{"schema_version":"2","view":"grouped","data":[{"id":73152,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-xg7q-w8hp-3h2h","summary":"CGA-xg7q-w8hp-3h2h","evidence":"osv:CGA-xg7q-w8hp-3h2h","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-xg7q-w8hp-3h2h","aliases":["CGA-xg7q-w8hp-3h2h"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xg7q-w8hp-3h2h.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:56Z"}]}}],"modified":"2026-10-03T10:32:50.439348452Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b604ff2a-0377-4960-ba26-9b8e38a867df","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xg7q-w8hp-3h2h","advisory_id":"b604ff2a-0377-4960-ba26-9b8e38a867df","event_types":["advisory"],"published_at":"2026-10-26T03:26:19.536036+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:06+00:00","detail_url":"/advisories/advisory%3Ab604ff2a-0377-4960-ba26-9b8e38a867df","group":{"id":"advisory:b604ff2a-0377-4960-ba26-9b8e38a867df","revision":1,"primary_event_id":75085,"change":"published","superseded_by":[],"changed":{"id":75085,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-xg7q-w8hp-3h2h","summary":"CGA-xg7q-w8hp-3h2h","evidence":"osv:CGA-xg7q-w8hp-3h2h","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-xg7q-w8hp-3h2h","aliases":["CGA-xg7q-w8hp-3h2h"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xg7q-w8hp-3h2h.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:56Z"}]}}],"modified":"2026-10-03T10:32:50.439348452Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b604ff2a-0377-4960-ba26-9b8e38a867df","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xg7q-w8hp-3h2h","advisory_id":"b604ff2a-0377-4960-ba26-9b8e38a867df","event_types":["advisory"],"published_at":"2026-10-26T03:26:19.536036+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:06+00:00","detail_url":"/events/75085"},"members":[{"id":75085,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-xg7q-w8hp-3h2h","summary":"CGA-xg7q-w8hp-3h2h","evidence":"osv:CGA-xg7q-w8hp-3h2h","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-xg7q-w8hp-3h2h","aliases":["CGA-xg7q-w8hp-3h2h"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xg7q-w8hp-3h2h.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:56Z"}]}}],"modified":"2026-10-03T10:32:50.439348452Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b604ff2a-0377-4960-ba26-9b8e38a867df","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xg7q-w8hp-3h2h","advisory_id":"b604ff2a-0377-4960-ba26-9b8e38a867df","event_types":["advisory"],"published_at":"2026-10-26T03:26:19.536036+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:06+00:00","detail_url":"/events/75085"}]}},{"id":73143,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-x2cj-hpx6-g2j3","summary":"CGA-x2cj-hpx6-g2j3","evidence":"osv:CGA-x2cj-hpx6-g2j3","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x2cj-hpx6-g2j3","aliases":["CGA-x2cj-hpx6-g2j3"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x2cj-hpx6-g2j3.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:25:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x2cj-hpx6-g2j3.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:25:07Z"}]}}],"modified":"2026-10-03T10:32:50.067462927Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:75cc0a2f-92da-49ea-b705-473ad30fc549","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x2cj-hpx6-g2j3","advisory_id":"75cc0a2f-92da-49ea-b705-473ad30fc549","event_types":["advisory"],"published_at":"2026-10-26T03:20:01.167813+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T03:14:11+00:00","detail_url":"/advisories/advisory%3A75cc0a2f-92da-49ea-b705-473ad30fc549","group":{"id":"advisory:75cc0a2f-92da-49ea-b705-473ad30fc549","revision":1,"primary_event_id":75021,"change":"published","superseded_by":[],"changed":{"id":75021,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-x2cj-hpx6-g2j3","summary":"CGA-x2cj-hpx6-g2j3","evidence":"osv:CGA-x2cj-hpx6-g2j3","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x2cj-hpx6-g2j3","aliases":["CGA-x2cj-hpx6-g2j3"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x2cj-hpx6-g2j3.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:25:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x2cj-hpx6-g2j3.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:25:07Z"}]}}],"modified":"2026-10-03T10:32:50.067462927Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:75cc0a2f-92da-49ea-b705-473ad30fc549","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x2cj-hpx6-g2j3","advisory_id":"75cc0a2f-92da-49ea-b705-473ad30fc549","event_types":["advisory"],"published_at":"2026-10-26T03:20:01.167813+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T03:14:11+00:00","detail_url":"/events/75021"},"members":[{"id":75021,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-x2cj-hpx6-g2j3","summary":"CGA-x2cj-hpx6-g2j3","evidence":"osv:CGA-x2cj-hpx6-g2j3","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x2cj-hpx6-g2j3","aliases":["CGA-x2cj-hpx6-g2j3"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x2cj-hpx6-g2j3.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:25:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x2cj-hpx6-g2j3.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:25:07Z"}]}}],"modified":"2026-10-03T10:32:50.067462927Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:75cc0a2f-92da-49ea-b705-473ad30fc549","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x2cj-hpx6-g2j3","advisory_id":"75cc0a2f-92da-49ea-b705-473ad30fc549","event_types":["advisory"],"published_at":"2026-10-26T03:20:01.167813+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T03:14:11+00:00","detail_url":"/events/75021"}]}},{"id":73116,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-vpfq-7v9v-vcfp","summary":"CGA-vpfq-7v9v-vcfp","evidence":"osv:CGA-vpfq-7v9v-vcfp","products":[{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-vpfq-7v9v-vcfp","aliases":["CGA-vpfq-7v9v-vcfp"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vpfq-7v9v-vcfp.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:03Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vpfq-7v9v-vcfp.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:03Z"}]}}],"modified":"2026-10-03T10:32:48.639017902Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1511c098-78f0-453b-9215-23fa6fb11703","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vpfq-7v9v-vcfp","advisory_id":"1511c098-78f0-453b-9215-23fa6fb11703","event_types":["advisory"],"published_at":"2026-10-26T03:07:50.927943+00:00","technologies":["core-osv","datadog-agent-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:35+00:00","detail_url":"/advisories/advisory%3A1511c098-78f0-453b-9215-23fa6fb11703","group":{"id":"advisory:1511c098-78f0-453b-9215-23fa6fb11703","revision":1,"primary_event_id":74897,"change":"published","superseded_by":[],"changed":{"id":74897,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-vpfq-7v9v-vcfp","summary":"CGA-vpfq-7v9v-vcfp","evidence":"osv:CGA-vpfq-7v9v-vcfp","products":[{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-vpfq-7v9v-vcfp","aliases":["CGA-vpfq-7v9v-vcfp"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vpfq-7v9v-vcfp.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:03Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vpfq-7v9v-vcfp.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:03Z"}]}}],"modified":"2026-10-03T10:32:48.639017902Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1511c098-78f0-453b-9215-23fa6fb11703","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vpfq-7v9v-vcfp","advisory_id":"1511c098-78f0-453b-9215-23fa6fb11703","event_types":["advisory"],"published_at":"2026-10-26T03:07:50.927943+00:00","technologies":["core-osv","datadog-agent-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:35+00:00","detail_url":"/events/74897"},"members":[{"id":74897,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-vpfq-7v9v-vcfp","summary":"CGA-vpfq-7v9v-vcfp","evidence":"osv:CGA-vpfq-7v9v-vcfp","products":[{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-vpfq-7v9v-vcfp","aliases":["CGA-vpfq-7v9v-vcfp"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vpfq-7v9v-vcfp.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:03Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vpfq-7v9v-vcfp.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:03Z"}]}}],"modified":"2026-10-03T10:32:48.639017902Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1511c098-78f0-453b-9215-23fa6fb11703","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vpfq-7v9v-vcfp","advisory_id":"1511c098-78f0-453b-9215-23fa6fb11703","event_types":["advisory"],"published_at":"2026-10-26T03:07:50.927943+00:00","technologies":["core-osv","datadog-agent-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:35+00:00","detail_url":"/events/74897"}]}},{"id":73082,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-r3vm-9jfg-6662","summary":"CGA-r3vm-9jfg-6662","evidence":"osv:CGA-r3vm-9jfg-6662","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-r3vm-9jfg-6662","aliases":["CGA-r3vm-9jfg-6662"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r3vm-9jfg-6662.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:00:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r3vm-9jfg-6662.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:00:09Z"}]}}],"modified":"2026-10-03T10:32:47.167049061Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:63899e6b-422b-4362-82fe-0334cb5e3f58","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-r3vm-9jfg-6662","advisory_id":"63899e6b-422b-4362-82fe-0334cb5e3f58","event_types":["advisory"],"published_at":"2026-10-26T02:48:46.894968+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T04:09:12+00:00","detail_url":"/advisories/advisory%3A63899e6b-422b-4362-82fe-0334cb5e3f58","group":{"id":"advisory:63899e6b-422b-4362-82fe-0334cb5e3f58","revision":1,"primary_event_id":74699,"change":"published","superseded_by":[],"changed":{"id":74699,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-r3vm-9jfg-6662","summary":"CGA-r3vm-9jfg-6662","evidence":"osv:CGA-r3vm-9jfg-6662","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-r3vm-9jfg-6662","aliases":["CGA-r3vm-9jfg-6662"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r3vm-9jfg-6662.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:00:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r3vm-9jfg-6662.