{"schema_version":"2","view":"grouped","data":[{"id":73181,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-qh3w-v3pg-xx9h","summary":"CGA-qh3w-v3pg-xx9h","evidence":"osv:CGA-qh3w-v3pg-xx9h","products":[{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-qh3w-v3pg-xx9h","aliases":["CGA-qh3w-v3pg-xx9h"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/chainguard/opensearch-dashboards-3?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qh3w-v3pg-xx9h.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:50:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/wolfi/opensearch-dashboards-3?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qh3w-v3pg-xx9h.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:50:32Z"}]}}],"modified":"2026-10-03T10:42:46.723524098Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6f5886c9-b30d-4f3c-91df-5bf69d4a4cf0","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qh3w-v3pg-xx9h","advisory_id":"6f5886c9-b30d-4f3c-91df-5bf69d4a4cf0","event_types":["advisory"],"published_at":"2026-10-26T03:37:56.642239+00:00","technologies":["core-osv","opensearch-dashboards-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T05:07:13+00:00","detail_url":"/advisories/advisory%3A6f5886c9-b30d-4f3c-91df-5bf69d4a4cf0","group":{"id":"advisory:6f5886c9-b30d-4f3c-91df-5bf69d4a4cf0","revision":1,"primary_event_id":75196,"change":"published","superseded_by":[],"changed":{"id":75196,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-qh3w-v3pg-xx9h","summary":"CGA-qh3w-v3pg-xx9h","evidence":"osv:CGA-qh3w-v3pg-xx9h","products":[{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-qh3w-v3pg-xx9h","aliases":["CGA-qh3w-v3pg-xx9h"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/chainguard/opensearch-dashboards-3?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qh3w-v3pg-xx9h.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:50:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/wolfi/opensearch-dashboards-3?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qh3w-v3pg-xx9h.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:50:32Z"}]}}],"modified":"2026-10-03T10:42:46.723524098Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6f5886c9-b30d-4f3c-91df-5bf69d4a4cf0","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qh3w-v3pg-xx9h","advisory_id":"6f5886c9-b30d-4f3c-91df-5bf69d4a4cf0","event_types":["advisory"],"published_at":"2026-10-26T03:37:56.642239+00:00","technologies":["core-osv","opensearch-dashboards-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T05:07:13+00:00","detail_url":"/events/75196"},"members":[{"id":75196,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-qh3w-v3pg-xx9h","summary":"CGA-qh3w-v3pg-xx9h","evidence":"osv:CGA-qh3w-v3pg-xx9h","products":[{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-qh3w-v3pg-xx9h","aliases":["CGA-qh3w-v3pg-xx9h"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/chainguard/opensearch-dashboards-3?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qh3w-v3pg-xx9h.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:50:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/wolfi/opensearch-dashboards-3?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qh3w-v3pg-xx9h.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:50:32Z"}]}}],"modified":"2026-10-03T10:42:46.723524098Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6f5886c9-b30d-4f3c-91df-5bf69d4a4cf0","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qh3w-v3pg-xx9h","advisory_id":"6f5886c9-b30d-4f3c-91df-5bf69d4a4cf0","event_types":["advisory"],"published_at":"2026-10-26T03:37:56.642239+00:00","technologies":["core-osv","opensearch-dashboards-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T05:07:13+00:00","detail_url":"/events/75196"}]}},{"id":73091,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-rcf3-grmg-2w3p","summary":"CGA-rcf3-grmg-2w3p","evidence":"osv:CGA-rcf3-grmg-2w3p","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-rcf3-grmg-2w3p","aliases":["CGA-rcf3-grmg-2w3p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rcf3-grmg-2w3p.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:33:42Z"}]}}],"modified":"2026-10-03T10:32:47.510108936Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3636f0f9-9713-4c29-9aee-fc741d527a72","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rcf3-grmg-2w3p","advisory_id":"3636f0f9-9713-4c29-9aee-fc741d527a72","event_types":["advisory"],"published_at":"2026-10-26T02:52:07.936749+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:22:31+00:00","detail_url":"/advisories/advisory%3A3636f0f9-9713-4c29-9aee-fc741d527a72","group":{"id":"advisory:3636f0f9-9713-4c29-9aee-fc741d527a72","revision":1,"primary_event_id":74745,"change":"published","superseded_by":[],"changed":{"id":74745,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-rcf3-grmg-2w3p","summary":"CGA-rcf3-grmg-2w3p","evidence":"osv:CGA-rcf3-grmg-2w3p","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-rcf3-grmg-2w3p","aliases":["CGA-rcf3-grmg-2w3p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rcf3-grmg-2w3p.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:33:42Z"}]}}],"modified":"2026-10-03T10:32:47.510108936Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3636f0f9-9713-4c29-9aee-fc741d527a72","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rcf3-grmg-2w3p","advisory_id":"3636f0f9-9713-4c29-9aee-fc741d527a72","event_types":["advisory"],"published_at":"2026-10-26T02:52:07.936749+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:22:31+00:00","detail_url":"/events/74745"},"members":[{"id":74745,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-rcf3-grmg-2w3p","summary":"CGA-rcf3-grmg-2w3p","evidence":"osv:CGA-rcf3-grmg-2w3p","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-rcf3-grmg-2w3p","aliases":["CGA-rcf3-grmg-2w3p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rcf3-grmg-2w3p.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:33:42Z"}]}}],"modified":"2026-10-03T10:32:47.510108936Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3636f0f9-9713-4c29-9aee-fc741d527a72","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rcf3-grmg-2w3p","advisory_id":"3636f0f9-9713-4c29-9aee-fc741d527a72","event_types":["advisory"],"published_at":"2026-10-26T02:52:07.936749+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:22:31+00:00","detail_url":"/events/74745"}]}},{"id":73058,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-q7fj-9rfc-ff7w","summary":"CGA-q7fj-9rfc-ff7w","evidence":"osv:CGA-q7fj-9rfc-ff7w","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-q7fj-9rfc-ff7w","aliases":["CGA-q7fj-9rfc-ff7w"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q7fj-9rfc-ff7w.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:12Z"}]}}],"modified":"2026-10-03T10:32:46.425879861Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:fc9920fa-d9ad-40d9-b67b-e1c4f38e82d2","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q7fj-9rfc-ff7w","advisory_id":"fc9920fa-d9ad-40d9-b67b-e1c4f38e82d2","event_types":["advisory"],"published_at":"2026-10-26T02:37:18.389656+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:54+00:00","detail_url":"/advisories/advisory%3Afc9920fa-d9ad-40d9-b67b-e1c4f38e82d2","group":{"id":"advisory:fc9920fa-d9ad-40d9-b67b-e1c4f38e82d2","revision":1,"primary_event_id":74594,"change":"published","superseded_by":[],"changed":{"id":74594,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-q7fj-9rfc-ff7w","summary":"CGA-q7fj-9rfc-ff7w","evidence":"osv:CGA-q7fj-9rfc-ff7w","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-q7fj-9rfc-ff7w","aliases":["CGA-q7fj-9rfc-ff7w"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q7fj-9rfc-ff7w.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:12Z"}]}}],"modified":"2026-10-03T10:32:46.425879861Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:fc9920fa-d9ad-40d9-b67b-e1c4f38e82d2","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q7fj-9rfc-ff7w","advisory_id":"fc9920fa-d9ad-40d9-b67b-e1c4f38e82d2","event_types":["advisory"],"published_at":"2026-10-26T02:37:18.389656+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:54+00:00","detail_url":"/events/74594"},"members":[{"id":74594,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-q7fj-9rfc-ff7w","summary":"CGA-q7fj-9rfc-ff7w","evidence":"osv:CGA-q7fj-9rfc-ff7w","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-q7fj-9rfc-ff7w","aliases":["CGA-q7fj-9rfc-ff7w"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q7fj-9rfc-ff7w.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:12Z"}]}}],"modified":"2026-10-03T10:32:46.425879861Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:fc9920fa-d9ad-40d9-b67b-e1c4f38e82d2","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q7fj-9rfc-ff7w","advisory_id":"fc9920fa-d9ad-40d9-b67b-e1c4f38e82d2","event_types":["advisory"],"published_at":"2026-10-26T02:37:18.389656+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:54+00:00","detail_url":"/events/74594"}]}},{"id":73057,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-q92h-pc6h-94h4","summary":"CGA-q92h-pc6h-94h4","evidence":"osv:CGA-q92h-pc6h-94h4","products":[{"name":{"value":"prism","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"prism","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-q92h-pc6h-94h4","aliases":["CGA-q92h-pc6h-94h4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/chainguard/prism?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q92h-pc6h-94h4.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T00:58:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/wolfi/prism?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q92h-pc6h-94h4.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T00:58:27Z"}]}}],"modified":"2026-10-03T10:32:46.434017949Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f9179d8e-d041-4812-a72a-8ab0fbe0aa77","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q92h-pc6h-94h4","advisory_id":"f9179d8e-d041-4812-a72a-8ab0fbe0aa77","event_types":["advisory"],"published_at":"2026-10-26T02:37:17.30275+00:00","technologies":["core-osv","prism"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:54:25+00:00","detail_url":"/advisories/advisory%3Af9179d8e-d041-4812-a72a-8ab0fbe0aa77","group":{"id":"advisory:f9179d8e-d041-4812-a72a-8ab0fbe0aa77","revision":1,"primary_event_id":74593,"change":"published","superseded_by":[],"changed":{"id":74593,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-q92h-pc6h-94h4","summary":"CGA-q92h-pc6h-94h4","evidence":"osv:CGA-q92h-pc6h-94h4","products":[{"name":{"value":"prism","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"prism","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-q92h-pc6h-94h4","aliases":["CGA-q92h-pc6h-94h4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/chainguard/prism?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q92h-pc6h-94h4.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T00:58:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/wolfi/prism?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q92h-pc6h-94h4.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T00:58:27Z"}]}}],"modified":"2026-10-03T10:32:46.434017949Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f9179d8e-d041-4812-a72a-8ab0fbe0aa77","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q92h-pc6h-94h4","advisory_id":"f9179d8e-d041-4812-a72a-8ab0fbe0aa77","event_types":["advisory"],"published_at":"2026-10-26T02:37:17.30275+00:00","technologies":["core-osv","prism"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:54:25+00:00","detail_url":"/events/74593"},"members":[{"id":74593,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-q92h-pc6h-94h4","summary":"CGA-q92h-pc6h-94h4","evidence":"osv:CGA-q92h-pc6h-94h4","products":[{"name":{"value":"prism","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"prism","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-q92h-pc6h-94h4","aliases":["CGA-q92h-pc6h-94h4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/chainguard/prism?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q92h-pc6h-94h4.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T00:58:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/wolfi/prism?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q92h-pc6h-94h4.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T00:58:27Z"}]}}],"modified":"2026-10-03T10:32:46.434017949Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f9179d8e-d041-4812-a72a-8ab0fbe0aa77","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q92h-pc6h-94h4","advisory_id":"f9179d8e-d041-4812-a72a-8ab0fbe0aa77","event_types":["advisory"],"published_at":"2026-10-26T02:37:17.30275+00:00","technologies":["core-osv","prism"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:54:25+00:00","detail_url":"/events/74593"}]}},{"id":73038,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-p8hj-gvv8-vrj8","summary":"CGA-p8hj-gvv8-vrj8","evidence":"osv:CGA-p8hj-gvv8-vrj8","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-p8hj-gvv8-vrj8","aliases":["CGA-p8hj-gvv8-vrj8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p8hj-gvv8-vrj8.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:20Z"}]}}],"modified":"2026-10-03T10:32:45.579323056Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e3d8660b-2c56-455f-b3ab-321f474dfdbc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p8hj-gvv8-vrj8","advisory_id":"e3d8660b-2c56-455f-b3ab-321f474dfdbc","event_types":["advisory"],"published_at":"2026-10-26T02:29:13.919562+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:55+00:00","detail_url":"/advisories/advisory%3Ae3d8660b-2c56-455f-b3ab-321f474dfdbc","group":{"id":"advisory:e3d8660b-2c56-455f-b3ab-321f474dfdbc","revision":1,"primary_event_id":74504,"change":"published","superseded_by":[],"changed":{"id":74504,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-p8hj-gvv8-vrj8","summary":"CGA-p8hj-gvv8-vrj8","evidence":"osv:CGA-p8hj-gvv8-vrj8","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-p8hj-gvv8-vrj8","aliases":["CGA-p8hj-gvv8-vrj8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p8hj-gvv8-vrj8.