{"schema_version":"2","view":"grouped","data":[{"id":73221,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-2x9x-fxq3-hqp7","summary":"CGA-2x9x-fxq3-hqp7","evidence":"osv:CGA-2x9x-fxq3-hqp7","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-2x9x-fxq3-hqp7","aliases":["CGA-2x9x-fxq3-hqp7"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2x9x-fxq3-hqp7.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T12:54:47Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2x9x-fxq3-hqp7.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T12:54:47Z"}]}}],"modified":"2026-10-03T16:00:18.773731260Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f4019024-aeee-4ef6-803a-00c12d8e6b91","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2x9x-fxq3-hqp7","advisory_id":"f4019024-aeee-4ef6-803a-00c12d8e6b91","event_types":["advisory"],"published_at":"2026-10-26T03:41:35.395137+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T04:09:12+00:00","detail_url":"/advisories/advisory%3Af4019024-aeee-4ef6-803a-00c12d8e6b91","group":{"id":"advisory:f4019024-aeee-4ef6-803a-00c12d8e6b91","revision":1,"primary_event_id":75257,"change":"published","superseded_by":[],"changed":{"id":75257,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-2x9x-fxq3-hqp7","summary":"CGA-2x9x-fxq3-hqp7","evidence":"osv:CGA-2x9x-fxq3-hqp7","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-2x9x-fxq3-hqp7","aliases":["CGA-2x9x-fxq3-hqp7"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2x9x-fxq3-hqp7.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T12:54:47Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2x9x-fxq3-hqp7.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T12:54:47Z"}]}}],"modified":"2026-10-03T16:00:18.773731260Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f4019024-aeee-4ef6-803a-00c12d8e6b91","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2x9x-fxq3-hqp7","advisory_id":"f4019024-aeee-4ef6-803a-00c12d8e6b91","event_types":["advisory"],"published_at":"2026-10-26T03:41:35.395137+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T04:09:12+00:00","detail_url":"/events/75257"},"members":[{"id":75257,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-2x9x-fxq3-hqp7","summary":"CGA-2x9x-fxq3-hqp7","evidence":"osv:CGA-2x9x-fxq3-hqp7","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-2x9x-fxq3-hqp7","aliases":["CGA-2x9x-fxq3-hqp7"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2x9x-fxq3-hqp7.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T12:54:47Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2x9x-fxq3-hqp7.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T12:54:47Z"}]}}],"modified":"2026-10-03T16:00:18.773731260Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f4019024-aeee-4ef6-803a-00c12d8e6b91","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2x9x-fxq3-hqp7","advisory_id":"f4019024-aeee-4ef6-803a-00c12d8e6b91","event_types":["advisory"],"published_at":"2026-10-26T03:41:35.395137+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T04:09:12+00:00","detail_url":"/events/75257"}]}},{"id":73136,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-wh6m-h7m3-gwrf","summary":"CGA-wh6m-h7m3-gwrf","evidence":"osv:CGA-wh6m-h7m3-gwrf","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wh6m-h7m3-gwrf","aliases":["CGA-wh6m-h7m3-gwrf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wh6m-h7m3-gwrf.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:24Z"}]}}],"modified":"2026-10-03T10:32:49.626731504Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:52f31004-f61c-435e-a1f0-f3865a60fad7","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wh6m-h7m3-gwrf","advisory_id":"52f31004-f61c-435e-a1f0-f3865a60fad7","event_types":["advisory"],"published_at":"2026-10-26T03:17:51.830211+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:37+00:00","detail_url":"/advisories/advisory%3A52f31004-f61c-435e-a1f0-f3865a60fad7","group":{"id":"advisory:52f31004-f61c-435e-a1f0-f3865a60fad7","revision":1,"primary_event_id":75005,"change":"published","superseded_by":[],"changed":{"id":75005,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-wh6m-h7m3-gwrf","summary":"CGA-wh6m-h7m3-gwrf","evidence":"osv:CGA-wh6m-h7m3-gwrf","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wh6m-h7m3-gwrf","aliases":["CGA-wh6m-h7m3-gwrf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wh6m-h7m3-gwrf.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:24Z"}]}}],"modified":"2026-10-03T10:32:49.626731504Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:52f31004-f61c-435e-a1f0-f3865a60fad7","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wh6m-h7m3-gwrf","advisory_id":"52f31004-f61c-435e-a1f0-f3865a60fad7","event_types":["advisory"],"published_at":"2026-10-26T03:17:51.830211+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:37+00:00","detail_url":"/events/75005"},"members":[{"id":75005,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-wh6m-h7m3-gwrf","summary":"CGA-wh6m-h7m3-gwrf","evidence":"osv:CGA-wh6m-h7m3-gwrf","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wh6m-h7m3-gwrf","aliases":["CGA-wh6m-h7m3-gwrf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wh6m-h7m3-gwrf.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:24Z"}]}}],"modified":"2026-10-03T10:32:49.626731504Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:52f31004-f61c-435e-a1f0-f3865a60fad7","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wh6m-h7m3-gwrf","advisory_id":"52f31004-f61c-435e-a1f0-f3865a60fad7","event_types":["advisory"],"published_at":"2026-10-26T03:17:51.830211+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:37+00:00","detail_url":"/events/75005"}]}},{"id":73036,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-p38h-f4mj-95j4","summary":"CGA-p38h-f4mj-95j4","evidence":"osv:CGA-p38h-f4mj-95j4","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-p38h-f4mj-95j4","aliases":["CGA-p38h-f4mj-95j4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p38h-f4mj-95j4.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T03:25:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p38h-f4mj-95j4.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T03:25:09Z"}]}}],"modified":"2026-10-03T10:32:45.520560529Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5fc6cd21-3833-4fb0-bac1-325cd0a6b5ce","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p38h-f4mj-95j4","advisory_id":"5fc6cd21-3833-4fb0-bac1-325cd0a6b5ce","event_types":["advisory"],"published_at":"2026-10-26T02:29:04.694257+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T03:14:11+00:00","detail_url":"/advisories/advisory%3A5fc6cd21-3833-4fb0-bac1-325cd0a6b5ce","group":{"id":"advisory:5fc6cd21-3833-4fb0-bac1-325cd0a6b5ce","revision":1,"primary_event_id":74502,"change":"published","superseded_by":[],"changed":{"id":74502,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-p38h-f4mj-95j4","summary":"CGA-p38h-f4mj-95j4","evidence":"osv:CGA-p38h-f4mj-95j4","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-p38h-f4mj-95j4","aliases":["CGA-p38h-f4mj-95j4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p38h-f4mj-95j4.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T03:25:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p38h-f4mj-95j4.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T03:25:09Z"}]}}],"modified":"2026-10-03T10:32:45.520560529Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5fc6cd21-3833-4fb0-bac1-325cd0a6b5ce","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p38h-f4mj-95j4","advisory_id":"5fc6cd21-3833-4fb0-bac1-325cd0a6b5ce","event_types":["advisory"],"published_at":"2026-10-26T02:29:04.694257+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T03:14:11+00:00","detail_url":"/events/74502"},"members":[{"id":74502,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-p38h-f4mj-95j4","summary":"CGA-p38h-f4mj-95j4","evidence":"osv:CGA-p38h-f4mj-95j4","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-p38h-f4mj-95j4","aliases":["CGA-p38h-f4mj-95j4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p38h-f4mj-95j4.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T03:25:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p38h-f4mj-95j4.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T03:25:09Z"}]}}],"modified":"2026-10-03T10:32:45.520560529Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5fc6cd21-3833-4fb0-bac1-325cd0a6b5ce","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p38h-f4mj-95j4","advisory_id":"5fc6cd21-3833-4fb0-bac1-325cd0a6b5ce","event_types":["advisory"],"published_at":"2026-10-26T02:29:04.694257+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T03:14:11+00:00","detail_url":"/events/74502"}]}},{"id":72983,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-j846-p9q4-wjhc","summary":"CGA-j846-p9q4-wjhc","evidence":"osv:CGA-j846-p9q4-wjhc","products":[{"name":{"value":"airflow-core-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-j846-p9q4-wjhc","aliases":["CGA-j846-p9q4-wjhc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-core-2","purl":"pkg:apk/chainguard/airflow-core-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j846-p9q4-wjhc.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/home/airflow/.local/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:42:23Z"}]}}],"modified":"2026-10-03T10:32:43.086275149Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:994fbc83-348e-4a0b-aa1c-daa5981756a3","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-j846-p9q4-wjhc","advisory_id":"994fbc83-348e-4a0b-aa1c-daa5981756a3","event_types":["advisory"],"published_at":"2026-10-26T02:06:19.050623+00:00","technologies":["airflow-core-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:08:57+00:00","detail_url":"/advisories/advisory%3A994fbc83-348e-4a0b-aa1c-daa5981756a3","group":{"id":"advisory:994fbc83-348e-4a0b-aa1c-daa5981756a3","revision":1,"primary_event_id":74254,"change":"published","superseded_by":[],"changed":{"id":74254,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-j846-p9q4-wjhc","summary":"CGA-j846-p9q4-wjhc","evidence":"osv:CGA-j846-p9q4-wjhc","products":[{"name":{"value":"airflow-core-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-j846-p9q4-wjhc","aliases":["CGA-j846-p9q4-wjhc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-core-2","purl":"pkg:apk/chainguard/airflow-core-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j846-p9q4-wjhc.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/home/airflow/.local/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:42:23Z"}]}}],"modified":"2026-10-03T10:32:43.086275149Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:994fbc83-348e-4a0b-aa1c-daa5981756a3","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-j846-p9q4-wjhc","advisory_id":"994fbc83-348e-4a0b-aa1c-daa5981756a3","event_types":["advisory"],"published_at":"2026-10-26T02:06:19.050623+00:00","technologies":["airflow-core-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:08:57+00:00","detail_url":"/events/74254"},"members":[{"id":74254,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-j846-p9q4-wjhc","summary":"CGA-j846-p9q4-wjhc","evidence":"osv:CGA-j846-p9q4-wjhc","products":[{"name":{"value":"airflow-core-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-j846-p9q4-wjhc","aliases":["CGA-j846-p9q4-wjhc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-core-2","purl":"pkg:apk/chainguard/airflow-core-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j846-p9q4-wjhc.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/home/airflow/.local/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:42:23Z"}]}}],"modified":"2026-10-03T10:32:43.086275149Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:994fbc83-348e-4a0b-aa1c-daa5981756a3","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-j846-p9q4-wjhc","advisory_id":"994fbc83-348e-4a0b-aa1c-daa5981756a3","event_types":["advisory"],"published_at":"2026-10-26T02:06:19.050623+00:00","technologies":["airflow-core-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:08:57+00:00","detail_url":"/events/74254"}]}},{"id":72946,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-gj5r-5gg5-m99m","summary":"CGA-gj5r-5gg5-m99m","evidence":"osv:CGA-gj5r-5gg5-m99m","products":[{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-gj5r-5gg5-m99m","aliases":["CGA-gj5r-5gg5-m99m"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gj5r-5gg5-m99m.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:02Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gj5r-5gg5-m99m.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:02Z"}]}}],"modified":"2026-10-03T10:32:41.349121071Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f7b14bb2-9b74-4649-934e-66a38e847ba0","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gj5r-5gg5-m99m","advisory_id":"f7b14bb2-9b74-4649-934e-66a38e847ba0","event_types":["advisory"],"published_at":"2026-10-26T01:43:11.588296+00:00","technologies":["core-osv","datadog-agent-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:33+00:00","detail_url":"/advisories/advisory%3Af7b14bb2-9b74-4649-934e-66a38e847ba0","group":{"id":"advisory:f7b14bb2-9b74-4649-934e-66a38e847ba0","revision":1,"primary_event_id":74022,"change":"published","superseded_by":[],"changed":{"id":74022,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-gj5r-5gg5-m99m","summary":"CGA-gj5r-5gg5-m99m","evidence":"osv:CGA-gj5r-5gg5-m99m","products":[{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-gj5r-5gg5-m99m","aliases":["CGA-gj5r-5gg5-m99m"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gj5r-5gg5-m99m.