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:00:09Z"}]}}],"modified":"2026-10-03T10:32:47.167049061Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:63899e6b-422b-4362-82fe-0334cb5e3f58","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-r3vm-9jfg-6662","advisory_id":"63899e6b-422b-4362-82fe-0334cb5e3f58","event_types":["advisory"],"published_at":"2026-10-26T02:48:46.894968+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T04:09:12+00:00","detail_url":"/events/74699"},"members":[{"id":74699,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-r3vm-9jfg-6662","summary":"CGA-r3vm-9jfg-6662","evidence":"osv:CGA-r3vm-9jfg-6662","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-r3vm-9jfg-6662","aliases":["CGA-r3vm-9jfg-6662"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r3vm-9jfg-6662.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:00:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r3vm-9jfg-6662.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:00:09Z"}]}}],"modified":"2026-10-03T10:32:47.167049061Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:63899e6b-422b-4362-82fe-0334cb5e3f58","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-r3vm-9jfg-6662","advisory_id":"63899e6b-422b-4362-82fe-0334cb5e3f58","event_types":["advisory"],"published_at":"2026-10-26T02:48:46.894968+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T04:09:12+00:00","detail_url":"/events/74699"}]}},{"id":73059,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-q6xh-phh2-c8hf","summary":"CGA-q6xh-phh2-c8hf","evidence":"osv:CGA-q6xh-phh2-c8hf","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-q6xh-phh2-c8hf","aliases":["CGA-q6xh-phh2-c8hf"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q6xh-phh2-c8hf.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:57Z"}]}}],"modified":"2026-10-03T10:32:46.372470070Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:a6b48c4d-41e4-467f-86fd-0e692f78e0ed","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q6xh-phh2-c8hf","advisory_id":"a6b48c4d-41e4-467f-86fd-0e692f78e0ed","event_types":["advisory"],"published_at":"2026-10-26T02:37:19.211973+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:07+00:00","detail_url":"/advisories/advisory%3Aa6b48c4d-41e4-467f-86fd-0e692f78e0ed","group":{"id":"advisory:a6b48c4d-41e4-467f-86fd-0e692f78e0ed","revision":1,"primary_event_id":74595,"change":"published","superseded_by":[],"changed":{"id":74595,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-q6xh-phh2-c8hf","summary":"CGA-q6xh-phh2-c8hf","evidence":"osv:CGA-q6xh-phh2-c8hf","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-q6xh-phh2-c8hf","aliases":["CGA-q6xh-phh2-c8hf"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q6xh-phh2-c8hf.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:57Z"}]}}],"modified":"2026-10-03T10:32:46.372470070Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:a6b48c4d-41e4-467f-86fd-0e692f78e0ed","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q6xh-phh2-c8hf","advisory_id":"a6b48c4d-41e4-467f-86fd-0e692f78e0ed","event_types":["advisory"],"published_at":"2026-10-26T02:37:19.211973+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:07+00:00","detail_url":"/events/74595"},"members":[{"id":74595,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-q6xh-phh2-c8hf","summary":"CGA-q6xh-phh2-c8hf","evidence":"osv:CGA-q6xh-phh2-c8hf","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-q6xh-phh2-c8hf","aliases":["CGA-q6xh-phh2-c8hf"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q6xh-phh2-c8hf.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:57Z"}]}}],"modified":"2026-10-03T10:32:46.372470070Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:a6b48c4d-41e4-467f-86fd-0e692f78e0ed","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q6xh-phh2-c8hf","advisory_id":"a6b48c4d-41e4-467f-86fd-0e692f78e0ed","event_types":["advisory"],"published_at":"2026-10-26T02:37:19.211973+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:07+00:00","detail_url":"/events/74595"}]}},{"id":73028,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-mvjx-h77m-w97r","summary":"CGA-mvjx-h77m-w97r","evidence":"osv:CGA-mvjx-h77m-w97r","products":[{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-mvjx-h77m-w97r","aliases":["CGA-mvjx-h77m-w97r"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mvjx-h77m-w97r.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:02Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mvjx-h77m-w97r.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:02Z"}]}}],"modified":"2026-10-03T10:32:45.258570110Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:89742ab7-d569-47d5-9752-b5139f06ee7f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mvjx-h77m-w97r","advisory_id":"89742ab7-d569-47d5-9752-b5139f06ee7f","event_types":["advisory"],"published_at":"2026-10-26T02:23:16.26185+00:00","technologies":["core-osv","datadog-agent-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:34+00:00","detail_url":"/advisories/advisory%3A89742ab7-d569-47d5-9752-b5139f06ee7f","group":{"id":"advisory:89742ab7-d569-47d5-9752-b5139f06ee7f","revision":1,"primary_event_id":74445,"change":"published","superseded_by":[],"changed":{"id":74445,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-mvjx-h77m-w97r","summary":"CGA-mvjx-h77m-w97r","evidence":"osv:CGA-mvjx-h77m-w97r","products":[{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-mvjx-h77m-w97r","aliases":["CGA-mvjx-h77m-w97r"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mvjx-h77m-w97r.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:02Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mvjx-h77m-w97r.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:02Z"}]}}],"modified":"2026-10-03T10:32:45.258570110Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:89742ab7-d569-47d5-9752-b5139f06ee7f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mvjx-h77m-w97r","advisory_id":"89742ab7-d569-47d5-9752-b5139f06ee7f","event_types":["advisory"],"published_at":"2026-10-26T02:23:16.26185+00:00","technologies":["core-osv","datadog-agent-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:34+00:00","detail_url":"/events/74445"},"members":[{"id":74445,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-mvjx-h77m-w97r","summary":"CGA-mvjx-h77m-w97r","evidence":"osv:CGA-mvjx-h77m-w97r","products":[{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-mvjx-h77m-w97r","aliases":["CGA-mvjx-h77m-w97r"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mvjx-h77m-w97r.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:02Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mvjx-h77m-w97r.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:02Z"}]}}],"modified":"2026-10-03T10:32:45.258570110Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:89742ab7-d569-47d5-9752-b5139f06ee7f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mvjx-h77m-w97r","advisory_id":"89742ab7-d569-47d5-9752-b5139f06ee7f","event_types":["advisory"],"published_at":"2026-10-26T02:23:16.26185+00:00","technologies":["core-osv","datadog-agent-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:34+00:00","detail_url":"/events/74445"}]}},{"id":73025,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-mw82-pj79-2p3v","summary":"CGA-mw82-pj79-2p3v","evidence":"osv:CGA-mw82-pj79-2p3v","products":[{"name":{"value":"datadog-agent-7.79","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-mw82-pj79-2p3v","aliases":["CGA-mw82-pj79-2p3v"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/chainguard/datadog-agent-7.79?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mw82-pj79-2p3v.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/wolfi/datadog-agent-7.79?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mw82-pj79-2p3v.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:10Z"}]}}],"modified":"2026-10-03T10:32:44.966572938Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ca083f8f-1b5e-4beb-bd8f-dd11b3f59906","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mw82-pj79-2p3v","advisory_id":"ca083f8f-1b5e-4beb-bd8f-dd11b3f59906","event_types":["advisory"],"published_at":"2026-10-26T02:22:36.206538+00:00","technologies":["core-osv","datadog-agent-7-79"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:06+00:00","detail_url":"/advisories/advisory%3Aca083f8f-1b5e-4beb-bd8f-dd11b3f59906","group":{"id":"advisory:ca083f8f-1b5e-4beb-bd8f-dd11b3f59906","revision":1,"primary_event_id":74438,"change":"published","superseded_by":[],"changed":{"id":74438,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-mw82-pj79-2p3v","summary":"CGA-mw82-pj79-2p3v","evidence":"osv:CGA-mw82-pj79-2p3v","products":[{"name":{"value":"datadog-agent-7.79","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-mw82-pj79-2p3v","aliases":["CGA-mw82-pj79-2p3v"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/chainguard/datadog-agent-7.79?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mw82-pj79-2p3v.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/wolfi/datadog-agent-7.79?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mw82-pj79-2p3v.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:10Z"}]}}],"modified":"2026-10-03T10:32:44.966572938Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ca083f8f-1b5e-4beb-bd8f-dd11b3f59906","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mw82-pj79-2p3v","advisory_id":"ca083f8f-1b5e-4beb-bd8f-dd11b3f59906","event_types":["advisory"],"published_at":"2026-10-26T02:22:36.206538+00:00","technologies":["core-osv","datadog-agent-7-79"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:06+00:00","detail_url":"/events/74438"},"members":[{"id":74438,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-mw82-pj79-2p3v","summary":"CGA-mw82-pj79-2p3v","evidence":"osv:CGA-mw82-pj79-2p3v","products":[{"name":{"value":"datadog-agent-7.79","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-mw82-pj79-2p3v","aliases":["CGA-mw82-pj79-2p3v"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/chainguard/datadog-agent-7.79?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mw82-pj79-2p3v.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/wolfi/datadog-agent-7.79?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mw82-pj79-2p3v.