{"schema_version":"2","view":"grouped","data":[{"id":72845,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"CGA-95mq-j9g4-hf6h","summary":"CGA-95mq-j9g4-hf6h","evidence":"osv:CGA-95mq-j9g4-hf6h","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-95mq-j9g4-hf6h","aliases":["CGA-95mq-j9g4-hf6h"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-95mq-j9g4-hf6h.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:41Z"}]}}],"modified":"2026-10-03T10:32:37.577858173Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102270.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p","https://nvd.nist.gov/vuln/detail/CVE-2026-102270","https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:badf62e3-750b-4114-ac60-bbd7abf231ec","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-95mq-j9g4-hf6h","advisory_id":"badf62e3-750b-4114-ac60-bbd7abf231ec","event_types":["advisory"],"published_at":"2026-10-26T01:15:30.060267+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:14+00:00","detail_url":"/advisories/advisory%3Abadf62e3-750b-4114-ac60-bbd7abf231ec","group":{"id":"advisory:badf62e3-750b-4114-ac60-bbd7abf231ec","revision":1,"primary_event_id":73704,"change":"published","superseded_by":[],"changed":{"id":73704,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"CGA-95mq-j9g4-hf6h","summary":"CGA-95mq-j9g4-hf6h","evidence":"osv:CGA-95mq-j9g4-hf6h","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-95mq-j9g4-hf6h","aliases":["CGA-95mq-j9g4-hf6h"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-95mq-j9g4-hf6h.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:41Z"}]}}],"modified":"2026-10-03T10:32:37.577858173Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102270.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p","https://nvd.nist.gov/vuln/detail/CVE-2026-102270","https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:badf62e3-750b-4114-ac60-bbd7abf231ec","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-95mq-j9g4-hf6h","advisory_id":"badf62e3-750b-4114-ac60-bbd7abf231ec","event_types":["advisory"],"published_at":"2026-10-26T01:15:30.060267+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:14+00:00","detail_url":"/events/73704"},"members":[{"id":73704,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"CGA-95mq-j9g4-hf6h","summary":"CGA-95mq-j9g4-hf6h","evidence":"osv:CGA-95mq-j9g4-hf6h","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-95mq-j9g4-hf6h","aliases":["CGA-95mq-j9g4-hf6h"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-95mq-j9g4-hf6h.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:41Z"}]}}],"modified":"2026-10-03T10:32:37.577858173Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102270.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p","https://nvd.nist.gov/vuln/detail/CVE-2026-102270","https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:badf62e3-750b-4114-ac60-bbd7abf231ec","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-95mq-j9g4-hf6h","advisory_id":"badf62e3-750b-4114-ac60-bbd7abf231ec","event_types":["advisory"],"published_at":"2026-10-26T01:15:30.060267+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:14+00:00","detail_url":"/events/73704"}]}},{"id":70939,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"CGA-4x45-p4j8-5gqj","summary":"CGA-4x45-p4j8-5gqj","evidence":"osv:CGA-4x45-p4j8-5gqj","products":[{"name":{"value":"authentik-fips-2026.5","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2026.5.7-r7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-4x45-p4j8-5gqj","aliases":["CGA-4x45-p4j8-5gqj"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.5.7-r7"}]}],"package":{"name":"authentik-fips-2026.5","purl":"pkg:apk/chainguard/authentik-fips-2026.5?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4x45-p4j8-5gqj.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/usr/share/authentik-2026.5/venv/lib/python3.14/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:30:56Z"}]}}],"modified":"2026-10-02T18:28:01.366972678Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102270.