{"schema_version":"2","view":"grouped","data":[{"id":73332,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-g6x7-p9v9-cvm7","summary":"CGA-g6x7-p9v9-cvm7","evidence":"osv:CGA-g6x7-p9v9-cvm7","products":[{"name":{"value":"gitlab-rails-ce-18.9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-g6x7-p9v9-cvm7","aliases":["CGA-g6x7-p9v9-cvm7"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"gitlab-rails-ce-18.9","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g6x7-p9v9-cvm7.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.3.1","component_type":"npm","component_version":"1.3.1","component_location":"/srv/gitlab/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T12:20:55Z"}]}}],"modified":"2026-10-03T16:02:25.502312659Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85393.json","https://github.com/advisories/GHSA-ppp5-5v6c-4jwp","https://nvd.nist.gov/vuln/detail/CVE-2026-85393","https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding","https://github.com/digitalbazaar/forge/issues/1149","https://github.com/digitalbazaar/forge","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js"]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3cb214a2-c424-4960-9bd3-70fddb51274c","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-g6x7-p9v9-cvm7","advisory_id":"3cb214a2-c424-4960-9bd3-70fddb51274c","event_types":["advisory"],"published_at":"2026-10-26T04:18:51.641915+00:00","technologies":["core-osv","gitlab-rails-ce-18-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:20:27+00:00","detail_url":"/advisories/advisory%3A3cb214a2-c424-4960-9bd3-70fddb51274c","group":{"id":"advisory:3cb214a2-c424-4960-9bd3-70fddb51274c","revision":1,"primary_event_id":75635,"change":"published","superseded_by":[],"changed":{"id":75635,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-g6x7-p9v9-cvm7","summary":"CGA-g6x7-p9v9-cvm7","evidence":"osv:CGA-g6x7-p9v9-cvm7","products":[{"name":{"value":"gitlab-rails-ce-18.9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-g6x7-p9v9-cvm7","aliases":["CGA-g6x7-p9v9-cvm7"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"gitlab-rails-ce-18.9","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g6x7-p9v9-cvm7.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.3.1","component_type":"npm","component_version":"1.3.1","component_location":"/srv/gitlab/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T12:20:55Z"}]}}],"modified":"2026-10-03T16:02:25.502312659Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85393.json","https://github.com/advisories/GHSA-ppp5-5v6c-4jwp","https://nvd.nist.gov/vuln/detail/CVE-2026-85393","https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding","https://github.com/digitalbazaar/forge/issues/1149","https://github.com/digitalbazaar/forge","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js"]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3cb214a2-c424-4960-9bd3-70fddb51274c","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-g6x7-p9v9-cvm7","advisory_id":"3cb214a2-c424-4960-9bd3-70fddb51274c","event_types":["advisory"],"published_at":"2026-10-26T04:18:51.641915+00:00","technologies":["core-osv","gitlab-rails-ce-18-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:20:27+00:00","detail_url":"/events/75635"},"members":[{"id":75635,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-g6x7-p9v9-cvm7","summary":"CGA-g6x7-p9v9-cvm7","evidence":"osv:CGA-g6x7-p9v9-cvm7","products":[{"name":{"value":"gitlab-rails-ce-18.9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-g6x7-p9v9-cvm7","aliases":["CGA-g6x7-p9v9-cvm7"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"gitlab-rails-ce-18.9","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g6x7-p9v9-cvm7.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.3.1","component_type":"npm","component_version":"1.3.1","component_location":"/srv/gitlab/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T12:20:55Z"}]}}],"modified":"2026-10-03T16:02:25.502312659Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85393.json","https://github.com/advisories/GHSA-ppp5-5v6c-4jwp","https://nvd.nist.gov/vuln/detail/CVE-2026-85393","https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding","https://github.com/digitalbazaar/forge/issues/1149","https://github.com/digitalbazaar/forge","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js"]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3cb214a2-c424-4960-9bd3-70fddb51274c","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-g6x7-p9v9-cvm7","advisory_id":"3cb214a2-c424-4960-9bd3-70fddb51274c","event_types":["advisory"],"published_at":"2026-10-26T04:18:51.641915+00:00","technologies":["core-osv","gitlab-rails-ce-18-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:20:27+00:00","detail_url":"/events/75635"}]}},{"id":73327,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-xq4v-3gjf-5g9f","summary":"CGA-xq4v-3gjf-5g9f","evidence":"osv:CGA-xq4v-3gjf-5g9f","products":[{"name":{"value":"kibana-9.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-xq4v-3gjf-5g9f","aliases":["CGA-xq4v-3gjf-5g9f"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.2","purl":"pkg:apk/chainguard/kibana-9.2?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xq4v-3gjf-5g9f.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/kibana/node_modules/node-forge/package.json","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T13:37:13Z"}]}}],"modified":"2026-10-03T16:02:22.180878086Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85393.json","https://github.com/advisories/GHSA-ppp5-5v6c-4jwp","https://nvd.nist.gov/vuln/detail/CVE-2026-85393","https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding","https://github.com/digitalbazaar/forge/issues/1149","https://github.com/digitalbazaar/forge","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js"]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9cfba487-81c0-47b2-96c9-4dbe88c91442","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xq4v-3gjf-5g9f","advisory_id":"9cfba487-81c0-47b2-96c9-4dbe88c91442","event_types":["advisory"],"published_at":"2026-10-26T04:15:26.365101+00:00","technologies":["core-osv","kibana-9-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:35:21+00:00","detail_url":"/advisories/advisory%3A9cfba487-81c0-47b2-96c9-4dbe88c91442","group":{"id":"advisory:9cfba487-81c0-47b2-96c9-4dbe88c91442","revision":1,"primary_event_id":75605,"change":"published","superseded_by":[],"changed":{"id":75605,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-xq4v-3gjf-5g9f","summary":"CGA-xq4v-3gjf-5g9f","evidence":"osv:CGA-xq4v-3gjf-5g9f","products":[{"name":{"value":"kibana-9.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-xq4v-3gjf-5g9f","aliases":["CGA-xq4v-3gjf-5g9f"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.2","purl":"pkg:apk/chainguard/kibana-9.2?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xq4v-3gjf-5g9f.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/kibana/node_modules/node-forge/package.json","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T13:37:13Z"}]}}],"modified":"2026-10-03T16:02:22.180878086Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85393.json","https://github.com/advisories/GHSA-ppp5-5v6c-4jwp","https://nvd.nist.gov/vuln/detail/CVE-2026-85393","https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding","https://github.com/digitalbazaar/forge/issues/1149","https://github.com/digitalbazaar/forge","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js"]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9cfba487-81c0-47b2-96c9-4dbe88c91442","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xq4v-3gjf-5g9f","advisory_id":"9cfba487-81c0-47b2-96c9-4dbe88c91442","event_types":["advisory"],"published_at":"2026-10-26T04:15:26.365101+00:00","technologies":["core-osv","kibana-9-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:35:21+00:00","detail_url":"/events/75605"},"members":[{"id":75605,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-xq4v-3gjf-5g9f","summary":"CGA-xq4v-3gjf-5g9f","evidence":"osv:CGA-xq4v-3gjf-5g9f","products":[{"name":{"value":"kibana-9.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-xq4v-3gjf-5g9f","aliases":["CGA-xq4v-3gjf-5g9f"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.2","purl":"pkg:apk/chainguard/kibana-9.2?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xq4v-3gjf-5g9f.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/kibana/node_modules/node-forge/package.json","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T13:37:13Z"}]}}],"modified":"2026-10-03T16:02:22.180878086Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85393.json","https://github.com/advisories/GHSA-ppp5-5v6c-4jwp","https://nvd.nist.gov/vuln/detail/CVE-2026-85393","https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding","https://github.com/digitalbazaar/forge/issues/1149","https://github.com/digitalbazaar/forge","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js"]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9cfba487-81c0-47b2-96c9-4dbe88c91442","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xq4v-3gjf-5g9f","advisory_id":"9cfba487-81c0-47b2-96c9-4dbe88c91442","event_types":["advisory"],"published_at":"2026-10-26T04:15:26.365101+00:00","technologies":["core-osv","kibana-9-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:35:21+00:00","detail_url":"/events/75605"}]}},{"id":73324,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-v5r8-3wgp-8h7g","summary":"CGA-v5r8-3wgp-8h7g","evidence":"osv:CGA-v5r8-3wgp-8h7g","products":[{"name":{"value":"kibana-9.3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-v5r8-3wgp-8h7g","aliases":["CGA-v5r8-3wgp-8h7g"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.3","purl":"pkg:apk/chainguard/kibana-9.3?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v5r8-3wgp-8h7g.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/kibana/node_modules/node-forge/package.json","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T12:21:38Z"}]}}],"modified":"2026-10-03T16:02:21.025297140Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85393.json","https://github.com/advisories/GHSA-ppp5-5v6c-4jwp","https://nvd.nist.gov/vuln/detail/CVE-2026-85393","https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding","https://github.com/digitalbazaar/forge/issues/1149","https://github.com/digitalbazaar/forge","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js"]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7556acfa-480d-407d-94e9-f33ef20bc1cc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v5r8-3wgp-8h7g","advisory_id":"7556acfa-480d-407d-94e9-f33ef20bc1cc","event_types":["advisory"],"published_at":"2026-10-26T04:14:01.019576+00:00","technologies":["core-osv","kibana-9-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:32:07+00:00","detail_url":"/advisories/advisory%3A7556acfa-480d-407d-94e9-f33ef20bc1cc","group":{"id":"advisory:7556acfa-480d-407d-94e9-f33ef20bc1cc","revision":1,"primary_event_id":75586,"change":"published","superseded_by":[],"changed":{"id":75586,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-v5r8-3wgp-8h7g","summary":"CGA-v5r8-3wgp-8h7g","evidence":"osv:CGA-v5r8-3wgp-8h7g","products":[{"name":{"value":"kibana-9.3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-v5r8-3wgp-8h7g","aliases":["CGA-v5r8-3wgp-8h7g"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.3","purl":"pkg:apk/chainguard/kibana-9.3?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v5r8-3wgp-8h7g.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/kibana/node_modules/node-forge/package.json","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T12:21:38Z"}]}}],"modified":"2026-10-03T16:02:21.025297140Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85393.json","https://github.com/advisories/GHSA-ppp5-5v6c-4jwp","https://nvd.nist.gov/vuln/detail/CVE-2026-85393","https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding","https://github.com/digitalbazaar/forge/issues/1149","https://github.com/digitalbazaar/forge","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js"]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7556acfa-480d-407d-94e9-f33ef20bc1cc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v5r8-3wgp-8h7g","advisory_id":"7556acfa-480d-407d-94e9-f33ef20bc1cc","event_types":["advisory"],"published_at":"2026-10-26T04:14:01.019576+00:00","technologies":["core-osv","kibana-9-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:32:07+00:00","detail_url":"/events/75586"},"members":[{"id":75586,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-v5r8-3wgp-8h7g","summary":"CGA-v5r8-3wgp-8h7g","evidence":"osv:CGA-v5r8-3wgp-8h7g","products":[{"name":{"value":"kibana-9.3","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-v5r8-3wgp-8h7g","aliases":["CGA-v5r8-3wgp-8h7g"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.3","purl":"pkg:apk/chainguard/kibana-9.3?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v5r8-3wgp-8h7g.