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:02Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gj5r-5gg5-m99m.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:02Z"}]}}],"modified":"2026-10-03T10:32:41.349121071Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f7b14bb2-9b74-4649-934e-66a38e847ba0","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gj5r-5gg5-m99m","advisory_id":"f7b14bb2-9b74-4649-934e-66a38e847ba0","event_types":["advisory"],"published_at":"2026-10-26T01:43:11.588296+00:00","technologies":["core-osv","datadog-agent-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:33+00:00","detail_url":"/events/74022"},"members":[{"id":74022,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-gj5r-5gg5-m99m","summary":"CGA-gj5r-5gg5-m99m","evidence":"osv:CGA-gj5r-5gg5-m99m","products":[{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-gj5r-5gg5-m99m","aliases":["CGA-gj5r-5gg5-m99m"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gj5r-5gg5-m99m.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:02Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gj5r-5gg5-m99m.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:02Z"}]}}],"modified":"2026-10-03T10:32:41.349121071Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f7b14bb2-9b74-4649-934e-66a38e847ba0","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gj5r-5gg5-m99m","advisory_id":"f7b14bb2-9b74-4649-934e-66a38e847ba0","event_types":["advisory"],"published_at":"2026-10-26T01:43:11.588296+00:00","technologies":["core-osv","datadog-agent-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:33+00:00","detail_url":"/events/74022"}]}},{"id":72488,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-52x4-c8wq-8gqh","summary":"CGA-52x4-c8wq-8gqh","evidence":"osv:CGA-52x4-c8wq-8gqh","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-52x4-c8wq-8gqh","aliases":["CGA-52x4-c8wq-8gqh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-52x4-c8wq-8gqh.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:56Z"}]}}],"modified":"2026-10-03T10:30:11.912512235Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:76680ff3-9d1d-49b5-add4-363270235110","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-52x4-c8wq-8gqh","advisory_id":"76680ff3-9d1d-49b5-add4-363270235110","event_types":["advisory"],"published_at":"2026-10-26T00:24:19.780137+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:05+00:00","detail_url":"/advisories/advisory%3A76680ff3-9d1d-49b5-add4-363270235110","group":{"id":"advisory:76680ff3-9d1d-49b5-add4-363270235110","revision":1,"primary_event_id":73136,"change":"published","superseded_by":[],"changed":{"id":73136,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-52x4-c8wq-8gqh","summary":"CGA-52x4-c8wq-8gqh","evidence":"osv:CGA-52x4-c8wq-8gqh","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-52x4-c8wq-8gqh","aliases":["CGA-52x4-c8wq-8gqh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-52x4-c8wq-8gqh.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:56Z"}]}}],"modified":"2026-10-03T10:30:11.912512235Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:76680ff3-9d1d-49b5-add4-363270235110","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-52x4-c8wq-8gqh","advisory_id":"76680ff3-9d1d-49b5-add4-363270235110","event_types":["advisory"],"published_at":"2026-10-26T00:24:19.780137+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:05+00:00","detail_url":"/events/73136"},"members":[{"id":73136,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-52x4-c8wq-8gqh","summary":"CGA-52x4-c8wq-8gqh","evidence":"osv:CGA-52x4-c8wq-8gqh","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-52x4-c8wq-8gqh","aliases":["CGA-52x4-c8wq-8gqh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-52x4-c8wq-8gqh.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:56Z"}]}}],"modified":"2026-10-03T10:30:11.912512235Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:76680ff3-9d1d-49b5-add4-363270235110","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-52x4-c8wq-8gqh","advisory_id":"76680ff3-9d1d-49b5-add4-363270235110","event_types":["advisory"],"published_at":"2026-10-26T00:24:19.780137+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:05+00:00","detail_url":"/events/73136"}]}},{"id":72484,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-3w22-v77g-c7r3","summary":"CGA-3w22-v77g-c7r3","evidence":"osv:CGA-3w22-v77g-c7r3","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3w22-v77g-c7r3","aliases":["CGA-3w22-v77g-c7r3"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3w22-v77g-c7r3.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:41Z"}]}}],"modified":"2026-10-03T10:30:10.673440999Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cc1f4f28-3aee-4208-bfb2-220c9d0ed0f4","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3w22-v77g-c7r3","advisory_id":"cc1f4f28-3aee-4208-bfb2-220c9d0ed0f4","event_types":["advisory"],"published_at":"2026-10-26T00:23:36.936547+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:13+00:00","detail_url":"/advisories/advisory%3Acc1f4f28-3aee-4208-bfb2-220c9d0ed0f4","group":{"id":"advisory:cc1f4f28-3aee-4208-bfb2-220c9d0ed0f4","revision":1,"primary_event_id":73130,"change":"published","superseded_by":[],"changed":{"id":73130,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-3w22-v77g-c7r3","summary":"CGA-3w22-v77g-c7r3","evidence":"osv:CGA-3w22-v77g-c7r3","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3w22-v77g-c7r3","aliases":["CGA-3w22-v77g-c7r3"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3w22-v77g-c7r3.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:41Z"}]}}],"modified":"2026-10-03T10:30:10.673440999Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cc1f4f28-3aee-4208-bfb2-220c9d0ed0f4","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3w22-v77g-c7r3","advisory_id":"cc1f4f28-3aee-4208-bfb2-220c9d0ed0f4","event_types":["advisory"],"published_at":"2026-10-26T00:23:36.936547+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:13+00:00","detail_url":"/events/73130"},"members":[{"id":73130,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-3w22-v77g-c7r3","summary":"CGA-3w22-v77g-c7r3","evidence":"osv:CGA-3w22-v77g-c7r3","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3w22-v77g-c7r3","aliases":["CGA-3w22-v77g-c7r3"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3w22-v77g-c7r3.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:41Z"}]}}],"modified":"2026-10-03T10:30:10.673440999Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cc1f4f28-3aee-4208-bfb2-220c9d0ed0f4","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3w22-v77g-c7r3","advisory_id":"cc1f4f28-3aee-4208-bfb2-220c9d0ed0f4","event_types":["advisory"],"published_at":"2026-10-26T00:23:36.936547+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:13+00:00","detail_url":"/events/73130"}]}},{"id":71025,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-3wjx-q2vf-v864","summary":"CGA-3wjx-q2vf-v864","evidence":"osv:CGA-3wjx-q2vf-v864","products":[{"name":{"value":"airflow-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3wjx-q2vf-v864","aliases":["CGA-3wjx-q2vf-v864"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-2","purl":"pkg:apk/chainguard/airflow-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3wjx-q2vf-v864.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/airflow/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T16:29:14Z"}]}}],"modified":"2026-10-02T23:00:07.487812635Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1c169c1d-a671-4e3c-bf6b-e7a66819bfef","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3wjx-q2vf-v864","advisory_id":"1c169c1d-a671-4e3c-bf6b-e7a66819bfef","event_types":["advisory"],"published_at":"2026-10-25T22:47:29.702161+00:00","technologies":["airflow-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:38:39+00:00","detail_url":"/advisories/advisory%3A1c169c1d-a671-4e3c-bf6b-e7a66819bfef","group":{"id":"advisory:1c169c1d-a671-4e3c-bf6b-e7a66819bfef","revision":1,"primary_event_id":71399,"change":"published","superseded_by":[],"changed":{"id":71399,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-3wjx-q2vf-v864","summary":"CGA-3wjx-q2vf-v864","evidence":"osv:CGA-3wjx-q2vf-v864","products":[{"name":{"value":"airflow-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3wjx-q2vf-v864","aliases":["CGA-3wjx-q2vf-v864"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-2","purl":"pkg:apk/chainguard/airflow-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3wjx-q2vf-v864.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/airflow/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T16:29:14Z"}]}}],"modified":"2026-10-02T23:00:07.487812635Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1c169c1d-a671-4e3c-bf6b-e7a66819bfef","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3wjx-q2vf-v864","advisory_id":"1c169c1d-a671-4e3c-bf6b-e7a66819bfef","event_types":["advisory"],"published_at":"2026-10-25T22:47:29.702161+00:00","technologies":["airflow-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:38:39+00:00","detail_url":"/events/71399"},"members":[{"id":71399,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-3wjx-q2vf-v864","summary":"CGA-3wjx-q2vf-v864","evidence":"osv:CGA-3wjx-q2vf-v864","products":[{"name":{"value":"airflow-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3wjx-q2vf-v864","aliases":["CGA-3wjx-q2vf-v864"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"airflow-2","purl":"pkg:apk/chainguard/airflow-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3wjx-q2vf-v864.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/airflow/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T16:29:14Z"}]}}],"modified":"2026-10-02T23:00:07.487812635Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1c169c1d-a671-4e3c-bf6b-e7a66819bfef","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3wjx-q2vf-v864","advisory_id":"1c169c1d-a671-4e3c-bf6b-e7a66819bfef","event_types":["advisory"],"published_at":"2026-10-25T22:47:29.702161+00:00","technologies":["airflow-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:38:39+00:00","detail_url":"/events/71399"}]}},{"id":70903,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-5jhj-56xw-vvpp","summary":"CGA-5jhj-56xw-vvpp","evidence":"osv:CGA-5jhj-56xw-vvpp","products":[{"name":{"value":"openstack-octavia-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"18.0.1_git20260904-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5jhj-56xw-vvpp","aliases":["CGA-5jhj-56xw-vvpp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.0.1_git20260904-r3"}]}],"package":{"name":"openstack-octavia-2026.1","purl":"pkg:apk/chainguard/openstack-octavia-2026.1?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5jhj-56xw-vvpp.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-octavia-2026.1/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:07Z"}]}}],"modified":"2026-10-02T18:27:53.383393990Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9a8e827f-c969-4176-a74b-c6bd1e5418b0","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5jhj-56xw-vvpp","advisory_id":"9a8e827f-c969-4176-a74b-c6bd1e5418b0","event_types":["advisory"],"published_at":"2026-10-25T22:44:20.001603+00:00","technologies":["core-osv","openstack-octavia-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:23:18+00:00","detail_url":"/advisories/advisory%3A9a8e827f-c969-4176-a74b-c6bd1e5418b0","group":{"id":"advisory:9a8e827f-c969-4176-a74b-c6bd1e5418b0","revision":1,"primary_event_id":71274,"change":"published","superseded_by":[],"changed":{"id":71274,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-5jhj-56xw-vvpp","summary":"CGA-5jhj-56xw-vvpp","evidence":"osv:CGA-5jhj-56xw-vvpp","products":[{"name":{"value":"openstack-octavia-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"18.0.1_git20260904-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5jhj-56xw-vvpp","aliases":["CGA-5jhj-56xw-vvpp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.0.1_git20260904-r3"}]}],"package":{"name":"openstack-octavia-2026.1","purl":"pkg:apk/chainguard/openstack-octavia-2026.1?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5jhj-56xw-vvpp.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-octavia-2026.1/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:07Z"}]}}],"modified":"2026-10-02T18:27:53.383393990Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9a8e827f-c969-4176-a74b-c6bd1e5418b0","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5jhj-56xw-vvpp","advisory_id":"9a8e827f-c969-4176-a74b-c6bd1e5418b0","event_types":["advisory"],"published_at":"2026-10-25T22:44:20.001603+00:00","technologies":["core-osv","openstack-octavia-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:23:18+00:00","detail_url":"/events/71274"},"members":[{"id":71274,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-5jhj-56xw-vvpp","summary":"CGA-5jhj-56xw-vvpp","evidence":"osv:CGA-5jhj-56xw-vvpp","products":[{"name":{"value":"openstack-octavia-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"18.0.1_git20260904-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5jhj-56xw-vvpp","aliases":["CGA-5jhj-56xw-vvpp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.0.1_git20260904-r3"}]}],"package":{"name":"openstack-octavia-2026.1","purl":"pkg:apk/chainguard/openstack-octavia-2026.1?