-dashboards-3-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-7cfq-7976-wm52","aliases":["CGA-7cfq-7976-wm52"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r5"}]}],"package":{"name":"opensearch-dashboards-3-fips","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7cfq-7976-wm52.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:59Z"}]}}],"modified":"2026-10-02T18:27:45.637835632Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b2644ad5-f766-4024-8fff-d5fa1a06d4a1","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7cfq-7976-wm52","advisory_id":"b2644ad5-f766-4024-8fff-d5fa1a06d4a1","event_types":["advisory"],"published_at":"2026-10-25T22:43:21.25227+00:00","technologies":["core-osv","opensearch-dashboards-3-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:50:11+00:00","detail_url":"/events/71246"},"members":[{"id":71246,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-7cfq-7976-wm52","summary":"CGA-7cfq-7976-wm52","evidence":"osv:CGA-7cfq-7976-wm52","products":[{"name":{"value":"opensearch-dashboards-3-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-7cfq-7976-wm52","aliases":["CGA-7cfq-7976-wm52"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r5"}]}],"package":{"name":"opensearch-dashboards-3-fips","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7cfq-7976-wm52.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:59Z"}]}}],"modified":"2026-10-02T18:27:45.637835632Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b2644ad5-f766-4024-8fff-d5fa1a06d4a1","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7cfq-7976-wm52","advisory_id":"b2644ad5-f766-4024-8fff-d5fa1a06d4a1","event_types":["advisory"],"published_at":"2026-10-25T22:43:21.25227+00:00","technologies":["core-osv","opensearch-dashboards-3-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:50:11+00:00","detail_url":"/events/71246"}]}},{"id":70693,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-mvqx-v8vg-pmwr","summary":"CGA-mvqx-v8vg-pmwr","evidence":"osv:CGA-mvqx-v8vg-pmwr","products":[{"name":{"value":"librechat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.7-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-mvqx-v8vg-pmwr","aliases":["CGA-mvqx-v8vg-pmwr"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-r16"}]}],"package":{"name":"librechat","purl":"pkg:apk/chainguard/librechat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mvqx-v8vg-pmwr.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/package-lock.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:24:13Z"}]}}],"modified":"2026-10-02T18:25:41.800784356Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0ac6e714-964c-4f97-8e9b-24296ecf7096","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mvqx-v8vg-pmwr","advisory_id":"0ac6e714-964c-4f97-8e9b-24296ecf7096","event_types":["advisory"],"published_at":"2026-10-25T22:35:05.790249+00:00","technologies":["core-osv","librechat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:56:26+00:00","detail_url":"/advisories/advisory%3A0ac6e714-964c-4f97-8e9b-24296ecf7096","group":{"id":"advisory:0ac6e714-964c-4f97-8e9b-24296ecf7096","revision":1,"primary_event_id":71064,"change":"published","superseded_by":[],"changed":{"id":71064,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-mvqx-v8vg-pmwr","summary":"CGA-mvqx-v8vg-pmwr","evidence":"osv:CGA-mvqx-v8vg-pmwr","products":[{"name":{"value":"librechat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.7-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-mvqx-v8vg-pmwr","aliases":["CGA-mvqx-v8vg-pmwr"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-r16"}]}],"package":{"name":"librechat","purl":"pkg:apk/chainguard/librechat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mvqx-v8vg-pmwr.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/package-lock.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:24:13Z"}]}}],"modified":"2026-10-02T18:25:41.800784356Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0ac6e714-964c-4f97-8e9b-24296ecf7096","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mvqx-v8vg-pmwr","advisory_id":"0ac6e714-964c-4f97-8e9b-24296ecf7096","event_types":["advisory"],"published_at":"2026-10-25T22:35:05.790249+00:00","technologies":["core-osv","librechat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:56:26+00:00","detail_url":"/events/71064"},"members":[{"id":71064,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-mvqx-v8vg-pmwr","summary":"CGA-mvqx-v8vg-pmwr","evidence":"osv:CGA-mvqx-v8vg-pmwr","products":[{"name":{"value":"librechat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.7-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-mvqx-v8vg-pmwr","aliases":["CGA-mvqx-v8vg-pmwr"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-r16"}]}],"package":{"name":"librechat","purl":"pkg:apk/chainguard/librechat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mvqx-v8vg-pmwr.