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:20Z"}]}}],"modified":"2026-10-03T10:32:45.579323056Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e3d8660b-2c56-455f-b3ab-321f474dfdbc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p8hj-gvv8-vrj8","advisory_id":"e3d8660b-2c56-455f-b3ab-321f474dfdbc","event_types":["advisory"],"published_at":"2026-10-26T02:29:13.919562+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:55+00:00","detail_url":"/events/74504"},"members":[{"id":74504,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-p8hj-gvv8-vrj8","summary":"CGA-p8hj-gvv8-vrj8","evidence":"osv:CGA-p8hj-gvv8-vrj8","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-p8hj-gvv8-vrj8","aliases":["CGA-p8hj-gvv8-vrj8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p8hj-gvv8-vrj8.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCore/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:20Z"}]}}],"modified":"2026-10-03T10:32:45.579323056Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e3d8660b-2c56-455f-b3ab-321f474dfdbc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p8hj-gvv8-vrj8","advisory_id":"e3d8660b-2c56-455f-b3ab-321f474dfdbc","event_types":["advisory"],"published_at":"2026-10-26T02:29:13.919562+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:55+00:00","detail_url":"/events/74504"}]}},{"id":72897,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-f3x8-mgwm-rv7v","summary":"CGA-f3x8-mgwm-rv7v","evidence":"osv:CGA-f3x8-mgwm-rv7v","products":[{"name":{"value":"prism","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"prism","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-f3x8-mgwm-rv7v","aliases":["CGA-f3x8-mgwm-rv7v"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/chainguard/prism?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f3x8-mgwm-rv7v.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:28:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/wolfi/prism?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f3x8-mgwm-rv7v.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:28:27Z"}]}}],"modified":"2026-10-03T10:32:39.761515785Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:961b5940-e7a1-4d8a-81a8-28eeea5c4893","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f3x8-mgwm-rv7v","advisory_id":"961b5940-e7a1-4d8a-81a8-28eeea5c4893","event_types":["advisory"],"published_at":"2026-10-26T01:31:53.677381+00:00","technologies":["core-osv","prism"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:38:31+00:00","detail_url":"/advisories/advisory%3A961b5940-e7a1-4d8a-81a8-28eeea5c4893","group":{"id":"advisory:961b5940-e7a1-4d8a-81a8-28eeea5c4893","revision":1,"primary_event_id":73891,"change":"published","superseded_by":[],"changed":{"id":73891,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-f3x8-mgwm-rv7v","summary":"CGA-f3x8-mgwm-rv7v","evidence":"osv:CGA-f3x8-mgwm-rv7v","products":[{"name":{"value":"prism","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"prism","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-f3x8-mgwm-rv7v","aliases":["CGA-f3x8-mgwm-rv7v"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/chainguard/prism?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f3x8-mgwm-rv7v.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:28:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/wolfi/prism?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f3x8-mgwm-rv7v.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:28:27Z"}]}}],"modified":"2026-10-03T10:32:39.761515785Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:961b5940-e7a1-4d8a-81a8-28eeea5c4893","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f3x8-mgwm-rv7v","advisory_id":"961b5940-e7a1-4d8a-81a8-28eeea5c4893","event_types":["advisory"],"published_at":"2026-10-26T01:31:53.677381+00:00","technologies":["core-osv","prism"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:38:31+00:00","detail_url":"/events/73891"},"members":[{"id":73891,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-f3x8-mgwm-rv7v","summary":"CGA-f3x8-mgwm-rv7v","evidence":"osv:CGA-f3x8-mgwm-rv7v","products":[{"name":{"value":"prism","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"prism","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.16.0-r13","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-f3x8-mgwm-rv7v","aliases":["CGA-f3x8-mgwm-rv7v"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/chainguard/prism?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f3x8-mgwm-rv7v.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:28:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r13"}]}],"package":{"name":"prism","purl":"pkg:apk/wolfi/prism?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f3x8-mgwm-rv7v.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/src/prism/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:28:27Z"}]}}],"modified":"2026-10-03T10:32:39.761515785Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:961b5940-e7a1-4d8a-81a8-28eeea5c4893","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f3x8-mgwm-rv7v","advisory_id":"961b5940-e7a1-4d8a-81a8-28eeea5c4893","event_types":["advisory"],"published_at":"2026-10-26T01:31:53.677381+00:00","technologies":["core-osv","prism"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:38:31+00:00","detail_url":"/events/73891"}]}},{"id":72839,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-8qr3-xmv8-xhr5","summary":"CGA-8qr3-xmv8-xhr5","evidence":"osv:CGA-8qr3-xmv8-xhr5","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-8qr3-xmv8-xhr5","aliases":["CGA-8qr3-xmv8-xhr5"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8qr3-xmv8-xhr5.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:14Z"}]}}],"modified":"2026-10-03T10:32:36.927212920Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8799736e-e9f7-44aa-b1b6-7645db4444bc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8qr3-xmv8-xhr5","advisory_id":"8799736e-e9f7-44aa-b1b6-7645db4444bc","event_types":["advisory"],"published_at":"2026-10-26T01:14:20.274305+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:51+00:00","detail_url":"/advisories/advisory%3A8799736e-e9f7-44aa-b1b6-7645db4444bc","group":{"id":"advisory:8799736e-e9f7-44aa-b1b6-7645db4444bc","revision":1,"primary_event_id":73692,"change":"published","superseded_by":[],"changed":{"id":73692,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-8qr3-xmv8-xhr5","summary":"CGA-8qr3-xmv8-xhr5","evidence":"osv:CGA-8qr3-xmv8-xhr5","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-8qr3-xmv8-xhr5","aliases":["CGA-8qr3-xmv8-xhr5"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8qr3-xmv8-xhr5.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:14Z"}]}}],"modified":"2026-10-03T10:32:36.927212920Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8799736e-e9f7-44aa-b1b6-7645db4444bc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8qr3-xmv8-xhr5","advisory_id":"8799736e-e9f7-44aa-b1b6-7645db4444bc","event_types":["advisory"],"published_at":"2026-10-26T01:14:20.274305+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:51+00:00","detail_url":"/events/73692"},"members":[{"id":73692,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-8qr3-xmv8-xhr5","summary":"CGA-8qr3-xmv8-xhr5","evidence":"osv:CGA-8qr3-xmv8-xhr5","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-8qr3-xmv8-xhr5","aliases":["CGA-8qr3-xmv8-xhr5"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8qr3-xmv8-xhr5.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:14Z"}]}}],"modified":"2026-10-03T10:32:36.927212920Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8799736e-e9f7-44aa-b1b6-7645db4444bc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8qr3-xmv8-xhr5","advisory_id":"8799736e-e9f7-44aa-b1b6-7645db4444bc","event_types":["advisory"],"published_at":"2026-10-26T01:14:20.274305+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:51+00:00","detail_url":"/events/73692"}]}},{"id":72749,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-6qw5-qj75-w445","summary":"CGA-6qw5-qj75-w445","evidence":"osv:CGA-6qw5-qj75-w445","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-6qw5-qj75-w445","aliases":["CGA-6qw5-qj75-w445"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6qw5-qj75-w445.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:11Z"}]}}],"modified":"2026-10-03T10:32:34.832171438Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:05e2dc8e-dd68-4d6c-833e-ab4cf58460d5","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6qw5-qj75-w445","advisory_id":"05e2dc8e-dd68-4d6c-833e-ab4cf58460d5","event_types":["advisory"],"published_at":"2026-10-26T00:58:28.331631+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:43+00:00","detail_url":"/advisories/advisory%3A05e2dc8e-dd68-4d6c-833e-ab4cf58460d5","group":{"id":"advisory:05e2dc8e-dd68-4d6c-833e-ab4cf58460d5","revision":1,"primary_event_id":73515,"change":"published","superseded_by":[],"changed":{"id":73515,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-6qw5-qj75-w445","summary":"CGA-6qw5-qj75-w445","evidence":"osv:CGA-6qw5-qj75-w445","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-6qw5-qj75-w445","aliases":["CGA-6qw5-qj75-w445"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6qw5-qj75-w445.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:11Z"}]}}],"modified":"2026-10-03T10:32:34.832171438Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:05e2dc8e-dd68-4d6c-833e-ab4cf58460d5","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6qw5-qj75-w445","advisory_id":"05e2dc8e-dd68-4d6c-833e-ab4cf58460d5","event_types":["advisory"],"published_at":"2026-10-26T00:58:28.331631+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:43+00:00","detail_url":"/events/73515"},"members":[{"id":73515,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-6qw5-qj75-w445","summary":"CGA-6qw5-qj75-w445","evidence":"osv:CGA-6qw5-qj75-w445","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-6qw5-qj75-w445","aliases":["CGA-6qw5-qj75-w445"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6qw5-qj75-w445.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:11Z"}]}}],"modified":"2026-10-03T10:32:34.832171438Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:05e2dc8e-dd68-4d6c-833e-ab4cf58460d5","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6qw5-qj75-w445","advisory_id":"05e2dc8e-dd68-4d6c-833e-ab4cf58460d5","event_types":["advisory"],"published_at":"2026-10-26T00:58:28.331631+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:43+00:00","detail_url":"/events/73515"}]}},{"id":72743,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-6hrq-5frr-j7cc","summary":"CGA-6hrq-5frr-j7cc","evidence":"osv:CGA-6hrq-5frr-j7cc","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-6hrq-5frr-j7cc","aliases":["CGA-6hrq-5frr-j7cc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6hrq-5frr-j7cc.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:11Z"}]}}],"modified":"2026-10-03T10:32:34.695495316Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4e9f8e89-815c-4e69-b057-98c579cfd708","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6hrq-5frr-j7cc","advisory_id":"4e9f8e89-815c-4e69-b057-98c579cfd708","event_types":["advisory"],"published_at":"2026-10-26T00:57:55.60431+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:49+00:00","detail_url":"/advisories/advisory%3A4e9f8e89-815c-4e69-b057-98c579cfd708","group":{"id":"advisory:4e9f8e89-815c-4e69-b057-98c579cfd708","revision":1,"primary_event_id":73508,"change":"published","superseded_by":[],"changed":{"id":73508,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-6hrq-5frr-j7cc","summary":"CGA-6hrq-5frr-j7cc","evidence":"osv:CGA-6hrq-5frr-j7cc","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-6hrq-5frr-j7cc","aliases":["CGA-6hrq-5frr-j7cc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6hrq-5frr-j7cc.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:11Z"}]}}],"modified":"2026-10-03T10:32:34.695495316Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4e9f8e89-815c-4e69-b057-98c579cfd708","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6hrq-5frr-j7cc","advisory_id":"4e9f8e89-815c-4e69-b057-98c579cfd708","event_types":["advisory"],"published_at":"2026-10-26T00:57:55.60431+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:49+00:00","detail_url":"/events/73508"},"members":[{"id":73508,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-6hrq-5frr-j7cc","summary":"CGA-6hrq-5frr-j7cc","evidence":"osv:CGA-6hrq-5frr-j7cc","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-6hrq-5frr-j7cc","aliases":["CGA-6hrq-5frr-j7cc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6hrq-5frr-j7cc.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:52:11Z"}]}}],"modified":"2026-10-03T10:32:34.695495316Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4e9f8e89-815c-4e69-b057-98c579cfd708","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6hrq-5frr-j7cc","advisory_id":"4e9f8e89-815c-4e69-b057-98c579cfd708","event_types":["advisory"],"published_at":"2026-10-26T00:57:55.60431+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:22:49+00:00","detail_url":"/events/73508"}]}},{"id":72742,"cve_ids":["CVE-2026-101898","CVE-2026-101900","CVE-2026-101901","CVE-2026-101902","CVE-2026-101903","CVE-2026-101904","CVE-2026-101905","CVE-2026-101906","CVE-2026-101907","CVE-2026-101908","CVE-2026-101909"],"payload":{"kind":"advisory","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","evidence":"osv:RHSA-2026:74872","products":[{"name":{"value":"grafana13.