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5jhj-56xw-vvpp.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-octavia-2026.1/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:07Z"}]}}],"modified":"2026-10-02T18:27:53.383393990Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9a8e827f-c969-4176-a74b-c6bd1e5418b0","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5jhj-56xw-vvpp","advisory_id":"9a8e827f-c969-4176-a74b-c6bd1e5418b0","event_types":["advisory"],"published_at":"2026-10-25T22:44:20.001603+00:00","technologies":["core-osv","openstack-octavia-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:23:18+00:00","detail_url":"/events/71274"}]}},{"id":70902,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-fq52-hfj9-xgcc","summary":"CGA-fq52-hfj9-xgcc","evidence":"osv:CGA-fq52-hfj9-xgcc","products":[{"name":{"value":"authentik-fips-2026.5","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2026.5.7-r7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-fq52-hfj9-xgcc","aliases":["CGA-fq52-hfj9-xgcc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.5.7-r7"}]}],"package":{"name":"authentik-fips-2026.5","purl":"pkg:apk/chainguard/authentik-fips-2026.5?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fq52-hfj9-xgcc.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/usr/share/authentik-2026.5/venv/lib/python3.14/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:30:56Z"}]}}],"modified":"2026-10-02T18:27:52.947749908Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f6305745-08e3-4a3f-9af3-393aaf4ce582","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fq52-hfj9-xgcc","advisory_id":"f6305745-08e3-4a3f-9af3-393aaf4ce582","event_types":["advisory"],"published_at":"2026-10-25T22:44:19.425501+00:00","technologies":["authentik-fips-2026-5","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:14:08+00:00","detail_url":"/advisories/advisory%3Af6305745-08e3-4a3f-9af3-393aaf4ce582","group":{"id":"advisory:f6305745-08e3-4a3f-9af3-393aaf4ce582","revision":1,"primary_event_id":71273,"change":"published","superseded_by":[],"changed":{"id":71273,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-fq52-hfj9-xgcc","summary":"CGA-fq52-hfj9-xgcc","evidence":"osv:CGA-fq52-hfj9-xgcc","products":[{"name":{"value":"authentik-fips-2026.5","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2026.5.7-r7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-fq52-hfj9-xgcc","aliases":["CGA-fq52-hfj9-xgcc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.5.7-r7"}]}],"package":{"name":"authentik-fips-2026.5","purl":"pkg:apk/chainguard/authentik-fips-2026.5?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fq52-hfj9-xgcc.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/usr/share/authentik-2026.5/venv/lib/python3.14/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:30:56Z"}]}}],"modified":"2026-10-02T18:27:52.947749908Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f6305745-08e3-4a3f-9af3-393aaf4ce582","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fq52-hfj9-xgcc","advisory_id":"f6305745-08e3-4a3f-9af3-393aaf4ce582","event_types":["advisory"],"published_at":"2026-10-25T22:44:19.425501+00:00","technologies":["authentik-fips-2026-5","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:14:08+00:00","detail_url":"/events/71273"},"members":[{"id":71273,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-fq52-hfj9-xgcc","summary":"CGA-fq52-hfj9-xgcc","evidence":"osv:CGA-fq52-hfj9-xgcc","products":[{"name":{"value":"authentik-fips-2026.5","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2026.5.7-r7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-fq52-hfj9-xgcc","aliases":["CGA-fq52-hfj9-xgcc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.5.7-r7"}]}],"package":{"name":"authentik-fips-2026.5","purl":"pkg:apk/chainguard/authentik-fips-2026.5?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fq52-hfj9-xgcc.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/usr/share/authentik-2026.5/venv/lib/python3.14/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:30:56Z"}]}}],"modified":"2026-10-02T18:27:52.947749908Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f6305745-08e3-4a3f-9af3-393aaf4ce582","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fq52-hfj9-xgcc","advisory_id":"f6305745-08e3-4a3f-9af3-393aaf4ce582","event_types":["advisory"],"published_at":"2026-10-25T22:44:19.425501+00:00","technologies":["authentik-fips-2026-5","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:14:08+00:00","detail_url":"/events/71273"}]}},{"id":70879,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-942m-jpfq-9v29","summary":"CGA-942m-jpfq-9v29","evidence":"osv:CGA-942m-jpfq-9v29","products":[{"name":{"value":"openstack-octavia-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"18.0.1_git20260904-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-942m-jpfq-9v29","aliases":["CGA-942m-jpfq-9v29"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.0.1_git20260904-r3"}]}],"package":{"name":"openstack-octavia-2026.1","purl":"pkg:apk/chainguard/openstack-octavia-2026.1?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-942m-jpfq-9v29.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-octavia-2026.1/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:13:48Z"}]}}],"modified":"2026-10-02T18:27:46.332202703Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:46d176b6-2ddb-45d4-a913-f88634a56856","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-942m-jpfq-9v29","advisory_id":"46d176b6-2ddb-45d4-a913-f88634a56856","event_types":["advisory"],"published_at":"2026-10-25T22:43:38.943647+00:00","technologies":["core-osv","openstack-octavia-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:51:12+00:00","detail_url":"/advisories/advisory%3A46d176b6-2ddb-45d4-a913-f88634a56856","group":{"id":"advisory:46d176b6-2ddb-45d4-a913-f88634a56856","revision":1,"primary_event_id":71250,"change":"published","superseded_by":[],"changed":{"id":71250,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-942m-jpfq-9v29","summary":"CGA-942m-jpfq-9v29","evidence":"osv:CGA-942m-jpfq-9v29","products":[{"name":{"value":"openstack-octavia-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"18.0.1_git20260904-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-942m-jpfq-9v29","aliases":["CGA-942m-jpfq-9v29"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.0.1_git20260904-r3"}]}],"package":{"name":"openstack-octavia-2026.1","purl":"pkg:apk/chainguard/openstack-octavia-2026.1?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-942m-jpfq-9v29.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-octavia-2026.1/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:13:48Z"}]}}],"modified":"2026-10-02T18:27:46.332202703Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:46d176b6-2ddb-45d4-a913-f88634a56856","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-942m-jpfq-9v29","advisory_id":"46d176b6-2ddb-45d4-a913-f88634a56856","event_types":["advisory"],"published_at":"2026-10-25T22:43:38.943647+00:00","technologies":["core-osv","openstack-octavia-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:51:12+00:00","detail_url":"/events/71250"},"members":[{"id":71250,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-942m-jpfq-9v29","summary":"CGA-942m-jpfq-9v29","evidence":"osv:CGA-942m-jpfq-9v29","products":[{"name":{"value":"openstack-octavia-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"18.0.1_git20260904-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-942m-jpfq-9v29","aliases":["CGA-942m-jpfq-9v29"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.0.1_git20260904-r3"}]}],"package":{"name":"openstack-octavia-2026.1","purl":"pkg:apk/chainguard/openstack-octavia-2026.1?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-942m-jpfq-9v29.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-octavia-2026.1/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:13:48Z"}]}}],"modified":"2026-10-02T18:27:46.332202703Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:46d176b6-2ddb-45d4-a913-f88634a56856","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-942m-jpfq-9v29","advisory_id":"46d176b6-2ddb-45d4-a913-f88634a56856","event_types":["advisory"],"published_at":"2026-10-25T22:43:38.943647+00:00","technologies":["core-osv","openstack-octavia-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:51:12+00:00","detail_url":"/events/71250"}]}},{"id":70524,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-c8q9-6gg9-f4rh","summary":"CGA-c8q9-6gg9-f4rh","evidence":"osv:CGA-c8q9-6gg9-f4rh","products":[{"name":{"value":"openstack-designate-2025.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"21.0.1_git20260817-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-c8q9-6gg9-f4rh","aliases":["CGA-c8q9-6gg9-f4rh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.1_git20260817-r4"}]}],"package":{"name":"openstack-designate-2025.2","purl":"pkg:apk/chainguard/openstack-designate-2025.2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c8q9-6gg9-f4rh.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-designate-2025.2/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T08:07:07Z"}]}}],"modified":"2026-10-02T18:25:33.234154878Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6024024c-bafe-4e34-910b-a1be54396193","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c8q9-6gg9-f4rh","advisory_id":"6024024c-bafe-4e34-910b-a1be54396193","event_types":["advisory"],"published_at":"2026-10-25T22:27:52.899847+00:00","technologies":["core-osv","openstack-designate-2025-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:42:19+00:00","detail_url":"/advisories/advisory%3A6024024c-bafe-4e34-910b-a1be54396193","group":{"id":"advisory:6024024c-bafe-4e34-910b-a1be54396193","revision":1,"primary_event_id":70894,"change":"published","superseded_by":[],"changed":{"id":70894,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-c8q9-6gg9-f4rh","summary":"CGA-c8q9-6gg9-f4rh","evidence":"osv:CGA-c8q9-6gg9-f4rh","products":[{"name":{"value":"openstack-designate-2025.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"21.0.1_git20260817-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-c8q9-6gg9-f4rh","aliases":["CGA-c8q9-6gg9-f4rh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.1_git20260817-r4"}]}],"package":{"name":"openstack-designate-2025.2","purl":"pkg:apk/chainguard/openstack-designate-2025.2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c8q9-6gg9-f4rh.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-designate-2025.2/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T08:07:07Z"}]}}],"modified":"2026-10-02T18:25:33.234154878Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6024024c-bafe-4e34-910b-a1be54396193","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c8q9-6gg9-f4rh","advisory_id":"6024024c-bafe-4e34-910b-a1be54396193","event_types":["advisory"],"published_at":"2026-10-25T22:27:52.899847+00:00","technologies":["core-osv","openstack-designate-2025-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:42:19+00:00","detail_url":"/events/70894"},"members":[{"id":70894,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-c8q9-6gg9-f4rh","summary":"CGA-c8q9-6gg9-f4rh","evidence":"osv:CGA-c8q9-6gg9-f4rh","products":[{"name":{"value":"openstack-designate-2025.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"21.0.1_git20260817-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-c8q9-6gg9-f4rh","aliases":["CGA-c8q9-6gg9-f4rh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.1_git20260817-r4"}]}],"package":{"name":"openstack-designate-2025.2","purl":"pkg:apk/chainguard/openstack-designate-2025.2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c8q9-6gg9-f4rh.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-designate-2025.2/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T08:07:07Z"}]}}],"modified":"2026-10-02T18:25:33.234154878Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6024024c-bafe-4e34-910b-a1be54396193","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c8q9-6gg9-f4rh","advisory_id":"6024024c-bafe-4e34-910b-a1be54396193","event_types":["advisory"],"published_at":"2026-10-25T22:27:52.899847+00:00","technologies":["core-osv","openstack-designate-2025-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:42:19+00:00","detail_url":"/events/70894"}]}},{"id":70361,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-8g38-j7qg-mq7j","summary":"CGA-8g38-j7qg-mq7j","evidence":"osv:CGA-8g38-j7qg-mq7j","products":[{"name":{"value":"openstack-keystone-2025.1-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"27.0.1_git20260910-r7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8g38-j7qg-mq7j","aliases":["CGA-8g38-j7qg-mq7j"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.0.1_git20260910-r7"}]}],"package":{"name":"openstack-keystone-2025.1-fips","purl":"pkg:apk/chainguard/openstack-keystone-2025.1-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8g38-j7qg-mq7j.