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/package-lock.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:24:13Z"}]}}],"modified":"2026-10-02T18:25:41.800784356Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0ac6e714-964c-4f97-8e9b-24296ecf7096","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mvqx-v8vg-pmwr","advisory_id":"0ac6e714-964c-4f97-8e9b-24296ecf7096","event_types":["advisory"],"published_at":"2026-10-25T22:35:05.790249+00:00","technologies":["core-osv","librechat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:56:26+00:00","detail_url":"/events/71064"}]}},{"id":70169,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-5w4j-rg5g-q2cv","summary":"CGA-5w4j-rg5g-q2cv","evidence":"osv:CGA-5w4j-rg5g-q2cv","products":[{"name":{"value":"semaphore","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.12-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5w4j-rg5g-q2cv","aliases":["CGA-5w4j-rg5g-q2cv"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.12-r3"}]}],"package":{"name":"semaphore","purl":"pkg:apk/chainguard/semaphore?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5w4j-rg5g-q2cv.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/semaphore/embedded-ui/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:59:02Z"}]}}],"modified":"2026-10-02T18:25:15.982365124Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:042b4506-eaca-4909-b818-c0144d70136f","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5w4j-rg5g-q2cv","advisory_id":"042b4506-eaca-4909-b818-c0144d70136f","event_types":["advisory"],"published_at":"2026-10-25T22:16:19.159297+00:00","technologies":["core-osv","semaphore"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:20:09+00:00","detail_url":"/advisories/advisory%3A042b4506-eaca-4909-b818-c0144d70136f","group":{"id":"advisory:042b4506-eaca-4909-b818-c0144d70136f","revision":1,"primary_event_id":70539,"change":"published","superseded_by":[],"changed":{"id":70539,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-5w4j-rg5g-q2cv","summary":"CGA-5w4j-rg5g-q2cv","evidence":"osv:CGA-5w4j-rg5g-q2cv","products":[{"name":{"value":"semaphore","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.12-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5w4j-rg5g-q2cv","aliases":["CGA-5w4j-rg5g-q2cv"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.12-r3"}]}],"package":{"name":"semaphore","purl":"pkg:apk/chainguard/semaphore?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5w4j-rg5g-q2cv.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/semaphore/embedded-ui/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:59:02Z"}]}}],"modified":"2026-10-02T18:25:15.982365124Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:042b4506-eaca-4909-b818-c0144d70136f","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5w4j-rg5g-q2cv","advisory_id":"042b4506-eaca-4909-b818-c0144d70136f","event_types":["advisory"],"published_at":"2026-10-25T22:16:19.159297+00:00","technologies":["core-osv","semaphore"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:20:09+00:00","detail_url":"/events/70539"},"members":[{"id":70539,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-5w4j-rg5g-q2cv","summary":"CGA-5w4j-rg5g-q2cv","evidence":"osv:CGA-5w4j-rg5g-q2cv","products":[{"name":{"value":"semaphore","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.12-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5w4j-rg5g-q2cv","aliases":["CGA-5w4j-rg5g-q2cv"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.12-r3"}]}],"package":{"name":"semaphore","purl":"pkg:apk/chainguard/semaphore?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5w4j-rg5g-q2cv.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/semaphore/embedded-ui/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:59:02Z"}]}}],"modified":"2026-10-02T18:25:15.982365124Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:042b4506-eaca-4909-b818-c0144d70136f","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5w4j-rg5g-q2cv","advisory_id":"042b4506-eaca-4909-b818-c0144d70136f","event_types":["advisory"],"published_at":"2026-10-25T22:16:19.159297+00:00","technologies":["core-osv","semaphore"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:20:09+00:00","detail_url":"/events/70539"}]}},{"id":69994,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"MINI-rw5f-7c99-wx2f","summary":"MINI-rw5f-7c99-wx2f","evidence":"osv:MINI-rw5f-7c99-wx2f","products":[{"name":{"value":"unleash-server","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.2.