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p","https://nvd.nist.gov/vuln/detail/CVE-2026-102270","https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:71317699-892b-4c04-b20a-2b350836a406","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4x45-p4j8-5gqj","advisory_id":"71317699-892b-4c04-b20a-2b350836a406","event_types":["advisory"],"published_at":"2026-10-25T22:45:08.391637+00:00","technologies":["authentik-fips-2026-5","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:14:09+00:00","detail_url":"/advisories/advisory%3A71317699-892b-4c04-b20a-2b350836a406","group":{"id":"advisory:71317699-892b-4c04-b20a-2b350836a406","revision":1,"primary_event_id":71310,"change":"published","superseded_by":[],"changed":{"id":71310,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"CGA-4x45-p4j8-5gqj","summary":"CGA-4x45-p4j8-5gqj","evidence":"osv:CGA-4x45-p4j8-5gqj","products":[{"name":{"value":"authentik-fips-2026.5","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2026.5.7-r7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-4x45-p4j8-5gqj","aliases":["CGA-4x45-p4j8-5gqj"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.5.7-r7"}]}],"package":{"name":"authentik-fips-2026.5","purl":"pkg:apk/chainguard/authentik-fips-2026.5?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4x45-p4j8-5gqj.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/usr/share/authentik-2026.5/venv/lib/python3.14/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:30:56Z"}]}}],"modified":"2026-10-02T18:28:01.366972678Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102270.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p","https://nvd.nist.gov/vuln/detail/CVE-2026-102270","https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:71317699-892b-4c04-b20a-2b350836a406","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4x45-p4j8-5gqj","advisory_id":"71317699-892b-4c04-b20a-2b350836a406","event_types":["advisory"],"published_at":"2026-10-25T22:45:08.391637+00:00","technologies":["authentik-fips-2026-5","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:14:09+00:00","detail_url":"/events/71310"},"members":[{"id":71310,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"CGA-4x45-p4j8-5gqj","summary":"CGA-4x45-p4j8-5gqj","evidence":"osv:CGA-4x45-p4j8-5gqj","products":[{"name":{"value":"authentik-fips-2026.5","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2026.5.7-r7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-4x45-p4j8-5gqj","aliases":["CGA-4x45-p4j8-5gqj"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.5.7-r7"}]}],"package":{"name":"authentik-fips-2026.5","purl":"pkg:apk/chainguard/authentik-fips-2026.5?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4x45-p4j8-5gqj.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/usr/share/authentik-2026.5/venv/lib/python3.14/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:30:56Z"}]}}],"modified":"2026-10-02T18:28:01.366972678Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102270.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p","https://nvd.nist.gov/vuln/detail/CVE-2026-102270","https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:71317699-892b-4c04-b20a-2b350836a406","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4x45-p4j8-5gqj","advisory_id":"71317699-892b-4c04-b20a-2b350836a406","event_types":["advisory"],"published_at":"2026-10-25T22:45:08.391637+00:00","technologies":["authentik-fips-2026-5","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:14:09+00:00","detail_url":"/events/71310"}]}},{"id":69940,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"MINI-cf8w-rhcp-wq3g","summary":"MINI-cf8w-rhcp-wq3g","evidence":"osv:MINI-cf8w-rhcp-wq3g","products":[{"name":{"value":"vllm-cu130","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.30.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-cf8w-rhcp-wq3g","aliases":["MINI-cf8w-rhcp-wq3g"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.0-r0"}]}],"package":{"name":"vllm-cu130","purl":"pkg:apk/minimos/vllm-cu130","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-cf8w-rhcp-wq3g.json"}}],"modified":"2026-10-02T18:23:28.090900101Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":[]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5cd4f254-fef4-4296-9da1-d2306e53b1df","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-cf8w-rhcp-wq3g","advisory_id":"5cd4f254-fef4-4296-9da1-d2306e53b1df","event_types":["advisory"],"published_at":"2026-10-25T22:10:42.745448+00:00","technologies":["core-osv","vllm-cu130"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:12:28+00:00","detail_url":"/advisories/advisory%3A5cd4f254-fef4-4296-9da1-d2306e53b1df","group":{"id":"advisory:5cd4f254-fef4-4296-9da1-d2306e53b1df","revision":1,"primary_event_id":70310,"change":"published","superseded_by":[],"changed":{"id":70310,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"MINI-cf8w-rhcp-wq3g","summary":"MINI-cf8w-rhcp-wq3g","evidence":"osv:MINI-cf8w-rhcp-wq3g","products":[{"name":{"value":"vllm-cu130","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.30.