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:13.2.1-0.9.hum1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"RHSA-2026:74872","aliases":["RHSA-2026:74872"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.2.1-0.9.hum1"}]}],"package":{"name":"grafana13.2","purl":"pkg:rpm/redhat/grafana13.2","ecosystem":"Red Hat:hummingbird:1"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:74872.json"}}],"modified":"2026-10-03T10:32:34.608460980Z","provider":"osv","upstream":["CVE-2026-101898","CVE-2026-101900","CVE-2026-101901","CVE-2026-101902","CVE-2026-101903","CVE-2026-101904","CVE-2026-101905","CVE-2026-101906","CVE-2026-101907","CVE-2026-101908","CVE-2026-101909"],"references":["https://access.redhat.com/errata/RHSA-2026:74872","https://access.redhat.com/security/cve/CVE-2026-101903","https://access.redhat.com/security/updates/classification/","https://images.redhat.com/","https://access.redhat.com/security/cve/CVE-2026-101905","https://access.redhat.com/security/cve/CVE-2026-101902","https://access.redhat.com/security/cve/CVE-2026-101901","https://access.redhat.com/security/cve/CVE-2026-101904","https://access.redhat.com/security/cve/CVE-2026-101906","https://access.redhat.com/security/cve/CVE-2026-101898","https://access.redhat.com/security/cve/CVE-2026-101907","https://access.redhat.com/security/cve/CVE-2026-101908","https://access.redhat.com/security/cve/CVE-2026-101909","https://access.redhat.com/security/cve/CVE-2026-101900","https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74872.json","https://bugzilla.redhat.com/show_bug.cgi?id=2542571","https://www.cve.org/CVERecord?id=CVE-2026-101898","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://bugzilla.redhat.com/show_bug.cgi?id=2542576","https://www.cve.org/CVERecord?id=CVE-2026-101900","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://bugzilla.redhat.com/show_bug.cgi?id=2542577","https://www.cve.org/CVERecord?id=CVE-2026-101901","https://nvd.nist.gov/vuln/detail/CVE-2026-101901","https://github.com/axios/axios/security/advisories/GHSA-542g-h47m-68v8","https://bugzilla.redhat.com/show_bug.cgi?id=2542575","https://www.cve.org/CVERecord?id=CVE-2026-101902","https://nvd.nist.gov/vuln/detail/CVE-2026-101902","https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/security/advisories/GHSA-9fr6-4gfg-395g","https://bugzilla.redhat.com/show_bug.cgi?id=2542580","https://www.cve.org/CVERecord?id=CVE-2026-101903","https://nvd.nist.gov/vuln/detail/CVE-2026-101903","https://github.com/axios/axios/security/advisories/GHSA-c29m-xwm3-cm6r","https://bugzilla.redhat.com/show_bug.cgi?id=2542579","https://www.cve.org/CVERecord?id=CVE-2026-101904","https://nvd.nist.gov/vuln/detail/CVE-2026-101904","https://github.com/axios/axios/security/advisories/GHSA-j8rh-479h-cp32","https://bugzilla.redhat.com/show_bug.cgi?id=2542584","https://www.cve.org/CVERecord?id=CVE-2026-101905","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://bugzilla.redhat.com/show_bug.cgi?id=2542583","https://www.cve.org/CVERecord?id=CVE-2026-101906","https://nvd.nist.gov/vuln/detail/CVE-2026-101906","https://github.com/axios/axios/security/advisories/GHSA-mghh-pgcx-3jjj","https://bugzilla.redhat.com/show_bug.cgi?id=2542586","https://www.cve.org/CVERecord?id=CVE-2026-101907","https://nvd.nist.gov/vuln/detail/CVE-2026-101907","https://github.com/axios/axios/security/advisories/GHSA-r4gj-5m52-g5wh","https://bugzilla.redhat.com/show_bug.cgi?id=2542592","https://www.cve.org/CVERecord?id=CVE-2026-101908","https://nvd.nist.gov/vuln/detail/CVE-2026-101908","https://github.com/axios/axios/security/advisories/GHSA-vh66-26gq-q6x8","https://bugzilla.redhat.com/show_bug.cgi?id=2542593","https://www.cve.org/CVERecord?id=CVE-2026-101909","https://nvd.nist.gov/vuln/detail/CVE-2026-101909","https://github.com/axios/axios/commit/d29be181f85f6fe93397a07b1f69606d9622637b","https://github.com/axios/axios/security/advisories/GHSA-x97p-jq2g-jp4f"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"},{"value":"CVE-2026-101900","evidence":"/upstream"},{"value":"CVE-2026-101901","evidence":"/upstream"},{"value":"CVE-2026-101902","evidence":"/upstream"},{"value":"CVE-2026-101903","evidence":"/upstream"},{"value":"CVE-2026-101904","evidence":"/upstream"},{"value":"CVE-2026-101905","evidence":"/upstream"},{"value":"CVE-2026-101906","evidence":"/upstream"},{"value":"CVE-2026-101907","evidence":"/upstream"},{"value":"CVE-2026-101908","evidence":"/upstream"},{"value":"CVE-2026-101909","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0ef413e4-8008-4c41-897c-014174f3f269","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101901","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-542g-h47m-68v8","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101902","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101902","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101903","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-c29m-xwm3-cm6r","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101904","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101904","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101906","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-mghh-pgcx-3jjj","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101907","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-r4gj-5m52-g5wh","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101908","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101908","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101909","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.34.0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"axios","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-x97p-jq2g-jp4f","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/RHSA-2026%3A74872","advisory_id":"0ef413e4-8008-4c41-897c-014174f3f269","event_types":["advisory"],"published_at":"2026-10-26T00:57:51.165591+00:00","technologies":["core-osv","grafana13-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-03T10:17:01+00:00","detail_url":"/advisories/advisory%3A0ef413e4-8008-4c41-897c-014174f3f269","group":{"id":"advisory:0ef413e4-8008-4c41-897c-014174f3f269","revision":1,"primary_event_id":73507,"change":"published","superseded_by":[],"changed":{"id":73507,"cve_ids":["CVE-2026-101898","CVE-2026-101900","CVE-2026-101901","CVE-2026-101902","CVE-2026-101903","CVE-2026-101904","CVE-2026-101905","CVE-2026-101906","CVE-2026-101907","CVE-2026-101908","CVE-2026-101909"],"payload":{"kind":"advisory","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","evidence":"osv:RHSA-2026:74872","products":[{"name":{"value":"grafana13.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:13.2.1-0.9.hum1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"RHSA-2026:74872","aliases":["RHSA-2026:74872"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.2.1-0.9.hum1"}]}],"package":{"name":"grafana13.2","purl":"pkg:rpm/redhat/grafana13.2","ecosystem":"Red Hat:hummingbird:1"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:74872.json"}}],"modified":"2026-10-03T10:32:34.608460980Z","provider":"osv","upstream":["CVE-2026-101898","CVE-2026-101900","CVE-2026-101901","CVE-2026-101902","CVE-2026-101903","CVE-2026-101904","CVE-2026-101905","CVE-2026-101906","CVE-2026-101907","CVE-2026-101908","CVE-2026-101909"],"references":["https://access.redhat.com/errata/RHSA-2026:74872","https://access.redhat.com/security/cve/CVE-2026-101903","https://access.redhat.com/security/updates/classification/","https://images.redhat.com/","https://access.redhat.com/security/cve/CVE-2026-101905","https://access.redhat.com/security/cve/CVE-2026-101902","https://access.redhat.com/security/cve/CVE-2026-101901","https://access.redhat.com/security/cve/CVE-2026-101904","https://access.redhat.com/security/cve/CVE-2026-101906","https://access.redhat.com/security/cve/CVE-2026-101898","https://access.redhat.com/security/cve/CVE-2026-101907","https://access.redhat.com/security/cve/CVE-2026-101908","https://access.redhat.com/security/cve/CVE-2026-101909","https://access.redhat.com/security/cve/CVE-2026-101900","https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74872.json","https://bugzilla.redhat.com/show_bug.cgi?id=2542571","https://www.cve.org/CVERecord?id=CVE-2026-101898","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://bugzilla.redhat.com/show_bug.cgi?id=2542576","https://www.cve.org/CVERecord?id=CVE-2026-101900","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://bugzilla.redhat.com/show_bug.cgi?id=2542577","https://www.cve.org/CVERecord?id=CVE-2026-101901","https://nvd.nist.gov/vuln/detail/CVE-2026-101901","https://github.com/axios/axios/security/advisories/GHSA-542g-h47m-68v8","https://bugzilla.redhat.com/show_bug.cgi?id=2542575","https://www.cve.org/CVERecord?id=CVE-2026-101902","https://nvd.nist.gov/vuln/detail/CVE-2026-101902","https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/security/advisories/GHSA-9fr6-4gfg-395g","https://bugzilla.redhat.com/show_bug.cgi?id=2542580","https://www.cve.org/CVERecord?id=CVE-2026-101903","https://nvd.nist.gov/vuln/detail/CVE-2026-101903","https://github.com/axios/axios/security/advisories/GHSA-c29m-xwm3-cm6r","https://bugzilla.redhat.com/show_bug.cgi?id=2542579","https://www.cve.org/CVERecord?id=CVE-2026-101904","https://nvd.nist.gov/vuln/detail/CVE-2026-101904","https://github.com/axios/axios/security/advisories/GHSA-j8rh-479h-cp32","https://bugzilla.redhat.com/show_bug.cgi?id=2542584","https://www.cve.org/CVERecord?id=CVE-2026-101905","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://bugzilla.redhat.com/show_bug.cgi?id=2542583","https://www.cve.org/CVERecord?id=CVE-2026-101906","https://nvd.nist.gov/vuln/detail/CVE-2026-101906","https://github.com/axios/axios/security/advisories/GHSA-mghh-pgcx-3jjj","https://bugzilla.redhat.com/show_bug.cgi?id=2542586","https://www.cve.org/CVERecord?id=CVE-2026-101907","https://nvd.nist.gov/vuln/detail/CVE-2026-101907","https://github.com/axios/axios/security/advisories/GHSA-r4gj-5m52-g5wh","https://bugzilla.redhat.com/show_bug.cgi?id=2542592","https://www.cve.org/CVERecord?id=CVE-2026-101908","https://nvd.nist.gov/vuln/detail/CVE-2026-101908","https://github.com/axios/axios/security/advisories/GHSA-vh66-26gq-q6x8","https://bugzilla.redhat.com/show_bug.cgi?id=2542593","https://www.cve.org/CVERecord?id=CVE-2026-101909","https://nvd.nist.gov/vuln/detail/CVE-2026-101909","https://github.com/axios/axios/commit/d29be181f85f6fe93397a07b1f69606d9622637b","https://github.com/axios/axios/security/advisories/GHSA-x97p-jq2g-jp4f"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"},{"value":"CVE-2026-101900","evidence":"/upstream"},{"value":"CVE-2026-101901","evidence":"/upstream"},{"value":"CVE-2026-101902","evidence":"/upstream"},{"value":"CVE-2026-101903","evidence":"/upstream"},{"value":"CVE-2026-101904","evidence":"/upstream"},{"value":"CVE-2026-101905","evidence":"/upstream"},{"value":"CVE-2026-101906","evidence":"/upstream"},{"value":"CVE-2026-101907","evidence":"/upstream"},{"value":"CVE-2026-101908","evidence":"/upstream"},{"value":"CVE-2026-101909","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0ef413e4-8008-4c41-897c-014174f3f269","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101901","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-542g-h47m-68v8","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101902","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101902","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101903","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-c29m-xwm3-cm6r","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101904","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101904","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101906","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-mghh-pgcx-3jjj","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101907","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-r4gj-5m52-g5wh","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101908","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101908","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101909","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.34.0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"axios","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-x97p-jq2g-jp4f","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/RHSA-2026%3A74872","advisory_id":"0ef413e4-8008-4c41-897c-014174f3f269","event_types":["advisory"],"published_at":"2026-10-26T00:57:51.165591+00:00","technologies":["core-osv","grafana13-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-03T10:17:01+00:00","detail_url":"/events/73507"},"members":[{"id":73507,"cve_ids":["CVE-2026-101898","CVE-2026-101900","CVE-2026-101901","CVE-2026-101902","CVE-2026-101903","CVE-2026-101904","CVE-2026-101905","CVE-2026-101906","CVE-2026-101907","CVE-2026-101908","CVE-2026-101909"],"payload":{"kind":"advisory","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","evidence":"osv:RHSA-2026:74872","products":[{"name":{"value":"grafana13.