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:10Z"}]}}],"modified":"2026-10-03T10:32:44.966572938Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ca083f8f-1b5e-4beb-bd8f-dd11b3f59906","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mw82-pj79-2p3v","advisory_id":"ca083f8f-1b5e-4beb-bd8f-dd11b3f59906","event_types":["advisory"],"published_at":"2026-10-26T02:22:36.206538+00:00","technologies":["core-osv","datadog-agent-7-79"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:06+00:00","detail_url":"/events/74438"}]}},{"id":72956,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-gxpm-x5m5-xm2q","summary":"CGA-gxpm-x5m5-xm2q","evidence":"osv:CGA-gxpm-x5m5-xm2q","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gxpm-x5m5-xm2q","aliases":["CGA-gxpm-x5m5-xm2q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gxpm-x5m5-xm2q.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:42Z"}]}}],"modified":"2026-10-03T10:32:41.898374409Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:54086941-172e-484f-8735-a4455c517458","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gxpm-x5m5-xm2q","advisory_id":"54086941-172e-484f-8735-a4455c517458","event_types":["advisory"],"published_at":"2026-10-26T01:55:19.090737+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:17+00:00","detail_url":"/advisories/advisory%3A54086941-172e-484f-8735-a4455c517458","group":{"id":"advisory:54086941-172e-484f-8735-a4455c517458","revision":1,"primary_event_id":74136,"change":"published","superseded_by":[],"changed":{"id":74136,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-gxpm-x5m5-xm2q","summary":"CGA-gxpm-x5m5-xm2q","evidence":"osv:CGA-gxpm-x5m5-xm2q","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gxpm-x5m5-xm2q","aliases":["CGA-gxpm-x5m5-xm2q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gxpm-x5m5-xm2q.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:42Z"}]}}],"modified":"2026-10-03T10:32:41.898374409Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:54086941-172e-484f-8735-a4455c517458","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gxpm-x5m5-xm2q","advisory_id":"54086941-172e-484f-8735-a4455c517458","event_types":["advisory"],"published_at":"2026-10-26T01:55:19.090737+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:17+00:00","detail_url":"/events/74136"},"members":[{"id":74136,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-gxpm-x5m5-xm2q","summary":"CGA-gxpm-x5m5-xm2q","evidence":"osv:CGA-gxpm-x5m5-xm2q","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gxpm-x5m5-xm2q","aliases":["CGA-gxpm-x5m5-xm2q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gxpm-x5m5-xm2q.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:42Z"}]}}],"modified":"2026-10-03T10:32:41.898374409Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:54086941-172e-484f-8735-a4455c517458","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gxpm-x5m5-xm2q","advisory_id":"54086941-172e-484f-8735-a4455c517458","event_types":["advisory"],"published_at":"2026-10-26T01:55:19.090737+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:17+00:00","detail_url":"/events/74136"}]}},{"id":72925,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-fr38-4pq8-vc44","summary":"CGA-fr38-4pq8-vc44","evidence":"osv:CGA-fr38-4pq8-vc44","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-fr38-4pq8-vc44","aliases":["CGA-fr38-4pq8-vc44"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fr38-4pq8-vc44.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:57Z"}]}}],"modified":"2026-10-03T10:32:40.519562764Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:795fc18e-cdbc-42cb-827a-4f4b24916afa","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fr38-4pq8-vc44","advisory_id":"795fc18e-cdbc-42cb-827a-4f4b24916afa","event_types":["advisory"],"published_at":"2026-10-26T01:38:26.804805+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:08+00:00","detail_url":"/advisories/advisory%3A795fc18e-cdbc-42cb-827a-4f4b24916afa","group":{"id":"advisory:795fc18e-cdbc-42cb-827a-4f4b24916afa","revision":1,"primary_event_id":73963,"change":"published","superseded_by":[],"changed":{"id":73963,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-fr38-4pq8-vc44","summary":"CGA-fr38-4pq8-vc44","evidence":"osv:CGA-fr38-4pq8-vc44","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-fr38-4pq8-vc44","aliases":["CGA-fr38-4pq8-vc44"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fr38-4pq8-vc44.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:57Z"}]}}],"modified":"2026-10-03T10:32:40.519562764Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:795fc18e-cdbc-42cb-827a-4f4b24916afa","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fr38-4pq8-vc44","advisory_id":"795fc18e-cdbc-42cb-827a-4f4b24916afa","event_types":["advisory"],"published_at":"2026-10-26T01:38:26.804805+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:08+00:00","detail_url":"/events/73963"},"members":[{"id":73963,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-fr38-4pq8-vc44","summary":"CGA-fr38-4pq8-vc44","evidence":"osv:CGA-fr38-4pq8-vc44","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-fr38-4pq8-vc44","aliases":["CGA-fr38-4pq8-vc44"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fr38-4pq8-vc44.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:57Z"}]}}],"modified":"2026-10-03T10:32:40.519562764Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:795fc18e-cdbc-42cb-827a-4f4b24916afa","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fr38-4pq8-vc44","advisory_id":"795fc18e-cdbc-42cb-827a-4f4b24916afa","event_types":["advisory"],"published_at":"2026-10-26T01:38:26.804805+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:08+00:00","detail_url":"/events/73963"}]}},{"id":72906,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-fcx9-76hq-qwhg","summary":"CGA-fcx9-76hq-qwhg","evidence":"osv:CGA-fcx9-76hq-qwhg","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-fcx9-76hq-qwhg","aliases":["CGA-fcx9-76hq-qwhg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fcx9-76hq-qwhg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:42Z"}]}}],"modified":"2026-10-03T10:32:39.993827147Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:a38bbc4d-b6af-4d77-a842-e2e678d8a1d1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fcx9-76hq-qwhg","advisory_id":"a38bbc4d-b6af-4d77-a842-e2e678d8a1d1","event_types":["advisory"],"published_at":"2026-10-26T01:34:00.575988+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:15+00:00","detail_url":"/advisories/advisory%3Aa38bbc4d-b6af-4d77-a842-e2e678d8a1d1","group":{"id":"advisory:a38bbc4d-b6af-4d77-a842-e2e678d8a1d1","revision":1,"primary_event_id":73916,"change":"published","superseded_by":[],"changed":{"id":73916,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-fcx9-76hq-qwhg","summary":"CGA-fcx9-76hq-qwhg","evidence":"osv:CGA-fcx9-76hq-qwhg","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-fcx9-76hq-qwhg","aliases":["CGA-fcx9-76hq-qwhg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fcx9-76hq-qwhg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:42Z"}]}}],"modified":"2026-10-03T10:32:39.993827147Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:a38bbc4d-b6af-4d77-a842-e2e678d8a1d1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fcx9-76hq-qwhg","advisory_id":"a38bbc4d-b6af-4d77-a842-e2e678d8a1d1","event_types":["advisory"],"published_at":"2026-10-26T01:34:00.575988+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:15+00:00","detail_url":"/events/73916"},"members":[{"id":73916,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-fcx9-76hq-qwhg","summary":"CGA-fcx9-76hq-qwhg","evidence":"osv:CGA-fcx9-76hq-qwhg","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-fcx9-76hq-qwhg","aliases":["CGA-fcx9-76hq-qwhg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fcx9-76hq-qwhg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:42Z"}]}}],"modified":"2026-10-03T10:32:39.993827147Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:a38bbc4d-b6af-4d77-a842-e2e678d8a1d1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fcx9-76hq-qwhg","advisory_id":"a38bbc4d-b6af-4d77-a842-e2e678d8a1d1","event_types":["advisory"],"published_at":"2026-10-26T01:34:00.575988+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:15+00:00","detail_url":"/events/73916"}]}},{"id":72805,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-8jjw-57jv-g74r","summary":"CGA-8jjw-57jv-g74r","evidence":"osv:CGA-8jjw-57jv-g74r","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-8jjw-57jv-g74r","aliases":["CGA-8jjw-57jv-g74r"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8jjw-57jv-g74r.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:25Z"}]}}],"modified":"2026-10-03T10:32:36.701025037Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b4fa236a-4202-46fc-977a-59d63dd315e6","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8jjw-57jv-g74r","advisory_id":"b4fa236a-4202-46fc-977a-59d63dd315e6","event_types":["advisory"],"published_at":"2026-10-26T01:08:38.184859+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:38+00:00","detail_url":"/advisories/advisory%3Ab4fa236a-4202-46fc-977a-59d63dd315e6","group":{"id":"advisory:b4fa236a-4202-46fc-977a-59d63dd315e6","revision":1,"primary_event_id":73634,"change":"published","superseded_by":[],"changed":{"id":73634,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-8jjw-57jv-g74r","summary":"CGA-8jjw-57jv-g74r","evidence":"osv:CGA-8jjw-57jv-g74r","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-8jjw-57jv-g74r","aliases":["CGA-8jjw-57jv-g74r"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8jjw-57jv-g74r.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:25Z"}]}}],"modified":"2026-10-03T10:32:36.701025037Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b4fa236a-4202-46fc-977a-59d63dd315e6","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8jjw-57jv-g74r","advisory_id":"b4fa236a-4202-46fc-977a-59d63dd315e6","event_types":["advisory"],"published_at":"2026-10-26T01:08:38.184859+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:38+00:00","detail_url":"/events/73634"},"members":[{"id":73634,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-8jjw-57jv-g74r","summary":"CGA-8jjw-57jv-g74r","evidence":"osv:CGA-8jjw-57jv-g74r","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-8jjw-57jv-g74r","aliases":["CGA-8jjw-57jv-g74r"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8jjw-57jv-g74r.