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-rw5f-7c99-wx2f","aliases":["MINI-rw5f-7c99-wx2f"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.0-r0"}]}],"package":{"name":"unleash-server","purl":"pkg:apk/minimos/unleash-server","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-rw5f-7c99-wx2f.json"}}],"modified":"2026-10-02T18:23:32.609127121Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":[]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:526c924d-1330-459e-b155-b2c5d5df7477","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-rw5f-7c99-wx2f","advisory_id":"526c924d-1330-459e-b155-b2c5d5df7477","event_types":["advisory"],"published_at":"2026-10-25T22:11:27.486932+00:00","technologies":["core-osv","unleash-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:12:26+00:00","detail_url":"/advisories/advisory%3A526c924d-1330-459e-b155-b2c5d5df7477","group":{"id":"advisory:526c924d-1330-459e-b155-b2c5d5df7477","revision":1,"primary_event_id":70364,"change":"published","superseded_by":[],"changed":{"id":70364,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"MINI-rw5f-7c99-wx2f","summary":"MINI-rw5f-7c99-wx2f","evidence":"osv:MINI-rw5f-7c99-wx2f","products":[{"name":{"value":"unleash-server","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.2.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-rw5f-7c99-wx2f","aliases":["MINI-rw5f-7c99-wx2f"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.0-r0"}]}],"package":{"name":"unleash-server","purl":"pkg:apk/minimos/unleash-server","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-rw5f-7c99-wx2f.json"}}],"modified":"2026-10-02T18:23:32.609127121Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":[]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:526c924d-1330-459e-b155-b2c5d5df7477","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-rw5f-7c99-wx2f","advisory_id":"526c924d-1330-459e-b155-b2c5d5df7477","event_types":["advisory"],"published_at":"2026-10-25T22:11:27.486932+00:00","technologies":["core-osv","unleash-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:12:26+00:00","detail_url":"/events/70364"},"members":[{"id":70364,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"MINI-rw5f-7c99-wx2f","summary":"MINI-rw5f-7c99-wx2f","evidence":"osv:MINI-rw5f-7c99-wx2f","products":[{"name":{"value":"unleash-server","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.2.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-rw5f-7c99-wx2f","aliases":["MINI-rw5f-7c99-wx2f"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.0-r0"}]}],"package":{"name":"unleash-server","purl":"pkg:apk/minimos/unleash-server","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-rw5f-7c99-wx2f.json"}}],"modified":"2026-10-02T18:23:32.609127121Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":[]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:526c924d-1330-459e-b155-b2c5d5df7477","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-rw5f-7c99-wx2f","advisory_id":"526c924d-1330-459e-b155-b2c5d5df7477","event_types":["advisory"],"published_at":"2026-10-25T22:11:27.486932+00:00","technologies":["core-osv","unleash-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:12:26+00:00","detail_url":"/events/70364"}]}},{"id":69690,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-v333-84cv-2j7p","summary":"CGA-v333-84cv-2j7p","evidence":"osv:CGA-v333-84cv-2j7p","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v333-84cv-2j7p","aliases":["CGA-v333-84cv-2j7p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v333-84cv-2j7p.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:52Z"}]}}],"modified":"2026-10-02T17:16:48.026466222Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c118735b-0222-4fdd-951e-5cfa251d969c","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v333-84cv-2j7p","advisory_id":"c118735b-0222-4fdd-951e-5cfa251d969c","event_types":["advisory"],"published_at":"2026-10-25T22:05:27.362021+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:18+00:00","detail_url":"/advisories/advisory%3Ac118735b-0222-4fdd-951e-5cfa251d969c","group":{"id":"advisory:c118735b-0222-4fdd-951e-5cfa251d969c","revision":1,"primary_event_id":70060,"change":"published","superseded_by":[],"changed":{"id":70060,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-v333-84cv-2j7p","summary":"CGA-v333-84cv-2j7p","evidence":"osv:CGA-v333-84cv-2j7p","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v333-84cv-2j7p","aliases":["CGA-v333-84cv-2j7p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v333-84cv-2j7p.