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-cf8w-rhcp-wq3g","aliases":["MINI-cf8w-rhcp-wq3g"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.0-r0"}]}],"package":{"name":"vllm-cu130","purl":"pkg:apk/minimos/vllm-cu130","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-cf8w-rhcp-wq3g.json"}}],"modified":"2026-10-02T18:23:28.090900101Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":[]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5cd4f254-fef4-4296-9da1-d2306e53b1df","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-cf8w-rhcp-wq3g","advisory_id":"5cd4f254-fef4-4296-9da1-d2306e53b1df","event_types":["advisory"],"published_at":"2026-10-25T22:10:42.745448+00:00","technologies":["core-osv","vllm-cu130"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:12:28+00:00","detail_url":"/events/70310"},"members":[{"id":70310,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"MINI-cf8w-rhcp-wq3g","summary":"MINI-cf8w-rhcp-wq3g","evidence":"osv:MINI-cf8w-rhcp-wq3g","products":[{"name":{"value":"vllm-cu130","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.30.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-cf8w-rhcp-wq3g","aliases":["MINI-cf8w-rhcp-wq3g"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.0-r0"}]}],"package":{"name":"vllm-cu130","purl":"pkg:apk/minimos/vllm-cu130","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-cf8w-rhcp-wq3g.json"}}],"modified":"2026-10-02T18:23:28.090900101Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":[]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5cd4f254-fef4-4296-9da1-d2306e53b1df","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-cf8w-rhcp-wq3g","advisory_id":"5cd4f254-fef4-4296-9da1-d2306e53b1df","event_types":["advisory"],"published_at":"2026-10-25T22:10:42.745448+00:00","technologies":["core-osv","vllm-cu130"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:12:28+00:00","detail_url":"/events/70310"}]}},{"id":69693,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"CGA-v82c-rrfm-p5gp","summary":"CGA-v82c-rrfm-p5gp","evidence":"osv:CGA-v82c-rrfm-p5gp","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v82c-rrfm-p5gp","aliases":["CGA-v82c-rrfm-p5gp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v82c-rrfm-p5gp.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T14:27:24Z"}]}}],"modified":"2026-10-02T17:16:48.112722215Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102270.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p","https://nvd.nist.gov/vuln/detail/CVE-2026-102270","https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:29f6aa3f-f38c-49a1-8c56-97886920ee82","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v82c-rrfm-p5gp","advisory_id":"29f6aa3f-f38c-49a1-8c56-97886920ee82","event_types":["advisory"],"published_at":"2026-10-25T22:05:30.735709+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:47:47+00:00","detail_url":"/advisories/advisory%3A29f6aa3f-f38c-49a1-8c56-97886920ee82","group":{"id":"advisory:29f6aa3f-f38c-49a1-8c56-97886920ee82","revision":1,"primary_event_id":70063,"change":"published","superseded_by":[],"changed":{"id":70063,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"CGA-v82c-rrfm-p5gp","summary":"CGA-v82c-rrfm-p5gp","evidence":"osv:CGA-v82c-rrfm-p5gp","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v82c-rrfm-p5gp","aliases":["CGA-v82c-rrfm-p5gp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v82c-rrfm-p5gp.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T14:27:24Z"}]}}],"modified":"2026-10-02T17:16:48.112722215Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102270.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p","https://nvd.nist.gov/vuln/detail/CVE-2026-102270","https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:29f6aa3f-f38c-49a1-8c56-97886920ee82","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v82c-rrfm-p5gp","advisory_id":"29f6aa3f-f38c-49a1-8c56-97886920ee82","event_types":["advisory"],"published_at":"2026-10-25T22:05:30.735709+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:47:47+00:00","detail_url":"/events/70063"},"members":[{"id":70063,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"CGA-v82c-rrfm-p5gp","summary":"CGA-v82c-rrfm-p5gp","evidence":"osv:CGA-v82c-rrfm-p5gp","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v82c-rrfm-p5gp","aliases":["CGA-v82c-rrfm-p5gp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v82c-rrfm-p5gp.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T14:27:24Z"}]}}],"modified":"2026-10-02T17:16:48.112722215Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102270.