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:13.2.1-0.9.hum1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"RHSA-2026:74872","aliases":["RHSA-2026:74872"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.2.1-0.9.hum1"}]}],"package":{"name":"grafana13.2","purl":"pkg:rpm/redhat/grafana13.2","ecosystem":"Red Hat:hummingbird:1"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:74872.json"}}],"modified":"2026-10-03T10:32:34.608460980Z","provider":"osv","upstream":["CVE-2026-101898","CVE-2026-101900","CVE-2026-101901","CVE-2026-101902","CVE-2026-101903","CVE-2026-101904","CVE-2026-101905","CVE-2026-101906","CVE-2026-101907","CVE-2026-101908","CVE-2026-101909"],"references":["https://access.redhat.com/errata/RHSA-2026:74872","https://access.redhat.com/security/cve/CVE-2026-101903","https://access.redhat.com/security/updates/classification/","https://images.redhat.com/","https://access.redhat.com/security/cve/CVE-2026-101905","https://access.redhat.com/security/cve/CVE-2026-101902","https://access.redhat.com/security/cve/CVE-2026-101901","https://access.redhat.com/security/cve/CVE-2026-101904","https://access.redhat.com/security/cve/CVE-2026-101906","https://access.redhat.com/security/cve/CVE-2026-101898","https://access.redhat.com/security/cve/CVE-2026-101907","https://access.redhat.com/security/cve/CVE-2026-101908","https://access.redhat.com/security/cve/CVE-2026-101909","https://access.redhat.com/security/cve/CVE-2026-101900","https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74872.json","https://bugzilla.redhat.com/show_bug.cgi?id=2542571","https://www.cve.org/CVERecord?id=CVE-2026-101898","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://bugzilla.redhat.com/show_bug.cgi?id=2542576","https://www.cve.org/CVERecord?id=CVE-2026-101900","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://bugzilla.redhat.com/show_bug.cgi?id=2542577","https://www.cve.org/CVERecord?id=CVE-2026-101901","https://nvd.nist.gov/vuln/detail/CVE-2026-101901","https://github.com/axios/axios/security/advisories/GHSA-542g-h47m-68v8","https://bugzilla.redhat.com/show_bug.cgi?id=2542575","https://www.cve.org/CVERecord?id=CVE-2026-101902","https://nvd.nist.gov/vuln/detail/CVE-2026-101902","https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/security/advisories/GHSA-9fr6-4gfg-395g","https://bugzilla.redhat.com/show_bug.cgi?id=2542580","https://www.cve.org/CVERecord?id=CVE-2026-101903","https://nvd.nist.gov/vuln/detail/CVE-2026-101903","https://github.com/axios/axios/security/advisories/GHSA-c29m-xwm3-cm6r","https://bugzilla.redhat.com/show_bug.cgi?id=2542579","https://www.cve.org/CVERecord?id=CVE-2026-101904","https://nvd.nist.gov/vuln/detail/CVE-2026-101904","https://github.com/axios/axios/security/advisories/GHSA-j8rh-479h-cp32","https://bugzilla.redhat.com/show_bug.cgi?id=2542584","https://www.cve.org/CVERecord?id=CVE-2026-101905","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://bugzilla.redhat.com/show_bug.cgi?id=2542583","https://www.cve.org/CVERecord?id=CVE-2026-101906","https://nvd.nist.gov/vuln/detail/CVE-2026-101906","https://github.com/axios/axios/security/advisories/GHSA-mghh-pgcx-3jjj","https://bugzilla.redhat.com/show_bug.cgi?id=2542586","https://www.cve.org/CVERecord?id=CVE-2026-101907","https://nvd.nist.gov/vuln/detail/CVE-2026-101907","https://github.com/axios/axios/security/advisories/GHSA-r4gj-5m52-g5wh","https://bugzilla.redhat.com/show_bug.cgi?id=2542592","https://www.cve.org/CVERecord?id=CVE-2026-101908","https://nvd.nist.gov/vuln/detail/CVE-2026-101908","https://github.com/axios/axios/security/advisories/GHSA-vh66-26gq-q6x8","https://bugzilla.redhat.com/show_bug.cgi?id=2542593","https://www.cve.org/CVERecord?id=CVE-2026-101909","https://nvd.nist.gov/vuln/detail/CVE-2026-101909","https://github.com/axios/axios/commit/d29be181f85f6fe93397a07b1f69606d9622637b","https://github.com/axios/axios/security/advisories/GHSA-x97p-jq2g-jp4f"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"},{"value":"CVE-2026-101900","evidence":"/upstream"},{"value":"CVE-2026-101901","evidence":"/upstream"},{"value":"CVE-2026-101902","evidence":"/upstream"},{"value":"CVE-2026-101903","evidence":"/upstream"},{"value":"CVE-2026-101904","evidence":"/upstream"},{"value":"CVE-2026-101905","evidence":"/upstream"},{"value":"CVE-2026-101906","evidence":"/upstream"},{"value":"CVE-2026-101907","evidence":"/upstream"},{"value":"CVE-2026-101908","evidence":"/upstream"},{"value":"CVE-2026-101909","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0ef413e4-8008-4c41-897c-014174f3f269","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101901","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-542g-h47m-68v8","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101902","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101902","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101903","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-c29m-xwm3-cm6r","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101904","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101904","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101906","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-mghh-pgcx-3jjj","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101907","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-r4gj-5m52-g5wh","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101908","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101908","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101909","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.34.0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"axios","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-x97p-jq2g-jp4f","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/RHSA-2026%3A74872","advisory_id":"0ef413e4-8008-4c41-897c-014174f3f269","event_types":["advisory"],"published_at":"2026-10-26T00:57:51.165591+00:00","technologies":["core-osv","grafana13-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-03T10:17:01+00:00","detail_url":"/events/73507"}]}},{"id":72722,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-5q8g-v5j7-p8cw","summary":"CGA-5q8g-v5j7-p8cw","evidence":"osv:CGA-5q8g-v5j7-p8cw","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5q8g-v5j7-p8cw","aliases":["CGA-5q8g-v5j7-p8cw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5q8g-v5j7-p8cw.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:15:35Z"}]}}],"modified":"2026-10-03T10:32:32.741966773Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2cebc2da-e515-448f-b50c-a5b480d74c3e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5q8g-v5j7-p8cw","advisory_id":"2cebc2da-e515-448f-b50c-a5b480d74c3e","event_types":["advisory"],"published_at":"2026-10-26T00:53:50.270324+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:30:04+00:00","detail_url":"/advisories/advisory%3A2cebc2da-e515-448f-b50c-a5b480d74c3e","group":{"id":"advisory:2cebc2da-e515-448f-b50c-a5b480d74c3e","revision":1,"primary_event_id":73468,"change":"published","superseded_by":[],"changed":{"id":73468,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-5q8g-v5j7-p8cw","summary":"CGA-5q8g-v5j7-p8cw","evidence":"osv:CGA-5q8g-v5j7-p8cw","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5q8g-v5j7-p8cw","aliases":["CGA-5q8g-v5j7-p8cw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5q8g-v5j7-p8cw.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:15:35Z"}]}}],"modified":"2026-10-03T10:32:32.741966773Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2cebc2da-e515-448f-b50c-a5b480d74c3e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5q8g-v5j7-p8cw","advisory_id":"2cebc2da-e515-448f-b50c-a5b480d74c3e","event_types":["advisory"],"published_at":"2026-10-26T00:53:50.270324+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:30:04+00:00","detail_url":"/events/73468"},"members":[{"id":73468,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-5q8g-v5j7-p8cw","summary":"CGA-5q8g-v5j7-p8cw","evidence":"osv:CGA-5q8g-v5j7-p8cw","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5q8g-v5j7-p8cw","aliases":["CGA-5q8g-v5j7-p8cw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5q8g-v5j7-p8cw.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T02:15:35Z"}]}}],"modified":"2026-10-03T10:32:32.741966773Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2cebc2da-e515-448f-b50c-a5b480d74c3e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5q8g-v5j7-p8cw","advisory_id":"2cebc2da-e515-448f-b50c-a5b480d74c3e","event_types":["advisory"],"published_at":"2026-10-26T00:53:50.270324+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:30:04+00:00","detail_url":"/events/73468"}]}},{"id":72563,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-g2g6-2rh8-hwq3","summary":"CGA-g2g6-2rh8-hwq3","evidence":"osv:CGA-g2g6-2rh8-hwq3","products":[{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-g2g6-2rh8-hwq3","aliases":["CGA-g2g6-2rh8-hwq3"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/chainguard/opensearch-dashboards-3?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g2g6-2rh8-hwq3.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:10:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/wolfi/opensearch-dashboards-3?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g2g6-2rh8-hwq3.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:10:31Z"}]}}],"modified":"2026-10-03T10:31:32.886255117Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2429be20-f5f1-4f53-958b-24a261a937b2","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-g2g6-2rh8-hwq3","advisory_id":"2429be20-f5f1-4f53-958b-24a261a937b2","event_types":["advisory"],"published_at":"2026-10-26T00:32:38.641873+00:00","technologies":["core-osv","opensearch-dashboards-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:20:14+00:00","detail_url":"/advisories/advisory%3A2429be20-f5f1-4f53-958b-24a261a937b2","group":{"id":"advisory:2429be20-f5f1-4f53-958b-24a261a937b2","revision":1,"primary_event_id":73240,"change":"published","superseded_by":[],"changed":{"id":73240,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-g2g6-2rh8-hwq3","summary":"CGA-g2g6-2rh8-hwq3","evidence":"osv:CGA-g2g6-2rh8-hwq3","products":[{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-g2g6-2rh8-hwq3","aliases":["CGA-g2g6-2rh8-hwq3"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/chainguard/opensearch-dashboards-3?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g2g6-2rh8-hwq3.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:10:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/wolfi/opensearch-dashboards-3?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g2g6-2rh8-hwq3.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:10:31Z"}]}}],"modified":"2026-10-03T10:31:32.886255117Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2429be20-f5f1-4f53-958b-24a261a937b2","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-g2g6-2rh8-hwq3","advisory_id":"2429be20-f5f1-4f53-958b-24a261a937b2","event_types":["advisory"],"published_at":"2026-10-26T00:32:38.641873+00:00","technologies":["core-osv","opensearch-dashboards-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:20:14+00:00","detail_url":"/events/73240"},"members":[{"id":73240,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-g2g6-2rh8-hwq3","summary":"CGA-g2g6-2rh8-hwq3","evidence":"osv:CGA-g2g6-2rh8-hwq3","products":[{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-dashboards-3","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-g2g6-2rh8-hwq3","aliases":["CGA-g2g6-2rh8-hwq3"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/chainguard/opensearch-dashboards-3?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g2g6-2rh8-hwq3.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:10:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r8"}]}],"package":{"name":"opensearch-dashboards-3","purl":"pkg:apk/wolfi/opensearch-dashboards-3?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g2g6-2rh8-hwq3.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T01:10:31Z"}]}}],"modified":"2026-10-03T10:31:32.886255117Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2429be20-f5f1-4f53-958b-24a261a937b2","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-g2g6-2rh8-hwq3","advisory_id":"2429be20-f5f1-4f53-958b-24a261a937b2","event_types":["advisory"],"published_at":"2026-10-26T00:32:38.641873+00:00","technologies":["core-osv","opensearch-dashboards-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:20:14+00:00","detail_url":"/events/73240"}]}},{"id":72509,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-x9g4-mqp6-m4pj","summary":"CGA-x9g4-mqp6-m4pj","evidence":"osv:CGA-x9g4-mqp6-m4pj","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x9g4-mqp6-m4pj","aliases":["CGA-x9g4-mqp6-m4pj"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x9g4-mqp6-m4pj.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:20Z"}]}}],"modified":"2026-10-03T10:30:23.334382073Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d2c35741-6d64-4fd1-9b07-069ad22cebd7","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x9g4-mqp6-m4pj","advisory_id":"d2c35741-6d64-4fd1-9b07-069ad22cebd7","event_types":["advisory"],"published_at":"2026-10-26T00:26:19.276891+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:48+00:00","detail_url":"/advisories/advisory%3Ad2c35741-6d64-4fd1-9b07-069ad22cebd7","group":{"id":"advisory:d2c35741-6d64-4fd1-9b07-069ad22cebd7","revision":1,"primary_event_id":73164,"change":"published","superseded_by":[],"changed":{"id":73164,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-x9g4-mqp6-m4pj","summary":"CGA-x9g4-mqp6-m4pj","evidence":"osv:CGA-x9g4-mqp6-m4pj","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x9g4-mqp6-m4pj","aliases":["CGA-x9g4-mqp6-m4pj"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x9g4-mqp6-m4pj.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:20Z"}]}}],"modified":"2026-10-03T10:30:23.334382073Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d2c35741-6d64-4fd1-9b07-069ad22cebd7","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x9g4-mqp6-m4pj","advisory_id":"d2c35741-6d64-4fd1-9b07-069ad22cebd7","event_types":["advisory"],"published_at":"2026-10-26T00:26:19.276891+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:48+00:00","detail_url":"/events/73164"},"members":[{"id":73164,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-x9g4-mqp6-m4pj","summary":"CGA-x9g4-mqp6-m4pj","evidence":"osv:CGA-x9g4-mqp6-m4pj","products":[{"name":{"value":"wazuh-dashboard-plugins-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x9g4-mqp6-m4pj","aliases":["CGA-x9g4-mqp6-m4pj"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x9g4-mqp6-m4pj.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:01:20Z"}]}}],"modified":"2026-10-03T10:30:23.334382073Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d2c35741-6d64-4fd1-9b07-069ad22cebd7","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x9g4-mqp6-m4pj","advisory_id":"d2c35741-6d64-4fd1-9b07-069ad22cebd7","event_types":["advisory"],"published_at":"2026-10-26T00:26:19.276891+00:00","technologies":["core-osv","wazuh-dashboard-plugins-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:48+00:00","detail_url":"/events/73164"}]}},{"id":72118,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-56f2-g3rj-c886","summary":"CGA-56f2-g3rj-c886","evidence":"osv:CGA-56f2-g3rj-c886","products":[{"name":{"value":"kibana-8.19-bitnami","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-56f2-g3rj-c886","aliases":["CGA-56f2-g3rj-c886"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19-bitnami","purl":"pkg:apk/chainguard/kibana-8.19-bitnami?