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/kibana/node_modules/node-forge/package.json","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T12:21:38Z"}]}}],"modified":"2026-10-03T16:02:21.025297140Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85393.json","https://github.com/advisories/GHSA-ppp5-5v6c-4jwp","https://nvd.nist.gov/vuln/detail/CVE-2026-85393","https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding","https://github.com/digitalbazaar/forge/issues/1149","https://github.com/digitalbazaar/forge","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js"]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7556acfa-480d-407d-94e9-f33ef20bc1cc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v5r8-3wgp-8h7g","advisory_id":"7556acfa-480d-407d-94e9-f33ef20bc1cc","event_types":["advisory"],"published_at":"2026-10-26T04:14:01.019576+00:00","technologies":["core-osv","kibana-9-3"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:32:07+00:00","detail_url":"/events/75586"}]}},{"id":73321,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-r735-v553-rxf9","summary":"CGA-r735-v553-rxf9","evidence":"osv:CGA-r735-v553-rxf9","products":[{"name":{"value":"gitlab-rails-ce-18.8","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-r735-v553-rxf9","aliases":["CGA-r735-v553-rxf9"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"gitlab-rails-ce-18.8","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r735-v553-rxf9.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.3.1","component_type":"npm","component_version":"1.3.1","component_location":"/srv/gitlab/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T14:15:18Z"}]}}],"modified":"2026-10-03T16:02:19.978242227Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85393.json","https://github.com/advisories/GHSA-ppp5-5v6c-4jwp","https://nvd.nist.gov/vuln/detail/CVE-2026-85393","https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding","https://github.com/digitalbazaar/forge/issues/1149","https://github.com/digitalbazaar/forge","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js"]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f2bd7663-ccb1-46ba-b06f-a96092e0ad42","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-r735-v553-rxf9","advisory_id":"f2bd7663-ccb1-46ba-b06f-a96092e0ad42","event_types":["advisory"],"published_at":"2026-10-26T04:12:42.729236+00:00","technologies":["core-osv","gitlab-rails-ce-18-8"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:29:21+00:00","detail_url":"/advisories/advisory%3Af2bd7663-ccb1-46ba-b06f-a96092e0ad42","group":{"id":"advisory:f2bd7663-ccb1-46ba-b06f-a96092e0ad42","revision":1,"primary_event_id":75571,"change":"published","superseded_by":[],"changed":{"id":75571,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-r735-v553-rxf9","summary":"CGA-r735-v553-rxf9","evidence":"osv:CGA-r735-v553-rxf9","products":[{"name":{"value":"gitlab-rails-ce-18.8","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-r735-v553-rxf9","aliases":["CGA-r735-v553-rxf9"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"gitlab-rails-ce-18.8","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r735-v553-rxf9.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.3.1","component_type":"npm","component_version":"1.3.1","component_location":"/srv/gitlab/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T14:15:18Z"}]}}],"modified":"2026-10-03T16:02:19.978242227Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85393.json","https://github.com/advisories/GHSA-ppp5-5v6c-4jwp","https://nvd.nist.gov/vuln/detail/CVE-2026-85393","https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding","https://github.com/digitalbazaar/forge/issues/1149","https://github.com/digitalbazaar/forge","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js"]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f2bd7663-ccb1-46ba-b06f-a96092e0ad42","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-r735-v553-rxf9","advisory_id":"f2bd7663-ccb1-46ba-b06f-a96092e0ad42","event_types":["advisory"],"published_at":"2026-10-26T04:12:42.729236+00:00","technologies":["core-osv","gitlab-rails-ce-18-8"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:29:21+00:00","detail_url":"/events/75571"},"members":[{"id":75571,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-r735-v553-rxf9","summary":"CGA-r735-v553-rxf9","evidence":"osv:CGA-r735-v553-rxf9","products":[{"name":{"value":"gitlab-rails-ce-18.8","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-r735-v553-rxf9","aliases":["CGA-r735-v553-rxf9"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"gitlab-rails-ce-18.8","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r735-v553-rxf9.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.3.1","component_type":"npm","component_version":"1.3.1","component_location":"/srv/gitlab/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T14:15:18Z"}]}}],"modified":"2026-10-03T16:02:19.978242227Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85393.json","https://github.com/advisories/GHSA-ppp5-5v6c-4jwp","https://nvd.nist.gov/vuln/detail/CVE-2026-85393","https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding","https://github.com/digitalbazaar/forge/issues/1149","https://github.com/digitalbazaar/forge","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js"]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f2bd7663-ccb1-46ba-b06f-a96092e0ad42","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-r735-v553-rxf9","advisory_id":"f2bd7663-ccb1-46ba-b06f-a96092e0ad42","event_types":["advisory"],"published_at":"2026-10-26T04:12:42.729236+00:00","technologies":["core-osv","gitlab-rails-ce-18-8"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:29:21+00:00","detail_url":"/events/75571"}]}},{"id":73281,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-9q28-23vp-39f2","summary":"CGA-9q28-23vp-39f2","evidence":"osv:CGA-9q28-23vp-39f2","products":[{"name":{"value":"kibana-9.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-9q28-23vp-39f2","aliases":["CGA-9q28-23vp-39f2"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.2","purl":"pkg:apk/chainguard/kibana-9.2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9q28-23vp-39f2.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/kibana/node_modules/node-forge/package.json","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T12:52:40Z"}]}}],"modified":"2026-10-03T16:01:47.392143622Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85393.json","https://github.com/advisories/GHSA-ppp5-5v6c-4jwp","https://nvd.nist.gov/vuln/detail/CVE-2026-85393","https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding","https://github.com/digitalbazaar/forge/issues/1149","https://github.com/digitalbazaar/forge","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js"]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5e80f54b-fc30-45c7-828f-9ea2e939f184","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9q28-23vp-39f2","advisory_id":"5e80f54b-fc30-45c7-828f-9ea2e939f184","event_types":["advisory"],"published_at":"2026-10-26T04:03:20.158416+00:00","technologies":["core-osv","kibana-9-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:27:02+00:00","detail_url":"/advisories/advisory%3A5e80f54b-fc30-45c7-828f-9ea2e939f184","group":{"id":"advisory:5e80f54b-fc30-45c7-828f-9ea2e939f184","revision":1,"primary_event_id":75474,"change":"published","superseded_by":[],"changed":{"id":75474,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-9q28-23vp-39f2","summary":"CGA-9q28-23vp-39f2","evidence":"osv:CGA-9q28-23vp-39f2","products":[{"name":{"value":"kibana-9.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-9q28-23vp-39f2","aliases":["CGA-9q28-23vp-39f2"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.2","purl":"pkg:apk/chainguard/kibana-9.2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9q28-23vp-39f2.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/kibana/node_modules/node-forge/package.json","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T12:52:40Z"}]}}],"modified":"2026-10-03T16:01:47.392143622Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85393.json","https://github.com/advisories/GHSA-ppp5-5v6c-4jwp","https://nvd.nist.gov/vuln/detail/CVE-2026-85393","https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding","https://github.com/digitalbazaar/forge/issues/1149","https://github.com/digitalbazaar/forge","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js"]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5e80f54b-fc30-45c7-828f-9ea2e939f184","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9q28-23vp-39f2","advisory_id":"5e80f54b-fc30-45c7-828f-9ea2e939f184","event_types":["advisory"],"published_at":"2026-10-26T04:03:20.158416+00:00","technologies":["core-osv","kibana-9-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:27:02+00:00","detail_url":"/events/75474"},"members":[{"id":75474,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-9q28-23vp-39f2","summary":"CGA-9q28-23vp-39f2","evidence":"osv:CGA-9q28-23vp-39f2","products":[{"name":{"value":"kibana-9.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-9q28-23vp-39f2","aliases":["CGA-9q28-23vp-39f2"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.2","purl":"pkg:apk/chainguard/kibana-9.2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9q28-23vp-39f2.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/kibana/node_modules/node-forge/package.json","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T12:52:40Z"}]}}],"modified":"2026-10-03T16:01:47.392143622Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85393.json","https://github.com/advisories/GHSA-ppp5-5v6c-4jwp","https://nvd.nist.gov/vuln/detail/CVE-2026-85393","https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding","https://github.com/digitalbazaar/forge/issues/1149","https://github.com/digitalbazaar/forge","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js"]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5e80f54b-fc30-45c7-828f-9ea2e939f184","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9q28-23vp-39f2","advisory_id":"5e80f54b-fc30-45c7-828f-9ea2e939f184","event_types":["advisory"],"published_at":"2026-10-26T04:03:20.158416+00:00","technologies":["core-osv","kibana-9-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:27:02+00:00","detail_url":"/events/75474"}]}},{"id":73241,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-5ffx-86p6-xc2r","summary":"CGA-5ffx-86p6-xc2r","evidence":"osv:CGA-5ffx-86p6-xc2r","products":[{"name":{"value":"gitlab-rails-ce-18.8","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5ffx-86p6-xc2r","aliases":["CGA-5ffx-86p6-xc2r"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"gitlab-rails-ce-18.8","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5ffx-86p6-xc2r.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.3.1","component_type":"npm","component_version":"1.3.1","component_location":"/srv/gitlab/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T11:58:13Z"}]}}],"modified":"2026-10-03T16:00:46.292012258Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85393.json","https://github.com/advisories/GHSA-ppp5-5v6c-4jwp","https://nvd.nist.gov/vuln/detail/CVE-2026-85393","https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding","https://github.com/digitalbazaar/forge/issues/1149","https://github.com/digitalbazaar/forge","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js"]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b31d9d02-5630-4ebd-ab71-462dd11a1599","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5ffx-86p6-xc2r","advisory_id":"b31d9d02-5630-4ebd-ab71-462dd11a1599","event_types":["advisory"],"published_at":"2026-10-26T03:48:25.94523+00:00","technologies":["core-osv","gitlab-rails-ce-18-8"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:12:35+00:00","detail_url":"/advisories/advisory%3Ab31d9d02-5630-4ebd-ab71-462dd11a1599","group":{"id":"advisory:b31d9d02-5630-4ebd-ab71-462dd11a1599","revision":1,"primary_event_id":75329,"change":"published","superseded_by":[],"changed":{"id":75329,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-5ffx-86p6-xc2r","summary":"CGA-5ffx-86p6-xc2r","evidence":"osv:CGA-5ffx-86p6-xc2r","products":[{"name":{"value":"gitlab-rails-ce-18.8","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5ffx-86p6-xc2r","aliases":["CGA-5ffx-86p6-xc2r"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"gitlab-rails-ce-18.8","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5ffx-86p6-xc2r.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.3.1","component_type":"npm","component_version":"1.3.1","component_location":"/srv/gitlab/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T11:58:13Z"}]}}],"modified":"2026-10-03T16:00:46.292012258Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85393.json","https://github.com/advisories/GHSA-ppp5-5v6c-4jwp","https://nvd.nist.gov/vuln/detail/CVE-2026-85393","https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding","https://github.com/digitalbazaar/forge/issues/1149","https://github.com/digitalbazaar/forge","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js"]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b31d9d02-5630-4ebd-ab71-462dd11a1599","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5ffx-86p6-xc2r","advisory_id":"b31d9d02-5630-4ebd-ab71-462dd11a1599","event_types":["advisory"],"published_at":"2026-10-26T03:48:25.94523+00:00","technologies":["core-osv","gitlab-rails-ce-18-8"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:12:35+00:00","detail_url":"/events/75329"},"members":[{"id":75329,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-5ffx-86p6-xc2r","summary":"CGA-5ffx-86p6-xc2r","evidence":"osv:CGA-5ffx-86p6-xc2r","products":[{"name":{"value":"gitlab-rails-ce-18.8","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5ffx-86p6-xc2r","aliases":["CGA-5ffx-86p6-xc2r"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"gitlab-rails-ce-18.8","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5ffx-86p6-xc2r.