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-keystone-2025.1/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:08Z"}]}}],"modified":"2026-10-02T18:25:25.136787894Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:51c751f0-0b38-4c74-bc60-8f7b998ca8ba","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8g38-j7qg-mq7j","advisory_id":"51c751f0-0b38-4c74-bc60-8f7b998ca8ba","event_types":["advisory"],"published_at":"2026-10-25T22:22:15.179671+00:00","technologies":["core-osv","openstack-keystone-2025-1-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:27:00+00:00","detail_url":"/advisories/advisory%3A51c751f0-0b38-4c74-bc60-8f7b998ca8ba","group":{"id":"advisory:51c751f0-0b38-4c74-bc60-8f7b998ca8ba","revision":1,"primary_event_id":70731,"change":"published","superseded_by":[],"changed":{"id":70731,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-8g38-j7qg-mq7j","summary":"CGA-8g38-j7qg-mq7j","evidence":"osv:CGA-8g38-j7qg-mq7j","products":[{"name":{"value":"openstack-keystone-2025.1-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"27.0.1_git20260910-r7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8g38-j7qg-mq7j","aliases":["CGA-8g38-j7qg-mq7j"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.0.1_git20260910-r7"}]}],"package":{"name":"openstack-keystone-2025.1-fips","purl":"pkg:apk/chainguard/openstack-keystone-2025.1-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8g38-j7qg-mq7j.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-keystone-2025.1/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:08Z"}]}}],"modified":"2026-10-02T18:25:25.136787894Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:51c751f0-0b38-4c74-bc60-8f7b998ca8ba","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8g38-j7qg-mq7j","advisory_id":"51c751f0-0b38-4c74-bc60-8f7b998ca8ba","event_types":["advisory"],"published_at":"2026-10-25T22:22:15.179671+00:00","technologies":["core-osv","openstack-keystone-2025-1-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:27:00+00:00","detail_url":"/events/70731"},"members":[{"id":70731,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-8g38-j7qg-mq7j","summary":"CGA-8g38-j7qg-mq7j","evidence":"osv:CGA-8g38-j7qg-mq7j","products":[{"name":{"value":"openstack-keystone-2025.1-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"27.0.1_git20260910-r7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8g38-j7qg-mq7j","aliases":["CGA-8g38-j7qg-mq7j"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.0.1_git20260910-r7"}]}],"package":{"name":"openstack-keystone-2025.1-fips","purl":"pkg:apk/chainguard/openstack-keystone-2025.1-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8g38-j7qg-mq7j.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-keystone-2025.1/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:08Z"}]}}],"modified":"2026-10-02T18:25:25.136787894Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:51c751f0-0b38-4c74-bc60-8f7b998ca8ba","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8g38-j7qg-mq7j","advisory_id":"51c751f0-0b38-4c74-bc60-8f7b998ca8ba","event_types":["advisory"],"published_at":"2026-10-25T22:22:15.179671+00:00","technologies":["core-osv","openstack-keystone-2025-1-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:27:00+00:00","detail_url":"/events/70731"}]}},{"id":70342,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-27hf-xqqw-4vph","summary":"CGA-27hf-xqqw-4vph","evidence":"osv:CGA-27hf-xqqw-4vph","products":[{"name":{"value":"superset-6.0","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"6.0.0-r18","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"superset-6.0","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"6.0.0-r18","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-27hf-xqqw-4vph","aliases":["CGA-27hf-xqqw-4vph"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r18"}]}],"package":{"name":"superset-6.0","purl":"pkg:apk/chainguard/superset-6.0?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-27hf-xqqw-4vph.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/usr/share/superset/venv/lib/python3.11/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:29:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r18"}]}],"package":{"name":"superset-6.0","purl":"pkg:apk/wolfi/superset-6.0?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-27hf-xqqw-4vph.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/usr/share/superset/venv/lib/python3.11/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:29:08Z"}]}}],"modified":"2026-10-02T18:25:24.505672672Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:21b65910-5e4a-4292-b7a8-12ee176ae35c","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-27hf-xqqw-4vph","advisory_id":"21b65910-5e4a-4292-b7a8-12ee176ae35c","event_types":["advisory"],"published_at":"2026-10-25T22:21:41.85414+00:00","technologies":["core-osv","superset-6-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:18+00:00","detail_url":"/advisories/advisory%3A21b65910-5e4a-4292-b7a8-12ee176ae35c","group":{"id":"advisory:21b65910-5e4a-4292-b7a8-12ee176ae35c","revision":1,"primary_event_id":70712,"change":"published","superseded_by":[],"changed":{"id":70712,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-27hf-xqqw-4vph","summary":"CGA-27hf-xqqw-4vph","evidence":"osv:CGA-27hf-xqqw-4vph","products":[{"name":{"value":"superset-6.0","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"6.0.0-r18","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"superset-6.0","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"6.0.0-r18","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-27hf-xqqw-4vph","aliases":["CGA-27hf-xqqw-4vph"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r18"}]}],"package":{"name":"superset-6.0","purl":"pkg:apk/chainguard/superset-6.0?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-27hf-xqqw-4vph.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/usr/share/superset/venv/lib/python3.11/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:29:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r18"}]}],"package":{"name":"superset-6.0","purl":"pkg:apk/wolfi/superset-6.0?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-27hf-xqqw-4vph.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/usr/share/superset/venv/lib/python3.11/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:29:08Z"}]}}],"modified":"2026-10-02T18:25:24.505672672Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:21b65910-5e4a-4292-b7a8-12ee176ae35c","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-27hf-xqqw-4vph","advisory_id":"21b65910-5e4a-4292-b7a8-12ee176ae35c","event_types":["advisory"],"published_at":"2026-10-25T22:21:41.85414+00:00","technologies":["core-osv","superset-6-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:18+00:00","detail_url":"/events/70712"},"members":[{"id":70712,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-27hf-xqqw-4vph","summary":"CGA-27hf-xqqw-4vph","evidence":"osv:CGA-27hf-xqqw-4vph","products":[{"name":{"value":"superset-6.0","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"6.0.0-r18","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"superset-6.0","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"6.0.0-r18","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-27hf-xqqw-4vph","aliases":["CGA-27hf-xqqw-4vph"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r18"}]}],"package":{"name":"superset-6.0","purl":"pkg:apk/chainguard/superset-6.0?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-27hf-xqqw-4vph.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/usr/share/superset/venv/lib/python3.11/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:29:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-r18"}]}],"package":{"name":"superset-6.0","purl":"pkg:apk/wolfi/superset-6.0?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-27hf-xqqw-4vph.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/usr/share/superset/venv/lib/python3.11/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:29:08Z"}]}}],"modified":"2026-10-02T18:25:24.505672672Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:21b65910-5e4a-4292-b7a8-12ee176ae35c","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-27hf-xqqw-4vph","advisory_id":"21b65910-5e4a-4292-b7a8-12ee176ae35c","event_types":["advisory"],"published_at":"2026-10-25T22:21:41.85414+00:00","technologies":["core-osv","superset-6-0"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:30:18+00:00","detail_url":"/events/70712"}]}},{"id":70290,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-f3xj-fqpq-454w","summary":"CGA-f3xj-fqpq-454w","evidence":"osv:CGA-f3xj-fqpq-454w","products":[{"name":{"value":"openstack-manila-2025.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"21.0.2_git20260923-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-f3xj-fqpq-454w","aliases":["CGA-f3xj-fqpq-454w"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.2_git20260923-r3"}]}],"package":{"name":"openstack-manila-2025.2","purl":"pkg:apk/chainguard/openstack-manila-2025.2?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f3xj-fqpq-454w.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-manila-2025.2/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T08:43:34Z"}]}}],"modified":"2026-10-02T18:25:21.834115977Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f697a5f6-758c-437f-b9fb-f37317414120","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f3xj-fqpq-454w","advisory_id":"f697a5f6-758c-437f-b9fb-f37317414120","event_types":["advisory"],"published_at":"2026-10-25T22:20:13.126668+00:00","technologies":["core-osv","openstack-manila-2025-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:54:09+00:00","detail_url":"/advisories/advisory%3Af697a5f6-758c-437f-b9fb-f37317414120","group":{"id":"advisory:f697a5f6-758c-437f-b9fb-f37317414120","revision":1,"primary_event_id":70660,"change":"published","superseded_by":[],"changed":{"id":70660,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-f3xj-fqpq-454w","summary":"CGA-f3xj-fqpq-454w","evidence":"osv:CGA-f3xj-fqpq-454w","products":[{"name":{"value":"openstack-manila-2025.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"21.0.2_git20260923-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-f3xj-fqpq-454w","aliases":["CGA-f3xj-fqpq-454w"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.2_git20260923-r3"}]}],"package":{"name":"openstack-manila-2025.2","purl":"pkg:apk/chainguard/openstack-manila-2025.2?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f3xj-fqpq-454w.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-manila-2025.2/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T08:43:34Z"}]}}],"modified":"2026-10-02T18:25:21.834115977Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f697a5f6-758c-437f-b9fb-f37317414120","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f3xj-fqpq-454w","advisory_id":"f697a5f6-758c-437f-b9fb-f37317414120","event_types":["advisory"],"published_at":"2026-10-25T22:20:13.126668+00:00","technologies":["core-osv","openstack-manila-2025-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:54:09+00:00","detail_url":"/events/70660"},"members":[{"id":70660,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-f3xj-fqpq-454w","summary":"CGA-f3xj-fqpq-454w","evidence":"osv:CGA-f3xj-fqpq-454w","products":[{"name":{"value":"openstack-manila-2025.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"21.0.2_git20260923-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-f3xj-fqpq-454w","aliases":["CGA-f3xj-fqpq-454w"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.2_git20260923-r3"}]}],"package":{"name":"openstack-manila-2025.2","purl":"pkg:apk/chainguard/openstack-manila-2025.2?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f3xj-fqpq-454w.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-manila-2025.2/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T08:43:34Z"}]}}],"modified":"2026-10-02T18:25:21.834115977Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f697a5f6-758c-437f-b9fb-f37317414120","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f3xj-fqpq-454w","advisory_id":"f697a5f6-758c-437f-b9fb-f37317414120","event_types":["advisory"],"published_at":"2026-10-25T22:20:13.126668+00:00","technologies":["core-osv","openstack-manila-2025-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:54:09+00:00","detail_url":"/events/70660"}]}},{"id":70216,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-7m8p-79px-9xw9","summary":"CGA-7m8p-79px-9xw9","evidence":"osv:CGA-7m8p-79px-9xw9","products":[{"name":{"value":"openstack-heat-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"26.0.1_git20260905-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-7m8p-79px-9xw9","aliases":["CGA-7m8p-79px-9xw9"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.0.1_git20260905-r3"}]}],"package":{"name":"openstack-heat-2026.1","purl":"pkg:apk/chainguard/openstack-heat-2026.1?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7m8p-79px-9xw9.