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:25Z"}]}}],"modified":"2026-10-03T10:32:36.701025037Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b4fa236a-4202-46fc-977a-59d63dd315e6","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8jjw-57jv-g74r","advisory_id":"b4fa236a-4202-46fc-977a-59d63dd315e6","event_types":["advisory"],"published_at":"2026-10-26T01:08:38.184859+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:38+00:00","detail_url":"/events/73634"}]}},{"id":72618,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-422f-c6mg-h3pw","summary":"CGA-422f-c6mg-h3pw","evidence":"osv:CGA-422f-c6mg-h3pw","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-422f-c6mg-h3pw","aliases":["CGA-422f-c6mg-h3pw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-422f-c6mg-h3pw.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:24Z"}]}}],"modified":"2026-10-03T10:32:00.040724778Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1e3c21a4-cc0f-4b3f-a17a-b4462584b60e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-422f-c6mg-h3pw","advisory_id":"1e3c21a4-cc0f-4b3f-a17a-b4462584b60e","event_types":["advisory"],"published_at":"2026-10-26T00:40:08.581801+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:37+00:00","detail_url":"/advisories/advisory%3A1e3c21a4-cc0f-4b3f-a17a-b4462584b60e","group":{"id":"advisory:1e3c21a4-cc0f-4b3f-a17a-b4462584b60e","revision":1,"primary_event_id":73326,"change":"published","superseded_by":[],"changed":{"id":73326,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-422f-c6mg-h3pw","summary":"CGA-422f-c6mg-h3pw","evidence":"osv:CGA-422f-c6mg-h3pw","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-422f-c6mg-h3pw","aliases":["CGA-422f-c6mg-h3pw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-422f-c6mg-h3pw.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:24Z"}]}}],"modified":"2026-10-03T10:32:00.040724778Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1e3c21a4-cc0f-4b3f-a17a-b4462584b60e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-422f-c6mg-h3pw","advisory_id":"1e3c21a4-cc0f-4b3f-a17a-b4462584b60e","event_types":["advisory"],"published_at":"2026-10-26T00:40:08.581801+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:37+00:00","detail_url":"/events/73326"},"members":[{"id":73326,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-422f-c6mg-h3pw","summary":"CGA-422f-c6mg-h3pw","evidence":"osv:CGA-422f-c6mg-h3pw","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-422f-c6mg-h3pw","aliases":["CGA-422f-c6mg-h3pw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-422f-c6mg-h3pw.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:24Z"}]}}],"modified":"2026-10-03T10:32:00.040724778Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1e3c21a4-cc0f-4b3f-a17a-b4462584b60e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-422f-c6mg-h3pw","advisory_id":"1e3c21a4-cc0f-4b3f-a17a-b4462584b60e","event_types":["advisory"],"published_at":"2026-10-26T00:40:08.581801+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:37+00:00","detail_url":"/events/73326"}]}},{"id":72559,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-3635-767g-67pw","summary":"CGA-3635-767g-67pw","evidence":"osv:CGA-3635-767g-67pw","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-3635-767g-67pw","aliases":["CGA-3635-767g-67pw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3635-767g-67pw.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:41Z"}]}}],"modified":"2026-10-03T10:31:31.224078451Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2cd9e879-c689-4294-b7a4-85fa5e24a7aa","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3635-767g-67pw","advisory_id":"2cd9e879-c689-4294-b7a4-85fa5e24a7aa","event_types":["advisory"],"published_at":"2026-10-26T00:32:09.013684+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:14+00:00","detail_url":"/advisories/advisory%3A2cd9e879-c689-4294-b7a4-85fa5e24a7aa","group":{"id":"advisory:2cd9e879-c689-4294-b7a4-85fa5e24a7aa","revision":1,"primary_event_id":73233,"change":"published","superseded_by":[],"changed":{"id":73233,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-3635-767g-67pw","summary":"CGA-3635-767g-67pw","evidence":"osv:CGA-3635-767g-67pw","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-3635-767g-67pw","aliases":["CGA-3635-767g-67pw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3635-767g-67pw.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:41Z"}]}}],"modified":"2026-10-03T10:31:31.224078451Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2cd9e879-c689-4294-b7a4-85fa5e24a7aa","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3635-767g-67pw","advisory_id":"2cd9e879-c689-4294-b7a4-85fa5e24a7aa","event_types":["advisory"],"published_at":"2026-10-26T00:32:09.013684+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:14+00:00","detail_url":"/events/73233"},"members":[{"id":73233,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-3635-767g-67pw","summary":"CGA-3635-767g-67pw","evidence":"osv:CGA-3635-767g-67pw","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-3635-767g-67pw","aliases":["CGA-3635-767g-67pw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3635-767g-67pw.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:41Z"}]}}],"modified":"2026-10-03T10:31:31.224078451Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2cd9e879-c689-4294-b7a4-85fa5e24a7aa","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3635-767g-67pw","advisory_id":"2cd9e879-c689-4294-b7a4-85fa5e24a7aa","event_types":["advisory"],"published_at":"2026-10-26T00:32:09.013684+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:14+00:00","detail_url":"/events/73233"}]}},{"id":72529,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-2gj7-wp7x-qgqj","summary":"CGA-2gj7-wp7x-qgqj","evidence":"osv:CGA-2gj7-wp7x-qgqj","products":[{"name":{"value":"datadog-agent-7.79","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-2gj7-wp7x-qgqj","aliases":["CGA-2gj7-wp7x-qgqj"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/chainguard/datadog-agent-7.79?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2gj7-wp7x-qgqj.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/wolfi/datadog-agent-7.79?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2gj7-wp7x-qgqj.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:09Z"}]}}],"modified":"2026-10-03T10:31:09.423676190Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0ef3c88c-42b2-4ac6-ad47-9f437d11a90f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2gj7-wp7x-qgqj","advisory_id":"0ef3c88c-42b2-4ac6-ad47-9f437d11a90f","event_types":["advisory"],"published_at":"2026-10-26T00:28:45.403138+00:00","technologies":["core-osv","datadog-agent-7-79"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:05+00:00","detail_url":"/advisories/advisory%3A0ef3c88c-42b2-4ac6-ad47-9f437d11a90f","group":{"id":"advisory:0ef3c88c-42b2-4ac6-ad47-9f437d11a90f","revision":1,"primary_event_id":73191,"change":"published","superseded_by":[],"changed":{"id":73191,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-2gj7-wp7x-qgqj","summary":"CGA-2gj7-wp7x-qgqj","evidence":"osv:CGA-2gj7-wp7x-qgqj","products":[{"name":{"value":"datadog-agent-7.79","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-2gj7-wp7x-qgqj","aliases":["CGA-2gj7-wp7x-qgqj"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/chainguard/datadog-agent-7.79?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2gj7-wp7x-qgqj.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/wolfi/datadog-agent-7.79?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2gj7-wp7x-qgqj.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:09Z"}]}}],"modified":"2026-10-03T10:31:09.423676190Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0ef3c88c-42b2-4ac6-ad47-9f437d11a90f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2gj7-wp7x-qgqj","advisory_id":"0ef3c88c-42b2-4ac6-ad47-9f437d11a90f","event_types":["advisory"],"published_at":"2026-10-26T00:28:45.403138+00:00","technologies":["core-osv","datadog-agent-7-79"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:05+00:00","detail_url":"/events/73191"},"members":[{"id":73191,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-2gj7-wp7x-qgqj","summary":"CGA-2gj7-wp7x-qgqj","evidence":"osv:CGA-2gj7-wp7x-qgqj","products":[{"name":{"value":"datadog-agent-7.79","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-2gj7-wp7x-qgqj","aliases":["CGA-2gj7-wp7x-qgqj"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/chainguard/datadog-agent-7.79?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2gj7-wp7x-qgqj.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/wolfi/datadog-agent-7.79?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2gj7-wp7x-qgqj.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:09Z"}]}}],"modified":"2026-10-03T10:31:09.423676190Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0ef3c88c-42b2-4ac6-ad47-9f437d11a90f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2gj7-wp7x-qgqj","advisory_id":"0ef3c88c-42b2-4ac6-ad47-9f437d11a90f","event_types":["advisory"],"published_at":"2026-10-26T00:28:45.403138+00:00","technologies":["core-osv","datadog-agent-7-79"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:05+00:00","detail_url":"/events/73191"}]}},{"id":71892,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-mx46-7xrc-x9fc","summary":"CGA-mx46-7xrc-x9fc","evidence":"osv:CGA-mx46-7xrc-x9fc","products":[{"name":{"value":"jupyterhub-k8s-singleuser-sample","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.2-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-mx46-7xrc-x9fc","aliases":["CGA-mx46-7xrc-x9fc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-r4"}]}],"package":{"name":"jupyterhub-k8s-singleuser-sample","purl":"pkg:apk/chainguard/jupyterhub-k8s-singleuser-sample?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mx46-7xrc-x9fc.