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.3.1","component_type":"npm","component_version":"1.3.1","component_location":"/srv/gitlab/yarn.lock","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T11:58:13Z"}]}}],"modified":"2026-10-03T16:00:46.292012258Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85393.json","https://github.com/advisories/GHSA-ppp5-5v6c-4jwp","https://nvd.nist.gov/vuln/detail/CVE-2026-85393","https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding","https://github.com/digitalbazaar/forge/issues/1149","https://github.com/digitalbazaar/forge","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js","https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js"]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b31d9d02-5630-4ebd-ab71-462dd11a1599","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5ffx-86p6-xc2r","advisory_id":"b31d9d02-5630-4ebd-ab71-462dd11a1599","event_types":["advisory"],"published_at":"2026-10-26T03:48:25.94523+00:00","technologies":["core-osv","gitlab-rails-ce-18-8"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:12:35+00:00","detail_url":"/events/75329"}]}},{"id":71677,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-77w7-43r2-7cx3","summary":"CGA-77w7-43r2-7cx3","evidence":"osv:CGA-77w7-43r2-7cx3","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-77w7-43r2-7cx3","aliases":["CGA-77w7-43r2-7cx3"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-77w7-43r2-7cx3.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/node_modules/node-forge/package.json","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:28Z"}]}}],"modified":"2026-10-02T23:01:17.091061165Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:379d98ca-18b1-47e7-a213-63901ca819d6","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-77w7-43r2-7cx3","advisory_id":"379d98ca-18b1-47e7-a213-63901ca819d6","event_types":["advisory"],"published_at":"2026-10-25T23:28:22.830084+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:01:55+00:00","detail_url":"/advisories/advisory%3A379d98ca-18b1-47e7-a213-63901ca819d6","group":{"id":"advisory:379d98ca-18b1-47e7-a213-63901ca819d6","revision":1,"primary_event_id":72115,"change":"published","superseded_by":[],"changed":{"id":72115,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-77w7-43r2-7cx3","summary":"CGA-77w7-43r2-7cx3","evidence":"osv:CGA-77w7-43r2-7cx3","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-77w7-43r2-7cx3","aliases":["CGA-77w7-43r2-7cx3"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-77w7-43r2-7cx3.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/node_modules/node-forge/package.json","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:28Z"}]}}],"modified":"2026-10-02T23:01:17.091061165Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:379d98ca-18b1-47e7-a213-63901ca819d6","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-77w7-43r2-7cx3","advisory_id":"379d98ca-18b1-47e7-a213-63901ca819d6","event_types":["advisory"],"published_at":"2026-10-25T23:28:22.830084+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:01:55+00:00","detail_url":"/events/72115"},"members":[{"id":72115,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-77w7-43r2-7cx3","summary":"CGA-77w7-43r2-7cx3","evidence":"osv:CGA-77w7-43r2-7cx3","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-77w7-43r2-7cx3","aliases":["CGA-77w7-43r2-7cx3"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-77w7-43r2-7cx3.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/node_modules/node-forge/package.json","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:28Z"}]}}],"modified":"2026-10-02T23:01:17.091061165Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:379d98ca-18b1-47e7-a213-63901ca819d6","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-77w7-43r2-7cx3","advisory_id":"379d98ca-18b1-47e7-a213-63901ca819d6","event_types":["advisory"],"published_at":"2026-10-25T23:28:22.830084+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:01:55+00:00","detail_url":"/events/72115"}]}},{"id":71571,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-64cc-3jc4-g898","summary":"CGA-64cc-3jc4-g898","evidence":"osv:CGA-64cc-3jc4-g898","products":[{"name":{"value":"wazuh-dashboard-security-plugin","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-64cc-3jc4-g898","aliases":["CGA-64cc-3jc4-g898"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard-security-plugin","purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-64cc-3jc4-g898.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/plugins/securityDashboards/yarn.lock","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:31Z"}]}}],"modified":"2026-10-02T23:01:06.364366976Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0bd18a2e-9aec-4b49-a497-80a1234c095d","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-64cc-3jc4-g898","advisory_id":"0bd18a2e-9aec-4b49-a497-80a1234c095d","event_types":["advisory"],"published_at":"2026-10-25T23:20:03.226806+00:00","technologies":["core-osv","wazuh-dashboard-security-plugin"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T10:08:08+00:00","detail_url":"/advisories/advisory%3A0bd18a2e-9aec-4b49-a497-80a1234c095d","group":{"id":"advisory:0bd18a2e-9aec-4b49-a497-80a1234c095d","revision":1,"primary_event_id":71988,"change":"published","superseded_by":[],"changed":{"id":71988,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-64cc-3jc4-g898","summary":"CGA-64cc-3jc4-g898","evidence":"osv:CGA-64cc-3jc4-g898","products":[{"name":{"value":"wazuh-dashboard-security-plugin","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-64cc-3jc4-g898","aliases":["CGA-64cc-3jc4-g898"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard-security-plugin","purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-64cc-3jc4-g898.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/plugins/securityDashboards/yarn.lock","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:31Z"}]}}],"modified":"2026-10-02T23:01:06.364366976Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0bd18a2e-9aec-4b49-a497-80a1234c095d","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-64cc-3jc4-g898","advisory_id":"0bd18a2e-9aec-4b49-a497-80a1234c095d","event_types":["advisory"],"published_at":"2026-10-25T23:20:03.226806+00:00","technologies":["core-osv","wazuh-dashboard-security-plugin"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T10:08:08+00:00","detail_url":"/events/71988"},"members":[{"id":71988,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-64cc-3jc4-g898","summary":"CGA-64cc-3jc4-g898","evidence":"osv:CGA-64cc-3jc4-g898","products":[{"name":{"value":"wazuh-dashboard-security-plugin","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-64cc-3jc4-g898","aliases":["CGA-64cc-3jc4-g898"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard-security-plugin","purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-64cc-3jc4-g898.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/plugins/securityDashboards/yarn.lock","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:31Z"}]}}],"modified":"2026-10-02T23:01:06.364366976Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0bd18a2e-9aec-4b49-a497-80a1234c095d","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-64cc-3jc4-g898","advisory_id":"0bd18a2e-9aec-4b49-a497-80a1234c095d","event_types":["advisory"],"published_at":"2026-10-25T23:20:03.226806+00:00","technologies":["core-osv","wazuh-dashboard-security-plugin"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T10:08:08+00:00","detail_url":"/events/71988"}]}},{"id":71482,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-vgcx-7fp7-3x5v","summary":"CGA-vgcx-7fp7-3x5v","evidence":"osv:CGA-vgcx-7fp7-3x5v","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-vgcx-7fp7-3x5v","aliases":["CGA-vgcx-7fp7-3x5v"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vgcx-7fp7-3x5v.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/node_modules/node-forge/package.json","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:30Z"}]}}],"modified":"2026-10-02T23:00:58.142470920Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9fdd50bd-de05-4f96-8d15-f97fa0c53bc9","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vgcx-7fp7-3x5v","advisory_id":"9fdd50bd-de05-4f96-8d15-f97fa0c53bc9","event_types":["advisory"],"published_at":"2026-10-25T23:13:27.638318+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:03:23+00:00","detail_url":"/advisories/advisory%3A9fdd50bd-de05-4f96-8d15-f97fa0c53bc9","group":{"id":"advisory:9fdd50bd-de05-4f96-8d15-f97fa0c53bc9","revision":1,"primary_event_id":71889,"change":"published","superseded_by":[],"changed":{"id":71889,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-vgcx-7fp7-3x5v","summary":"CGA-vgcx-7fp7-3x5v","evidence":"osv:CGA-vgcx-7fp7-3x5v","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-vgcx-7fp7-3x5v","aliases":["CGA-vgcx-7fp7-3x5v"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vgcx-7fp7-3x5v.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/node_modules/node-forge/package.json","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:30Z"}]}}],"modified":"2026-10-02T23:00:58.142470920Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9fdd50bd-de05-4f96-8d15-f97fa0c53bc9","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vgcx-7fp7-3x5v","advisory_id":"9fdd50bd-de05-4f96-8d15-f97fa0c53bc9","event_types":["advisory"],"published_at":"2026-10-25T23:13:27.638318+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:03:23+00:00","detail_url":"/events/71889"},"members":[{"id":71889,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-vgcx-7fp7-3x5v","summary":"CGA-vgcx-7fp7-3x5v","evidence":"osv:CGA-vgcx-7fp7-3x5v","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-vgcx-7fp7-3x5v","aliases":["CGA-vgcx-7fp7-3x5v"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vgcx-7fp7-3x5v.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/node_modules/node-forge/package.json","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:30Z"}]}}],"modified":"2026-10-02T23:00:58.142470920Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9fdd50bd-de05-4f96-8d15-f97fa0c53bc9","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vgcx-7fp7-3x5v","advisory_id":"9fdd50bd-de05-4f96-8d15-f97fa0c53bc9","event_types":["advisory"],"published_at":"2026-10-25T23:13:27.638318+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:03:23+00:00","detail_url":"/events/71889"}]}},{"id":71301,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-c2g5-ghc2-7cvw","summary":"CGA-c2g5-ghc2-7cvw","evidence":"osv:CGA-c2g5-ghc2-7cvw","products":[{"name":{"value":"wazuh-dashboard-security-plugin","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-c2g5-ghc2-7cvw","aliases":["CGA-c2g5-ghc2-7cvw"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard-security-plugin","purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c2g5-ghc2-7cvw.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/plugins/securityDashboards/yarn.lock","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:32Z"}]}}],"modified":"2026-10-02T23:00:38.728619841Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c003f046-b509-47c7-811b-a5a16325eab8","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c2g5-ghc2-7cvw","advisory_id":"c003f046-b509-47c7-811b-a5a16325eab8","event_types":["advisory"],"published_at":"2026-10-25T23:01:43.021236+00:00","technologies":["core-osv","wazuh-dashboard-security-plugin"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T09:26:08+00:00","detail_url":"/advisories/advisory%3Ac003f046-b509-47c7-811b-a5a16325eab8","group":{"id":"advisory:c003f046-b509-47c7-811b-a5a16325eab8","revision":1,"primary_event_id":71689,"change":"published","superseded_by":[],"changed":{"id":71689,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-c2g5-ghc2-7cvw","summary":"CGA-c2g5-ghc2-7cvw","evidence":"osv:CGA-c2g5-ghc2-7cvw","products":[{"name":{"value":"wazuh-dashboard-security-plugin","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-c2g5-ghc2-7cvw","aliases":["CGA-c2g5-ghc2-7cvw"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard-security-plugin","purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c2g5-ghc2-7cvw.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/plugins/securityDashboards/yarn.lock","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:32Z"}]}}],"modified":"2026-10-02T23:00:38.728619841Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c003f046-b509-47c7-811b-a5a16325eab8","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c2g5-ghc2-7cvw","advisory_id":"c003f046-b509-47c7-811b-a5a16325eab8","event_types":["advisory"],"published_at":"2026-10-25T23:01:43.021236+00:00","technologies":["core-osv","wazuh-dashboard-security-plugin"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T09:26:08+00:00","detail_url":"/events/71689"},"members":[{"id":71689,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-c2g5-ghc2-7cvw","summary":"CGA-c2g5-ghc2-7cvw","evidence":"osv:CGA-c2g5-ghc2-7cvw","products":[{"name":{"value":"wazuh-dashboard-security-plugin","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-c2g5-ghc2-7cvw","aliases":["CGA-c2g5-ghc2-7cvw"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard-security-plugin","purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c2g5-ghc2-7cvw.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/plugins/securityDashboards/yarn.lock","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:32Z"}]}}],"modified":"2026-10-02T23:00:38.728619841Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c003f046-b509-47c7-811b-a5a16325eab8","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c2g5-ghc2-7cvw","advisory_id":"c003f046-b509-47c7-811b-a5a16325eab8","event_types":["advisory"],"published_at":"2026-10-25T23:01:43.021236+00:00","technologies":["core-osv","wazuh-dashboard-security-plugin"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T09:26:08+00:00","detail_url":"/events/71689"}]}},{"id":71209,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-9qj5-5gcf-59gq","summary":"CGA-9qj5-5gcf-59gq","evidence":"osv:CGA-9qj5-5gcf-59gq","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-9qj5-5gcf-59gq","aliases":["CGA-9qj5-5gcf-59gq"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9qj5-5gcf-59gq.