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-heat-2026.1/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:20:03Z"}]}}],"modified":"2026-10-02T18:25:18.748831323Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7acf60d3-c464-4099-bb8d-7bd17886a9da","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7m8p-79px-9xw9","advisory_id":"7acf60d3-c464-4099-bb8d-7bd17886a9da","event_types":["advisory"],"published_at":"2026-10-25T22:17:56.761265+00:00","technologies":["core-osv","openstack-heat-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:40:57+00:00","detail_url":"/advisories/advisory%3A7acf60d3-c464-4099-bb8d-7bd17886a9da","group":{"id":"advisory:7acf60d3-c464-4099-bb8d-7bd17886a9da","revision":1,"primary_event_id":70586,"change":"published","superseded_by":[],"changed":{"id":70586,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-7m8p-79px-9xw9","summary":"CGA-7m8p-79px-9xw9","evidence":"osv:CGA-7m8p-79px-9xw9","products":[{"name":{"value":"openstack-heat-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"26.0.1_git20260905-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-7m8p-79px-9xw9","aliases":["CGA-7m8p-79px-9xw9"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.0.1_git20260905-r3"}]}],"package":{"name":"openstack-heat-2026.1","purl":"pkg:apk/chainguard/openstack-heat-2026.1?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7m8p-79px-9xw9.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-heat-2026.1/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:20:03Z"}]}}],"modified":"2026-10-02T18:25:18.748831323Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7acf60d3-c464-4099-bb8d-7bd17886a9da","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7m8p-79px-9xw9","advisory_id":"7acf60d3-c464-4099-bb8d-7bd17886a9da","event_types":["advisory"],"published_at":"2026-10-25T22:17:56.761265+00:00","technologies":["core-osv","openstack-heat-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:40:57+00:00","detail_url":"/events/70586"},"members":[{"id":70586,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-7m8p-79px-9xw9","summary":"CGA-7m8p-79px-9xw9","evidence":"osv:CGA-7m8p-79px-9xw9","products":[{"name":{"value":"openstack-heat-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"26.0.1_git20260905-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-7m8p-79px-9xw9","aliases":["CGA-7m8p-79px-9xw9"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.0.1_git20260905-r3"}]}],"package":{"name":"openstack-heat-2026.1","purl":"pkg:apk/chainguard/openstack-heat-2026.1?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7m8p-79px-9xw9.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-heat-2026.1/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:20:03Z"}]}}],"modified":"2026-10-02T18:25:18.748831323Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7acf60d3-c464-4099-bb8d-7bd17886a9da","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7m8p-79px-9xw9","advisory_id":"7acf60d3-c464-4099-bb8d-7bd17886a9da","event_types":["advisory"],"published_at":"2026-10-25T22:17:56.761265+00:00","technologies":["core-osv","openstack-heat-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:40:57+00:00","detail_url":"/events/70586"}]}},{"id":70197,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-6mv6-44f5-49qm","summary":"CGA-6mv6-44f5-49qm","evidence":"osv:CGA-6mv6-44f5-49qm","products":[{"name":{"value":"mlrun","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.12.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6mv6-44f5-49qm","aliases":["CGA-6mv6-44f5-49qm"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-r1"}]}],"package":{"name":"mlrun","purl":"pkg:apk/chainguard/mlrun?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6mv6-44f5-49qm.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/usr/lib/python3.11/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T08:53:48Z"}]}}],"modified":"2026-10-02T18:25:17.550182087Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:a0cc2e5c-2d52-4374-adff-21264ea79b4c","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6mv6-44f5-49qm","advisory_id":"a0cc2e5c-2d52-4374-adff-21264ea79b4c","event_types":["advisory"],"published_at":"2026-10-25T22:17:13.216397+00:00","technologies":["core-osv","mlrun"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:03:18+00:00","detail_url":"/advisories/advisory%3Aa0cc2e5c-2d52-4374-adff-21264ea79b4c","group":{"id":"advisory:a0cc2e5c-2d52-4374-adff-21264ea79b4c","revision":1,"primary_event_id":70567,"change":"published","superseded_by":[],"changed":{"id":70567,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-6mv6-44f5-49qm","summary":"CGA-6mv6-44f5-49qm","evidence":"osv:CGA-6mv6-44f5-49qm","products":[{"name":{"value":"mlrun","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.12.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6mv6-44f5-49qm","aliases":["CGA-6mv6-44f5-49qm"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-r1"}]}],"package":{"name":"mlrun","purl":"pkg:apk/chainguard/mlrun?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6mv6-44f5-49qm.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/usr/lib/python3.11/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T08:53:48Z"}]}}],"modified":"2026-10-02T18:25:17.550182087Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:a0cc2e5c-2d52-4374-adff-21264ea79b4c","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6mv6-44f5-49qm","advisory_id":"a0cc2e5c-2d52-4374-adff-21264ea79b4c","event_types":["advisory"],"published_at":"2026-10-25T22:17:13.216397+00:00","technologies":["core-osv","mlrun"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:03:18+00:00","detail_url":"/events/70567"},"members":[{"id":70567,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-6mv6-44f5-49qm","summary":"CGA-6mv6-44f5-49qm","evidence":"osv:CGA-6mv6-44f5-49qm","products":[{"name":{"value":"mlrun","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.12.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6mv6-44f5-49qm","aliases":["CGA-6mv6-44f5-49qm"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-r1"}]}],"package":{"name":"mlrun","purl":"pkg:apk/chainguard/mlrun?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6mv6-44f5-49qm.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/usr/lib/python3.11/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T08:53:48Z"}]}}],"modified":"2026-10-02T18:25:17.550182087Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:a0cc2e5c-2d52-4374-adff-21264ea79b4c","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6mv6-44f5-49qm","advisory_id":"a0cc2e5c-2d52-4374-adff-21264ea79b4c","event_types":["advisory"],"published_at":"2026-10-25T22:17:13.216397+00:00","technologies":["core-osv","mlrun"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:03:18+00:00","detail_url":"/events/70567"}]}},{"id":70166,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-5pm7-922p-wpgm","summary":"CGA-5pm7-922p-wpgm","evidence":"osv:CGA-5pm7-922p-wpgm","products":[{"name":{"value":"mlrun-api","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.12.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5pm7-922p-wpgm","aliases":["CGA-5pm7-922p-wpgm"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-r1"}]}],"package":{"name":"mlrun-api","purl":"pkg:apk/chainguard/mlrun-api?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5pm7-922p-wpgm.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/usr/lib/python3.11/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T09:06:59Z"}]}}],"modified":"2026-10-02T18:25:15.850114377Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7b769801-cce8-46de-8c0b-f411efc8cd7e","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5pm7-922p-wpgm","advisory_id":"7b769801-cce8-46de-8c0b-f411efc8cd7e","event_types":["advisory"],"published_at":"2026-10-25T22:16:16.305938+00:00","technologies":["core-osv","mlrun-api"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:14:46+00:00","detail_url":"/advisories/advisory%3A7b769801-cce8-46de-8c0b-f411efc8cd7e","group":{"id":"advisory:7b769801-cce8-46de-8c0b-f411efc8cd7e","revision":1,"primary_event_id":70536,"change":"published","superseded_by":[],"changed":{"id":70536,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-5pm7-922p-wpgm","summary":"CGA-5pm7-922p-wpgm","evidence":"osv:CGA-5pm7-922p-wpgm","products":[{"name":{"value":"mlrun-api","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.12.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5pm7-922p-wpgm","aliases":["CGA-5pm7-922p-wpgm"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-r1"}]}],"package":{"name":"mlrun-api","purl":"pkg:apk/chainguard/mlrun-api?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5pm7-922p-wpgm.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/usr/lib/python3.11/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T09:06:59Z"}]}}],"modified":"2026-10-02T18:25:15.850114377Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7b769801-cce8-46de-8c0b-f411efc8cd7e","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5pm7-922p-wpgm","advisory_id":"7b769801-cce8-46de-8c0b-f411efc8cd7e","event_types":["advisory"],"published_at":"2026-10-25T22:16:16.305938+00:00","technologies":["core-osv","mlrun-api"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:14:46+00:00","detail_url":"/events/70536"},"members":[{"id":70536,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-5pm7-922p-wpgm","summary":"CGA-5pm7-922p-wpgm","evidence":"osv:CGA-5pm7-922p-wpgm","products":[{"name":{"value":"mlrun-api","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.12.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5pm7-922p-wpgm","aliases":["CGA-5pm7-922p-wpgm"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-r1"}]}],"package":{"name":"mlrun-api","purl":"pkg:apk/chainguard/mlrun-api?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5pm7-922p-wpgm.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/usr/lib/python3.11/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T09:06:59Z"}]}}],"modified":"2026-10-02T18:25:15.850114377Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7b769801-cce8-46de-8c0b-f411efc8cd7e","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5pm7-922p-wpgm","advisory_id":"7b769801-cce8-46de-8c0b-f411efc8cd7e","event_types":["advisory"],"published_at":"2026-10-25T22:16:16.305938+00:00","technologies":["core-osv","mlrun-api"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:14:46+00:00","detail_url":"/events/70536"}]}},{"id":70128,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-4xcq-ggq5-96q3","summary":"CGA-4xcq-ggq5-96q3","evidence":"osv:CGA-4xcq-ggq5-96q3","products":[{"name":{"value":"openstack-neutron-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"28.0.2_git20260928-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-4xcq-ggq5-96q3","aliases":["CGA-4xcq-ggq5-96q3"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.2_git20260928-r5"}]}],"package":{"name":"openstack-neutron-2026.1","purl":"pkg:apk/chainguard/openstack-neutron-2026.1?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4xcq-ggq5-96q3.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-neutron-2026.1/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:39Z"}]}}],"modified":"2026-10-02T18:25:13.929878964Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:191df7df-6131-4dcd-ac6b-b199d5a9378b","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4xcq-ggq5-96q3","advisory_id":"191df7df-6131-4dcd-ac6b-b199d5a9378b","event_types":["advisory"],"published_at":"2026-10-25T22:14:58.861028+00:00","technologies":["core-osv","openstack-neutron-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:15:46+00:00","detail_url":"/advisories/advisory%3A191df7df-6131-4dcd-ac6b-b199d5a9378b","group":{"id":"advisory:191df7df-6131-4dcd-ac6b-b199d5a9378b","revision":1,"primary_event_id":70498,"change":"published","superseded_by":[],"changed":{"id":70498,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-4xcq-ggq5-96q3","summary":"CGA-4xcq-ggq5-96q3","evidence":"osv:CGA-4xcq-ggq5-96q3","products":[{"name":{"value":"openstack-neutron-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"28.0.2_git20260928-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-4xcq-ggq5-96q3","aliases":["CGA-4xcq-ggq5-96q3"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.2_git20260928-r5"}]}],"package":{"name":"openstack-neutron-2026.1","purl":"pkg:apk/chainguard/openstack-neutron-2026.1?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4xcq-ggq5-96q3.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-neutron-2026.1/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:39Z"}]}}],"modified":"2026-10-02T18:25:13.929878964Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:191df7df-6131-4dcd-ac6b-b199d5a9378b","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4xcq-ggq5-96q3","advisory_id":"191df7df-6131-4dcd-ac6b-b199d5a9378b","event_types":["advisory"],"published_at":"2026-10-25T22:14:58.861028+00:00","technologies":["core-osv","openstack-neutron-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:15:46+00:00","detail_url":"/events/70498"},"members":[{"id":70498,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-4xcq-ggq5-96q3","summary":"CGA-4xcq-ggq5-96q3","evidence":"osv:CGA-4xcq-ggq5-96q3","products":[{"name":{"value":"openstack-neutron-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"28.0.2_git20260928-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-4xcq-ggq5-96q3","aliases":["CGA-4xcq-ggq5-96q3"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.2_git20260928-r5"}]}],"package":{"name":"openstack-neutron-2026.1","purl":"pkg:apk/chainguard/openstack-neutron-2026.1?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4xcq-ggq5-96q3.