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p","https://nvd.nist.gov/vuln/detail/CVE-2026-102270","https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:29f6aa3f-f38c-49a1-8c56-97886920ee82","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v82c-rrfm-p5gp","advisory_id":"29f6aa3f-f38c-49a1-8c56-97886920ee82","event_types":["advisory"],"published_at":"2026-10-25T22:05:30.735709+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:47:47+00:00","detail_url":"/events/70063"}]}},{"id":69551,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"CGA-qh86-6g53-jm26","summary":"CGA-qh86-6g53-jm26","evidence":"osv:CGA-qh86-6g53-jm26","products":[{"name":{"value":"superset-fips-6.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"6.1.0-r7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qh86-6g53-jm26","aliases":["CGA-qh86-6g53-jm26"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.0-r7"}]}],"package":{"name":"superset-fips-6.1","purl":"pkg:apk/chainguard/superset-fips-6.1?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qh86-6g53-jm26.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/usr/share/superset/venv/lib/python3.11/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T14:09:40Z"}]}}],"modified":"2026-10-02T17:16:41.773442032Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102270.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p","https://nvd.nist.gov/vuln/detail/CVE-2026-102270","https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c041bff5-4571-487f-a21c-495a83f1251a","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qh86-6g53-jm26","advisory_id":"c041bff5-4571-487f-a21c-495a83f1251a","event_types":["advisory"],"published_at":"2026-10-25T22:02:24.520545+00:00","technologies":["core-osv","superset-fips-6-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:58:17+00:00","detail_url":"/advisories/advisory%3Ac041bff5-4571-487f-a21c-495a83f1251a","group":{"id":"advisory:c041bff5-4571-487f-a21c-495a83f1251a","revision":1,"primary_event_id":69921,"change":"published","superseded_by":[],"changed":{"id":69921,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"CGA-qh86-6g53-jm26","summary":"CGA-qh86-6g53-jm26","evidence":"osv:CGA-qh86-6g53-jm26","products":[{"name":{"value":"superset-fips-6.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"6.1.0-r7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qh86-6g53-jm26","aliases":["CGA-qh86-6g53-jm26"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.0-r7"}]}],"package":{"name":"superset-fips-6.1","purl":"pkg:apk/chainguard/superset-fips-6.1?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qh86-6g53-jm26.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/usr/share/superset/venv/lib/python3.11/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T14:09:40Z"}]}}],"modified":"2026-10-02T17:16:41.773442032Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102270.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p","https://nvd.nist.gov/vuln/detail/CVE-2026-102270","https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c041bff5-4571-487f-a21c-495a83f1251a","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qh86-6g53-jm26","advisory_id":"c041bff5-4571-487f-a21c-495a83f1251a","event_types":["advisory"],"published_at":"2026-10-25T22:02:24.520545+00:00","technologies":["core-osv","superset-fips-6-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:58:17+00:00","detail_url":"/events/69921"},"members":[{"id":69921,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"CGA-qh86-6g53-jm26","summary":"CGA-qh86-6g53-jm26","evidence":"osv:CGA-qh86-6g53-jm26","products":[{"name":{"value":"superset-fips-6.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"6.1.0-r7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qh86-6g53-jm26","aliases":["CGA-qh86-6g53-jm26"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.0-r7"}]}],"package":{"name":"superset-fips-6.1","purl":"pkg:apk/chainguard/superset-fips-6.1?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qh86-6g53-jm26.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/usr/share/superset/venv/lib/python3.11/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T14:09:40Z"}]}}],"modified":"2026-10-02T17:16:41.773442032Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102270.