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/node_modules/node-forge/package.json","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:30Z"}]}}],"modified":"2026-10-02T23:00:29.101576279Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e0730473-54f2-45ff-94f4-f794f109cc64","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9qj5-5gcf-59gq","advisory_id":"e0730473-54f2-45ff-94f4-f794f109cc64","event_types":["advisory"],"published_at":"2026-10-25T22:56:31.272935+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:23:08+00:00","detail_url":"/advisories/advisory%3Ae0730473-54f2-45ff-94f4-f794f109cc64","group":{"id":"advisory:e0730473-54f2-45ff-94f4-f794f109cc64","revision":1,"primary_event_id":71594,"change":"published","superseded_by":[],"changed":{"id":71594,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-9qj5-5gcf-59gq","summary":"CGA-9qj5-5gcf-59gq","evidence":"osv:CGA-9qj5-5gcf-59gq","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-9qj5-5gcf-59gq","aliases":["CGA-9qj5-5gcf-59gq"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9qj5-5gcf-59gq.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/node_modules/node-forge/package.json","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:30Z"}]}}],"modified":"2026-10-02T23:00:29.101576279Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e0730473-54f2-45ff-94f4-f794f109cc64","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9qj5-5gcf-59gq","advisory_id":"e0730473-54f2-45ff-94f4-f794f109cc64","event_types":["advisory"],"published_at":"2026-10-25T22:56:31.272935+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:23:08+00:00","detail_url":"/events/71594"},"members":[{"id":71594,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-9qj5-5gcf-59gq","summary":"CGA-9qj5-5gcf-59gq","evidence":"osv:CGA-9qj5-5gcf-59gq","products":[{"name":{"value":"wazuh-dashboard-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-9qj5-5gcf-59gq","aliases":["CGA-9qj5-5gcf-59gq"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9qj5-5gcf-59gq.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/node_modules/node-forge/package.json","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:30Z"}]}}],"modified":"2026-10-02T23:00:29.101576279Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e0730473-54f2-45ff-94f4-f794f109cc64","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9qj5-5gcf-59gq","advisory_id":"e0730473-54f2-45ff-94f4-f794f109cc64","event_types":["advisory"],"published_at":"2026-10-25T22:56:31.272935+00:00","technologies":["core-osv","wazuh-dashboard-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:23:08+00:00","detail_url":"/events/71594"}]}},{"id":71117,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-4mrj-f656-vqpf","summary":"CGA-4mrj-f656-vqpf","evidence":"osv:CGA-4mrj-f656-vqpf","products":[{"name":{"value":"wazuh-dashboard-security-plugin-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-4mrj-f656-vqpf","aliases":["CGA-4mrj-f656-vqpf"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard-security-plugin-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4mrj-f656-vqpf.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/plugins/securityDashboards/yarn.lock","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:35Z"}]}}],"modified":"2026-10-02T23:00:17.139941622Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a25c2ffe-1b70-45bc-ab34-9acc8701ddcc","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4mrj-f656-vqpf","advisory_id":"a25c2ffe-1b70-45bc-ab34-9acc8701ddcc","event_types":["advisory"],"published_at":"2026-10-25T22:51:44.545891+00:00","technologies":["core-osv","wazuh-dashboard-security-plugin-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:22:12+00:00","detail_url":"/advisories/advisory%3Aa25c2ffe-1b70-45bc-ab34-9acc8701ddcc","group":{"id":"advisory:a25c2ffe-1b70-45bc-ab34-9acc8701ddcc","revision":1,"primary_event_id":71492,"change":"published","superseded_by":[],"changed":{"id":71492,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-4mrj-f656-vqpf","summary":"CGA-4mrj-f656-vqpf","evidence":"osv:CGA-4mrj-f656-vqpf","products":[{"name":{"value":"wazuh-dashboard-security-plugin-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-4mrj-f656-vqpf","aliases":["CGA-4mrj-f656-vqpf"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard-security-plugin-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4mrj-f656-vqpf.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/plugins/securityDashboards/yarn.lock","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:35Z"}]}}],"modified":"2026-10-02T23:00:17.139941622Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a25c2ffe-1b70-45bc-ab34-9acc8701ddcc","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4mrj-f656-vqpf","advisory_id":"a25c2ffe-1b70-45bc-ab34-9acc8701ddcc","event_types":["advisory"],"published_at":"2026-10-25T22:51:44.545891+00:00","technologies":["core-osv","wazuh-dashboard-security-plugin-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:22:12+00:00","detail_url":"/events/71492"},"members":[{"id":71492,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-4mrj-f656-vqpf","summary":"CGA-4mrj-f656-vqpf","evidence":"osv:CGA-4mrj-f656-vqpf","products":[{"name":{"value":"wazuh-dashboard-security-plugin-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-4mrj-f656-vqpf","aliases":["CGA-4mrj-f656-vqpf"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard-security-plugin-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4mrj-f656-vqpf.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/plugins/securityDashboards/yarn.lock","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:35Z"}]}}],"modified":"2026-10-02T23:00:17.139941622Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a25c2ffe-1b70-45bc-ab34-9acc8701ddcc","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4mrj-f656-vqpf","advisory_id":"a25c2ffe-1b70-45bc-ab34-9acc8701ddcc","event_types":["advisory"],"published_at":"2026-10-25T22:51:44.545891+00:00","technologies":["core-osv","wazuh-dashboard-security-plugin-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:22:12+00:00","detail_url":"/events/71492"}]}},{"id":71023,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-48c6-rmrh-prr4","summary":"CGA-48c6-rmrh-prr4","evidence":"osv:CGA-48c6-rmrh-prr4","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-48c6-rmrh-prr4","aliases":["CGA-48c6-rmrh-prr4"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-48c6-rmrh-prr4.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/node_modules/node-forge/package.json","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:25Z"}]}}],"modified":"2026-10-02T23:00:07.477902675Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1a5f07d3-e260-4eaa-9155-da5a86dc8465","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-48c6-rmrh-prr4","advisory_id":"1a5f07d3-e260-4eaa-9155-da5a86dc8465","event_types":["advisory"],"published_at":"2026-10-25T22:47:25.71264+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T10:17:13+00:00","detail_url":"/advisories/advisory%3A1a5f07d3-e260-4eaa-9155-da5a86dc8465","group":{"id":"advisory:1a5f07d3-e260-4eaa-9155-da5a86dc8465","revision":1,"primary_event_id":71397,"change":"published","superseded_by":[],"changed":{"id":71397,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-48c6-rmrh-prr4","summary":"CGA-48c6-rmrh-prr4","evidence":"osv:CGA-48c6-rmrh-prr4","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-48c6-rmrh-prr4","aliases":["CGA-48c6-rmrh-prr4"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-48c6-rmrh-prr4.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/node_modules/node-forge/package.json","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:25Z"}]}}],"modified":"2026-10-02T23:00:07.477902675Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1a5f07d3-e260-4eaa-9155-da5a86dc8465","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-48c6-rmrh-prr4","advisory_id":"1a5f07d3-e260-4eaa-9155-da5a86dc8465","event_types":["advisory"],"published_at":"2026-10-25T22:47:25.71264+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T10:17:13+00:00","detail_url":"/events/71397"},"members":[{"id":71397,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-48c6-rmrh-prr4","summary":"CGA-48c6-rmrh-prr4","evidence":"osv:CGA-48c6-rmrh-prr4","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-48c6-rmrh-prr4","aliases":["CGA-48c6-rmrh-prr4"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-48c6-rmrh-prr4.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/node_modules/node-forge/package.json","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:25Z"}]}}],"modified":"2026-10-02T23:00:07.477902675Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1a5f07d3-e260-4eaa-9155-da5a86dc8465","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-48c6-rmrh-prr4","advisory_id":"1a5f07d3-e260-4eaa-9155-da5a86dc8465","event_types":["advisory"],"published_at":"2026-10-25T22:47:25.71264+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T10:17:13+00:00","detail_url":"/events/71397"}]}},{"id":71000,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-32pp-qxvj-g458","summary":"CGA-32pp-qxvj-g458","evidence":"osv:CGA-32pp-qxvj-g458","products":[{"name":{"value":"wazuh-dashboard-security-plugin-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-32pp-qxvj-g458","aliases":["CGA-32pp-qxvj-g458"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard-security-plugin-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-32pp-qxvj-g458.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/plugins/securityDashboards/yarn.lock","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:34Z"}]}}],"modified":"2026-10-02T23:00:04.608591488Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ea04db48-4856-480d-9ced-d9b8f1a6cfa4","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-32pp-qxvj-g458","advisory_id":"ea04db48-4856-480d-9ced-d9b8f1a6cfa4","event_types":["advisory"],"published_at":"2026-10-25T22:46:23.6664+00:00","technologies":["core-osv","wazuh-dashboard-security-plugin-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:58:01+00:00","detail_url":"/advisories/advisory%3Aea04db48-4856-480d-9ced-d9b8f1a6cfa4","group":{"id":"advisory:ea04db48-4856-480d-9ced-d9b8f1a6cfa4","revision":1,"primary_event_id":71374,"change":"published","superseded_by":[],"changed":{"id":71374,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-32pp-qxvj-g458","summary":"CGA-32pp-qxvj-g458","evidence":"osv:CGA-32pp-qxvj-g458","products":[{"name":{"value":"wazuh-dashboard-security-plugin-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-32pp-qxvj-g458","aliases":["CGA-32pp-qxvj-g458"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard-security-plugin-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-32pp-qxvj-g458.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/plugins/securityDashboards/yarn.lock","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:34Z"}]}}],"modified":"2026-10-02T23:00:04.608591488Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ea04db48-4856-480d-9ced-d9b8f1a6cfa4","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-32pp-qxvj-g458","advisory_id":"ea04db48-4856-480d-9ced-d9b8f1a6cfa4","event_types":["advisory"],"published_at":"2026-10-25T22:46:23.6664+00:00","technologies":["core-osv","wazuh-dashboard-security-plugin-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:58:01+00:00","detail_url":"/events/71374"},"members":[{"id":71374,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-32pp-qxvj-g458","summary":"CGA-32pp-qxvj-g458","evidence":"osv:CGA-32pp-qxvj-g458","products":[{"name":{"value":"wazuh-dashboard-security-plugin-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-32pp-qxvj-g458","aliases":["CGA-32pp-qxvj-g458"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard-security-plugin-fips","purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-32pp-qxvj-g458.