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-neutron-2026.1/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:39Z"}]}}],"modified":"2026-10-02T18:25:13.929878964Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:191df7df-6131-4dcd-ac6b-b199d5a9378b","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4xcq-ggq5-96q3","advisory_id":"191df7df-6131-4dcd-ac6b-b199d5a9378b","event_types":["advisory"],"published_at":"2026-10-25T22:14:58.861028+00:00","technologies":["core-osv","openstack-neutron-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:15:46+00:00","detail_url":"/events/70498"}]}},{"id":69807,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-cpqc-7822-wr6v","summary":"CGA-cpqc-7822-wr6v","evidence":"osv:CGA-cpqc-7822-wr6v","products":[{"name":{"value":"datadog-agent-fips-7.83-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cpqc-7822-wr6v","aliases":["CGA-cpqc-7822-wr6v"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.83-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.83-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cpqc-7822-wr6v.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T14:15:58Z"}]}}],"modified":"2026-10-02T17:28:21.569198202Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e34765d5-de9e-4604-9ac0-b8b1f532d369","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cpqc-7822-wr6v","advisory_id":"e34765d5-de9e-4604-9ac0-b8b1f532d369","event_types":["advisory"],"published_at":"2026-10-25T22:08:22.601828+00:00","technologies":["core-osv","datadog-agent-fips-7-83-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:49:15+00:00","detail_url":"/advisories/advisory%3Ae34765d5-de9e-4604-9ac0-b8b1f532d369","group":{"id":"advisory:e34765d5-de9e-4604-9ac0-b8b1f532d369","revision":1,"primary_event_id":70177,"change":"published","superseded_by":[],"changed":{"id":70177,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-cpqc-7822-wr6v","summary":"CGA-cpqc-7822-wr6v","evidence":"osv:CGA-cpqc-7822-wr6v","products":[{"name":{"value":"datadog-agent-fips-7.83-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cpqc-7822-wr6v","aliases":["CGA-cpqc-7822-wr6v"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.83-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.83-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cpqc-7822-wr6v.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T14:15:58Z"}]}}],"modified":"2026-10-02T17:28:21.569198202Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e34765d5-de9e-4604-9ac0-b8b1f532d369","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cpqc-7822-wr6v","advisory_id":"e34765d5-de9e-4604-9ac0-b8b1f532d369","event_types":["advisory"],"published_at":"2026-10-25T22:08:22.601828+00:00","technologies":["core-osv","datadog-agent-fips-7-83-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:49:15+00:00","detail_url":"/events/70177"},"members":[{"id":70177,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-cpqc-7822-wr6v","summary":"CGA-cpqc-7822-wr6v","evidence":"osv:CGA-cpqc-7822-wr6v","products":[{"name":{"value":"datadog-agent-fips-7.83-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cpqc-7822-wr6v","aliases":["CGA-cpqc-7822-wr6v"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.83-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.83-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cpqc-7822-wr6v.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T14:15:58Z"}]}}],"modified":"2026-10-02T17:28:21.569198202Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e34765d5-de9e-4604-9ac0-b8b1f532d369","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cpqc-7822-wr6v","advisory_id":"e34765d5-de9e-4604-9ac0-b8b1f532d369","event_types":["advisory"],"published_at":"2026-10-25T22:08:22.601828+00:00","technologies":["core-osv","datadog-agent-fips-7-83-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:49:15+00:00","detail_url":"/events/70177"}]}},{"id":69791,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-3fg8-65x8-x4mj","summary":"CGA-3fg8-65x8-x4mj","evidence":"osv:CGA-3fg8-65x8-x4mj","products":[{"name":{"value":"datadog-agent-7.83-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3fg8-65x8-x4mj","aliases":["CGA-3fg8-65x8-x4mj"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.83-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.83-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3fg8-65x8-x4mj.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:23:14Z"}]}}],"modified":"2026-10-02T17:28:03.666837988Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c2f87dcb-7f24-4775-957e-85580da7d63c","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3fg8-65x8-x4mj","advisory_id":"c2f87dcb-7f24-4775-957e-85580da7d63c","event_types":["advisory"],"published_at":"2026-10-25T22:07:58.619919+00:00","technologies":["core-osv","datadog-agent-7-83-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:38:20+00:00","detail_url":"/advisories/advisory%3Ac2f87dcb-7f24-4775-957e-85580da7d63c","group":{"id":"advisory:c2f87dcb-7f24-4775-957e-85580da7d63c","revision":1,"primary_event_id":70161,"change":"published","superseded_by":[],"changed":{"id":70161,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-3fg8-65x8-x4mj","summary":"CGA-3fg8-65x8-x4mj","evidence":"osv:CGA-3fg8-65x8-x4mj","products":[{"name":{"value":"datadog-agent-7.83-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3fg8-65x8-x4mj","aliases":["CGA-3fg8-65x8-x4mj"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.83-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.83-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3fg8-65x8-x4mj.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:23:14Z"}]}}],"modified":"2026-10-02T17:28:03.666837988Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c2f87dcb-7f24-4775-957e-85580da7d63c","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3fg8-65x8-x4mj","advisory_id":"c2f87dcb-7f24-4775-957e-85580da7d63c","event_types":["advisory"],"published_at":"2026-10-25T22:07:58.619919+00:00","technologies":["core-osv","datadog-agent-7-83-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:38:20+00:00","detail_url":"/events/70161"},"members":[{"id":70161,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-3fg8-65x8-x4mj","summary":"CGA-3fg8-65x8-x4mj","evidence":"osv:CGA-3fg8-65x8-x4mj","products":[{"name":{"value":"datadog-agent-7.83-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3fg8-65x8-x4mj","aliases":["CGA-3fg8-65x8-x4mj"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.83-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.83-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3fg8-65x8-x4mj.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:23:14Z"}]}}],"modified":"2026-10-02T17:28:03.666837988Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c2f87dcb-7f24-4775-957e-85580da7d63c","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3fg8-65x8-x4mj","advisory_id":"c2f87dcb-7f24-4775-957e-85580da7d63c","event_types":["advisory"],"published_at":"2026-10-25T22:07:58.619919+00:00","technologies":["core-osv","datadog-agent-7-83-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:38:20+00:00","detail_url":"/events/70161"}]}},{"id":69769,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-wcmq-m744-p9w5","summary":"CGA-wcmq-m744-p9w5","evidence":"osv:CGA-wcmq-m744-p9w5","products":[{"name":{"value":"datadog-agent-fips-7.83-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wcmq-m744-p9w5","aliases":["CGA-wcmq-m744-p9w5"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.83-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.83-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wcmq-m744-p9w5.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:08:56Z"}]}}],"modified":"2026-10-02T17:27:45.352306777Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9b717848-54be-474b-b6ac-eeb1bc08ca59","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wcmq-m744-p9w5","advisory_id":"9b717848-54be-474b-b6ac-eeb1bc08ca59","event_types":["advisory"],"published_at":"2026-10-25T22:07:20.475551+00:00","technologies":["core-osv","datadog-agent-fips-7-83-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:04:12+00:00","detail_url":"/advisories/advisory%3A9b717848-54be-474b-b6ac-eeb1bc08ca59","group":{"id":"advisory:9b717848-54be-474b-b6ac-eeb1bc08ca59","revision":1,"primary_event_id":70139,"change":"published","superseded_by":[],"changed":{"id":70139,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-wcmq-m744-p9w5","summary":"CGA-wcmq-m744-p9w5","evidence":"osv:CGA-wcmq-m744-p9w5","products":[{"name":{"value":"datadog-agent-fips-7.83-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wcmq-m744-p9w5","aliases":["CGA-wcmq-m744-p9w5"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.83-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.83-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wcmq-m744-p9w5.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:08:56Z"}]}}],"modified":"2026-10-02T17:27:45.352306777Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9b717848-54be-474b-b6ac-eeb1bc08ca59","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wcmq-m744-p9w5","advisory_id":"9b717848-54be-474b-b6ac-eeb1bc08ca59","event_types":["advisory"],"published_at":"2026-10-25T22:07:20.475551+00:00","technologies":["core-osv","datadog-agent-fips-7-83-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:04:12+00:00","detail_url":"/events/70139"},"members":[{"id":70139,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-wcmq-m744-p9w5","summary":"CGA-wcmq-m744-p9w5","evidence":"osv:CGA-wcmq-m744-p9w5","products":[{"name":{"value":"datadog-agent-fips-7.83-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wcmq-m744-p9w5","aliases":["CGA-wcmq-m744-p9w5"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.83-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.83-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wcmq-m744-p9w5.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:08:56Z"}]}}],"modified":"2026-10-02T17:27:45.352306777Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9b717848-54be-474b-b6ac-eeb1bc08ca59","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wcmq-m744-p9w5","advisory_id":"9b717848-54be-474b-b6ac-eeb1bc08ca59","event_types":["advisory"],"published_at":"2026-10-25T22:07:20.475551+00:00","technologies":["core-osv","datadog-agent-fips-7-83-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:04:12+00:00","detail_url":"/events/70139"}]}},{"id":69756,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-x8mv-hq2v-cjp8","summary":"CGA-x8mv-hq2v-cjp8","evidence":"osv:CGA-x8mv-hq2v-cjp8","products":[{"name":{"value":"datadog-agent-7.80-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.80-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-x8mv-hq2v-cjp8","aliases":["CGA-x8mv-hq2v-cjp8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.80-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.80-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x8mv-hq2v-cjp8.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:07:56Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.80-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.80-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x8mv-hq2v-cjp8.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:07:56Z"}]}}],"modified":"2026-10-02T17:16:51.097186134Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ddc1a65f-eb2b-47b4-949d-ae1676b5a1ea","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x8mv-hq2v-cjp8","advisory_id":"ddc1a65f-eb2b-47b4-949d-ae1676b5a1ea","event_types":["advisory"],"published_at":"2026-10-25T22:07:02.493513+00:00","technologies":["core-osv","datadog-agent-7-80-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:01:20+00:00","detail_url":"/advisories/advisory%3Addc1a65f-eb2b-47b4-949d-ae1676b5a1ea","group":{"id":"advisory:ddc1a65f-eb2b-47b4-949d-ae1676b5a1ea","revision":1,"primary_event_id":70126,"change":"published","superseded_by":[],"changed":{"id":70126,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-x8mv-hq2v-cjp8","summary":"CGA-x8mv-hq2v-cjp8","evidence":"osv:CGA-x8mv-hq2v-cjp8","products":[{"name":{"value":"datadog-agent-7.80-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.80-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-x8mv-hq2v-cjp8","aliases":["CGA-x8mv-hq2v-cjp8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.80-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.80-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x8mv-hq2v-cjp8.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:07:56Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.80-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.80-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x8mv-hq2v-cjp8.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:07:56Z"}]}}],"modified":"2026-10-02T17:16:51.097186134Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ddc1a65f-eb2b-47b4-949d-ae1676b5a1ea","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x8mv-hq2v-cjp8","advisory_id":"ddc1a65f-eb2b-47b4-949d-ae1676b5a1ea","event_types":["advisory"],"published_at":"2026-10-25T22:07:02.493513+00:00","technologies":["core-osv","datadog-agent-7-80-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:01:20+00:00","detail_url":"/events/70126"},"members":[{"id":70126,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-x8mv-hq2v-cjp8","summary":"CGA-x8mv-hq2v-cjp8","evidence":"osv:CGA-x8mv-hq2v-cjp8","products":[{"name":{"value":"datadog-agent-7.80-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.80-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-x8mv-hq2v-cjp8","aliases":["CGA-x8mv-hq2v-cjp8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.80-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.80-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x8mv-hq2v-cjp8.