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:52Z"}]}}],"modified":"2026-10-02T17:16:48.026466222Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c118735b-0222-4fdd-951e-5cfa251d969c","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v333-84cv-2j7p","advisory_id":"c118735b-0222-4fdd-951e-5cfa251d969c","event_types":["advisory"],"published_at":"2026-10-25T22:05:27.362021+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:18+00:00","detail_url":"/events/70060"},"members":[{"id":70060,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-v333-84cv-2j7p","summary":"CGA-v333-84cv-2j7p","evidence":"osv:CGA-v333-84cv-2j7p","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v333-84cv-2j7p","aliases":["CGA-v333-84cv-2j7p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v333-84cv-2j7p.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:52Z"}]}}],"modified":"2026-10-02T17:16:48.026466222Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c118735b-0222-4fdd-951e-5cfa251d969c","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v333-84cv-2j7p","advisory_id":"c118735b-0222-4fdd-951e-5cfa251d969c","event_types":["advisory"],"published_at":"2026-10-25T22:05:27.362021+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:18+00:00","detail_url":"/events/70060"}]}},{"id":69601,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-wpjh-584m-7q6g","summary":"CGA-wpjh-584m-7q6g","evidence":"osv:CGA-wpjh-584m-7q6g","products":[{"name":{"value":"kibana-9.3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wpjh-584m-7q6g","aliases":["CGA-wpjh-584m-7q6g"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.3","purl":"pkg:apk/chainguard/kibana-9.3?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wpjh-584m-7q6g.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T11:32:08Z"}]}}],"modified":"2026-10-02T17:16:44.070937486Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:971633f8-c485-4df3-9b25-34711edf49e0","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wpjh-584m-7q6g","advisory_id":"971633f8-c485-4df3-9b25-34711edf49e0","event_types":["advisory"],"published_at":"2026-10-25T22:03:28.433341+00:00","technologies":["core-osv","kibana-9-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:23:17+00:00","detail_url":"/advisories/advisory%3A971633f8-c485-4df3-9b25-34711edf49e0","group":{"id":"advisory:971633f8-c485-4df3-9b25-34711edf49e0","revision":1,"primary_event_id":69971,"change":"published","superseded_by":[],"changed":{"id":69971,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-wpjh-584m-7q6g","summary":"CGA-wpjh-584m-7q6g","evidence":"osv:CGA-wpjh-584m-7q6g","products":[{"name":{"value":"kibana-9.3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wpjh-584m-7q6g","aliases":["CGA-wpjh-584m-7q6g"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.3","purl":"pkg:apk/chainguard/kibana-9.3?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wpjh-584m-7q6g.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T11:32:08Z"}]}}],"modified":"2026-10-02T17:16:44.070937486Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:971633f8-c485-4df3-9b25-34711edf49e0","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wpjh-584m-7q6g","advisory_id":"971633f8-c485-4df3-9b25-34711edf49e0","event_types":["advisory"],"published_at":"2026-10-25T22:03:28.433341+00:00","technologies":["core-osv","kibana-9-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:23:17+00:00","detail_url":"/events/69971"},"members":[{"id":69971,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-wpjh-584m-7q6g","summary":"CGA-wpjh-584m-7q6g","evidence":"osv:CGA-wpjh-584m-7q6g","products":[{"name":{"value":"kibana-9.3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wpjh-584m-7q6g","aliases":["CGA-wpjh-584m-7q6g"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.3","purl":"pkg:apk/chainguard/kibana-9.3?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wpjh-584m-7q6g.