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/plugins/securityDashboards/yarn.lock","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:34Z"}]}}],"modified":"2026-10-02T23:00:04.608591488Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ea04db48-4856-480d-9ced-d9b8f1a6cfa4","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-32pp-qxvj-g458","advisory_id":"ea04db48-4856-480d-9ced-d9b8f1a6cfa4","event_types":["advisory"],"published_at":"2026-10-25T22:46:23.6664+00:00","technologies":["core-osv","wazuh-dashboard-security-plugin-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:58:01+00:00","detail_url":"/events/71374"}]}},{"id":69998,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-xpfc-3wgr-xmxv","summary":"MINI-xpfc-3wgr-xmxv","evidence":"osv:MINI-xpfc-3wgr-xmxv","products":[{"name":{"value":"argo-workflows-ui-fips-3.7","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.7.8-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-xpfc-3wgr-xmxv","aliases":["MINI-xpfc-3wgr-xmxv"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.8-r0"}]}],"package":{"name":"argo-workflows-ui-fips-3.7","purl":"pkg:apk/minimos/argo-workflows-ui-fips-3.7","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-xpfc-3wgr-xmxv.json"}}],"modified":"2026-10-02T18:23:33.429822394Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:628ad4f7-372a-47c4-97aa-742f7ebf1507","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-xpfc-3wgr-xmxv","advisory_id":"628ad4f7-372a-47c4-97aa-742f7ebf1507","event_types":["advisory"],"published_at":"2026-10-25T22:11:30.569371+00:00","technologies":["argo-workflows-ui-fips-3-7","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:26:44+00:00","detail_url":"/advisories/advisory%3A628ad4f7-372a-47c4-97aa-742f7ebf1507","group":{"id":"advisory:628ad4f7-372a-47c4-97aa-742f7ebf1507","revision":1,"primary_event_id":70368,"change":"published","superseded_by":[],"changed":{"id":70368,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-xpfc-3wgr-xmxv","summary":"MINI-xpfc-3wgr-xmxv","evidence":"osv:MINI-xpfc-3wgr-xmxv","products":[{"name":{"value":"argo-workflows-ui-fips-3.7","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.7.8-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-xpfc-3wgr-xmxv","aliases":["MINI-xpfc-3wgr-xmxv"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.8-r0"}]}],"package":{"name":"argo-workflows-ui-fips-3.7","purl":"pkg:apk/minimos/argo-workflows-ui-fips-3.7","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-xpfc-3wgr-xmxv.json"}}],"modified":"2026-10-02T18:23:33.429822394Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:628ad4f7-372a-47c4-97aa-742f7ebf1507","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-xpfc-3wgr-xmxv","advisory_id":"628ad4f7-372a-47c4-97aa-742f7ebf1507","event_types":["advisory"],"published_at":"2026-10-25T22:11:30.569371+00:00","technologies":["argo-workflows-ui-fips-3-7","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:26:44+00:00","detail_url":"/events/70368"},"members":[{"id":70368,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-xpfc-3wgr-xmxv","summary":"MINI-xpfc-3wgr-xmxv","evidence":"osv:MINI-xpfc-3wgr-xmxv","products":[{"name":{"value":"argo-workflows-ui-fips-3.7","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.7.8-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-xpfc-3wgr-xmxv","aliases":["MINI-xpfc-3wgr-xmxv"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.8-r0"}]}],"package":{"name":"argo-workflows-ui-fips-3.7","purl":"pkg:apk/minimos/argo-workflows-ui-fips-3.7","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-xpfc-3wgr-xmxv.json"}}],"modified":"2026-10-02T18:23:33.429822394Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:628ad4f7-372a-47c4-97aa-742f7ebf1507","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-xpfc-3wgr-xmxv","advisory_id":"628ad4f7-372a-47c4-97aa-742f7ebf1507","event_types":["advisory"],"published_at":"2026-10-25T22:11:30.569371+00:00","technologies":["argo-workflows-ui-fips-3-7","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:26:44+00:00","detail_url":"/events/70368"}]}},{"id":69997,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-hxqw-4cv7-4m6r","summary":"MINI-hxqw-4cv7-4m6r","evidence":"osv:MINI-hxqw-4cv7-4m6r","products":[{"name":{"value":"verdaccio","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"6.3.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-hxqw-4cv7-4m6r","aliases":["MINI-hxqw-4cv7-4m6r"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.0-r0"}]}],"package":{"name":"verdaccio","purl":"pkg:apk/minimos/verdaccio","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-hxqw-4cv7-4m6r.json"}}],"modified":"2026-10-02T18:23:33.419004235Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:02766d01-367e-44fb-a7b6-262763ec9d4b","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-hxqw-4cv7-4m6r","advisory_id":"02766d01-367e-44fb-a7b6-262763ec9d4b","event_types":["advisory"],"published_at":"2026-10-25T22:11:29.790074+00:00","technologies":["core-osv","verdaccio"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:29:08+00:00","detail_url":"/advisories/advisory%3A02766d01-367e-44fb-a7b6-262763ec9d4b","group":{"id":"advisory:02766d01-367e-44fb-a7b6-262763ec9d4b","revision":1,"primary_event_id":70367,"change":"published","superseded_by":[],"changed":{"id":70367,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-hxqw-4cv7-4m6r","summary":"MINI-hxqw-4cv7-4m6r","evidence":"osv:MINI-hxqw-4cv7-4m6r","products":[{"name":{"value":"verdaccio","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"6.3.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-hxqw-4cv7-4m6r","aliases":["MINI-hxqw-4cv7-4m6r"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.0-r0"}]}],"package":{"name":"verdaccio","purl":"pkg:apk/minimos/verdaccio","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-hxqw-4cv7-4m6r.json"}}],"modified":"2026-10-02T18:23:33.419004235Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:02766d01-367e-44fb-a7b6-262763ec9d4b","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-hxqw-4cv7-4m6r","advisory_id":"02766d01-367e-44fb-a7b6-262763ec9d4b","event_types":["advisory"],"published_at":"2026-10-25T22:11:29.790074+00:00","technologies":["core-osv","verdaccio"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:29:08+00:00","detail_url":"/events/70367"},"members":[{"id":70367,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-hxqw-4cv7-4m6r","summary":"MINI-hxqw-4cv7-4m6r","evidence":"osv:MINI-hxqw-4cv7-4m6r","products":[{"name":{"value":"verdaccio","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"6.3.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-hxqw-4cv7-4m6r","aliases":["MINI-hxqw-4cv7-4m6r"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.0-r0"}]}],"package":{"name":"verdaccio","purl":"pkg:apk/minimos/verdaccio","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-hxqw-4cv7-4m6r.json"}}],"modified":"2026-10-02T18:23:33.419004235Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:02766d01-367e-44fb-a7b6-262763ec9d4b","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-hxqw-4cv7-4m6r","advisory_id":"02766d01-367e-44fb-a7b6-262763ec9d4b","event_types":["advisory"],"published_at":"2026-10-25T22:11:29.790074+00:00","technologies":["core-osv","verdaccio"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:29:08+00:00","detail_url":"/events/70367"}]}},{"id":69963,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-qgp2-64vr-qg7g","summary":"MINI-qgp2-64vr-qg7g","evidence":"osv:MINI-qgp2-64vr-qg7g","products":[{"name":{"value":"argo-workflows-ui-fips-3.6","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.6.17-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-qgp2-64vr-qg7g","aliases":["MINI-qgp2-64vr-qg7g"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.17-r0"}]}],"package":{"name":"argo-workflows-ui-fips-3.6","purl":"pkg:apk/minimos/argo-workflows-ui-fips-3.6","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-qgp2-64vr-qg7g.json"}}],"modified":"2026-10-02T18:23:29.609412198Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:16d84f5e-522a-4c07-b3d4-6b287f0b5971","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-qgp2-64vr-qg7g","advisory_id":"16d84f5e-522a-4c07-b3d4-6b287f0b5971","event_types":["advisory"],"published_at":"2026-10-25T22:11:02.573778+00:00","technologies":["argo-workflows-ui-fips-3-6","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:26:44+00:00","detail_url":"/advisories/advisory%3A16d84f5e-522a-4c07-b3d4-6b287f0b5971","group":{"id":"advisory:16d84f5e-522a-4c07-b3d4-6b287f0b5971","revision":1,"primary_event_id":70333,"change":"published","superseded_by":[],"changed":{"id":70333,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-qgp2-64vr-qg7g","summary":"MINI-qgp2-64vr-qg7g","evidence":"osv:MINI-qgp2-64vr-qg7g","products":[{"name":{"value":"argo-workflows-ui-fips-3.6","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.6.17-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-qgp2-64vr-qg7g","aliases":["MINI-qgp2-64vr-qg7g"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.17-r0"}]}],"package":{"name":"argo-workflows-ui-fips-3.6","purl":"pkg:apk/minimos/argo-workflows-ui-fips-3.6","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-qgp2-64vr-qg7g.json"}}],"modified":"2026-10-02T18:23:29.609412198Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:16d84f5e-522a-4c07-b3d4-6b287f0b5971","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-qgp2-64vr-qg7g","advisory_id":"16d84f5e-522a-4c07-b3d4-6b287f0b5971","event_types":["advisory"],"published_at":"2026-10-25T22:11:02.573778+00:00","technologies":["argo-workflows-ui-fips-3-6","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:26:44+00:00","detail_url":"/events/70333"},"members":[{"id":70333,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-qgp2-64vr-qg7g","summary":"MINI-qgp2-64vr-qg7g","evidence":"osv:MINI-qgp2-64vr-qg7g","products":[{"name":{"value":"argo-workflows-ui-fips-3.6","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.6.17-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-qgp2-64vr-qg7g","aliases":["MINI-qgp2-64vr-qg7g"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.17-r0"}]}],"package":{"name":"argo-workflows-ui-fips-3.6","purl":"pkg:apk/minimos/argo-workflows-ui-fips-3.6","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-qgp2-64vr-qg7g.json"}}],"modified":"2026-10-02T18:23:29.609412198Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:16d84f5e-522a-4c07-b3d4-6b287f0b5971","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-qgp2-64vr-qg7g","advisory_id":"16d84f5e-522a-4c07-b3d4-6b287f0b5971","event_types":["advisory"],"published_at":"2026-10-25T22:11:02.573778+00:00","technologies":["argo-workflows-ui-fips-3-6","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:26:44+00:00","detail_url":"/events/70333"}]}},{"id":69937,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-9j9q-85px-m6j2","summary":"MINI-9j9q-85px-m6j2","evidence":"osv:MINI-9j9q-85px-m6j2","products":[{"name":{"value":"kibana-9.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"kibana-9.2-advanced","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-9j9q-85px-m6j2","aliases":["MINI-9j9q-85px-m6j2"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.2","purl":"pkg:apk/minimos/kibana-9.2","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-9j9q-85px-m6j2.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.2-advanced","purl":"pkg:apk/minimos/kibana-9.2-advanced","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-9j9q-85px-m6j2.json"}}],"modified":"2026-10-02T18:23:27.604401065Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:103276d5-86e1-4882-b46d-e2233bfc1452","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-9j9q-85px-m6j2","advisory_id":"103276d5-86e1-4882-b46d-e2233bfc1452","event_types":["advisory"],"published_at":"2026-10-25T22:10:39.645492+00:00","technologies":["core-osv","kibana-9-2","kibana-9-2-advanced"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T15:00:20+00:00","detail_url":"/advisories/advisory%3A103276d5-86e1-4882-b46d-e2233bfc1452","group":{"id":"advisory:103276d5-86e1-4882-b46d-e2233bfc1452","revision":1,"primary_event_id":70307,"change":"published","superseded_by":[],"changed":{"id":70307,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-9j9q-85px-m6j2","summary":"MINI-9j9q-85px-m6j2","evidence":"osv:MINI-9j9q-85px-m6j2","products":[{"name":{"value":"kibana-9.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"kibana-9.2-advanced","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-9j9q-85px-m6j2","aliases":["MINI-9j9q-85px-m6j2"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.2","purl":"pkg:apk/minimos/kibana-9.2","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-9j9q-85px-m6j2.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.2-advanced","purl":"pkg:apk/minimos/kibana-9.2-advanced","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-9j9q-85px-m6j2.json"}}],"modified":"2026-10-02T18:23:27.604401065Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:103276d5-86e1-4882-b46d-e2233bfc1452","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-9j9q-85px-m6j2","advisory_id":"103276d5-86e1-4882-b46d-e2233bfc1452","event_types":["advisory"],"published_at":"2026-10-25T22:10:39.645492+00:00","technologies":["core-osv","kibana-9-2","kibana-9-2-advanced"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T15:00:20+00:00","detail_url":"/events/70307"},"members":[{"id":70307,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-9j9q-85px-m6j2","summary":"MINI-9j9q-85px-m6j2","evidence":"osv:MINI-9j9q-85px-m6j2","products":[{"name":{"value":"kibana-9.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"kibana-9.2-advanced","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-9j9q-85px-m6j2","aliases":["MINI-9j9q-85px-m6j2"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.2","purl":"pkg:apk/minimos/kibana-9.2","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-9j9q-85px-m6j2.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.2-advanced","purl":"pkg:apk/minimos/kibana-9.2-advanced","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-9j9q-85px-m6j2.json"}}],"modified":"2026-10-02T18:23:27.604401065Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:103276d5-86e1-4882-b46d-e2233bfc1452","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-9j9q-85px-m6j2","advisory_id":"103276d5-86e1-4882-b46d-e2233bfc1452","event_types":["advisory"],"published_at":"2026-10-25T22:10:39.645492+00:00","technologies":["core-osv","kibana-9-2","kibana-9-2-advanced"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T15:00:20+00:00","detail_url":"/events/70307"}]}},{"id":69929,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-93rf-4xgf-3fgq","summary":"MINI-93rf-4xgf-3fgq","evidence":"osv:MINI-93rf-4xgf-3fgq","products":[{"name":{"value":"ghost","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"6.64.