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:07:56Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.80-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.80-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x8mv-hq2v-cjp8.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:07:56Z"}]}}],"modified":"2026-10-02T17:16:51.097186134Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ddc1a65f-eb2b-47b4-949d-ae1676b5a1ea","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x8mv-hq2v-cjp8","advisory_id":"ddc1a65f-eb2b-47b4-949d-ae1676b5a1ea","event_types":["advisory"],"published_at":"2026-10-25T22:07:02.493513+00:00","technologies":["core-osv","datadog-agent-7-80-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:01:20+00:00","detail_url":"/events/70126"}]}},{"id":69724,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-wpqh-g4w4-f8hh","summary":"CGA-wpqh-g4w4-f8hh","evidence":"osv:CGA-wpqh-g4w4-f8hh","products":[{"name":{"value":"openstack-heat-2025.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"25.0.1_git20260905-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wpqh-g4w4-f8hh","aliases":["CGA-wpqh-g4w4-f8hh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.1_git20260905-r3"}]}],"package":{"name":"openstack-heat-2025.2","purl":"pkg:apk/chainguard/openstack-heat-2025.2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wpqh-g4w4-f8hh.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-heat-2025.2/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T09:53:07Z"}]}}],"modified":"2026-10-02T17:16:50.000589650Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:762f840a-8cdc-460e-b2df-b1613707a562","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wpqh-g4w4-f8hh","advisory_id":"762f840a-8cdc-460e-b2df-b1613707a562","event_types":["advisory"],"published_at":"2026-10-25T22:06:19.013254+00:00","technologies":["core-osv","openstack-heat-2025-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:19:31+00:00","detail_url":"/advisories/advisory%3A762f840a-8cdc-460e-b2df-b1613707a562","group":{"id":"advisory:762f840a-8cdc-460e-b2df-b1613707a562","revision":1,"primary_event_id":70094,"change":"published","superseded_by":[],"changed":{"id":70094,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-wpqh-g4w4-f8hh","summary":"CGA-wpqh-g4w4-f8hh","evidence":"osv:CGA-wpqh-g4w4-f8hh","products":[{"name":{"value":"openstack-heat-2025.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"25.0.1_git20260905-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wpqh-g4w4-f8hh","aliases":["CGA-wpqh-g4w4-f8hh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.1_git20260905-r3"}]}],"package":{"name":"openstack-heat-2025.2","purl":"pkg:apk/chainguard/openstack-heat-2025.2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wpqh-g4w4-f8hh.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-heat-2025.2/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T09:53:07Z"}]}}],"modified":"2026-10-02T17:16:50.000589650Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:762f840a-8cdc-460e-b2df-b1613707a562","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wpqh-g4w4-f8hh","advisory_id":"762f840a-8cdc-460e-b2df-b1613707a562","event_types":["advisory"],"published_at":"2026-10-25T22:06:19.013254+00:00","technologies":["core-osv","openstack-heat-2025-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:19:31+00:00","detail_url":"/events/70094"},"members":[{"id":70094,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-wpqh-g4w4-f8hh","summary":"CGA-wpqh-g4w4-f8hh","evidence":"osv:CGA-wpqh-g4w4-f8hh","products":[{"name":{"value":"openstack-heat-2025.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"25.0.1_git20260905-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wpqh-g4w4-f8hh","aliases":["CGA-wpqh-g4w4-f8hh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.1_git20260905-r3"}]}],"package":{"name":"openstack-heat-2025.2","purl":"pkg:apk/chainguard/openstack-heat-2025.2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wpqh-g4w4-f8hh.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-heat-2025.2/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T09:53:07Z"}]}}],"modified":"2026-10-02T17:16:50.000589650Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:762f840a-8cdc-460e-b2df-b1613707a562","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wpqh-g4w4-f8hh","advisory_id":"762f840a-8cdc-460e-b2df-b1613707a562","event_types":["advisory"],"published_at":"2026-10-25T22:06:19.013254+00:00","technologies":["core-osv","openstack-heat-2025-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:19:31+00:00","detail_url":"/events/70094"}]}},{"id":69684,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-rmgm-q6v3-44f3","summary":"CGA-rmgm-q6v3-44f3","evidence":"osv:CGA-rmgm-q6v3-44f3","products":[{"name":{"value":"request-1276","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.30.1-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rmgm-q6v3-44f3","aliases":["CGA-rmgm-q6v3-44f3"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.1-r2"}]}],"package":{"name":"request-1276","purl":"pkg:apk/chainguard/request-1276?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rmgm-q6v3-44f3.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/home/cassandra/.venv/lib/python3.11/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:24:23Z"}]}}],"modified":"2026-10-02T17:16:47.925447508Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:bddb1cdc-a96b-417a-92bb-3d3f8f693570","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rmgm-q6v3-44f3","advisory_id":"bddb1cdc-a96b-417a-92bb-3d3f8f693570","event_types":["advisory"],"published_at":"2026-10-25T22:05:19.845343+00:00","technologies":["core-osv","request-1276"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:36:02+00:00","detail_url":"/advisories/advisory%3Abddb1cdc-a96b-417a-92bb-3d3f8f693570","group":{"id":"advisory:bddb1cdc-a96b-417a-92bb-3d3f8f693570","revision":1,"primary_event_id":70054,"change":"published","superseded_by":[],"changed":{"id":70054,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-rmgm-q6v3-44f3","summary":"CGA-rmgm-q6v3-44f3","evidence":"osv:CGA-rmgm-q6v3-44f3","products":[{"name":{"value":"request-1276","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.30.1-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rmgm-q6v3-44f3","aliases":["CGA-rmgm-q6v3-44f3"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.1-r2"}]}],"package":{"name":"request-1276","purl":"pkg:apk/chainguard/request-1276?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rmgm-q6v3-44f3.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/home/cassandra/.venv/lib/python3.11/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:24:23Z"}]}}],"modified":"2026-10-02T17:16:47.925447508Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:bddb1cdc-a96b-417a-92bb-3d3f8f693570","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rmgm-q6v3-44f3","advisory_id":"bddb1cdc-a96b-417a-92bb-3d3f8f693570","event_types":["advisory"],"published_at":"2026-10-25T22:05:19.845343+00:00","technologies":["core-osv","request-1276"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:36:02+00:00","detail_url":"/events/70054"},"members":[{"id":70054,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-rmgm-q6v3-44f3","summary":"CGA-rmgm-q6v3-44f3","evidence":"osv:CGA-rmgm-q6v3-44f3","products":[{"name":{"value":"request-1276","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.30.1-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rmgm-q6v3-44f3","aliases":["CGA-rmgm-q6v3-44f3"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.1-r2"}]}],"package":{"name":"request-1276","purl":"pkg:apk/chainguard/request-1276?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rmgm-q6v3-44f3.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/home/cassandra/.venv/lib/python3.11/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:24:23Z"}]}}],"modified":"2026-10-02T17:16:47.925447508Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:bddb1cdc-a96b-417a-92bb-3d3f8f693570","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rmgm-q6v3-44f3","advisory_id":"bddb1cdc-a96b-417a-92bb-3d3f8f693570","event_types":["advisory"],"published_at":"2026-10-25T22:05:19.845343+00:00","technologies":["core-osv","request-1276"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:36:02+00:00","detail_url":"/events/70054"}]}},{"id":69672,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-rcrr-5fj7-xffw","summary":"CGA-rcrr-5fj7-xffw","evidence":"osv:CGA-rcrr-5fj7-xffw","products":[{"name":{"value":"datadog-agent-fips-7.82-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rcrr-5fj7-xffw","aliases":["CGA-rcrr-5fj7-xffw"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.82-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.82-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rcrr-5fj7-xffw.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:23:03Z"}]}}],"modified":"2026-10-02T17:16:47.411203571Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4b4d59f7-32b5-49a2-aba0-6f9cea0f90f2","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rcrr-5fj7-xffw","advisory_id":"4b4d59f7-32b5-49a2-aba0-6f9cea0f90f2","event_types":["advisory"],"published_at":"2026-10-25T22:05:07.152246+00:00","technologies":["core-osv","datadog-agent-fips-7-82-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:53:24+00:00","detail_url":"/advisories/advisory%3A4b4d59f7-32b5-49a2-aba0-6f9cea0f90f2","group":{"id":"advisory:4b4d59f7-32b5-49a2-aba0-6f9cea0f90f2","revision":1,"primary_event_id":70042,"change":"published","superseded_by":[],"changed":{"id":70042,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-rcrr-5fj7-xffw","summary":"CGA-rcrr-5fj7-xffw","evidence":"osv:CGA-rcrr-5fj7-xffw","products":[{"name":{"value":"datadog-agent-fips-7.82-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rcrr-5fj7-xffw","aliases":["CGA-rcrr-5fj7-xffw"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.82-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.82-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rcrr-5fj7-xffw.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:23:03Z"}]}}],"modified":"2026-10-02T17:16:47.411203571Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4b4d59f7-32b5-49a2-aba0-6f9cea0f90f2","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rcrr-5fj7-xffw","advisory_id":"4b4d59f7-32b5-49a2-aba0-6f9cea0f90f2","event_types":["advisory"],"published_at":"2026-10-25T22:05:07.152246+00:00","technologies":["core-osv","datadog-agent-fips-7-82-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:53:24+00:00","detail_url":"/events/70042"},"members":[{"id":70042,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-rcrr-5fj7-xffw","summary":"CGA-rcrr-5fj7-xffw","evidence":"osv:CGA-rcrr-5fj7-xffw","products":[{"name":{"value":"datadog-agent-fips-7.82-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rcrr-5fj7-xffw","aliases":["CGA-rcrr-5fj7-xffw"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.82-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.82-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rcrr-5fj7-xffw.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:23:03Z"}]}}],"modified":"2026-10-02T17:16:47.411203571Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4b4d59f7-32b5-49a2-aba0-6f9cea0f90f2","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rcrr-5fj7-xffw","advisory_id":"4b4d59f7-32b5-49a2-aba0-6f9cea0f90f2","event_types":["advisory"],"published_at":"2026-10-25T22:05:07.152246+00:00","technologies":["core-osv","datadog-agent-fips-7-82-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:53:24+00:00","detail_url":"/events/70042"}]}},{"id":69572,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-rfp5-rqrp-rc5p","summary":"CGA-rfp5-rqrp-rc5p","evidence":"osv:CGA-rfp5-rqrp-rc5p","products":[{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rfp5-rqrp-rc5p","aliases":["CGA-rfp5-rqrp-rc5p"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.78-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rfp5-rqrp-rc5p.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:15:15Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.78-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rfp5-rqrp-rc5p.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:15:15Z"}]}}],"modified":"2026-10-02T17:16:43.042612233Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7b5f7571-2ddd-47b6-a98b-9497d23d3c4f","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rfp5-rqrp-rc5p","advisory_id":"7b5f7571-2ddd-47b6-a98b-9497d23d3c4f","event_types":["advisory"],"published_at":"2026-10-25T22:02:53.067231+00:00","technologies":["core-osv","datadog-agent-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:58:57+00:00","detail_url":"/advisories/advisory%3A7b5f7571-2ddd-47b6-a98b-9497d23d3c4f","group":{"id":"advisory:7b5f7571-2ddd-47b6-a98b-9497d23d3c4f","revision":1,"primary_event_id":69942,"change":"published","superseded_by":[],"changed":{"id":69942,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-rfp5-rqrp-rc5p","summary":"CGA-rfp5-rqrp-rc5p","evidence":"osv:CGA-rfp5-rqrp-rc5p","products":[{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rfp5-rqrp-rc5p","aliases":["CGA-rfp5-rqrp-rc5p"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.78-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rfp5-rqrp-rc5p.