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T11:32:08Z"}]}}],"modified":"2026-10-02T17:16:44.070937486Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:971633f8-c485-4df3-9b25-34711edf49e0","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wpjh-584m-7q6g","advisory_id":"971633f8-c485-4df3-9b25-34711edf49e0","event_types":["advisory"],"published_at":"2026-10-25T22:03:28.433341+00:00","technologies":["core-osv","kibana-9-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:23:17+00:00","detail_url":"/events/69971"}]}},{"id":69575,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-rpg4-2xrv-3fw2","summary":"CGA-rpg4-2xrv-3fw2","evidence":"osv:CGA-rpg4-2xrv-3fw2","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rpg4-2xrv-3fw2","aliases":["CGA-rpg4-2xrv-3fw2"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rpg4-2xrv-3fw2.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:08Z"}]}}],"modified":"2026-10-02T17:16:43.197548794Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6cbfdf60-e12d-4709-bcd6-0eac5ae5b350","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rpg4-2xrv-3fw2","advisory_id":"6cbfdf60-e12d-4709-bcd6-0eac5ae5b350","event_types":["advisory"],"published_at":"2026-10-25T22:02:55.453098+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:12+00:00","detail_url":"/advisories/advisory%3A6cbfdf60-e12d-4709-bcd6-0eac5ae5b350","group":{"id":"advisory:6cbfdf60-e12d-4709-bcd6-0eac5ae5b350","revision":1,"primary_event_id":69945,"change":"published","superseded_by":[],"changed":{"id":69945,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-rpg4-2xrv-3fw2","summary":"CGA-rpg4-2xrv-3fw2","evidence":"osv:CGA-rpg4-2xrv-3fw2","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rpg4-2xrv-3fw2","aliases":["CGA-rpg4-2xrv-3fw2"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rpg4-2xrv-3fw2.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:08Z"}]}}],"modified":"2026-10-02T17:16:43.197548794Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6cbfdf60-e12d-4709-bcd6-0eac5ae5b350","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rpg4-2xrv-3fw2","advisory_id":"6cbfdf60-e12d-4709-bcd6-0eac5ae5b350","event_types":["advisory"],"published_at":"2026-10-25T22:02:55.453098+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:12+00:00","detail_url":"/events/69945"},"members":[{"id":69945,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-rpg4-2xrv-3fw2","summary":"CGA-rpg4-2xrv-3fw2","evidence":"osv:CGA-rpg4-2xrv-3fw2","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rpg4-2xrv-3fw2","aliases":["CGA-rpg4-2xrv-3fw2"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rpg4-2xrv-3fw2.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:08Z"}]}}],"modified":"2026-10-02T17:16:43.197548794Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6cbfdf60-e12d-4709-bcd6-0eac5ae5b350","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rpg4-2xrv-3fw2","advisory_id":"6cbfdf60-e12d-4709-bcd6-0eac5ae5b350","event_types":["advisory"],"published_at":"2026-10-25T22:02:55.453098+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:12+00:00","detail_url":"/events/69945"}]}},{"id":69375,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-m64v-hjcp-rpm3","summary":"CGA-m64v-hjcp-rpm3","evidence":"osv:CGA-m64v-hjcp-rpm3","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-m64v-hjcp-rpm3","aliases":["CGA-m64v-hjcp-rpm3"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m64v-hjcp-rpm3.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T11:10:35Z"}]}}],"modified":"2026-10-02T17:16:34.098815104Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5268a064-9d91-4fc6-926a-1e71cdca1b7f","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m64v-hjcp-rpm3","advisory_id":"5268a064-9d91-4fc6-926a-1e71cdca1b7f","event_types":["advisory"],"published_at":"2026-10-25T21:57:28.917736+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:43:18+00:00","detail_url":"/advisories/advisory%3A5268a064-9d91-4fc6-926a-1e71cdca1b7f","group":{"id":"advisory:5268a064-9d91-4fc6-926a-1e71cdca1b7f","revision":1,"primary_event_id":69745,"change":"published","superseded_by":[],"changed":{"id":69745,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-m64v-hjcp-rpm3","summary":"CGA-m64v-hjcp-rpm3","evidence":"osv:CGA-m64v-hjcp-rpm3","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-m64v-hjcp-rpm3","aliases":["CGA-m64v-hjcp-rpm3"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m64v-hjcp-rpm3.