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-93rf-4xgf-3fgq","aliases":["MINI-93rf-4xgf-3fgq"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.64.0-r0"}]}],"package":{"name":"ghost","purl":"pkg:apk/minimos/ghost","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-93rf-4xgf-3fgq.json"}}],"modified":"2026-10-02T18:23:27.081742241Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b8531a8e-39b1-4d9d-a564-7d0921a703c7","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-93rf-4xgf-3fgq","advisory_id":"b8531a8e-39b1-4d9d-a564-7d0921a703c7","event_types":["advisory"],"published_at":"2026-10-25T22:10:30.012353+00:00","technologies":["core-osv","ghost"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:27:22+00:00","detail_url":"/advisories/advisory%3Ab8531a8e-39b1-4d9d-a564-7d0921a703c7","group":{"id":"advisory:b8531a8e-39b1-4d9d-a564-7d0921a703c7","revision":1,"primary_event_id":70299,"change":"published","superseded_by":[],"changed":{"id":70299,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-93rf-4xgf-3fgq","summary":"MINI-93rf-4xgf-3fgq","evidence":"osv:MINI-93rf-4xgf-3fgq","products":[{"name":{"value":"ghost","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"6.64.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-93rf-4xgf-3fgq","aliases":["MINI-93rf-4xgf-3fgq"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.64.0-r0"}]}],"package":{"name":"ghost","purl":"pkg:apk/minimos/ghost","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-93rf-4xgf-3fgq.json"}}],"modified":"2026-10-02T18:23:27.081742241Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b8531a8e-39b1-4d9d-a564-7d0921a703c7","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-93rf-4xgf-3fgq","advisory_id":"b8531a8e-39b1-4d9d-a564-7d0921a703c7","event_types":["advisory"],"published_at":"2026-10-25T22:10:30.012353+00:00","technologies":["core-osv","ghost"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:27:22+00:00","detail_url":"/events/70299"},"members":[{"id":70299,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-93rf-4xgf-3fgq","summary":"MINI-93rf-4xgf-3fgq","evidence":"osv:MINI-93rf-4xgf-3fgq","products":[{"name":{"value":"ghost","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"6.64.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-93rf-4xgf-3fgq","aliases":["MINI-93rf-4xgf-3fgq"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.64.0-r0"}]}],"package":{"name":"ghost","purl":"pkg:apk/minimos/ghost","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-93rf-4xgf-3fgq.json"}}],"modified":"2026-10-02T18:23:27.081742241Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b8531a8e-39b1-4d9d-a564-7d0921a703c7","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-93rf-4xgf-3fgq","advisory_id":"b8531a8e-39b1-4d9d-a564-7d0921a703c7","event_types":["advisory"],"published_at":"2026-10-25T22:10:30.012353+00:00","technologies":["core-osv","ghost"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:27:22+00:00","detail_url":"/events/70299"}]}},{"id":69914,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-cm7w-rwjr-hwhw","summary":"MINI-cm7w-rwjr-hwhw","evidence":"osv:MINI-cm7w-rwjr-hwhw","products":[{"name":{"value":"argo-workflows-ui-3.6","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.6.17-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-cm7w-rwjr-hwhw","aliases":["MINI-cm7w-rwjr-hwhw"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.17-r0"}]}],"package":{"name":"argo-workflows-ui-3.6","purl":"pkg:apk/minimos/argo-workflows-ui-3.6","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-cm7w-rwjr-hwhw.json"}}],"modified":"2026-10-02T18:23:25.637553958Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4a4a4224-1a34-4f78-a6f4-2dbea9d5d6b7","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-cm7w-rwjr-hwhw","advisory_id":"4a4a4224-1a34-4f78-a6f4-2dbea9d5d6b7","event_types":["advisory"],"published_at":"2026-10-25T22:10:13.488612+00:00","technologies":["argo-workflows-ui-3-6","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:26:44+00:00","detail_url":"/advisories/advisory%3A4a4a4224-1a34-4f78-a6f4-2dbea9d5d6b7","group":{"id":"advisory:4a4a4224-1a34-4f78-a6f4-2dbea9d5d6b7","revision":1,"primary_event_id":70284,"change":"published","superseded_by":[],"changed":{"id":70284,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-cm7w-rwjr-hwhw","summary":"MINI-cm7w-rwjr-hwhw","evidence":"osv:MINI-cm7w-rwjr-hwhw","products":[{"name":{"value":"argo-workflows-ui-3.6","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.6.17-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-cm7w-rwjr-hwhw","aliases":["MINI-cm7w-rwjr-hwhw"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.17-r0"}]}],"package":{"name":"argo-workflows-ui-3.6","purl":"pkg:apk/minimos/argo-workflows-ui-3.6","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-cm7w-rwjr-hwhw.json"}}],"modified":"2026-10-02T18:23:25.637553958Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4a4a4224-1a34-4f78-a6f4-2dbea9d5d6b7","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-cm7w-rwjr-hwhw","advisory_id":"4a4a4224-1a34-4f78-a6f4-2dbea9d5d6b7","event_types":["advisory"],"published_at":"2026-10-25T22:10:13.488612+00:00","technologies":["argo-workflows-ui-3-6","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:26:44+00:00","detail_url":"/events/70284"},"members":[{"id":70284,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-cm7w-rwjr-hwhw","summary":"MINI-cm7w-rwjr-hwhw","evidence":"osv:MINI-cm7w-rwjr-hwhw","products":[{"name":{"value":"argo-workflows-ui-3.6","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.6.17-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-cm7w-rwjr-hwhw","aliases":["MINI-cm7w-rwjr-hwhw"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.17-r0"}]}],"package":{"name":"argo-workflows-ui-3.6","purl":"pkg:apk/minimos/argo-workflows-ui-3.6","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-cm7w-rwjr-hwhw.json"}}],"modified":"2026-10-02T18:23:25.637553958Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4a4a4224-1a34-4f78-a6f4-2dbea9d5d6b7","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-cm7w-rwjr-hwhw","advisory_id":"4a4a4224-1a34-4f78-a6f4-2dbea9d5d6b7","event_types":["advisory"],"published_at":"2026-10-25T22:10:13.488612+00:00","technologies":["argo-workflows-ui-3-6","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:26:44+00:00","detail_url":"/events/70284"}]}},{"id":69905,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-c7rw-pgvf-hcw6","summary":"MINI-c7rw-pgvf-hcw6","evidence":"osv:MINI-c7rw-pgvf-hcw6","products":[{"name":{"value":"argo-workflows-ui-3.7","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.7.8-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-c7rw-pgvf-hcw6","aliases":["MINI-c7rw-pgvf-hcw6"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.8-r0"}]}],"package":{"name":"argo-workflows-ui-3.7","purl":"pkg:apk/minimos/argo-workflows-ui-3.7","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-c7rw-pgvf-hcw6.json"}}],"modified":"2026-10-02T18:23:24.832457737Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:955be31a-dd1b-405c-9ffd-8479dffd1e36","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-c7rw-pgvf-hcw6","advisory_id":"955be31a-dd1b-405c-9ffd-8479dffd1e36","event_types":["advisory"],"published_at":"2026-10-25T22:10:04.510595+00:00","technologies":["argo-workflows-ui-3-7","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:26:44+00:00","detail_url":"/advisories/advisory%3A955be31a-dd1b-405c-9ffd-8479dffd1e36","group":{"id":"advisory:955be31a-dd1b-405c-9ffd-8479dffd1e36","revision":1,"primary_event_id":70275,"change":"published","superseded_by":[],"changed":{"id":70275,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-c7rw-pgvf-hcw6","summary":"MINI-c7rw-pgvf-hcw6","evidence":"osv:MINI-c7rw-pgvf-hcw6","products":[{"name":{"value":"argo-workflows-ui-3.7","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.7.8-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-c7rw-pgvf-hcw6","aliases":["MINI-c7rw-pgvf-hcw6"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.8-r0"}]}],"package":{"name":"argo-workflows-ui-3.7","purl":"pkg:apk/minimos/argo-workflows-ui-3.7","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-c7rw-pgvf-hcw6.json"}}],"modified":"2026-10-02T18:23:24.832457737Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:955be31a-dd1b-405c-9ffd-8479dffd1e36","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-c7rw-pgvf-hcw6","advisory_id":"955be31a-dd1b-405c-9ffd-8479dffd1e36","event_types":["advisory"],"published_at":"2026-10-25T22:10:04.510595+00:00","technologies":["argo-workflows-ui-3-7","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:26:44+00:00","detail_url":"/events/70275"},"members":[{"id":70275,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-c7rw-pgvf-hcw6","summary":"MINI-c7rw-pgvf-hcw6","evidence":"osv:MINI-c7rw-pgvf-hcw6","products":[{"name":{"value":"argo-workflows-ui-3.7","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.7.8-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-c7rw-pgvf-hcw6","aliases":["MINI-c7rw-pgvf-hcw6"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.8-r0"}]}],"package":{"name":"argo-workflows-ui-3.7","purl":"pkg:apk/minimos/argo-workflows-ui-3.7","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-c7rw-pgvf-hcw6.json"}}],"modified":"2026-10-02T18:23:24.832457737Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:955be31a-dd1b-405c-9ffd-8479dffd1e36","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-c7rw-pgvf-hcw6","advisory_id":"955be31a-dd1b-405c-9ffd-8479dffd1e36","event_types":["advisory"],"published_at":"2026-10-25T22:10:04.510595+00:00","technologies":["argo-workflows-ui-3-7","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:26:44+00:00","detail_url":"/events/70275"}]}},{"id":69871,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-4g24-6gwm-c42v","summary":"MINI-4g24-6gwm-c42v","evidence":"osv:MINI-4g24-6gwm-c42v","products":[{"name":{"value":"n8n","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.23.2-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-4g24-6gwm-c42v","aliases":["MINI-4g24-6gwm-c42v"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23.2-r0"}]}],"package":{"name":"n8n","purl":"pkg:apk/minimos/n8n","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-4g24-6gwm-c42v.json"}}],"modified":"2026-10-02T18:23:22.019688400Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f93f4ac3-798e-425c-a3ff-38aa8a10add8","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-4g24-6gwm-c42v","advisory_id":"f93f4ac3-798e-425c-a3ff-38aa8a10add8","event_types":["advisory"],"published_at":"2026-10-25T22:09:30.417085+00:00","technologies":["core-osv","n8n"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:28:02+00:00","detail_url":"/advisories/advisory%3Af93f4ac3-798e-425c-a3ff-38aa8a10add8","group":{"id":"advisory:f93f4ac3-798e-425c-a3ff-38aa8a10add8","revision":1,"primary_event_id":70241,"change":"published","superseded_by":[],"changed":{"id":70241,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-4g24-6gwm-c42v","summary":"MINI-4g24-6gwm-c42v","evidence":"osv:MINI-4g24-6gwm-c42v","products":[{"name":{"value":"n8n","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.23.2-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-4g24-6gwm-c42v","aliases":["MINI-4g24-6gwm-c42v"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23.2-r0"}]}],"package":{"name":"n8n","purl":"pkg:apk/minimos/n8n","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-4g24-6gwm-c42v.json"}}],"modified":"2026-10-02T18:23:22.019688400Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f93f4ac3-798e-425c-a3ff-38aa8a10add8","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-4g24-6gwm-c42v","advisory_id":"f93f4ac3-798e-425c-a3ff-38aa8a10add8","event_types":["advisory"],"published_at":"2026-10-25T22:09:30.417085+00:00","technologies":["core-osv","n8n"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:28:02+00:00","detail_url":"/events/70241"},"members":[{"id":70241,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-4g24-6gwm-c42v","summary":"MINI-4g24-6gwm-c42v","evidence":"osv:MINI-4g24-6gwm-c42v","products":[{"name":{"value":"n8n","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.23.2-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-4g24-6gwm-c42v","aliases":["MINI-4g24-6gwm-c42v"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23.2-r0"}]}],"package":{"name":"n8n","purl":"pkg:apk/minimos/n8n","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-4g24-6gwm-c42v.json"}}],"modified":"2026-10-02T18:23:22.019688400Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f93f4ac3-798e-425c-a3ff-38aa8a10add8","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-4g24-6gwm-c42v","advisory_id":"f93f4ac3-798e-425c-a3ff-38aa8a10add8","event_types":["advisory"],"published_at":"2026-10-25T22:09:30.417085+00:00","technologies":["core-osv","n8n"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:28:02+00:00","detail_url":"/events/70241"}]}},{"id":69249,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-94ph-qwf3-7382","summary":"CGA-94ph-qwf3-7382","evidence":"osv:CGA-94ph-qwf3-7382","products":[{"name":{"value":"gitlab-rails-ce-18.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-94ph-qwf3-7382","aliases":["CGA-94ph-qwf3-7382"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"gitlab-rails-ce-18.10","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-94ph-qwf3-7382.