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:15:15Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.78-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rfp5-rqrp-rc5p.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:15:15Z"}]}}],"modified":"2026-10-02T17:16:43.042612233Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7b5f7571-2ddd-47b6-a98b-9497d23d3c4f","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rfp5-rqrp-rc5p","advisory_id":"7b5f7571-2ddd-47b6-a98b-9497d23d3c4f","event_types":["advisory"],"published_at":"2026-10-25T22:02:53.067231+00:00","technologies":["core-osv","datadog-agent-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:58:57+00:00","detail_url":"/events/69942"},"members":[{"id":69942,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-rfp5-rqrp-rc5p","summary":"CGA-rfp5-rqrp-rc5p","evidence":"osv:CGA-rfp5-rqrp-rc5p","products":[{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rfp5-rqrp-rc5p","aliases":["CGA-rfp5-rqrp-rc5p"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.78-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rfp5-rqrp-rc5p.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:15:15Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.78-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rfp5-rqrp-rc5p.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:15:15Z"}]}}],"modified":"2026-10-02T17:16:43.042612233Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7b5f7571-2ddd-47b6-a98b-9497d23d3c4f","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rfp5-rqrp-rc5p","advisory_id":"7b5f7571-2ddd-47b6-a98b-9497d23d3c4f","event_types":["advisory"],"published_at":"2026-10-25T22:02:53.067231+00:00","technologies":["core-osv","datadog-agent-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:58:57+00:00","detail_url":"/events/69942"}]}},{"id":69557,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-w568-9xr2-c8rq","summary":"CGA-w568-9xr2-c8rq","evidence":"osv:CGA-w568-9xr2-c8rq","products":[{"name":{"value":"mlrun","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.12.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-w568-9xr2-c8rq","aliases":["CGA-w568-9xr2-c8rq"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-r1"}]}],"package":{"name":"mlrun","purl":"pkg:apk/chainguard/mlrun?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w568-9xr2-c8rq.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/usr/lib/python3.11/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T11:15:06Z"}]}}],"modified":"2026-10-02T17:16:42.625989659Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:908d3247-99e3-4183-96c6-8a8fc7e43b55","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w568-9xr2-c8rq","advisory_id":"908d3247-99e3-4183-96c6-8a8fc7e43b55","event_types":["advisory"],"published_at":"2026-10-25T22:02:31.741812+00:00","technologies":["core-osv","mlrun"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:22:18+00:00","detail_url":"/advisories/advisory%3A908d3247-99e3-4183-96c6-8a8fc7e43b55","group":{"id":"advisory:908d3247-99e3-4183-96c6-8a8fc7e43b55","revision":1,"primary_event_id":69927,"change":"published","superseded_by":[],"changed":{"id":69927,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-w568-9xr2-c8rq","summary":"CGA-w568-9xr2-c8rq","evidence":"osv:CGA-w568-9xr2-c8rq","products":[{"name":{"value":"mlrun","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.12.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-w568-9xr2-c8rq","aliases":["CGA-w568-9xr2-c8rq"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-r1"}]}],"package":{"name":"mlrun","purl":"pkg:apk/chainguard/mlrun?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w568-9xr2-c8rq.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/usr/lib/python3.11/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T11:15:06Z"}]}}],"modified":"2026-10-02T17:16:42.625989659Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:908d3247-99e3-4183-96c6-8a8fc7e43b55","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w568-9xr2-c8rq","advisory_id":"908d3247-99e3-4183-96c6-8a8fc7e43b55","event_types":["advisory"],"published_at":"2026-10-25T22:02:31.741812+00:00","technologies":["core-osv","mlrun"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:22:18+00:00","detail_url":"/events/69927"},"members":[{"id":69927,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-w568-9xr2-c8rq","summary":"CGA-w568-9xr2-c8rq","evidence":"osv:CGA-w568-9xr2-c8rq","products":[{"name":{"value":"mlrun","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.12.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-w568-9xr2-c8rq","aliases":["CGA-w568-9xr2-c8rq"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-r1"}]}],"package":{"name":"mlrun","purl":"pkg:apk/chainguard/mlrun?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w568-9xr2-c8rq.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/usr/lib/python3.11/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T11:15:06Z"}]}}],"modified":"2026-10-02T17:16:42.625989659Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:908d3247-99e3-4183-96c6-8a8fc7e43b55","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w568-9xr2-c8rq","advisory_id":"908d3247-99e3-4183-96c6-8a8fc7e43b55","event_types":["advisory"],"published_at":"2026-10-25T22:02:31.741812+00:00","technologies":["core-osv","mlrun"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:22:18+00:00","detail_url":"/events/69927"}]}},{"id":69519,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-p932-3f7c-hvv4","summary":"CGA-p932-3f7c-hvv4","evidence":"osv:CGA-p932-3f7c-hvv4","products":[{"name":{"value":"openstack-barbican-2025.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"21.0.0_git20260928-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-p932-3f7c-hvv4","aliases":["CGA-p932-3f7c-hvv4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.0_git20260928-r2"}]}],"package":{"name":"openstack-barbican-2025.2","purl":"pkg:apk/chainguard/openstack-barbican-2025.2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p932-3f7c-hvv4.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-barbican-2025.2/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T09:35:06Z"}]}}],"modified":"2026-10-02T17:16:40.692490194Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:718d86b4-7ad0-41d9-b222-26ab8a4c9c05","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p932-3f7c-hvv4","advisory_id":"718d86b4-7ad0-41d9-b222-26ab8a4c9c05","event_types":["advisory"],"published_at":"2026-10-25T22:00:40.315008+00:00","technologies":["core-osv","openstack-barbican-2025-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:14:32+00:00","detail_url":"/advisories/advisory%3A718d86b4-7ad0-41d9-b222-26ab8a4c9c05","group":{"id":"advisory:718d86b4-7ad0-41d9-b222-26ab8a4c9c05","revision":1,"primary_event_id":69889,"change":"published","superseded_by":[],"changed":{"id":69889,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-p932-3f7c-hvv4","summary":"CGA-p932-3f7c-hvv4","evidence":"osv:CGA-p932-3f7c-hvv4","products":[{"name":{"value":"openstack-barbican-2025.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"21.0.0_git20260928-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-p932-3f7c-hvv4","aliases":["CGA-p932-3f7c-hvv4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.0_git20260928-r2"}]}],"package":{"name":"openstack-barbican-2025.2","purl":"pkg:apk/chainguard/openstack-barbican-2025.2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p932-3f7c-hvv4.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-barbican-2025.2/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T09:35:06Z"}]}}],"modified":"2026-10-02T17:16:40.692490194Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:718d86b4-7ad0-41d9-b222-26ab8a4c9c05","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p932-3f7c-hvv4","advisory_id":"718d86b4-7ad0-41d9-b222-26ab8a4c9c05","event_types":["advisory"],"published_at":"2026-10-25T22:00:40.315008+00:00","technologies":["core-osv","openstack-barbican-2025-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:14:32+00:00","detail_url":"/events/69889"},"members":[{"id":69889,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-p932-3f7c-hvv4","summary":"CGA-p932-3f7c-hvv4","evidence":"osv:CGA-p932-3f7c-hvv4","products":[{"name":{"value":"openstack-barbican-2025.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"21.0.0_git20260928-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-p932-3f7c-hvv4","aliases":["CGA-p932-3f7c-hvv4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.0_git20260928-r2"}]}],"package":{"name":"openstack-barbican-2025.2","purl":"pkg:apk/chainguard/openstack-barbican-2025.2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p932-3f7c-hvv4.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.14.0","component_type":"python","component_version":"2.14.0","component_location":"/opt/chainguard/openstack-barbican-2025.2/lib/python3.12/site-packages/pyjwt-2.14.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T09:35:06Z"}]}}],"modified":"2026-10-02T17:16:40.692490194Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:718d86b4-7ad0-41d9-b222-26ab8a4c9c05","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p932-3f7c-hvv4","advisory_id":"718d86b4-7ad0-41d9-b222-26ab8a4c9c05","event_types":["advisory"],"published_at":"2026-10-25T22:00:40.315008+00:00","technologies":["core-osv","openstack-barbican-2025-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:14:32+00:00","detail_url":"/events/69889"}]}},{"id":69487,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-m86j-j68f-jv7p","summary":"CGA-m86j-j68f-jv7p","evidence":"osv:CGA-m86j-j68f-jv7p","products":[{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-m86j-j68f-jv7p","aliases":["CGA-m86j-j68f-jv7p"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m86j-j68f-jv7p.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:19:00Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.78-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m86j-j68f-jv7p.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:19:00Z"}]}}],"modified":"2026-10-02T17:16:39.528925142Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:816d31ab-b58c-4d63-b418-93b6c46e4592","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m86j-j68f-jv7p","advisory_id":"816d31ab-b58c-4d63-b418-93b6c46e4592","event_types":["advisory"],"published_at":"2026-10-25T21:59:55.435565+00:00","technologies":["core-osv","datadog-agent-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:39:16+00:00","detail_url":"/advisories/advisory%3A816d31ab-b58c-4d63-b418-93b6c46e4592","group":{"id":"advisory:816d31ab-b58c-4d63-b418-93b6c46e4592","revision":1,"primary_event_id":69857,"change":"published","superseded_by":[],"changed":{"id":69857,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-m86j-j68f-jv7p","summary":"CGA-m86j-j68f-jv7p","evidence":"osv:CGA-m86j-j68f-jv7p","products":[{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-m86j-j68f-jv7p","aliases":["CGA-m86j-j68f-jv7p"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m86j-j68f-jv7p.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:19:00Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.78-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m86j-j68f-jv7p.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:19:00Z"}]}}],"modified":"2026-10-02T17:16:39.528925142Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:816d31ab-b58c-4d63-b418-93b6c46e4592","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m86j-j68f-jv7p","advisory_id":"816d31ab-b58c-4d63-b418-93b6c46e4592","event_types":["advisory"],"published_at":"2026-10-25T21:59:55.435565+00:00","technologies":["core-osv","datadog-agent-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:39:16+00:00","detail_url":"/events/69857"},"members":[{"id":69857,"cve_ids":["CVE-2026-101918"],"payload":{"kind":"advisory","title":"CGA-m86j-j68f-jv7p","summary":"CGA-m86j-j68f-jv7p","evidence":"osv:CGA-m86j-j68f-jv7p","products":[{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-m86j-j68f-jv7p","aliases":["CGA-m86j-j68f-jv7p"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m86j-j68f-jv7p.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:19:00Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.78-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m86j-j68f-jv7p.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:19:00Z"}]}}],"modified":"2026-10-02T17:16:39.528925142Z","provider":"osv","upstream":["CVE-2026-101918","GHSA-42vr-xj54-vc7v"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101918.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b"]},"related_cves":[{"value":"CVE-2026-101918","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:816d31ab-b58c-4d63-b418-93b6c46e4592","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101918","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101918","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m86j-j68f-jv7p","advisory_id":"816d31ab-b58c-4d63-b418-93b6c46e4592","event_types":["advisory"],"published_at":"2026-10-25T21:59:55.435565+00:00","technologies":["core-osv","datadog-agent-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:39:16+00:00","detail_url":"/events/69857"}]}}],"next_after":73221,"next_before":69487}