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p","https://nvd.nist.gov/vuln/detail/CVE-2026-102270","https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c041bff5-4571-487f-a21c-495a83f1251a","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qh86-6g53-jm26","advisory_id":"c041bff5-4571-487f-a21c-495a83f1251a","event_types":["advisory"],"published_at":"2026-10-25T22:02:24.520545+00:00","technologies":["core-osv","superset-fips-6-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:58:17+00:00","detail_url":"/events/69921"}]}},{"id":69096,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"CGA-9h53-gm58-wh4f","summary":"CGA-9h53-gm58-wh4f","evidence":"osv:CGA-9h53-gm58-wh4f","products":[{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-9h53-gm58-wh4f","aliases":["CGA-9h53-gm58-wh4f"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9h53-gm58-wh4f.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:19:00Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.78-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9h53-gm58-wh4f.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:19:00Z"}]}}],"modified":"2026-10-02T17:16:21.539226506Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102270.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p","https://nvd.nist.gov/vuln/detail/CVE-2026-102270","https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:65d07cf0-b0be-4dda-8103-9d15937be97d","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9h53-gm58-wh4f","advisory_id":"65d07cf0-b0be-4dda-8103-9d15937be97d","event_types":["advisory"],"published_at":"2026-10-25T21:52:09.500575+00:00","technologies":["core-osv","datadog-agent-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:39:17+00:00","detail_url":"/advisories/advisory%3A65d07cf0-b0be-4dda-8103-9d15937be97d","group":{"id":"advisory:65d07cf0-b0be-4dda-8103-9d15937be97d","revision":1,"primary_event_id":69466,"change":"published","superseded_by":[],"changed":{"id":69466,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"CGA-9h53-gm58-wh4f","summary":"CGA-9h53-gm58-wh4f","evidence":"osv:CGA-9h53-gm58-wh4f","products":[{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-9h53-gm58-wh4f","aliases":["CGA-9h53-gm58-wh4f"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9h53-gm58-wh4f.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:19:00Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.78-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9h53-gm58-wh4f.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:19:00Z"}]}}],"modified":"2026-10-02T17:16:21.539226506Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102270.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p","https://nvd.nist.gov/vuln/detail/CVE-2026-102270","https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:65d07cf0-b0be-4dda-8103-9d15937be97d","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9h53-gm58-wh4f","advisory_id":"65d07cf0-b0be-4dda-8103-9d15937be97d","event_types":["advisory"],"published_at":"2026-10-25T21:52:09.500575+00:00","technologies":["core-osv","datadog-agent-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:39:17+00:00","detail_url":"/events/69466"},"members":[{"id":69466,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"CGA-9h53-gm58-wh4f","summary":"CGA-9h53-gm58-wh4f","evidence":"osv:CGA-9h53-gm58-wh4f","products":[{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-9h53-gm58-wh4f","aliases":["CGA-9h53-gm58-wh4f"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9h53-gm58-wh4f.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:19:00Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.78-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9h53-gm58-wh4f.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T12:19:00Z"}]}}],"modified":"2026-10-02T17:16:21.539226506Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102270.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p","https://nvd.nist.gov/vuln/detail/CVE-2026-102270","https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:65d07cf0-b0be-4dda-8103-9d15937be97d","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9h53-gm58-wh4f","advisory_id":"65d07cf0-b0be-4dda-8103-9d15937be97d","event_types":["advisory"],"published_at":"2026-10-25T21:52:09.500575+00:00","technologies":["core-osv","datadog-agent-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:39:17+00:00","detail_url":"/events/69466"}]}},{"id":68745,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"CGA-28x6-9p5r-x5mc","summary":"CGA-28x6-9p5r-x5mc","evidence":"osv:CGA-28x6-9p5r-x5mc","products":[{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-28x6-9p5r-x5mc","aliases":["CGA-28x6-9p5r-x5mc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.78-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-28x6-9p5r-x5mc.