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-56f2-g3rj-c886.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/opt/bitnami/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:04:12Z"}]}}],"modified":"2026-10-02T23:12:55.018038091Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cadb140d-2f35-4595-b61c-0a91df6c5bf1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-56f2-g3rj-c886","advisory_id":"cadb140d-2f35-4595-b61c-0a91df6c5bf1","event_types":["advisory"],"published_at":"2026-10-26T00:17:12.571414+00:00","technologies":["core-osv","kibana-8-19-bitnami"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:23:15+00:00","detail_url":"/advisories/advisory%3Acadb140d-2f35-4595-b61c-0a91df6c5bf1","group":{"id":"advisory:cadb140d-2f35-4595-b61c-0a91df6c5bf1","revision":1,"primary_event_id":72749,"change":"published","superseded_by":[],"changed":{"id":72749,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-56f2-g3rj-c886","summary":"CGA-56f2-g3rj-c886","evidence":"osv:CGA-56f2-g3rj-c886","products":[{"name":{"value":"kibana-8.19-bitnami","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-56f2-g3rj-c886","aliases":["CGA-56f2-g3rj-c886"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19-bitnami","purl":"pkg:apk/chainguard/kibana-8.19-bitnami?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-56f2-g3rj-c886.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/opt/bitnami/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:04:12Z"}]}}],"modified":"2026-10-02T23:12:55.018038091Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cadb140d-2f35-4595-b61c-0a91df6c5bf1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-56f2-g3rj-c886","advisory_id":"cadb140d-2f35-4595-b61c-0a91df6c5bf1","event_types":["advisory"],"published_at":"2026-10-26T00:17:12.571414+00:00","technologies":["core-osv","kibana-8-19-bitnami"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:23:15+00:00","detail_url":"/events/72749"},"members":[{"id":72749,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-56f2-g3rj-c886","summary":"CGA-56f2-g3rj-c886","evidence":"osv:CGA-56f2-g3rj-c886","products":[{"name":{"value":"kibana-8.19-bitnami","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-56f2-g3rj-c886","aliases":["CGA-56f2-g3rj-c886"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19-bitnami","purl":"pkg:apk/chainguard/kibana-8.19-bitnami?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-56f2-g3rj-c886.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/opt/bitnami/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:04:12Z"}]}}],"modified":"2026-10-02T23:12:55.018038091Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cadb140d-2f35-4595-b61c-0a91df6c5bf1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-56f2-g3rj-c886","advisory_id":"cadb140d-2f35-4595-b61c-0a91df6c5bf1","event_types":["advisory"],"published_at":"2026-10-26T00:17:12.571414+00:00","technologies":["core-osv","kibana-8-19-bitnami"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:23:15+00:00","detail_url":"/events/72749"}]}},{"id":72114,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-43fh-9h9m-mhmv","summary":"CGA-43fh-9h9m-mhmv","evidence":"osv:CGA-43fh-9h9m-mhmv","products":[{"name":{"value":"kibana-8.19","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-43fh-9h9m-mhmv","aliases":["CGA-43fh-9h9m-mhmv"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19","purl":"pkg:apk/chainguard/kibana-8.19?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-43fh-9h9m-mhmv.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:00:13Z"}]}}],"modified":"2026-10-02T23:12:54.644158539Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7a66074c-3373-42cd-93f0-50fcf2359493","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-43fh-9h9m-mhmv","advisory_id":"7a66074c-3373-42cd-93f0-50fcf2359493","event_types":["advisory"],"published_at":"2026-10-26T00:17:04.329617+00:00","technologies":["core-osv","kibana-8-19"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:35:18+00:00","detail_url":"/advisories/advisory%3A7a66074c-3373-42cd-93f0-50fcf2359493","group":{"id":"advisory:7a66074c-3373-42cd-93f0-50fcf2359493","revision":1,"primary_event_id":72745,"change":"published","superseded_by":[],"changed":{"id":72745,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-43fh-9h9m-mhmv","summary":"CGA-43fh-9h9m-mhmv","evidence":"osv:CGA-43fh-9h9m-mhmv","products":[{"name":{"value":"kibana-8.19","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-43fh-9h9m-mhmv","aliases":["CGA-43fh-9h9m-mhmv"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19","purl":"pkg:apk/chainguard/kibana-8.19?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-43fh-9h9m-mhmv.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:00:13Z"}]}}],"modified":"2026-10-02T23:12:54.644158539Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7a66074c-3373-42cd-93f0-50fcf2359493","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-43fh-9h9m-mhmv","advisory_id":"7a66074c-3373-42cd-93f0-50fcf2359493","event_types":["advisory"],"published_at":"2026-10-26T00:17:04.329617+00:00","technologies":["core-osv","kibana-8-19"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:35:18+00:00","detail_url":"/events/72745"},"members":[{"id":72745,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-43fh-9h9m-mhmv","summary":"CGA-43fh-9h9m-mhmv","evidence":"osv:CGA-43fh-9h9m-mhmv","products":[{"name":{"value":"kibana-8.19","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-43fh-9h9m-mhmv","aliases":["CGA-43fh-9h9m-mhmv"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19","purl":"pkg:apk/chainguard/kibana-8.19?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-43fh-9h9m-mhmv.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:00:13Z"}]}}],"modified":"2026-10-02T23:12:54.644158539Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7a66074c-3373-42cd-93f0-50fcf2359493","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-43fh-9h9m-mhmv","advisory_id":"7a66074c-3373-42cd-93f0-50fcf2359493","event_types":["advisory"],"published_at":"2026-10-26T00:17:04.329617+00:00","technologies":["core-osv","kibana-8-19"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:35:18+00:00","detail_url":"/events/72745"}]}},{"id":72100,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-jfrc-vc4r-4frv","summary":"CGA-jfrc-vc4r-4frv","evidence":"osv:CGA-jfrc-vc4r-4frv","products":[{"name":{"value":"kibana-8.19-bitnami","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-jfrc-vc4r-4frv","aliases":["CGA-jfrc-vc4r-4frv"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19-bitnami","purl":"pkg:apk/chainguard/kibana-8.19-bitnami?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jfrc-vc4r-4frv.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/opt/bitnami/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:45:29Z"}]}}],"modified":"2026-10-02T23:12:52.856755321Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:57feff25-fbe7-45d3-b776-8b67c57ac99a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jfrc-vc4r-4frv","advisory_id":"57feff25-fbe7-45d3-b776-8b67c57ac99a","event_types":["advisory"],"published_at":"2026-10-26T00:16:44.071857+00:00","technologies":["core-osv","kibana-8-19-bitnami"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:42:16+00:00","detail_url":"/advisories/advisory%3A57feff25-fbe7-45d3-b776-8b67c57ac99a","group":{"id":"advisory:57feff25-fbe7-45d3-b776-8b67c57ac99a","revision":1,"primary_event_id":72731,"change":"published","superseded_by":[],"changed":{"id":72731,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-jfrc-vc4r-4frv","summary":"CGA-jfrc-vc4r-4frv","evidence":"osv:CGA-jfrc-vc4r-4frv","products":[{"name":{"value":"kibana-8.19-bitnami","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-jfrc-vc4r-4frv","aliases":["CGA-jfrc-vc4r-4frv"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19-bitnami","purl":"pkg:apk/chainguard/kibana-8.19-bitnami?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jfrc-vc4r-4frv.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/opt/bitnami/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:45:29Z"}]}}],"modified":"2026-10-02T23:12:52.856755321Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:57feff25-fbe7-45d3-b776-8b67c57ac99a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jfrc-vc4r-4frv","advisory_id":"57feff25-fbe7-45d3-b776-8b67c57ac99a","event_types":["advisory"],"published_at":"2026-10-26T00:16:44.071857+00:00","technologies":["core-osv","kibana-8-19-bitnami"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:42:16+00:00","detail_url":"/events/72731"},"members":[{"id":72731,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-jfrc-vc4r-4frv","summary":"CGA-jfrc-vc4r-4frv","evidence":"osv:CGA-jfrc-vc4r-4frv","products":[{"name":{"value":"kibana-8.19-bitnami","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-jfrc-vc4r-4frv","aliases":["CGA-jfrc-vc4r-4frv"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19-bitnami","purl":"pkg:apk/chainguard/kibana-8.19-bitnami?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jfrc-vc4r-4frv.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/opt/bitnami/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:45:29Z"}]}}],"modified":"2026-10-02T23:12:52.856755321Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:57feff25-fbe7-45d3-b776-8b67c57ac99a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jfrc-vc4r-4frv","advisory_id":"57feff25-fbe7-45d3-b776-8b67c57ac99a","event_types":["advisory"],"published_at":"2026-10-26T00:16:44.071857+00:00","technologies":["core-osv","kibana-8-19-bitnami"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:42:16+00:00","detail_url":"/events/72731"}]}},{"id":71923,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-p48r-5rvc-xhjj","summary":"CGA-p48r-5rvc-xhjj","evidence":"osv:CGA-p48r-5rvc-xhjj","products":[{"name":{"value":"kibana-8.19","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-p48r-5rvc-xhjj","aliases":["CGA-p48r-5rvc-xhjj"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19","purl":"pkg:apk/chainguard/kibana-8.19?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p48r-5rvc-xhjj.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:56:10Z"}]}}],"modified":"2026-10-02T23:01:40.636856437Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5060fc23-6e27-4ee1-9c2b-82e8155e266b","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p48r-5rvc-xhjj","advisory_id":"5060fc23-6e27-4ee1-9c2b-82e8155e266b","event_types":["advisory"],"published_at":"2026-10-25T23:55:48.713667+00:00","technologies":["core-osv","kibana-8-19"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:33:50+00:00","detail_url":"/advisories/advisory%3A5060fc23-6e27-4ee1-9c2b-82e8155e266b","group":{"id":"advisory:5060fc23-6e27-4ee1-9c2b-82e8155e266b","revision":1,"primary_event_id":72461,"change":"published","superseded_by":[],"changed":{"id":72461,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-p48r-5rvc-xhjj","summary":"CGA-p48r-5rvc-xhjj","evidence":"osv:CGA-p48r-5rvc-xhjj","products":[{"name":{"value":"kibana-8.19","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-p48r-5rvc-xhjj","aliases":["CGA-p48r-5rvc-xhjj"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19","purl":"pkg:apk/chainguard/kibana-8.19?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p48r-5rvc-xhjj.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:56:10Z"}]}}],"modified":"2026-10-02T23:01:40.636856437Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5060fc23-6e27-4ee1-9c2b-82e8155e266b","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p48r-5rvc-xhjj","advisory_id":"5060fc23-6e27-4ee1-9c2b-82e8155e266b","event_types":["advisory"],"published_at":"2026-10-25T23:55:48.713667+00:00","technologies":["core-osv","kibana-8-19"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:33:50+00:00","detail_url":"/events/72461"},"members":[{"id":72461,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-p48r-5rvc-xhjj","summary":"CGA-p48r-5rvc-xhjj","evidence":"osv:CGA-p48r-5rvc-xhjj","products":[{"name":{"value":"kibana-8.19","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-p48r-5rvc-xhjj","aliases":["CGA-p48r-5rvc-xhjj"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.22-r4"}]}],"package":{"name":"kibana-8.19","purl":"pkg:apk/chainguard/kibana-8.19?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p48r-5rvc-xhjj.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.19.0","component_type":"npm","component_version":"1.19.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:56:10Z"}]}}],"modified":"2026-10-02T23:01:40.636856437Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5060fc23-6e27-4ee1-9c2b-82e8155e266b","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p48r-5rvc-xhjj","advisory_id":"5060fc23-6e27-4ee1-9c2b-82e8155e266b","event_types":["advisory"],"published_at":"2026-10-25T23:55:48.713667+00:00","technologies":["core-osv","kibana-8-19"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:33:50+00:00","detail_url":"/events/72461"}]}},{"id":70934,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-hr6c-7pvv-c4j3","summary":"CGA-hr6c-7pvv-c4j3","evidence":"osv:CGA-hr6c-7pvv-c4j3","products":[{"name":{"value":"opensearch-dashboards-3-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-hr6c-7pvv-c4j3","aliases":["CGA-hr6c-7pvv-c4j3"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r5"}]}],"package":{"name":"opensearch-dashboards-3-fips","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hr6c-7pvv-c4j3.