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jupyterhub-k8s-singleuser-sample/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:10:59Z"}]}}],"modified":"2026-10-02T23:01:38.551891757Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1f525d30-6962-4d24-9438-609d3a6c47c6","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mx46-7xrc-x9fc","advisory_id":"1f525d30-6962-4d24-9438-609d3a6c47c6","event_types":["advisory"],"published_at":"2026-10-25T23:49:10.584925+00:00","technologies":["core-osv","jupyterhub-k8s-singleuser-sample"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:18:10+00:00","detail_url":"/advisories/advisory%3A1f525d30-6962-4d24-9438-609d3a6c47c6","group":{"id":"advisory:1f525d30-6962-4d24-9438-609d3a6c47c6","revision":1,"primary_event_id":72408,"change":"published","superseded_by":[],"changed":{"id":72408,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-mx46-7xrc-x9fc","summary":"CGA-mx46-7xrc-x9fc","evidence":"osv:CGA-mx46-7xrc-x9fc","products":[{"name":{"value":"jupyterhub-k8s-singleuser-sample","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.2-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-mx46-7xrc-x9fc","aliases":["CGA-mx46-7xrc-x9fc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-r4"}]}],"package":{"name":"jupyterhub-k8s-singleuser-sample","purl":"pkg:apk/chainguard/jupyterhub-k8s-singleuser-sample?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mx46-7xrc-x9fc.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jupyterhub-k8s-singleuser-sample/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:10:59Z"}]}}],"modified":"2026-10-02T23:01:38.551891757Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1f525d30-6962-4d24-9438-609d3a6c47c6","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mx46-7xrc-x9fc","advisory_id":"1f525d30-6962-4d24-9438-609d3a6c47c6","event_types":["advisory"],"published_at":"2026-10-25T23:49:10.584925+00:00","technologies":["core-osv","jupyterhub-k8s-singleuser-sample"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:18:10+00:00","detail_url":"/events/72408"},"members":[{"id":72408,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-mx46-7xrc-x9fc","summary":"CGA-mx46-7xrc-x9fc","evidence":"osv:CGA-mx46-7xrc-x9fc","products":[{"name":{"value":"jupyterhub-k8s-singleuser-sample","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.2-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-mx46-7xrc-x9fc","aliases":["CGA-mx46-7xrc-x9fc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-r4"}]}],"package":{"name":"jupyterhub-k8s-singleuser-sample","purl":"pkg:apk/chainguard/jupyterhub-k8s-singleuser-sample?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mx46-7xrc-x9fc.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jupyterhub-k8s-singleuser-sample/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:10:59Z"}]}}],"modified":"2026-10-02T23:01:38.551891757Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1f525d30-6962-4d24-9438-609d3a6c47c6","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mx46-7xrc-x9fc","advisory_id":"1f525d30-6962-4d24-9438-609d3a6c47c6","event_types":["advisory"],"published_at":"2026-10-25T23:49:10.584925+00:00","technologies":["core-osv","jupyterhub-k8s-singleuser-sample"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:18:10+00:00","detail_url":"/events/72408"}]}},{"id":71804,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-95qw-2v5p-gvrv","summary":"CGA-95qw-2v5p-gvrv","evidence":"osv:CGA-95qw-2v5p-gvrv","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-95qw-2v5p-gvrv","aliases":["CGA-95qw-2v5p-gvrv"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-95qw-2v5p-gvrv.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-95qw-2v5p-gvrv.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}}],"modified":"2026-10-02T23:01:29.005600086Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:a23b06e4-aba1-4a8a-bc45-094028268243","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-95qw-2v5p-gvrv","advisory_id":"a23b06e4-aba1-4a8a-bc45-094028268243","event_types":["advisory"],"published_at":"2026-10-25T23:39:15.17475+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:49+00:00","detail_url":"/advisories/advisory%3Aa23b06e4-aba1-4a8a-bc45-094028268243","group":{"id":"advisory:a23b06e4-aba1-4a8a-bc45-094028268243","revision":1,"primary_event_id":72273,"change":"published","superseded_by":[],"changed":{"id":72273,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-95qw-2v5p-gvrv","summary":"CGA-95qw-2v5p-gvrv","evidence":"osv:CGA-95qw-2v5p-gvrv","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-95qw-2v5p-gvrv","aliases":["CGA-95qw-2v5p-gvrv"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-95qw-2v5p-gvrv.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-95qw-2v5p-gvrv.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}}],"modified":"2026-10-02T23:01:29.005600086Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:a23b06e4-aba1-4a8a-bc45-094028268243","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-95qw-2v5p-gvrv","advisory_id":"a23b06e4-aba1-4a8a-bc45-094028268243","event_types":["advisory"],"published_at":"2026-10-25T23:39:15.17475+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:49+00:00","detail_url":"/events/72273"},"members":[{"id":72273,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-95qw-2v5p-gvrv","summary":"CGA-95qw-2v5p-gvrv","evidence":"osv:CGA-95qw-2v5p-gvrv","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-95qw-2v5p-gvrv","aliases":["CGA-95qw-2v5p-gvrv"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-95qw-2v5p-gvrv.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-95qw-2v5p-gvrv.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}}],"modified":"2026-10-02T23:01:29.005600086Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:a23b06e4-aba1-4a8a-bc45-094028268243","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-95qw-2v5p-gvrv","advisory_id":"a23b06e4-aba1-4a8a-bc45-094028268243","event_types":["advisory"],"published_at":"2026-10-25T23:39:15.17475+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:49+00:00","detail_url":"/events/72273"}]}},{"id":71764,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-6rv5-fhwr-6c4g","summary":"CGA-6rv5-fhwr-6c4g","evidence":"osv:CGA-6rv5-fhwr-6c4g","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-6rv5-fhwr-6c4g","aliases":["CGA-6rv5-fhwr-6c4g"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6rv5-fhwr-6c4g.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6rv5-fhwr-6c4g.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}}],"modified":"2026-10-02T23:01:25.466463204Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6399a631-a5e6-4d39-a3da-349a3d001257","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6rv5-fhwr-6c4g","advisory_id":"6399a631-a5e6-4d39-a3da-349a3d001257","event_types":["advisory"],"published_at":"2026-10-25T23:35:45.835194+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:50+00:00","detail_url":"/advisories/advisory%3A6399a631-a5e6-4d39-a3da-349a3d001257","group":{"id":"advisory:6399a631-a5e6-4d39-a3da-349a3d001257","revision":1,"primary_event_id":72219,"change":"published","superseded_by":[],"changed":{"id":72219,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-6rv5-fhwr-6c4g","summary":"CGA-6rv5-fhwr-6c4g","evidence":"osv:CGA-6rv5-fhwr-6c4g","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-6rv5-fhwr-6c4g","aliases":["CGA-6rv5-fhwr-6c4g"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6rv5-fhwr-6c4g.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6rv5-fhwr-6c4g.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}}],"modified":"2026-10-02T23:01:25.466463204Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6399a631-a5e6-4d39-a3da-349a3d001257","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6rv5-fhwr-6c4g","advisory_id":"6399a631-a5e6-4d39-a3da-349a3d001257","event_types":["advisory"],"published_at":"2026-10-25T23:35:45.835194+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:50+00:00","detail_url":"/events/72219"},"members":[{"id":72219,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-6rv5-fhwr-6c4g","summary":"CGA-6rv5-fhwr-6c4g","evidence":"osv:CGA-6rv5-fhwr-6c4g","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-6rv5-fhwr-6c4g","aliases":["CGA-6rv5-fhwr-6c4g"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6rv5-fhwr-6c4g.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6rv5-fhwr-6c4g.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}}],"modified":"2026-10-02T23:01:25.466463204Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6399a631-a5e6-4d39-a3da-349a3d001257","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6rv5-fhwr-6c4g","advisory_id":"6399a631-a5e6-4d39-a3da-349a3d001257","event_types":["advisory"],"published_at":"2026-10-25T23:35:45.835194+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:50+00:00","detail_url":"/events/72219"}]}},{"id":71521,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-hxm3-wgpg-88w6","summary":"CGA-hxm3-wgpg-88w6","evidence":"osv:CGA-hxm3-wgpg-88w6","products":[{"name":{"value":"awx","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"24.6.1-r64","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-hxm3-wgpg-88w6","aliases":["CGA-hxm3-wgpg-88w6"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.6.1-r64"}]}],"package":{"name":"awx","purl":"pkg:apk/chainguard/awx?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hxm3-wgpg-88w6.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/var/lib/awx/venv/awx/lib/python3.11/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:36:08Z"}]}}],"modified":"2026-10-02T23:01:02.313409968Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:15dd3024-4d4e-4a66-a81c-2353c4cac695","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hxm3-wgpg-88w6","advisory_id":"15dd3024-4d4e-4a66-a81c-2353c4cac695","event_types":["advisory"],"published_at":"2026-10-25T23:16:35.174881+00:00","technologies":["awx","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:50:54+00:00","detail_url":"/advisories/advisory%3A15dd3024-4d4e-4a66-a81c-2353c4cac695","group":{"id":"advisory:15dd3024-4d4e-4a66-a81c-2353c4cac695","revision":1,"primary_event_id":71932,"change":"published","superseded_by":[],"changed":{"id":71932,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-hxm3-wgpg-88w6","summary":"CGA-hxm3-wgpg-88w6","evidence":"osv:CGA-hxm3-wgpg-88w6","products":[{"name":{"value":"awx","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"24.6.1-r64","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-hxm3-wgpg-88w6","aliases":["CGA-hxm3-wgpg-88w6"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.6.1-r64"}]}],"package":{"name":"awx","purl":"pkg:apk/chainguard/awx?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hxm3-wgpg-88w6.