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:15:15Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.78-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-28x6-9p5r-x5mc.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:15:15Z"}]}}],"modified":"2026-10-02T17:15:14.344206047Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102270.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p","https://nvd.nist.gov/vuln/detail/CVE-2026-102270","https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:57b5d5bd-e34c-4a8d-b468-1f1a0996de52","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-28x6-9p5r-x5mc","advisory_id":"57b5d5bd-e34c-4a8d-b468-1f1a0996de52","event_types":["advisory"],"published_at":"2026-10-25T21:45:28.32547+00:00","technologies":["core-osv","datadog-agent-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:58:58+00:00","detail_url":"/advisories/advisory%3A57b5d5bd-e34c-4a8d-b468-1f1a0996de52","group":{"id":"advisory:57b5d5bd-e34c-4a8d-b468-1f1a0996de52","revision":1,"primary_event_id":69115,"change":"published","superseded_by":[],"changed":{"id":69115,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"CGA-28x6-9p5r-x5mc","summary":"CGA-28x6-9p5r-x5mc","evidence":"osv:CGA-28x6-9p5r-x5mc","products":[{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-28x6-9p5r-x5mc","aliases":["CGA-28x6-9p5r-x5mc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.78-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-28x6-9p5r-x5mc.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:15:15Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.78-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-28x6-9p5r-x5mc.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:15:15Z"}]}}],"modified":"2026-10-02T17:15:14.344206047Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102270.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p","https://nvd.nist.gov/vuln/detail/CVE-2026-102270","https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:57b5d5bd-e34c-4a8d-b468-1f1a0996de52","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-28x6-9p5r-x5mc","advisory_id":"57b5d5bd-e34c-4a8d-b468-1f1a0996de52","event_types":["advisory"],"published_at":"2026-10-25T21:45:28.32547+00:00","technologies":["core-osv","datadog-agent-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:58:58+00:00","detail_url":"/events/69115"},"members":[{"id":69115,"cve_ids":["CVE-2026-102270"],"payload":{"kind":"advisory","title":"CGA-28x6-9p5r-x5mc","summary":"CGA-28x6-9p5r-x5mc","evidence":"osv:CGA-28x6-9p5r-x5mc","products":[{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.78-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-28x6-9p5r-x5mc","aliases":["CGA-28x6-9p5r-x5mc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.78-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-28x6-9p5r-x5mc.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:15:15Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.78-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.78-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-28x6-9p5r-x5mc.json"},"ecosystem_specific":{"components":[{"component_name":"pyjwt","component_purl":"pkg:pypi/pyjwt@2.13.0","component_type":"python","component_version":"2.13.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pyjwt-2.13.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T13:15:15Z"}]}}],"modified":"2026-10-02T17:15:14.344206047Z","provider":"osv","upstream":["CVE-2026-102270","GHSA-jwrc-g2q2-pq5p"],"references":["https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102270.json","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p","https://nvd.nist.gov/vuln/detail/CVE-2026-102270","https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07"]},"related_cves":[{"value":"CVE-2026-102270","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:57b5d5bd-e34c-4a8d-b468-1f1a0996de52","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-102270","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"HIGH","confidentialityImpact":"NONE"}}],"products":[{"name":{"value":"pyjwt","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102270","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-28x6-9p5r-x5mc","advisory_id":"57b5d5bd-e34c-4a8d-b468-1f1a0996de52","event_types":["advisory"],"published_at":"2026-10-25T21:45:28.32547+00:00","technologies":["core-osv","datadog-agent-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:58:58+00:00","detail_url":"/events/69115"}]}}],"next_after":72845,"next_before":68745}