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.3.1","component_type":"npm","component_version":"1.3.1","component_location":"/srv/gitlab/yarn.lock","latest_event_status":"detection","latest_event_timestamp":"2026-10-02T14:39:16Z"}]}}],"modified":"2026-10-02T17:16:28.721084436Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6abe2aa4-71a1-4c96-98f9-0373712df583","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-94ph-qwf3-7382","advisory_id":"6abe2aa4-71a1-4c96-98f9-0373712df583","event_types":["advisory"],"published_at":"2026-10-25T21:55:04.867269+00:00","technologies":["core-osv","gitlab-rails-ce-18-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:39:16+00:00","detail_url":"/advisories/advisory%3A6abe2aa4-71a1-4c96-98f9-0373712df583","group":{"id":"advisory:6abe2aa4-71a1-4c96-98f9-0373712df583","revision":1,"primary_event_id":69619,"change":"published","superseded_by":[],"changed":{"id":69619,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-94ph-qwf3-7382","summary":"CGA-94ph-qwf3-7382","evidence":"osv:CGA-94ph-qwf3-7382","products":[{"name":{"value":"gitlab-rails-ce-18.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-94ph-qwf3-7382","aliases":["CGA-94ph-qwf3-7382"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"gitlab-rails-ce-18.10","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-94ph-qwf3-7382.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.3.1","component_type":"npm","component_version":"1.3.1","component_location":"/srv/gitlab/yarn.lock","latest_event_status":"detection","latest_event_timestamp":"2026-10-02T14:39:16Z"}]}}],"modified":"2026-10-02T17:16:28.721084436Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6abe2aa4-71a1-4c96-98f9-0373712df583","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-94ph-qwf3-7382","advisory_id":"6abe2aa4-71a1-4c96-98f9-0373712df583","event_types":["advisory"],"published_at":"2026-10-25T21:55:04.867269+00:00","technologies":["core-osv","gitlab-rails-ce-18-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:39:16+00:00","detail_url":"/events/69619"},"members":[{"id":69619,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-94ph-qwf3-7382","summary":"CGA-94ph-qwf3-7382","evidence":"osv:CGA-94ph-qwf3-7382","products":[{"name":{"value":"gitlab-rails-ce-18.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-94ph-qwf3-7382","aliases":["CGA-94ph-qwf3-7382"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"gitlab-rails-ce-18.10","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-94ph-qwf3-7382.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.3.1","component_type":"npm","component_version":"1.3.1","component_location":"/srv/gitlab/yarn.lock","latest_event_status":"detection","latest_event_timestamp":"2026-10-02T14:39:16Z"}]}}],"modified":"2026-10-02T17:16:28.721084436Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6abe2aa4-71a1-4c96-98f9-0373712df583","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-94ph-qwf3-7382","advisory_id":"6abe2aa4-71a1-4c96-98f9-0373712df583","event_types":["advisory"],"published_at":"2026-10-25T21:55:04.867269+00:00","technologies":["core-osv","gitlab-rails-ce-18-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:39:16+00:00","detail_url":"/events/69619"}]}},{"id":68813,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-2r3p-hgh8-2rw5","summary":"CGA-2r3p-hgh8-2rw5","evidence":"osv:CGA-2r3p-hgh8-2rw5","products":[{"name":{"value":"gitlab-rails-ce-18.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-2r3p-hgh8-2rw5","aliases":["CGA-2r3p-hgh8-2rw5"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"gitlab-rails-ce-18.10","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2r3p-hgh8-2rw5.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.3.1","component_type":"npm","component_version":"1.3.1","component_location":"/srv/gitlab/yarn.lock","latest_event_status":"detection","latest_event_timestamp":"2026-10-02T13:56:09Z"}]}}],"modified":"2026-10-02T17:15:31.292789229Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0968e87f-9674-4fe7-ac67-720bb25e35db","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2r3p-hgh8-2rw5","advisory_id":"0968e87f-9674-4fe7-ac67-720bb25e35db","event_types":["advisory"],"published_at":"2026-10-25T21:46:35.782066+00:00","technologies":["core-osv","gitlab-rails-ce-18-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:56:09+00:00","detail_url":"/advisories/advisory%3A0968e87f-9674-4fe7-ac67-720bb25e35db","group":{"id":"advisory:0968e87f-9674-4fe7-ac67-720bb25e35db","revision":1,"primary_event_id":69183,"change":"published","superseded_by":[],"changed":{"id":69183,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-2r3p-hgh8-2rw5","summary":"CGA-2r3p-hgh8-2rw5","evidence":"osv:CGA-2r3p-hgh8-2rw5","products":[{"name":{"value":"gitlab-rails-ce-18.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-2r3p-hgh8-2rw5","aliases":["CGA-2r3p-hgh8-2rw5"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"gitlab-rails-ce-18.10","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2r3p-hgh8-2rw5.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.3.1","component_type":"npm","component_version":"1.3.1","component_location":"/srv/gitlab/yarn.lock","latest_event_status":"detection","latest_event_timestamp":"2026-10-02T13:56:09Z"}]}}],"modified":"2026-10-02T17:15:31.292789229Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0968e87f-9674-4fe7-ac67-720bb25e35db","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2r3p-hgh8-2rw5","advisory_id":"0968e87f-9674-4fe7-ac67-720bb25e35db","event_types":["advisory"],"published_at":"2026-10-25T21:46:35.782066+00:00","technologies":["core-osv","gitlab-rails-ce-18-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:56:09+00:00","detail_url":"/events/69183"},"members":[{"id":69183,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-2r3p-hgh8-2rw5","summary":"CGA-2r3p-hgh8-2rw5","evidence":"osv:CGA-2r3p-hgh8-2rw5","products":[{"name":{"value":"gitlab-rails-ce-18.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-2r3p-hgh8-2rw5","aliases":["CGA-2r3p-hgh8-2rw5"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"gitlab-rails-ce-18.10","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2r3p-hgh8-2rw5.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.3.1","component_type":"npm","component_version":"1.3.1","component_location":"/srv/gitlab/yarn.lock","latest_event_status":"detection","latest_event_timestamp":"2026-10-02T13:56:09Z"}]}}],"modified":"2026-10-02T17:15:31.292789229Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0968e87f-9674-4fe7-ac67-720bb25e35db","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2r3p-hgh8-2rw5","advisory_id":"0968e87f-9674-4fe7-ac67-720bb25e35db","event_types":["advisory"],"published_at":"2026-10-25T21:46:35.782066+00:00","technologies":["core-osv","gitlab-rails-ce-18-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:56:09+00:00","detail_url":"/events/69183"}]}},{"id":68693,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-xgc6-w32h-rr82","summary":"MINI-xgc6-w32h-rr82","evidence":"osv:MINI-xgc6-w32h-rr82","products":[{"name":{"value":"logto-1.39","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-xgc6-w32h-rr82","aliases":["MINI-xgc6-w32h-rr82"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"logto-1.39","purl":"pkg:apk/minimos/logto-1.39","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-xgc6-w32h-rr82.json"}}],"modified":"2026-10-02T15:45:10.213848425Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:49b1a400-52fd-440c-9ec9-fdc0e73cbddb","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-xgc6-w32h-rr82","advisory_id":"49b1a400-52fd-440c-9ec9-fdc0e73cbddb","event_types":["advisory"],"published_at":"2026-10-25T21:44:37.84211+00:00","technologies":["core-osv","logto-1-39"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T15:07:34+00:00","detail_url":"/advisories/advisory%3A49b1a400-52fd-440c-9ec9-fdc0e73cbddb","group":{"id":"advisory:49b1a400-52fd-440c-9ec9-fdc0e73cbddb","revision":1,"primary_event_id":69063,"change":"published","superseded_by":[],"changed":{"id":69063,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-xgc6-w32h-rr82","summary":"MINI-xgc6-w32h-rr82","evidence":"osv:MINI-xgc6-w32h-rr82","products":[{"name":{"value":"logto-1.39","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-xgc6-w32h-rr82","aliases":["MINI-xgc6-w32h-rr82"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"logto-1.39","purl":"pkg:apk/minimos/logto-1.39","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-xgc6-w32h-rr82.json"}}],"modified":"2026-10-02T15:45:10.213848425Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:49b1a400-52fd-440c-9ec9-fdc0e73cbddb","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-xgc6-w32h-rr82","advisory_id":"49b1a400-52fd-440c-9ec9-fdc0e73cbddb","event_types":["advisory"],"published_at":"2026-10-25T21:44:37.84211+00:00","technologies":["core-osv","logto-1-39"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T15:07:34+00:00","detail_url":"/events/69063"},"members":[{"id":69063,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-xgc6-w32h-rr82","summary":"MINI-xgc6-w32h-rr82","evidence":"osv:MINI-xgc6-w32h-rr82","products":[{"name":{"value":"logto-1.39","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-xgc6-w32h-rr82","aliases":["MINI-xgc6-w32h-rr82"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"logto-1.39","purl":"pkg:apk/minimos/logto-1.39","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-xgc6-w32h-rr82.json"}}],"modified":"2026-10-02T15:45:10.213848425Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:49b1a400-52fd-440c-9ec9-fdc0e73cbddb","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-xgc6-w32h-rr82","advisory_id":"49b1a400-52fd-440c-9ec9-fdc0e73cbddb","event_types":["advisory"],"published_at":"2026-10-25T21:44:37.84211+00:00","technologies":["core-osv","logto-1-39"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T15:07:34+00:00","detail_url":"/events/69063"}]}},{"id":68611,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-cq39-rqcg-394j","summary":"MINI-cq39-rqcg-394j","evidence":"osv:MINI-cq39-rqcg-394j","products":[{"name":{"value":"kibana-7","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"kibana-7-advanced","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-cq39-rqcg-394j","aliases":["MINI-cq39-rqcg-394j"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-7","purl":"pkg:apk/minimos/kibana-7","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-cq39-rqcg-394j.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-7-advanced","purl":"pkg:apk/minimos/kibana-7-advanced","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-cq39-rqcg-394j.json"}}],"modified":"2026-10-02T15:30:11.273243274Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:858d3146-b26f-47dc-bc23-2f8ec31b2c1a","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-cq39-rqcg-394j","advisory_id":"858d3146-b26f-47dc-bc23-2f8ec31b2c1a","event_types":["advisory"],"published_at":"2026-10-25T21:43:30.654328+00:00","technologies":["core-osv","kibana-7","kibana-7-advanced"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:59:28+00:00","detail_url":"/advisories/advisory%3A858d3146-b26f-47dc-bc23-2f8ec31b2c1a","group":{"id":"advisory:858d3146-b26f-47dc-bc23-2f8ec31b2c1a","revision":1,"primary_event_id":68981,"change":"published","superseded_by":[],"changed":{"id":68981,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-cq39-rqcg-394j","summary":"MINI-cq39-rqcg-394j","evidence":"osv:MINI-cq39-rqcg-394j","products":[{"name":{"value":"kibana-7","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"kibana-7-advanced","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-cq39-rqcg-394j","aliases":["MINI-cq39-rqcg-394j"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-7","purl":"pkg:apk/minimos/kibana-7","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-cq39-rqcg-394j.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-7-advanced","purl":"pkg:apk/minimos/kibana-7-advanced","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-cq39-rqcg-394j.json"}}],"modified":"2026-10-02T15:30:11.273243274Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:858d3146-b26f-47dc-bc23-2f8ec31b2c1a","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-cq39-rqcg-394j","advisory_id":"858d3146-b26f-47dc-bc23-2f8ec31b2c1a","event_types":["advisory"],"published_at":"2026-10-25T21:43:30.654328+00:00","technologies":["core-osv","kibana-7","kibana-7-advanced"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:59:28+00:00","detail_url":"/events/68981"},"members":[{"id":68981,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-cq39-rqcg-394j","summary":"MINI-cq39-rqcg-394j","evidence":"osv:MINI-cq39-rqcg-394j","products":[{"name":{"value":"kibana-7","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"kibana-7-advanced","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-cq39-rqcg-394j","aliases":["MINI-cq39-rqcg-394j"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-7","purl":"pkg:apk/minimos/kibana-7","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-cq39-rqcg-394j.