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/var/lib/awx/venv/awx/lib/python3.11/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:36:08Z"}]}}],"modified":"2026-10-02T23:01:02.313409968Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:15dd3024-4d4e-4a66-a81c-2353c4cac695","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hxm3-wgpg-88w6","advisory_id":"15dd3024-4d4e-4a66-a81c-2353c4cac695","event_types":["advisory"],"published_at":"2026-10-25T23:16:35.174881+00:00","technologies":["awx","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:50:54+00:00","detail_url":"/events/71932"},"members":[{"id":71932,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-hxm3-wgpg-88w6","summary":"CGA-hxm3-wgpg-88w6","evidence":"osv:CGA-hxm3-wgpg-88w6","products":[{"name":{"value":"awx","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"24.6.1-r64","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-hxm3-wgpg-88w6","aliases":["CGA-hxm3-wgpg-88w6"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.6.1-r64"}]}],"package":{"name":"awx","purl":"pkg:apk/chainguard/awx?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hxm3-wgpg-88w6.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/var/lib/awx/venv/awx/lib/python3.11/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:36:08Z"}]}}],"modified":"2026-10-02T23:01:02.313409968Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:15dd3024-4d4e-4a66-a81c-2353c4cac695","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hxm3-wgpg-88w6","advisory_id":"15dd3024-4d4e-4a66-a81c-2353c4cac695","event_types":["advisory"],"published_at":"2026-10-25T23:16:35.174881+00:00","technologies":["awx","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:50:54+00:00","detail_url":"/events/71932"}]}},{"id":71477,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-vg86-64q9-p5r2","summary":"CGA-vg86-64q9-p5r2","evidence":"osv:CGA-vg86-64q9-p5r2","products":[{"name":{"value":"kubeflow-pipelines-apiserver-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.17.2-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-vg86-64q9-p5r2","aliases":["CGA-vg86-64q9-p5r2"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.2-r5"}]}],"package":{"name":"kubeflow-pipelines-apiserver-fips","purl":"pkg:apk/chainguard/kubeflow-pipelines-apiserver-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vg86-64q9-p5r2.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/python3.11/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:53:07Z"}]}}],"modified":"2026-10-02T23:00:57.693220661Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3332606c-b068-4d16-afee-08e329c39d1a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vg86-64q9-p5r2","advisory_id":"3332606c-b068-4d16-afee-08e329c39d1a","event_types":["advisory"],"published_at":"2026-10-25T23:13:16.395357+00:00","technologies":["core-osv","kubeflow-pipelines-apiserver-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:45:45+00:00","detail_url":"/advisories/advisory%3A3332606c-b068-4d16-afee-08e329c39d1a","group":{"id":"advisory:3332606c-b068-4d16-afee-08e329c39d1a","revision":1,"primary_event_id":71884,"change":"published","superseded_by":[],"changed":{"id":71884,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-vg86-64q9-p5r2","summary":"CGA-vg86-64q9-p5r2","evidence":"osv:CGA-vg86-64q9-p5r2","products":[{"name":{"value":"kubeflow-pipelines-apiserver-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.17.2-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-vg86-64q9-p5r2","aliases":["CGA-vg86-64q9-p5r2"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.2-r5"}]}],"package":{"name":"kubeflow-pipelines-apiserver-fips","purl":"pkg:apk/chainguard/kubeflow-pipelines-apiserver-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vg86-64q9-p5r2.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/python3.11/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:53:07Z"}]}}],"modified":"2026-10-02T23:00:57.693220661Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3332606c-b068-4d16-afee-08e329c39d1a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vg86-64q9-p5r2","advisory_id":"3332606c-b068-4d16-afee-08e329c39d1a","event_types":["advisory"],"published_at":"2026-10-25T23:13:16.395357+00:00","technologies":["core-osv","kubeflow-pipelines-apiserver-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:45:45+00:00","detail_url":"/events/71884"},"members":[{"id":71884,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-vg86-64q9-p5r2","summary":"CGA-vg86-64q9-p5r2","evidence":"osv:CGA-vg86-64q9-p5r2","products":[{"name":{"value":"kubeflow-pipelines-apiserver-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.17.2-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-vg86-64q9-p5r2","aliases":["CGA-vg86-64q9-p5r2"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.2-r5"}]}],"package":{"name":"kubeflow-pipelines-apiserver-fips","purl":"pkg:apk/chainguard/kubeflow-pipelines-apiserver-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vg86-64q9-p5r2.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/python3.11/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:53:07Z"}]}}],"modified":"2026-10-02T23:00:57.693220661Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3332606c-b068-4d16-afee-08e329c39d1a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vg86-64q9-p5r2","advisory_id":"3332606c-b068-4d16-afee-08e329c39d1a","event_types":["advisory"],"published_at":"2026-10-25T23:13:16.395357+00:00","technologies":["core-osv","kubeflow-pipelines-apiserver-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:45:45+00:00","detail_url":"/events/71884"}]}},{"id":71298,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-c6w2-j4j8-3mv3","summary":"CGA-c6w2-j4j8-3mv3","evidence":"osv:CGA-c6w2-j4j8-3mv3","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-c6w2-j4j8-3mv3","aliases":["CGA-c6w2-j4j8-3mv3"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c6w2-j4j8-3mv3.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c6w2-j4j8-3mv3.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}}],"modified":"2026-10-02T23:00:38.705279780Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:162100dc-b5f3-4f98-81bf-b2414d08f4d8","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c6w2-j4j8-3mv3","advisory_id":"162100dc-b5f3-4f98-81bf-b2414d08f4d8","event_types":["advisory"],"published_at":"2026-10-25T23:01:35.9711+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:48+00:00","detail_url":"/advisories/advisory%3A162100dc-b5f3-4f98-81bf-b2414d08f4d8","group":{"id":"advisory:162100dc-b5f3-4f98-81bf-b2414d08f4d8","revision":1,"primary_event_id":71686,"change":"published","superseded_by":[],"changed":{"id":71686,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-c6w2-j4j8-3mv3","summary":"CGA-c6w2-j4j8-3mv3","evidence":"osv:CGA-c6w2-j4j8-3mv3","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-c6w2-j4j8-3mv3","aliases":["CGA-c6w2-j4j8-3mv3"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c6w2-j4j8-3mv3.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c6w2-j4j8-3mv3.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}}],"modified":"2026-10-02T23:00:38.705279780Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:162100dc-b5f3-4f98-81bf-b2414d08f4d8","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c6w2-j4j8-3mv3","advisory_id":"162100dc-b5f3-4f98-81bf-b2414d08f4d8","event_types":["advisory"],"published_at":"2026-10-25T23:01:35.9711+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:48+00:00","detail_url":"/events/71686"},"members":[{"id":71686,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-c6w2-j4j8-3mv3","summary":"CGA-c6w2-j4j8-3mv3","evidence":"osv:CGA-c6w2-j4j8-3mv3","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-c6w2-j4j8-3mv3","aliases":["CGA-c6w2-j4j8-3mv3"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c6w2-j4j8-3mv3.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c6w2-j4j8-3mv3.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}}],"modified":"2026-10-02T23:00:38.705279780Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:162100dc-b5f3-4f98-81bf-b2414d08f4d8","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c6w2-j4j8-3mv3","advisory_id":"162100dc-b5f3-4f98-81bf-b2414d08f4d8","event_types":["advisory"],"published_at":"2026-10-25T23:01:35.9711+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:48+00:00","detail_url":"/events/71686"}]}},{"id":71263,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-575m-j3qf-mgcg","summary":"CGA-575m-j3qf-mgcg","evidence":"osv:CGA-575m-j3qf-mgcg","products":[{"name":{"value":"pypy-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pypy-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-575m-j3qf-mgcg","aliases":["CGA-575m-j3qf-mgcg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/chainguard/pypy-3.10?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-575m-j3qf-mgcg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:40:41Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/wolfi/pypy-3.10?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-575m-j3qf-mgcg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:40:41Z"}]}}],"modified":"2026-10-02T23:00:34.626443685Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cc9e4e2d-f54c-4f92-836b-620bcb9f2d3f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-575m-j3qf-mgcg","advisory_id":"cc9e4e2d-f54c-4f92-836b-620bcb9f2d3f","event_types":["advisory"],"published_at":"2026-10-25T22:59:35.33421+00:00","technologies":["core-osv","pypy-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:19:52+00:00","detail_url":"/advisories/advisory%3Acc9e4e2d-f54c-4f92-836b-620bcb9f2d3f","group":{"id":"advisory:cc9e4e2d-f54c-4f92-836b-620bcb9f2d3f","revision":1,"primary_event_id":71648,"change":"published","superseded_by":[],"changed":{"id":71648,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-575m-j3qf-mgcg","summary":"CGA-575m-j3qf-mgcg","evidence":"osv:CGA-575m-j3qf-mgcg","products":[{"name":{"value":"pypy-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pypy-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-575m-j3qf-mgcg","aliases":["CGA-575m-j3qf-mgcg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/chainguard/pypy-3.10?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-575m-j3qf-mgcg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:40:41Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/wolfi/pypy-3.10?