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T11:10:35Z"}]}}],"modified":"2026-10-02T17:16:34.098815104Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5268a064-9d91-4fc6-926a-1e71cdca1b7f","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m64v-hjcp-rpm3","advisory_id":"5268a064-9d91-4fc6-926a-1e71cdca1b7f","event_types":["advisory"],"published_at":"2026-10-25T21:57:28.917736+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:43:18+00:00","detail_url":"/events/69745"},"members":[{"id":69745,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-m64v-hjcp-rpm3","summary":"CGA-m64v-hjcp-rpm3","evidence":"osv:CGA-m64v-hjcp-rpm3","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-m64v-hjcp-rpm3","aliases":["CGA-m64v-hjcp-rpm3"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m64v-hjcp-rpm3.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T11:10:35Z"}]}}],"modified":"2026-10-02T17:16:34.098815104Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5268a064-9d91-4fc6-926a-1e71cdca1b7f","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m64v-hjcp-rpm3","advisory_id":"5268a064-9d91-4fc6-926a-1e71cdca1b7f","event_types":["advisory"],"published_at":"2026-10-25T21:57:28.917736+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:43:18+00:00","detail_url":"/events/69745"}]}},{"id":69094,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-97rr-cf6r-wx28","summary":"CGA-97rr-cf6r-wx28","evidence":"osv:CGA-97rr-cf6r-wx28","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-97rr-cf6r-wx28","aliases":["CGA-97rr-cf6r-wx28"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-97rr-cf6r-wx28.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:21:18Z"}]}}],"modified":"2026-10-02T17:16:21.162264911Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1dcee74c-d87d-47c7-bf99-47aacba8541a","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-97rr-cf6r-wx28","advisory_id":"1dcee74c-d87d-47c7-bf99-47aacba8541a","event_types":["advisory"],"published_at":"2026-10-25T21:52:07.896813+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:46:16+00:00","detail_url":"/advisories/advisory%3A1dcee74c-d87d-47c7-bf99-47aacba8541a","group":{"id":"advisory:1dcee74c-d87d-47c7-bf99-47aacba8541a","revision":1,"primary_event_id":69464,"change":"published","superseded_by":[],"changed":{"id":69464,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-97rr-cf6r-wx28","summary":"CGA-97rr-cf6r-wx28","evidence":"osv:CGA-97rr-cf6r-wx28","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-97rr-cf6r-wx28","aliases":["CGA-97rr-cf6r-wx28"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-97rr-cf6r-wx28.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:21:18Z"}]}}],"modified":"2026-10-02T17:16:21.162264911Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1dcee74c-d87d-47c7-bf99-47aacba8541a","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-97rr-cf6r-wx28","advisory_id":"1dcee74c-d87d-47c7-bf99-47aacba8541a","event_types":["advisory"],"published_at":"2026-10-25T21:52:07.896813+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:46:16+00:00","detail_url":"/events/69464"},"members":[{"id":69464,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-97rr-cf6r-wx28","summary":"CGA-97rr-cf6r-wx28","evidence":"osv:CGA-97rr-cf6r-wx28","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-97rr-cf6r-wx28","aliases":["CGA-97rr-cf6r-wx28"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-97rr-cf6r-wx28.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:21:18Z"}]}}],"modified":"2026-10-02T17:16:21.162264911Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1dcee74c-d87d-47c7-bf99-47aacba8541a","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-97rr-cf6r-wx28","advisory_id":"1dcee74c-d87d-47c7-bf99-47aacba8541a","event_types":["advisory"],"published_at":"2026-10-25T21:52:07.896813+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:46:16+00:00","detail_url":"/events/69464"}]}},{"id":69087,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-8jr9-5mh6-x26g","summary":"CGA-8jr9-5mh6-x26g","evidence":"osv:CGA-8jr9-5mh6-x26g","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8jr9-5mh6-x26g","aliases":["CGA-8jr9-5mh6-x26g"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8jr9-5mh6-x26g.