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:09:00Z"}]}}],"modified":"2026-10-02T18:28:00.076176833Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c9a8a72c-9b82-41a7-bd0f-8fb599330b8c","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hr6c-7pvv-c4j3","advisory_id":"c9a8a72c-9b82-41a7-bd0f-8fb599330b8c","event_types":["advisory"],"published_at":"2026-10-25T22:45:02.874212+00:00","technologies":["core-osv","opensearch-dashboards-3-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:50:13+00:00","detail_url":"/advisories/advisory%3Ac9a8a72c-9b82-41a7-bd0f-8fb599330b8c","group":{"id":"advisory:c9a8a72c-9b82-41a7-bd0f-8fb599330b8c","revision":1,"primary_event_id":71305,"change":"published","superseded_by":[],"changed":{"id":71305,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-hr6c-7pvv-c4j3","summary":"CGA-hr6c-7pvv-c4j3","evidence":"osv:CGA-hr6c-7pvv-c4j3","products":[{"name":{"value":"opensearch-dashboards-3-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-hr6c-7pvv-c4j3","aliases":["CGA-hr6c-7pvv-c4j3"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r5"}]}],"package":{"name":"opensearch-dashboards-3-fips","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hr6c-7pvv-c4j3.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:09:00Z"}]}}],"modified":"2026-10-02T18:28:00.076176833Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c9a8a72c-9b82-41a7-bd0f-8fb599330b8c","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hr6c-7pvv-c4j3","advisory_id":"c9a8a72c-9b82-41a7-bd0f-8fb599330b8c","event_types":["advisory"],"published_at":"2026-10-25T22:45:02.874212+00:00","technologies":["core-osv","opensearch-dashboards-3-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:50:13+00:00","detail_url":"/events/71305"},"members":[{"id":71305,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-hr6c-7pvv-c4j3","summary":"CGA-hr6c-7pvv-c4j3","evidence":"osv:CGA-hr6c-7pvv-c4j3","products":[{"name":{"value":"opensearch-dashboards-3-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-hr6c-7pvv-c4j3","aliases":["CGA-hr6c-7pvv-c4j3"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r5"}]}],"package":{"name":"opensearch-dashboards-3-fips","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hr6c-7pvv-c4j3.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:09:00Z"}]}}],"modified":"2026-10-02T18:28:00.076176833Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c9a8a72c-9b82-41a7-bd0f-8fb599330b8c","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hr6c-7pvv-c4j3","advisory_id":"c9a8a72c-9b82-41a7-bd0f-8fb599330b8c","event_types":["advisory"],"published_at":"2026-10-25T22:45:02.874212+00:00","technologies":["core-osv","opensearch-dashboards-3-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:50:13+00:00","detail_url":"/events/71305"}]}},{"id":70884,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-22qv-9vmc-rvx5","summary":"CGA-22qv-9vmc-rvx5","evidence":"osv:CGA-22qv-9vmc-rvx5","products":[{"name":{"value":"opensearch-dashboards-3-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-22qv-9vmc-rvx5","aliases":["CGA-22qv-9vmc-rvx5"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r5"}]}],"package":{"name":"opensearch-dashboards-3-fips","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-22qv-9vmc-rvx5.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:49:09Z"}]}}],"modified":"2026-10-02T18:27:48.308364727Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:71f81a11-d95f-4bb3-a3f3-187097c731ed","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-22qv-9vmc-rvx5","advisory_id":"71f81a11-d95f-4bb3-a3f3-187097c731ed","event_types":["advisory"],"published_at":"2026-10-25T22:43:54.726796+00:00","technologies":["core-osv","opensearch-dashboards-3-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:15:30+00:00","detail_url":"/advisories/advisory%3A71f81a11-d95f-4bb3-a3f3-187097c731ed","group":{"id":"advisory:71f81a11-d95f-4bb3-a3f3-187097c731ed","revision":1,"primary_event_id":71255,"change":"published","superseded_by":[],"changed":{"id":71255,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-22qv-9vmc-rvx5","summary":"CGA-22qv-9vmc-rvx5","evidence":"osv:CGA-22qv-9vmc-rvx5","products":[{"name":{"value":"opensearch-dashboards-3-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-22qv-9vmc-rvx5","aliases":["CGA-22qv-9vmc-rvx5"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r5"}]}],"package":{"name":"opensearch-dashboards-3-fips","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-22qv-9vmc-rvx5.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:49:09Z"}]}}],"modified":"2026-10-02T18:27:48.308364727Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:71f81a11-d95f-4bb3-a3f3-187097c731ed","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-22qv-9vmc-rvx5","advisory_id":"71f81a11-d95f-4bb3-a3f3-187097c731ed","event_types":["advisory"],"published_at":"2026-10-25T22:43:54.726796+00:00","technologies":["core-osv","opensearch-dashboards-3-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:15:30+00:00","detail_url":"/events/71255"},"members":[{"id":71255,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-22qv-9vmc-rvx5","summary":"CGA-22qv-9vmc-rvx5","evidence":"osv:CGA-22qv-9vmc-rvx5","products":[{"name":{"value":"opensearch-dashboards-3-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.8.0-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-22qv-9vmc-rvx5","aliases":["CGA-22qv-9vmc-rvx5"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r5"}]}],"package":{"name":"opensearch-dashboards-3-fips","purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-22qv-9vmc-rvx5.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/opensearch-dashboards/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:49:09Z"}]}}],"modified":"2026-10-02T18:27:48.308364727Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:71f81a11-d95f-4bb3-a3f3-187097c731ed","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-22qv-9vmc-rvx5","advisory_id":"71f81a11-d95f-4bb3-a3f3-187097c731ed","event_types":["advisory"],"published_at":"2026-10-25T22:43:54.726796+00:00","technologies":["core-osv","opensearch-dashboards-3-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:15:30+00:00","detail_url":"/events/71255"}]}},{"id":70667,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-jpgv-23h3-8xmh","summary":"CGA-jpgv-23h3-8xmh","evidence":"osv:CGA-jpgv-23h3-8xmh","products":[{"name":{"value":"langfuse-fips-4-worker","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.49.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-jpgv-23h3-8xmh","aliases":["CGA-jpgv-23h3-8xmh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.49.0-r0"}]}],"package":{"name":"langfuse-fips-4-worker","purl":"pkg:apk/chainguard/langfuse-fips-4-worker?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jpgv-23h3-8xmh.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/pnpm-lock.yaml","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:20:25Z"}]}}],"modified":"2026-10-02T18:25:40.794987325Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cd8175c9-eef4-43e0-a175-c3a3327290c6","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jpgv-23h3-8xmh","advisory_id":"cd8175c9-eef4-43e0-a175-c3a3327290c6","event_types":["advisory"],"published_at":"2026-10-25T22:34:00.904787+00:00","technologies":["core-osv","langfuse-fips-4-worker"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:44:25+00:00","detail_url":"/advisories/advisory%3Acd8175c9-eef4-43e0-a175-c3a3327290c6","group":{"id":"advisory:cd8175c9-eef4-43e0-a175-c3a3327290c6","revision":1,"primary_event_id":71038,"change":"published","superseded_by":[],"changed":{"id":71038,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-jpgv-23h3-8xmh","summary":"CGA-jpgv-23h3-8xmh","evidence":"osv:CGA-jpgv-23h3-8xmh","products":[{"name":{"value":"langfuse-fips-4-worker","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.49.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-jpgv-23h3-8xmh","aliases":["CGA-jpgv-23h3-8xmh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.49.0-r0"}]}],"package":{"name":"langfuse-fips-4-worker","purl":"pkg:apk/chainguard/langfuse-fips-4-worker?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jpgv-23h3-8xmh.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/pnpm-lock.yaml","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:20:25Z"}]}}],"modified":"2026-10-02T18:25:40.794987325Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cd8175c9-eef4-43e0-a175-c3a3327290c6","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jpgv-23h3-8xmh","advisory_id":"cd8175c9-eef4-43e0-a175-c3a3327290c6","event_types":["advisory"],"published_at":"2026-10-25T22:34:00.904787+00:00","technologies":["core-osv","langfuse-fips-4-worker"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:44:25+00:00","detail_url":"/events/71038"},"members":[{"id":71038,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-jpgv-23h3-8xmh","summary":"CGA-jpgv-23h3-8xmh","evidence":"osv:CGA-jpgv-23h3-8xmh","products":[{"name":{"value":"langfuse-fips-4-worker","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.49.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-jpgv-23h3-8xmh","aliases":["CGA-jpgv-23h3-8xmh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.49.0-r0"}]}],"package":{"name":"langfuse-fips-4-worker","purl":"pkg:apk/chainguard/langfuse-fips-4-worker?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jpgv-23h3-8xmh.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/pnpm-lock.yaml","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:20:25Z"}]}}],"modified":"2026-10-02T18:25:40.794987325Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cd8175c9-eef4-43e0-a175-c3a3327290c6","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jpgv-23h3-8xmh","advisory_id":"cd8175c9-eef4-43e0-a175-c3a3327290c6","event_types":["advisory"],"published_at":"2026-10-25T22:34:00.904787+00:00","technologies":["core-osv","langfuse-fips-4-worker"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:44:25+00:00","detail_url":"/events/71038"}]}},{"id":70576,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-hjf6-m24c-f3mv","summary":"CGA-hjf6-m24c-f3mv","evidence":"osv:CGA-hjf6-m24c-f3mv","products":[{"name":{"value":"semaphore","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.12-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-hjf6-m24c-f3mv","aliases":["CGA-hjf6-m24c-f3mv"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.12-r3"}]}],"package":{"name":"semaphore","purl":"pkg:apk/chainguard/semaphore?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hjf6-m24c-f3mv.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/semaphore/embedded-ui/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:59:06Z"}]}}],"modified":"2026-10-02T18:25:35.527936344Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cec00801-4c6e-454e-a614-58852345c980","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hjf6-m24c-f3mv","advisory_id":"cec00801-4c6e-454e-a614-58852345c980","event_types":["advisory"],"published_at":"2026-10-25T22:29:59.123235+00:00","technologies":["core-osv","semaphore"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:20:09+00:00","detail_url":"/advisories/advisory%3Acec00801-4c6e-454e-a614-58852345c980","group":{"id":"advisory:cec00801-4c6e-454e-a614-58852345c980","revision":1,"primary_event_id":70946,"change":"published","superseded_by":[],"changed":{"id":70946,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-hjf6-m24c-f3mv","summary":"CGA-hjf6-m24c-f3mv","evidence":"osv:CGA-hjf6-m24c-f3mv","products":[{"name":{"value":"semaphore","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.12-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-hjf6-m24c-f3mv","aliases":["CGA-hjf6-m24c-f3mv"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.12-r3"}]}],"package":{"name":"semaphore","purl":"pkg:apk/chainguard/semaphore?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hjf6-m24c-f3mv.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/semaphore/embedded-ui/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:59:06Z"}]}}],"modified":"2026-10-02T18:25:35.527936344Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cec00801-4c6e-454e-a614-58852345c980","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hjf6-m24c-f3mv","advisory_id":"cec00801-4c6e-454e-a614-58852345c980","event_types":["advisory"],"published_at":"2026-10-25T22:29:59.123235+00:00","technologies":["core-osv","semaphore"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:20:09+00:00","detail_url":"/events/70946"},"members":[{"id":70946,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-hjf6-m24c-f3mv","summary":"CGA-hjf6-m24c-f3mv","evidence":"osv:CGA-hjf6-m24c-f3mv","products":[{"name":{"value":"semaphore","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.12-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-hjf6-m24c-f3mv","aliases":["CGA-hjf6-m24c-f3mv"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.12-r3"}]}],"package":{"name":"semaphore","purl":"pkg:apk/chainguard/semaphore?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hjf6-m24c-f3mv.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/semaphore/embedded-ui/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:59:06Z"}]}}],"modified":"2026-10-02T18:25:35.527936344Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cec00801-4c6e-454e-a614-58852345c980","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hjf6-m24c-f3mv","advisory_id":"cec00801-4c6e-454e-a614-58852345c980","event_types":["advisory"],"published_at":"2026-10-25T22:29:59.123235+00:00","technologies":["core-osv","semaphore"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:20:09+00:00","detail_url":"/events/70946"}]}},{"id":70495,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-8479-qrh3-6jmw","summary":"CGA-8479-qrh3-6jmw","evidence":"osv:CGA-8479-qrh3-6jmw","products":[{"name":{"value":"librechat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.7-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-8479-qrh3-6jmw","aliases":["CGA-8479-qrh3-6jmw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-r16"}]}],"package":{"name":"librechat","purl":"pkg:apk/chainguard/librechat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8479-qrh3-6jmw.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/package-lock.