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-575m-j3qf-mgcg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:40:41Z"}]}}],"modified":"2026-10-02T23:00:34.626443685Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cc9e4e2d-f54c-4f92-836b-620bcb9f2d3f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-575m-j3qf-mgcg","advisory_id":"cc9e4e2d-f54c-4f92-836b-620bcb9f2d3f","event_types":["advisory"],"published_at":"2026-10-25T22:59:35.33421+00:00","technologies":["core-osv","pypy-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:19:52+00:00","detail_url":"/events/71648"},"members":[{"id":71648,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-575m-j3qf-mgcg","summary":"CGA-575m-j3qf-mgcg","evidence":"osv:CGA-575m-j3qf-mgcg","products":[{"name":{"value":"pypy-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pypy-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-575m-j3qf-mgcg","aliases":["CGA-575m-j3qf-mgcg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/chainguard/pypy-3.10?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-575m-j3qf-mgcg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:40:41Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/wolfi/pypy-3.10?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-575m-j3qf-mgcg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:40:41Z"}]}}],"modified":"2026-10-02T23:00:34.626443685Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cc9e4e2d-f54c-4f92-836b-620bcb9f2d3f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-575m-j3qf-mgcg","advisory_id":"cc9e4e2d-f54c-4f92-836b-620bcb9f2d3f","event_types":["advisory"],"published_at":"2026-10-25T22:59:35.33421+00:00","technologies":["core-osv","pypy-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:19:52+00:00","detail_url":"/events/71648"}]}},{"id":71182,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-54p9-3pw4-46m8","summary":"CGA-54p9-3pw4-46m8","evidence":"osv:CGA-54p9-3pw4-46m8","products":[{"name":{"value":"apache-beam-python-3.14-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.76.0-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-54p9-3pw4-46m8","aliases":["CGA-54p9-3pw4-46m8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76.0-r4"}]}],"package":{"name":"apache-beam-python-3.14-sdk","purl":"pkg:apk/chainguard/apache-beam-python-3.14-sdk?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-54p9-3pw4-46m8.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/share/apache-beam/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:09:12Z"}]}}],"modified":"2026-10-02T23:00:25.372138260Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:78aa5392-2c08-4083-9262-ad267622abfc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-54p9-3pw4-46m8","advisory_id":"78aa5392-2c08-4083-9262-ad267622abfc","event_types":["advisory"],"published_at":"2026-10-25T22:54:58.921101+00:00","technologies":["apache-beam-python-3-14-sdk","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:30:45+00:00","detail_url":"/advisories/advisory%3A78aa5392-2c08-4083-9262-ad267622abfc","group":{"id":"advisory:78aa5392-2c08-4083-9262-ad267622abfc","revision":1,"primary_event_id":71563,"change":"published","superseded_by":[],"changed":{"id":71563,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-54p9-3pw4-46m8","summary":"CGA-54p9-3pw4-46m8","evidence":"osv:CGA-54p9-3pw4-46m8","products":[{"name":{"value":"apache-beam-python-3.14-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.76.0-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-54p9-3pw4-46m8","aliases":["CGA-54p9-3pw4-46m8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76.0-r4"}]}],"package":{"name":"apache-beam-python-3.14-sdk","purl":"pkg:apk/chainguard/apache-beam-python-3.14-sdk?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-54p9-3pw4-46m8.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/share/apache-beam/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:09:12Z"}]}}],"modified":"2026-10-02T23:00:25.372138260Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:78aa5392-2c08-4083-9262-ad267622abfc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-54p9-3pw4-46m8","advisory_id":"78aa5392-2c08-4083-9262-ad267622abfc","event_types":["advisory"],"published_at":"2026-10-25T22:54:58.921101+00:00","technologies":["apache-beam-python-3-14-sdk","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:30:45+00:00","detail_url":"/events/71563"},"members":[{"id":71563,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-54p9-3pw4-46m8","summary":"CGA-54p9-3pw4-46m8","evidence":"osv:CGA-54p9-3pw4-46m8","products":[{"name":{"value":"apache-beam-python-3.14-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.76.0-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-54p9-3pw4-46m8","aliases":["CGA-54p9-3pw4-46m8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76.0-r4"}]}],"package":{"name":"apache-beam-python-3.14-sdk","purl":"pkg:apk/chainguard/apache-beam-python-3.14-sdk?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-54p9-3pw4-46m8.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/share/apache-beam/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:09:12Z"}]}}],"modified":"2026-10-02T23:00:25.372138260Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:78aa5392-2c08-4083-9262-ad267622abfc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-54p9-3pw4-46m8","advisory_id":"78aa5392-2c08-4083-9262-ad267622abfc","event_types":["advisory"],"published_at":"2026-10-25T22:54:58.921101+00:00","technologies":["apache-beam-python-3-14-sdk","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:30:45+00:00","detail_url":"/events/71563"}]}},{"id":71174,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-46g7-vvj7-fv2c","summary":"CGA-46g7-vvj7-fv2c","evidence":"osv:CGA-46g7-vvj7-fv2c","products":[{"name":{"value":"airflow-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.11.2-r26","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-46g7-vvj7-fv2c","aliases":["CGA-46g7-vvj7-fv2c"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-r26"}]}],"package":{"name":"airflow-2","purl":"pkg:apk/chainguard/airflow-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-46g7-vvj7-fv2c.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/airflow/lib/python3.12/site-packages/urllib3-2.6.3.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:29:11Z"}]}}],"modified":"2026-10-02T23:00:24.207374721Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1522029b-753a-4fec-a4d1-2c2139e295eb","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-46g7-vvj7-fv2c","advisory_id":"1522029b-753a-4fec-a4d1-2c2139e295eb","event_types":["advisory"],"published_at":"2026-10-25T22:54:30.273909+00:00","technologies":["airflow-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:38:41+00:00","detail_url":"/advisories/advisory%3A1522029b-753a-4fec-a4d1-2c2139e295eb","group":{"id":"advisory:1522029b-753a-4fec-a4d1-2c2139e295eb","revision":1,"primary_event_id":71554,"change":"published","superseded_by":[],"changed":{"id":71554,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-46g7-vvj7-fv2c","summary":"CGA-46g7-vvj7-fv2c","evidence":"osv:CGA-46g7-vvj7-fv2c","products":[{"name":{"value":"airflow-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.11.2-r26","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-46g7-vvj7-fv2c","aliases":["CGA-46g7-vvj7-fv2c"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-r26"}]}],"package":{"name":"airflow-2","purl":"pkg:apk/chainguard/airflow-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-46g7-vvj7-fv2c.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/airflow/lib/python3.12/site-packages/urllib3-2.6.3.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:29:11Z"}]}}],"modified":"2026-10-02T23:00:24.207374721Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1522029b-753a-4fec-a4d1-2c2139e295eb","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-46g7-vvj7-fv2c","advisory_id":"1522029b-753a-4fec-a4d1-2c2139e295eb","event_types":["advisory"],"published_at":"2026-10-25T22:54:30.273909+00:00","technologies":["airflow-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:38:41+00:00","detail_url":"/events/71554"},"members":[{"id":71554,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-46g7-vvj7-fv2c","summary":"CGA-46g7-vvj7-fv2c","evidence":"osv:CGA-46g7-vvj7-fv2c","products":[{"name":{"value":"airflow-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.11.2-r26","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-46g7-vvj7-fv2c","aliases":["CGA-46g7-vvj7-fv2c"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-r26"}]}],"package":{"name":"airflow-2","purl":"pkg:apk/chainguard/airflow-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-46g7-vvj7-fv2c.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/airflow/lib/python3.12/site-packages/urllib3-2.6.3.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:29:11Z"}]}}],"modified":"2026-10-02T23:00:24.207374721Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1522029b-753a-4fec-a4d1-2c2139e295eb","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-46g7-vvj7-fv2c","advisory_id":"1522029b-753a-4fec-a4d1-2c2139e295eb","event_types":["advisory"],"published_at":"2026-10-25T22:54:30.273909+00:00","technologies":["airflow-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:38:41+00:00","detail_url":"/events/71554"}]}},{"id":71165,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-3qq3-xwcv-c3mx","summary":"CGA-3qq3-xwcv-c3mx","evidence":"osv:CGA-3qq3-xwcv-c3mx","products":[{"name":{"value":"apache-beam-python-3.14-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.76.0-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-3qq3-xwcv-c3mx","aliases":["CGA-3qq3-xwcv-c3mx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76.0-r4"}]}],"package":{"name":"apache-beam-python-3.14-sdk","purl":"pkg:apk/chainguard/apache-beam-python-3.14-sdk?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3qq3-xwcv-c3mx.