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:21:16Z"}]}}],"modified":"2026-10-02T17:16:20.937908747Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:755b7b91-1a14-4b61-9b6c-6767c22714c0","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8jr9-5mh6-x26g","advisory_id":"755b7b91-1a14-4b61-9b6c-6767c22714c0","event_types":["advisory"],"published_at":"2026-10-25T21:52:00.851021+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:46:21+00:00","detail_url":"/advisories/advisory%3A755b7b91-1a14-4b61-9b6c-6767c22714c0","group":{"id":"advisory:755b7b91-1a14-4b61-9b6c-6767c22714c0","revision":1,"primary_event_id":69457,"change":"published","superseded_by":[],"changed":{"id":69457,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-8jr9-5mh6-x26g","summary":"CGA-8jr9-5mh6-x26g","evidence":"osv:CGA-8jr9-5mh6-x26g","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8jr9-5mh6-x26g","aliases":["CGA-8jr9-5mh6-x26g"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8jr9-5mh6-x26g.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:21:16Z"}]}}],"modified":"2026-10-02T17:16:20.937908747Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:755b7b91-1a14-4b61-9b6c-6767c22714c0","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8jr9-5mh6-x26g","advisory_id":"755b7b91-1a14-4b61-9b6c-6767c22714c0","event_types":["advisory"],"published_at":"2026-10-25T21:52:00.851021+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:46:21+00:00","detail_url":"/events/69457"},"members":[{"id":69457,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-8jr9-5mh6-x26g","summary":"CGA-8jr9-5mh6-x26g","evidence":"osv:CGA-8jr9-5mh6-x26g","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8jr9-5mh6-x26g","aliases":["CGA-8jr9-5mh6-x26g"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8jr9-5mh6-x26g.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:21:16Z"}]}}],"modified":"2026-10-02T17:16:20.937908747Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:755b7b91-1a14-4b61-9b6c-6767c22714c0","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8jr9-5mh6-x26g","advisory_id":"755b7b91-1a14-4b61-9b6c-6767c22714c0","event_types":["advisory"],"published_at":"2026-10-25T21:52:00.851021+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:46:21+00:00","detail_url":"/events/69457"}]}},{"id":69056,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-7r8w-3qvc-24mc","summary":"CGA-7r8w-3qvc-24mc","evidence":"osv:CGA-7r8w-3qvc-24mc","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-7r8w-3qvc-24mc","aliases":["CGA-7r8w-3qvc-24mc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7r8w-3qvc-24mc.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:21:23Z"}]}}],"modified":"2026-10-02T17:16:19.444014155Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2e6efa86-455d-4bea-9bfe-de542b206285","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7r8w-3qvc-24mc","advisory_id":"2e6efa86-455d-4bea-9bfe-de542b206285","event_types":["advisory"],"published_at":"2026-10-25T21:51:27.766113+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:46:26+00:00","detail_url":"/advisories/advisory%3A2e6efa86-455d-4bea-9bfe-de542b206285","group":{"id":"advisory:2e6efa86-455d-4bea-9bfe-de542b206285","revision":1,"primary_event_id":69426,"change":"published","superseded_by":[],"changed":{"id":69426,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-7r8w-3qvc-24mc","summary":"CGA-7r8w-3qvc-24mc","evidence":"osv:CGA-7r8w-3qvc-24mc","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-7r8w-3qvc-24mc","aliases":["CGA-7r8w-3qvc-24mc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7r8w-3qvc-24mc.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:21:23Z"}]}}],"modified":"2026-10-02T17:16:19.444014155Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2e6efa86-455d-4bea-9bfe-de542b206285","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7r8w-3qvc-24mc","advisory_id":"2e6efa86-455d-4bea-9bfe-de542b206285","event_types":["advisory"],"published_at":"2026-10-25T21:51:27.766113+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:46:26+00:00","detail_url":"/events/69426"},"members":[{"id":69426,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-7r8w-3qvc-24mc","summary":"CGA-7r8w-3qvc-24mc","evidence":"osv:CGA-7r8w-3qvc-24mc","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-7r8w-3qvc-24mc","aliases":["CGA-7r8w-3qvc-24mc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7r8w-3qvc-24mc.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:21:23Z"}]}}],"modified":"2026-10-02T17:16:19.444014155Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2e6efa86-455d-4bea-9bfe-de542b206285","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7r8w-3qvc-24mc","advisory_id":"2e6efa86-455d-4bea-9bfe-de542b206285","event_types":["advisory"],"published_at":"2026-10-25T21:51:27.766113+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:46:26+00:00","detail_url":"/events/69426"}]}}],"next_after":73175,"next_before":69056}