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:23:58Z"}]}}],"modified":"2026-10-02T18:25:31.966849970Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0bd3d756-396c-4852-b45f-83518a0a58bc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8479-qrh3-6jmw","advisory_id":"0bd3d756-396c-4852-b45f-83518a0a58bc","event_types":["advisory"],"published_at":"2026-10-25T22:26:48.831406+00:00","technologies":["core-osv","librechat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:56:26+00:00","detail_url":"/advisories/advisory%3A0bd3d756-396c-4852-b45f-83518a0a58bc","group":{"id":"advisory:0bd3d756-396c-4852-b45f-83518a0a58bc","revision":1,"primary_event_id":70865,"change":"published","superseded_by":[],"changed":{"id":70865,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-8479-qrh3-6jmw","summary":"CGA-8479-qrh3-6jmw","evidence":"osv:CGA-8479-qrh3-6jmw","products":[{"name":{"value":"librechat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.7-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-8479-qrh3-6jmw","aliases":["CGA-8479-qrh3-6jmw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-r16"}]}],"package":{"name":"librechat","purl":"pkg:apk/chainguard/librechat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8479-qrh3-6jmw.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/package-lock.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:23:58Z"}]}}],"modified":"2026-10-02T18:25:31.966849970Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0bd3d756-396c-4852-b45f-83518a0a58bc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8479-qrh3-6jmw","advisory_id":"0bd3d756-396c-4852-b45f-83518a0a58bc","event_types":["advisory"],"published_at":"2026-10-25T22:26:48.831406+00:00","technologies":["core-osv","librechat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:56:26+00:00","detail_url":"/events/70865"},"members":[{"id":70865,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-8479-qrh3-6jmw","summary":"CGA-8479-qrh3-6jmw","evidence":"osv:CGA-8479-qrh3-6jmw","products":[{"name":{"value":"librechat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.7-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-8479-qrh3-6jmw","aliases":["CGA-8479-qrh3-6jmw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-r16"}]}],"package":{"name":"librechat","purl":"pkg:apk/chainguard/librechat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8479-qrh3-6jmw.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/package-lock.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:23:58Z"}]}}],"modified":"2026-10-02T18:25:31.966849970Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0bd3d756-396c-4852-b45f-83518a0a58bc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8479-qrh3-6jmw","advisory_id":"0bd3d756-396c-4852-b45f-83518a0a58bc","event_types":["advisory"],"published_at":"2026-10-25T22:26:48.831406+00:00","technologies":["core-osv","librechat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:56:26+00:00","detail_url":"/events/70865"}]}},{"id":70310,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-g389-6697-hmwq","summary":"CGA-g389-6697-hmwq","evidence":"osv:CGA-g389-6697-hmwq","products":[{"name":{"value":"langfuse-fips-4-worker","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.49.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-g389-6697-hmwq","aliases":["CGA-g389-6697-hmwq"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.49.0-r0"}]}],"package":{"name":"langfuse-fips-4-worker","purl":"pkg:apk/chainguard/langfuse-fips-4-worker?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g389-6697-hmwq.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/node_modules/.pnpm/axios@1.18.0_debug@4.4.3_supports-color@8.1.1__supports-color@8.1.1/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:20:26Z"}]}}],"modified":"2026-10-02T18:25:22.812158350Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ada4db23-a08e-4d07-b758-a7b4183c43fe","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-g389-6697-hmwq","advisory_id":"ada4db23-a08e-4d07-b758-a7b4183c43fe","event_types":["advisory"],"published_at":"2026-10-25T22:20:46.047457+00:00","technologies":["core-osv","langfuse-fips-4-worker"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:44:19+00:00","detail_url":"/advisories/advisory%3Aada4db23-a08e-4d07-b758-a7b4183c43fe","group":{"id":"advisory:ada4db23-a08e-4d07-b758-a7b4183c43fe","revision":1,"primary_event_id":70680,"change":"published","superseded_by":[],"changed":{"id":70680,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-g389-6697-hmwq","summary":"CGA-g389-6697-hmwq","evidence":"osv:CGA-g389-6697-hmwq","products":[{"name":{"value":"langfuse-fips-4-worker","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.49.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-g389-6697-hmwq","aliases":["CGA-g389-6697-hmwq"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.49.0-r0"}]}],"package":{"name":"langfuse-fips-4-worker","purl":"pkg:apk/chainguard/langfuse-fips-4-worker?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g389-6697-hmwq.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/node_modules/.pnpm/axios@1.18.0_debug@4.4.3_supports-color@8.1.1__supports-color@8.1.1/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:20:26Z"}]}}],"modified":"2026-10-02T18:25:22.812158350Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ada4db23-a08e-4d07-b758-a7b4183c43fe","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-g389-6697-hmwq","advisory_id":"ada4db23-a08e-4d07-b758-a7b4183c43fe","event_types":["advisory"],"published_at":"2026-10-25T22:20:46.047457+00:00","technologies":["core-osv","langfuse-fips-4-worker"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:44:19+00:00","detail_url":"/events/70680"},"members":[{"id":70680,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-g389-6697-hmwq","summary":"CGA-g389-6697-hmwq","evidence":"osv:CGA-g389-6697-hmwq","products":[{"name":{"value":"langfuse-fips-4-worker","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.49.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-g389-6697-hmwq","aliases":["CGA-g389-6697-hmwq"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.49.0-r0"}]}],"package":{"name":"langfuse-fips-4-worker","purl":"pkg:apk/chainguard/langfuse-fips-4-worker?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g389-6697-hmwq.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/node_modules/.pnpm/axios@1.18.0_debug@4.4.3_supports-color@8.1.1__supports-color@8.1.1/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:20:26Z"}]}}],"modified":"2026-10-02T18:25:22.812158350Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ada4db23-a08e-4d07-b758-a7b4183c43fe","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-g389-6697-hmwq","advisory_id":"ada4db23-a08e-4d07-b758-a7b4183c43fe","event_types":["advisory"],"published_at":"2026-10-25T22:20:46.047457+00:00","technologies":["core-osv","langfuse-fips-4-worker"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:44:19+00:00","detail_url":"/events/70680"}]}},{"id":70170,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-5vqg-hvgq-p996","summary":"CGA-5vqg-hvgq-p996","evidence":"osv:CGA-5vqg-hvgq-p996","products":[{"name":{"value":"librechat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.7-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5vqg-hvgq-p996","aliases":["CGA-5vqg-hvgq-p996"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-r16"}]}],"package":{"name":"librechat","purl":"pkg:apk/chainguard/librechat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5vqg-hvgq-p996.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:23:58Z"}]}}],"modified":"2026-10-02T18:25:16.022394907Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:63d624f1-c679-4476-a4a8-075d8ade3cdd","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5vqg-hvgq-p996","advisory_id":"63d624f1-c679-4476-a4a8-075d8ade3cdd","event_types":["advisory"],"published_at":"2026-10-25T22:16:19.954582+00:00","technologies":["core-osv","librechat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:56:26+00:00","detail_url":"/advisories/advisory%3A63d624f1-c679-4476-a4a8-075d8ade3cdd","group":{"id":"advisory:63d624f1-c679-4476-a4a8-075d8ade3cdd","revision":1,"primary_event_id":70540,"change":"published","superseded_by":[],"changed":{"id":70540,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-5vqg-hvgq-p996","summary":"CGA-5vqg-hvgq-p996","evidence":"osv:CGA-5vqg-hvgq-p996","products":[{"name":{"value":"librechat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.7-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5vqg-hvgq-p996","aliases":["CGA-5vqg-hvgq-p996"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-r16"}]}],"package":{"name":"librechat","purl":"pkg:apk/chainguard/librechat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5vqg-hvgq-p996.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:23:58Z"}]}}],"modified":"2026-10-02T18:25:16.022394907Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:63d624f1-c679-4476-a4a8-075d8ade3cdd","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5vqg-hvgq-p996","advisory_id":"63d624f1-c679-4476-a4a8-075d8ade3cdd","event_types":["advisory"],"published_at":"2026-10-25T22:16:19.954582+00:00","technologies":["core-osv","librechat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:56:26+00:00","detail_url":"/events/70540"},"members":[{"id":70540,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-5vqg-hvgq-p996","summary":"CGA-5vqg-hvgq-p996","evidence":"osv:CGA-5vqg-hvgq-p996","products":[{"name":{"value":"librechat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.7-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5vqg-hvgq-p996","aliases":["CGA-5vqg-hvgq-p996"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-r16"}]}],"package":{"name":"librechat","purl":"pkg:apk/chainguard/librechat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5vqg-hvgq-p996.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/app/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:23:58Z"}]}}],"modified":"2026-10-02T18:25:16.022394907Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:63d624f1-c679-4476-a4a8-075d8ade3cdd","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5vqg-hvgq-p996","advisory_id":"63d624f1-c679-4476-a4a8-075d8ade3cdd","event_types":["advisory"],"published_at":"2026-10-25T22:16:19.954582+00:00","technologies":["core-osv","librechat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:56:26+00:00","detail_url":"/events/70540"}]}},{"id":69993,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"MINI-vppr-4wm5-hp95","summary":"MINI-vppr-4wm5-hp95","evidence":"osv:MINI-vppr-4wm5-hp95","products":[{"name":{"value":"unleash-server","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.2.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-vppr-4wm5-hp95","aliases":["MINI-vppr-4wm5-hp95"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.0-r0"}]}],"package":{"name":"unleash-server","purl":"pkg:apk/minimos/unleash-server","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-vppr-4wm5-hp95.json"}}],"modified":"2026-10-02T18:23:32.032146290Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":[]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f2638b9b-a664-40b4-a208-90e10a23b26d","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-vppr-4wm5-hp95","advisory_id":"f2638b9b-a664-40b4-a208-90e10a23b26d","event_types":["advisory"],"published_at":"2026-10-25T22:11:26.593458+00:00","technologies":["core-osv","unleash-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:12:26+00:00","detail_url":"/advisories/advisory%3Af2638b9b-a664-40b4-a208-90e10a23b26d","group":{"id":"advisory:f2638b9b-a664-40b4-a208-90e10a23b26d","revision":1,"primary_event_id":70363,"change":"published","superseded_by":[],"changed":{"id":70363,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"MINI-vppr-4wm5-hp95","summary":"MINI-vppr-4wm5-hp95","evidence":"osv:MINI-vppr-4wm5-hp95","products":[{"name":{"value":"unleash-server","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.2.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-vppr-4wm5-hp95","aliases":["MINI-vppr-4wm5-hp95"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.0-r0"}]}],"package":{"name":"unleash-server","purl":"pkg:apk/minimos/unleash-server","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-vppr-4wm5-hp95.json"}}],"modified":"2026-10-02T18:23:32.032146290Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":[]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f2638b9b-a664-40b4-a208-90e10a23b26d","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-vppr-4wm5-hp95","advisory_id":"f2638b9b-a664-40b4-a208-90e10a23b26d","event_types":["advisory"],"published_at":"2026-10-25T22:11:26.593458+00:00","technologies":["core-osv","unleash-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:12:26+00:00","detail_url":"/events/70363"},"members":[{"id":70363,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"MINI-vppr-4wm5-hp95","summary":"MINI-vppr-4wm5-hp95","evidence":"osv:MINI-vppr-4wm5-hp95","products":[{"name":{"value":"unleash-server","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.2.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-vppr-4wm5-hp95","aliases":["MINI-vppr-4wm5-hp95"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.0-r0"}]}],"package":{"name":"unleash-server","purl":"pkg:apk/minimos/unleash-server","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-vppr-4wm5-hp95.json"}}],"modified":"2026-10-02T18:23:32.032146290Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":[]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f2638b9b-a664-40b4-a208-90e10a23b26d","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-vppr-4wm5-hp95","advisory_id":"f2638b9b-a664-40b4-a208-90e10a23b26d","event_types":["advisory"],"published_at":"2026-10-25T22:11:26.593458+00:00","technologies":["core-osv","unleash-server"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:12:26+00:00","detail_url":"/events/70363"}]}},{"id":69754,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-xv8f-4cq7-w3mh","summary":"CGA-xv8f-4cq7-w3mh","evidence":"osv:CGA-xv8f-4cq7-w3mh","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-xv8f-4cq7-w3mh","aliases":["CGA-xv8f-4cq7-w3mh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xv8f-4cq7-w3mh.