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-7-advanced","purl":"pkg:apk/minimos/kibana-7-advanced","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-cq39-rqcg-394j.json"}}],"modified":"2026-10-02T15:30:11.273243274Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:858d3146-b26f-47dc-bc23-2f8ec31b2c1a","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-cq39-rqcg-394j","advisory_id":"858d3146-b26f-47dc-bc23-2f8ec31b2c1a","event_types":["advisory"],"published_at":"2026-10-25T21:43:30.654328+00:00","technologies":["core-osv","kibana-7","kibana-7-advanced"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:59:28+00:00","detail_url":"/events/68981"}]}},{"id":68607,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-cm4g-c584-6mrr","summary":"MINI-cm4g-c584-6mrr","evidence":"osv:MINI-cm4g-c584-6mrr","products":[{"name":{"value":"argo-workflows-ui-4.0","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-cm4g-c584-6mrr","aliases":["MINI-cm4g-c584-6mrr"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"argo-workflows-ui-4.0","purl":"pkg:apk/minimos/argo-workflows-ui-4.0","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-cm4g-c584-6mrr.json"}}],"modified":"2026-10-02T15:30:10.780183404Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:536d691e-8410-4f35-9f3f-193db6c4b87f","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-cm4g-c584-6mrr","advisory_id":"536d691e-8410-4f35-9f3f-193db6c4b87f","event_types":["advisory"],"published_at":"2026-10-25T21:43:27.365099+00:00","technologies":["argo-workflows-ui-4-0","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:47:30+00:00","detail_url":"/advisories/advisory%3A536d691e-8410-4f35-9f3f-193db6c4b87f","group":{"id":"advisory:536d691e-8410-4f35-9f3f-193db6c4b87f","revision":1,"primary_event_id":68977,"change":"published","superseded_by":[],"changed":{"id":68977,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-cm4g-c584-6mrr","summary":"MINI-cm4g-c584-6mrr","evidence":"osv:MINI-cm4g-c584-6mrr","products":[{"name":{"value":"argo-workflows-ui-4.0","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-cm4g-c584-6mrr","aliases":["MINI-cm4g-c584-6mrr"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"argo-workflows-ui-4.0","purl":"pkg:apk/minimos/argo-workflows-ui-4.0","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-cm4g-c584-6mrr.json"}}],"modified":"2026-10-02T15:30:10.780183404Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:536d691e-8410-4f35-9f3f-193db6c4b87f","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-cm4g-c584-6mrr","advisory_id":"536d691e-8410-4f35-9f3f-193db6c4b87f","event_types":["advisory"],"published_at":"2026-10-25T21:43:27.365099+00:00","technologies":["argo-workflows-ui-4-0","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:47:30+00:00","detail_url":"/events/68977"},"members":[{"id":68977,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-cm4g-c584-6mrr","summary":"MINI-cm4g-c584-6mrr","evidence":"osv:MINI-cm4g-c584-6mrr","products":[{"name":{"value":"argo-workflows-ui-4.0","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-cm4g-c584-6mrr","aliases":["MINI-cm4g-c584-6mrr"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"argo-workflows-ui-4.0","purl":"pkg:apk/minimos/argo-workflows-ui-4.0","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-cm4g-c584-6mrr.json"}}],"modified":"2026-10-02T15:30:10.780183404Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:536d691e-8410-4f35-9f3f-193db6c4b87f","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-cm4g-c584-6mrr","advisory_id":"536d691e-8410-4f35-9f3f-193db6c4b87f","event_types":["advisory"],"published_at":"2026-10-25T21:43:27.365099+00:00","technologies":["argo-workflows-ui-4-0","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:47:30+00:00","detail_url":"/events/68977"}]}},{"id":68586,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-7vm4-hx97-j5r2","summary":"MINI-7vm4-hx97-j5r2","evidence":"osv:MINI-7vm4-hx97-j5r2","products":[{"name":{"value":"argo-workflows-ui-fips-4.0","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-7vm4-hx97-j5r2","aliases":["MINI-7vm4-hx97-j5r2"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"argo-workflows-ui-fips-4.0","purl":"pkg:apk/minimos/argo-workflows-ui-fips-4.0","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-7vm4-hx97-j5r2.json"}}],"modified":"2026-10-02T15:30:09.021430316Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:63316d28-7f37-48d9-b8f5-a06ee1e87d24","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-7vm4-hx97-j5r2","advisory_id":"63316d28-7f37-48d9-b8f5-a06ee1e87d24","event_types":["advisory"],"published_at":"2026-10-25T21:43:10.560038+00:00","technologies":["argo-workflows-ui-fips-4-0","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:47:50+00:00","detail_url":"/advisories/advisory%3A63316d28-7f37-48d9-b8f5-a06ee1e87d24","group":{"id":"advisory:63316d28-7f37-48d9-b8f5-a06ee1e87d24","revision":1,"primary_event_id":68956,"change":"published","superseded_by":[],"changed":{"id":68956,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-7vm4-hx97-j5r2","summary":"MINI-7vm4-hx97-j5r2","evidence":"osv:MINI-7vm4-hx97-j5r2","products":[{"name":{"value":"argo-workflows-ui-fips-4.0","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-7vm4-hx97-j5r2","aliases":["MINI-7vm4-hx97-j5r2"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"argo-workflows-ui-fips-4.0","purl":"pkg:apk/minimos/argo-workflows-ui-fips-4.0","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-7vm4-hx97-j5r2.json"}}],"modified":"2026-10-02T15:30:09.021430316Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:63316d28-7f37-48d9-b8f5-a06ee1e87d24","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-7vm4-hx97-j5r2","advisory_id":"63316d28-7f37-48d9-b8f5-a06ee1e87d24","event_types":["advisory"],"published_at":"2026-10-25T21:43:10.560038+00:00","technologies":["argo-workflows-ui-fips-4-0","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:47:50+00:00","detail_url":"/events/68956"},"members":[{"id":68956,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-7vm4-hx97-j5r2","summary":"MINI-7vm4-hx97-j5r2","evidence":"osv:MINI-7vm4-hx97-j5r2","products":[{"name":{"value":"argo-workflows-ui-fips-4.0","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-7vm4-hx97-j5r2","aliases":["MINI-7vm4-hx97-j5r2"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"argo-workflows-ui-fips-4.0","purl":"pkg:apk/minimos/argo-workflows-ui-fips-4.0","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-7vm4-hx97-j5r2.json"}}],"modified":"2026-10-02T15:30:09.021430316Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:63316d28-7f37-48d9-b8f5-a06ee1e87d24","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-7vm4-hx97-j5r2","advisory_id":"63316d28-7f37-48d9-b8f5-a06ee1e87d24","event_types":["advisory"],"published_at":"2026-10-25T21:43:10.560038+00:00","technologies":["argo-workflows-ui-fips-4-0","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:47:50+00:00","detail_url":"/events/68956"}]}},{"id":68580,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-73j9-g2gw-mg37","summary":"MINI-73j9-g2gw-mg37","evidence":"osv:MINI-73j9-g2gw-mg37","products":[{"name":{"value":"kibana-9.0","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"kibana-9.0-advanced","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-73j9-g2gw-mg37","aliases":["MINI-73j9-g2gw-mg37"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.0","purl":"pkg:apk/minimos/kibana-9.0","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-73j9-g2gw-mg37.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.0-advanced","purl":"pkg:apk/minimos/kibana-9.0-advanced","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-73j9-g2gw-mg37.json"}}],"modified":"2026-10-02T15:30:08.512699297Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3c43c7a1-f266-4810-a5fa-74d38842fbab","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-73j9-g2gw-mg37","advisory_id":"3c43c7a1-f266-4810-a5fa-74d38842fbab","event_types":["advisory"],"published_at":"2026-10-25T21:43:05.919368+00:00","technologies":["core-osv","kibana-9-0","kibana-9-0-advanced"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T15:00:04+00:00","detail_url":"/advisories/advisory%3A3c43c7a1-f266-4810-a5fa-74d38842fbab","group":{"id":"advisory:3c43c7a1-f266-4810-a5fa-74d38842fbab","revision":1,"primary_event_id":68950,"change":"published","superseded_by":[],"changed":{"id":68950,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-73j9-g2gw-mg37","summary":"MINI-73j9-g2gw-mg37","evidence":"osv:MINI-73j9-g2gw-mg37","products":[{"name":{"value":"kibana-9.0","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"kibana-9.0-advanced","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-73j9-g2gw-mg37","aliases":["MINI-73j9-g2gw-mg37"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.0","purl":"pkg:apk/minimos/kibana-9.0","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-73j9-g2gw-mg37.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.0-advanced","purl":"pkg:apk/minimos/kibana-9.0-advanced","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-73j9-g2gw-mg37.json"}}],"modified":"2026-10-02T15:30:08.512699297Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3c43c7a1-f266-4810-a5fa-74d38842fbab","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-73j9-g2gw-mg37","advisory_id":"3c43c7a1-f266-4810-a5fa-74d38842fbab","event_types":["advisory"],"published_at":"2026-10-25T21:43:05.919368+00:00","technologies":["core-osv","kibana-9-0","kibana-9-0-advanced"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T15:00:04+00:00","detail_url":"/events/68950"},"members":[{"id":68950,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-73j9-g2gw-mg37","summary":"MINI-73j9-g2gw-mg37","evidence":"osv:MINI-73j9-g2gw-mg37","products":[{"name":{"value":"kibana-9.0","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"kibana-9.0-advanced","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-73j9-g2gw-mg37","aliases":["MINI-73j9-g2gw-mg37"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.0","purl":"pkg:apk/minimos/kibana-9.0","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-73j9-g2gw-mg37.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-9.0-advanced","purl":"pkg:apk/minimos/kibana-9.0-advanced","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-73j9-g2gw-mg37.json"}}],"modified":"2026-10-02T15:30:08.512699297Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3c43c7a1-f266-4810-a5fa-74d38842fbab","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-73j9-g2gw-mg37","advisory_id":"3c43c7a1-f266-4810-a5fa-74d38842fbab","event_types":["advisory"],"published_at":"2026-10-25T21:43:05.919368+00:00","technologies":["core-osv","kibana-9-0","kibana-9-0-advanced"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T15:00:04+00:00","detail_url":"/events/68950"}]}},{"id":68561,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-5f3p-mwxj-q6hf","summary":"MINI-5f3p-mwxj-q6hf","evidence":"osv:MINI-5f3p-mwxj-q6hf","products":[{"name":{"value":"kibana-8.18","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"kibana-8.18-advanced","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-5f3p-mwxj-q6hf","aliases":["MINI-5f3p-mwxj-q6hf"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-8.18","purl":"pkg:apk/minimos/kibana-8.18","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-5f3p-mwxj-q6hf.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-8.18-advanced","purl":"pkg:apk/minimos/kibana-8.18-advanced","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-5f3p-mwxj-q6hf.json"}}],"modified":"2026-10-02T15:30:07.095158109Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f5f445a0-e0fa-458a-a14d-51c2d57621ab","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-5f3p-mwxj-q6hf","advisory_id":"f5f445a0-e0fa-458a-a14d-51c2d57621ab","event_types":["advisory"],"published_at":"2026-10-25T21:42:50.888227+00:00","technologies":["core-osv","kibana-8-18","kibana-8-18-advanced"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:59:41+00:00","detail_url":"/advisories/advisory%3Af5f445a0-e0fa-458a-a14d-51c2d57621ab","group":{"id":"advisory:f5f445a0-e0fa-458a-a14d-51c2d57621ab","revision":1,"primary_event_id":68931,"change":"published","superseded_by":[],"changed":{"id":68931,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-5f3p-mwxj-q6hf","summary":"MINI-5f3p-mwxj-q6hf","evidence":"osv:MINI-5f3p-mwxj-q6hf","products":[{"name":{"value":"kibana-8.18","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"kibana-8.18-advanced","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-5f3p-mwxj-q6hf","aliases":["MINI-5f3p-mwxj-q6hf"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-8.18","purl":"pkg:apk/minimos/kibana-8.18","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-5f3p-mwxj-q6hf.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-8.18-advanced","purl":"pkg:apk/minimos/kibana-8.18-advanced","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-5f3p-mwxj-q6hf.json"}}],"modified":"2026-10-02T15:30:07.095158109Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f5f445a0-e0fa-458a-a14d-51c2d57621ab","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-5f3p-mwxj-q6hf","advisory_id":"f5f445a0-e0fa-458a-a14d-51c2d57621ab","event_types":["advisory"],"published_at":"2026-10-25T21:42:50.888227+00:00","technologies":["core-osv","kibana-8-18","kibana-8-18-advanced"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:59:41+00:00","detail_url":"/events/68931"},"members":[{"id":68931,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"MINI-5f3p-mwxj-q6hf","summary":"MINI-5f3p-mwxj-q6hf","evidence":"osv:MINI-5f3p-mwxj-q6hf","products":[{"name":{"value":"kibana-8.18","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"kibana-8.18-advanced","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-5f3p-mwxj-q6hf","aliases":["MINI-5f3p-mwxj-q6hf"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-8.18","purl":"pkg:apk/minimos/kibana-8.18","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-5f3p-mwxj-q6hf.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"kibana-8.18-advanced","purl":"pkg:apk/minimos/kibana-8.18-advanced","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-5f3p-mwxj-q6hf.json"}}],"modified":"2026-10-02T15:30:07.095158109Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f5f445a0-e0fa-458a-a14d-51c2d57621ab","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-5f3p-mwxj-q6hf","advisory_id":"f5f445a0-e0fa-458a-a14d-51c2d57621ab","event_types":["advisory"],"published_at":"2026-10-25T21:42:50.888227+00:00","technologies":["core-osv","kibana-8-18","kibana-8-18-advanced"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:59:41+00:00","detail_url":"/events/68931"}]}}],"next_after":73332,"next_before":68561}