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:53Z"}]}}],"modified":"2026-10-02T17:16:51.087337660Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3587a0e8-f7e1-41f6-b913-4216d606b17a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xv8f-4cq7-w3mh","advisory_id":"3587a0e8-f7e1-41f6-b913-4216d606b17a","event_types":["advisory"],"published_at":"2026-10-25T22:07:00.708466+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:19+00:00","detail_url":"/advisories/advisory%3A3587a0e8-f7e1-41f6-b913-4216d606b17a","group":{"id":"advisory:3587a0e8-f7e1-41f6-b913-4216d606b17a","revision":1,"primary_event_id":70124,"change":"published","superseded_by":[],"changed":{"id":70124,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-xv8f-4cq7-w3mh","summary":"CGA-xv8f-4cq7-w3mh","evidence":"osv:CGA-xv8f-4cq7-w3mh","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-xv8f-4cq7-w3mh","aliases":["CGA-xv8f-4cq7-w3mh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xv8f-4cq7-w3mh.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:53Z"}]}}],"modified":"2026-10-02T17:16:51.087337660Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3587a0e8-f7e1-41f6-b913-4216d606b17a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xv8f-4cq7-w3mh","advisory_id":"3587a0e8-f7e1-41f6-b913-4216d606b17a","event_types":["advisory"],"published_at":"2026-10-25T22:07:00.708466+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:19+00:00","detail_url":"/events/70124"},"members":[{"id":70124,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-xv8f-4cq7-w3mh","summary":"CGA-xv8f-4cq7-w3mh","evidence":"osv:CGA-xv8f-4cq7-w3mh","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-xv8f-4cq7-w3mh","aliases":["CGA-xv8f-4cq7-w3mh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xv8f-4cq7-w3mh.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:53Z"}]}}],"modified":"2026-10-02T17:16:51.087337660Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3587a0e8-f7e1-41f6-b913-4216d606b17a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xv8f-4cq7-w3mh","advisory_id":"3587a0e8-f7e1-41f6-b913-4216d606b17a","event_types":["advisory"],"published_at":"2026-10-25T22:07:00.708466+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:19+00:00","detail_url":"/events/70124"}]}},{"id":69725,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-wwpm-mwjx-h6gq","summary":"CGA-wwpm-mwjx-h6gq","evidence":"osv:CGA-wwpm-mwjx-h6gq","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wwpm-mwjx-h6gq","aliases":["CGA-wwpm-mwjx-h6gq"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wwpm-mwjx-h6gq.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T11:10:33Z"}]}}],"modified":"2026-10-02T17:16:50.282741863Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:530671fd-7674-4923-938a-3a9776210161","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wwpm-mwjx-h6gq","advisory_id":"530671fd-7674-4923-938a-3a9776210161","event_types":["advisory"],"published_at":"2026-10-25T22:06:19.439069+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:43:20+00:00","detail_url":"/advisories/advisory%3A530671fd-7674-4923-938a-3a9776210161","group":{"id":"advisory:530671fd-7674-4923-938a-3a9776210161","revision":1,"primary_event_id":70095,"change":"published","superseded_by":[],"changed":{"id":70095,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-wwpm-mwjx-h6gq","summary":"CGA-wwpm-mwjx-h6gq","evidence":"osv:CGA-wwpm-mwjx-h6gq","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wwpm-mwjx-h6gq","aliases":["CGA-wwpm-mwjx-h6gq"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wwpm-mwjx-h6gq.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T11:10:33Z"}]}}],"modified":"2026-10-02T17:16:50.282741863Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:530671fd-7674-4923-938a-3a9776210161","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wwpm-mwjx-h6gq","advisory_id":"530671fd-7674-4923-938a-3a9776210161","event_types":["advisory"],"published_at":"2026-10-25T22:06:19.439069+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:43:20+00:00","detail_url":"/events/70095"},"members":[{"id":70095,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-wwpm-mwjx-h6gq","summary":"CGA-wwpm-mwjx-h6gq","evidence":"osv:CGA-wwpm-mwjx-h6gq","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wwpm-mwjx-h6gq","aliases":["CGA-wwpm-mwjx-h6gq"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wwpm-mwjx-h6gq.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuhCheckUpdates/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T11:10:33Z"}]}}],"modified":"2026-10-02T17:16:50.282741863Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:530671fd-7674-4923-938a-3a9776210161","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wwpm-mwjx-h6gq","advisory_id":"530671fd-7674-4923-938a-3a9776210161","event_types":["advisory"],"published_at":"2026-10-25T22:06:19.439069+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:43:20+00:00","detail_url":"/events/70095"}]}},{"id":69604,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-x55g-fr7r-jqmv","summary":"CGA-x55g-fr7r-jqmv","evidence":"osv:CGA-x55g-fr7r-jqmv","products":[{"name":{"value":"kibana-9.3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x55g-fr7r-jqmv","aliases":["CGA-x55g-fr7r-jqmv"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.3","purl":"pkg:apk/chainguard/kibana-9.3?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x55g-fr7r-jqmv.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:53:42Z"}]}}],"modified":"2026-10-02T17:16:44.269309951Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:bd7a376c-08b9-4366-bc2a-c15d8686bd85","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x55g-fr7r-jqmv","advisory_id":"bd7a376c-08b9-4366-bc2a-c15d8686bd85","event_types":["advisory"],"published_at":"2026-10-25T22:03:30.948362+00:00","technologies":["core-osv","kibana-9-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:18:12+00:00","detail_url":"/advisories/advisory%3Abd7a376c-08b9-4366-bc2a-c15d8686bd85","group":{"id":"advisory:bd7a376c-08b9-4366-bc2a-c15d8686bd85","revision":1,"primary_event_id":69974,"change":"published","superseded_by":[],"changed":{"id":69974,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-x55g-fr7r-jqmv","summary":"CGA-x55g-fr7r-jqmv","evidence":"osv:CGA-x55g-fr7r-jqmv","products":[{"name":{"value":"kibana-9.3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x55g-fr7r-jqmv","aliases":["CGA-x55g-fr7r-jqmv"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.3","purl":"pkg:apk/chainguard/kibana-9.3?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x55g-fr7r-jqmv.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:53:42Z"}]}}],"modified":"2026-10-02T17:16:44.269309951Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:bd7a376c-08b9-4366-bc2a-c15d8686bd85","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x55g-fr7r-jqmv","advisory_id":"bd7a376c-08b9-4366-bc2a-c15d8686bd85","event_types":["advisory"],"published_at":"2026-10-25T22:03:30.948362+00:00","technologies":["core-osv","kibana-9-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:18:12+00:00","detail_url":"/events/69974"},"members":[{"id":69974,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-x55g-fr7r-jqmv","summary":"CGA-x55g-fr7r-jqmv","evidence":"osv:CGA-x55g-fr7r-jqmv","products":[{"name":{"value":"kibana-9.3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x55g-fr7r-jqmv","aliases":["CGA-x55g-fr7r-jqmv"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.3","purl":"pkg:apk/chainguard/kibana-9.3?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x55g-fr7r-jqmv.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/kibana/node_modules/axios/package.json","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:53:42Z"}]}}],"modified":"2026-10-02T17:16:44.269309951Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:bd7a376c-08b9-4366-bc2a-c15d8686bd85","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x55g-fr7r-jqmv","advisory_id":"bd7a376c-08b9-4366-bc2a-c15d8686bd85","event_types":["advisory"],"published_at":"2026-10-25T22:03:30.948362+00:00","technologies":["core-osv","kibana-9-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:18:12+00:00","detail_url":"/events/69974"}]}},{"id":69577,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-rjqp-5xm5-m358","summary":"CGA-rjqp-5xm5-m358","evidence":"osv:CGA-rjqp-5xm5-m358","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-rjqp-5xm5-m358","aliases":["CGA-rjqp-5xm5-m358"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rjqp-5xm5-m358.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:12Z"}]}}],"modified":"2026-10-02T17:16:43.227480831Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:47b2eb69-2d0f-4b01-a275-1235838451d1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rjqp-5xm5-m358","advisory_id":"47b2eb69-2d0f-4b01-a275-1235838451d1","event_types":["advisory"],"published_at":"2026-10-25T22:02:57.928471+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:14+00:00","detail_url":"/advisories/advisory%3A47b2eb69-2d0f-4b01-a275-1235838451d1","group":{"id":"advisory:47b2eb69-2d0f-4b01-a275-1235838451d1","revision":1,"primary_event_id":69947,"change":"published","superseded_by":[],"changed":{"id":69947,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-rjqp-5xm5-m358","summary":"CGA-rjqp-5xm5-m358","evidence":"osv:CGA-rjqp-5xm5-m358","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-rjqp-5xm5-m358","aliases":["CGA-rjqp-5xm5-m358"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rjqp-5xm5-m358.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:12Z"}]}}],"modified":"2026-10-02T17:16:43.227480831Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:47b2eb69-2d0f-4b01-a275-1235838451d1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rjqp-5xm5-m358","advisory_id":"47b2eb69-2d0f-4b01-a275-1235838451d1","event_types":["advisory"],"published_at":"2026-10-25T22:02:57.928471+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:14+00:00","detail_url":"/events/69947"},"members":[{"id":69947,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-rjqp-5xm5-m358","summary":"CGA-rjqp-5xm5-m358","evidence":"osv:CGA-rjqp-5xm5-m358","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-rjqp-5xm5-m358","aliases":["CGA-rjqp-5xm5-m358"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rjqp-5xm5-m358.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:12Z"}]}}],"modified":"2026-10-02T17:16:43.227480831Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:47b2eb69-2d0f-4b01-a275-1235838451d1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rjqp-5xm5-m358","advisory_id":"47b2eb69-2d0f-4b01-a275-1235838451d1","event_types":["advisory"],"published_at":"2026-10-25T22:02:57.928471+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:14+00:00","detail_url":"/events/69947"}]}},{"id":69331,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-fm45-gfcw-g4wf","summary":"CGA-fm45-gfcw-g4wf","evidence":"osv:CGA-fm45-gfcw-g4wf","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-fm45-gfcw-g4wf","aliases":["CGA-fm45-gfcw-g4wf"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fm45-gfcw-g4wf.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T11:10:33Z"}]}}],"modified":"2026-10-02T17:16:31.992675057Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d1c193b3-5fb1-4152-baef-52c896434ad2","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fm45-gfcw-g4wf","advisory_id":"d1c193b3-5fb1-4152-baef-52c896434ad2","event_types":["advisory"],"published_at":"2026-10-25T21:56:39.805572+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:43:15+00:00","detail_url":"/advisories/advisory%3Ad1c193b3-5fb1-4152-baef-52c896434ad2","group":{"id":"advisory:d1c193b3-5fb1-4152-baef-52c896434ad2","revision":1,"primary_event_id":69701,"change":"published","superseded_by":[],"changed":{"id":69701,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-fm45-gfcw-g4wf","summary":"CGA-fm45-gfcw-g4wf","evidence":"osv:CGA-fm45-gfcw-g4wf","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-fm45-gfcw-g4wf","aliases":["CGA-fm45-gfcw-g4wf"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fm45-gfcw-g4wf.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T11:10:33Z"}]}}],"modified":"2026-10-02T17:16:31.992675057Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d1c193b3-5fb1-4152-baef-52c896434ad2","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fm45-gfcw-g4wf","advisory_id":"d1c193b3-5fb1-4152-baef-52c896434ad2","event_types":["advisory"],"published_at":"2026-10-25T21:56:39.805572+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:43:15+00:00","detail_url":"/events/69701"},"members":[{"id":69701,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-fm45-gfcw-g4wf","summary":"CGA-fm45-gfcw-g4wf","evidence":"osv:CGA-fm45-gfcw-g4wf","products":[{"name":{"value":"wazuh-dashboard-plugins","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-fm45-gfcw-g4wf","aliases":["CGA-fm45-gfcw-g4wf"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard-plugins","purl":"pkg:apk/chainguard/wazuh-dashboard-plugins?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fm45-gfcw-g4wf.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/plugins/wazuh/yarn.lock","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T11:10:33Z"}]}}],"modified":"2026-10-02T17:16:31.992675057Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d1c193b3-5fb1-4152-baef-52c896434ad2","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fm45-gfcw-g4wf","advisory_id":"d1c193b3-5fb1-4152-baef-52c896434ad2","event_types":["advisory"],"published_at":"2026-10-25T21:56:39.805572+00:00","technologies":["core-osv","wazuh-dashboard-plugins"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:43:15+00:00","detail_url":"/events/69701"}]}}],"next_after":73181,"next_before":69331}