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/share/apache-beam/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:49:07Z"}]}}],"modified":"2026-10-02T23:00:23.664987984Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e6756d7a-2dc1-48d5-8e72-8dc1cd43b65e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3qq3-xwcv-c3mx","advisory_id":"e6756d7a-2dc1-48d5-8e72-8dc1cd43b65e","event_types":["advisory"],"published_at":"2026-10-25T22:54:07.412743+00:00","technologies":["apache-beam-python-3-14-sdk","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:43:15+00:00","detail_url":"/advisories/advisory%3Ae6756d7a-2dc1-48d5-8e72-8dc1cd43b65e","group":{"id":"advisory:e6756d7a-2dc1-48d5-8e72-8dc1cd43b65e","revision":1,"primary_event_id":71545,"change":"published","superseded_by":[],"changed":{"id":71545,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-3qq3-xwcv-c3mx","summary":"CGA-3qq3-xwcv-c3mx","evidence":"osv:CGA-3qq3-xwcv-c3mx","products":[{"name":{"value":"apache-beam-python-3.14-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.76.0-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-3qq3-xwcv-c3mx","aliases":["CGA-3qq3-xwcv-c3mx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76.0-r4"}]}],"package":{"name":"apache-beam-python-3.14-sdk","purl":"pkg:apk/chainguard/apache-beam-python-3.14-sdk?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3qq3-xwcv-c3mx.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/share/apache-beam/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:49:07Z"}]}}],"modified":"2026-10-02T23:00:23.664987984Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e6756d7a-2dc1-48d5-8e72-8dc1cd43b65e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3qq3-xwcv-c3mx","advisory_id":"e6756d7a-2dc1-48d5-8e72-8dc1cd43b65e","event_types":["advisory"],"published_at":"2026-10-25T22:54:07.412743+00:00","technologies":["apache-beam-python-3-14-sdk","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:43:15+00:00","detail_url":"/events/71545"},"members":[{"id":71545,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-3qq3-xwcv-c3mx","summary":"CGA-3qq3-xwcv-c3mx","evidence":"osv:CGA-3qq3-xwcv-c3mx","products":[{"name":{"value":"apache-beam-python-3.14-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.76.0-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-3qq3-xwcv-c3mx","aliases":["CGA-3qq3-xwcv-c3mx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76.0-r4"}]}],"package":{"name":"apache-beam-python-3.14-sdk","purl":"pkg:apk/chainguard/apache-beam-python-3.14-sdk?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3qq3-xwcv-c3mx.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/share/apache-beam/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:49:07Z"}]}}],"modified":"2026-10-02T23:00:23.664987984Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e6756d7a-2dc1-48d5-8e72-8dc1cd43b65e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3qq3-xwcv-c3mx","advisory_id":"e6756d7a-2dc1-48d5-8e72-8dc1cd43b65e","event_types":["advisory"],"published_at":"2026-10-25T22:54:07.412743+00:00","technologies":["apache-beam-python-3-14-sdk","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:43:15+00:00","detail_url":"/events/71545"}]}},{"id":71121,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-4j89-gp8w-rwh8","summary":"CGA-4j89-gp8w-rwh8","evidence":"osv:CGA-4j89-gp8w-rwh8","products":[{"name":{"value":"jupyterhub-k8s-singleuser-sample","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.2-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-4j89-gp8w-rwh8","aliases":["CGA-4j89-gp8w-rwh8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-r4"}]}],"package":{"name":"jupyterhub-k8s-singleuser-sample","purl":"pkg:apk/chainguard/jupyterhub-k8s-singleuser-sample?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4j89-gp8w-rwh8.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jupyterhub-k8s-singleuser-sample/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:39:59Z"}]}}],"modified":"2026-10-02T23:00:17.538477281Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:56daec2d-08e9-40a0-a0c1-664430306f3e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4j89-gp8w-rwh8","advisory_id":"56daec2d-08e9-40a0-a0c1-664430306f3e","event_types":["advisory"],"published_at":"2026-10-25T22:51:58.689145+00:00","technologies":["core-osv","jupyterhub-k8s-singleuser-sample"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:03:10+00:00","detail_url":"/advisories/advisory%3A56daec2d-08e9-40a0-a0c1-664430306f3e","group":{"id":"advisory:56daec2d-08e9-40a0-a0c1-664430306f3e","revision":1,"primary_event_id":71496,"change":"published","superseded_by":[],"changed":{"id":71496,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-4j89-gp8w-rwh8","summary":"CGA-4j89-gp8w-rwh8","evidence":"osv:CGA-4j89-gp8w-rwh8","products":[{"name":{"value":"jupyterhub-k8s-singleuser-sample","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.2-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-4j89-gp8w-rwh8","aliases":["CGA-4j89-gp8w-rwh8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-r4"}]}],"package":{"name":"jupyterhub-k8s-singleuser-sample","purl":"pkg:apk/chainguard/jupyterhub-k8s-singleuser-sample?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4j89-gp8w-rwh8.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jupyterhub-k8s-singleuser-sample/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:39:59Z"}]}}],"modified":"2026-10-02T23:00:17.538477281Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:56daec2d-08e9-40a0-a0c1-664430306f3e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4j89-gp8w-rwh8","advisory_id":"56daec2d-08e9-40a0-a0c1-664430306f3e","event_types":["advisory"],"published_at":"2026-10-25T22:51:58.689145+00:00","technologies":["core-osv","jupyterhub-k8s-singleuser-sample"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:03:10+00:00","detail_url":"/events/71496"},"members":[{"id":71496,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-4j89-gp8w-rwh8","summary":"CGA-4j89-gp8w-rwh8","evidence":"osv:CGA-4j89-gp8w-rwh8","products":[{"name":{"value":"jupyterhub-k8s-singleuser-sample","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.2-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-4j89-gp8w-rwh8","aliases":["CGA-4j89-gp8w-rwh8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-r4"}]}],"package":{"name":"jupyterhub-k8s-singleuser-sample","purl":"pkg:apk/chainguard/jupyterhub-k8s-singleuser-sample?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4j89-gp8w-rwh8.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jupyterhub-k8s-singleuser-sample/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:39:59Z"}]}}],"modified":"2026-10-02T23:00:17.538477281Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:56daec2d-08e9-40a0-a0c1-664430306f3e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4j89-gp8w-rwh8","advisory_id":"56daec2d-08e9-40a0-a0c1-664430306f3e","event_types":["advisory"],"published_at":"2026-10-25T22:51:58.689145+00:00","technologies":["core-osv","jupyterhub-k8s-singleuser-sample"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:03:10+00:00","detail_url":"/events/71496"}]}},{"id":71029,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-4ch4-92vx-4vx4","summary":"CGA-4ch4-92vx-4vx4","evidence":"osv:CGA-4ch4-92vx-4vx4","products":[{"name":{"value":"pypy-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pypy-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-4ch4-92vx-4vx4","aliases":["CGA-4ch4-92vx-4vx4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/chainguard/pypy-3.10?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4ch4-92vx-4vx4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/wolfi/pypy-3.10?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4ch4-92vx-4vx4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:06Z"}]}}],"modified":"2026-10-02T23:00:08.376500057Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:037f0c7f-4da2-4494-ae09-d0d663b1775f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4ch4-92vx-4vx4","advisory_id":"037f0c7f-4da2-4494-ae09-d0d663b1775f","event_types":["advisory"],"published_at":"2026-10-25T22:47:44.323242+00:00","technologies":["core-osv","pypy-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:46:04+00:00","detail_url":"/advisories/advisory%3A037f0c7f-4da2-4494-ae09-d0d663b1775f","group":{"id":"advisory:037f0c7f-4da2-4494-ae09-d0d663b1775f","revision":1,"primary_event_id":71403,"change":"published","superseded_by":[],"changed":{"id":71403,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-4ch4-92vx-4vx4","summary":"CGA-4ch4-92vx-4vx4","evidence":"osv:CGA-4ch4-92vx-4vx4","products":[{"name":{"value":"pypy-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pypy-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-4ch4-92vx-4vx4","aliases":["CGA-4ch4-92vx-4vx4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/chainguard/pypy-3.10?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4ch4-92vx-4vx4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/wolfi/pypy-3.10?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4ch4-92vx-4vx4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:06Z"}]}}],"modified":"2026-10-02T23:00:08.376500057Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:037f0c7f-4da2-4494-ae09-d0d663b1775f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4ch4-92vx-4vx4","advisory_id":"037f0c7f-4da2-4494-ae09-d0d663b1775f","event_types":["advisory"],"published_at":"2026-10-25T22:47:44.323242+00:00","technologies":["core-osv","pypy-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:46:04+00:00","detail_url":"/events/71403"},"members":[{"id":71403,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-4ch4-92vx-4vx4","summary":"CGA-4ch4-92vx-4vx4","evidence":"osv:CGA-4ch4-92vx-4vx4","products":[{"name":{"value":"pypy-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pypy-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-4ch4-92vx-4vx4","aliases":["CGA-4ch4-92vx-4vx4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/chainguard/pypy-3.10?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4ch4-92vx-4vx4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/wolfi/pypy-3.10?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4ch4-92vx-4vx4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:06Z"}]}}],"modified":"2026-10-02T23:00:08.376500057Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:037f0c7f-4da2-4494-ae09-d0d663b1775f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4ch4-92vx-4vx4","advisory_id":"037f0c7f-4da2-4494-ae09-d0d663b1775f","event_types":["advisory"],"published_at":"2026-10-25T22:47:44.323242+00:00","technologies":["core-osv","pypy-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:46:04+00:00","detail_url":"/events/71403"}]}},{"id":70938,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-xj2q-25w3-j8gh","summary":"CGA-xj2q-25w3-j8gh","evidence":"osv:CGA-xj2q-25w3-j8gh","products":[{"name":{"value":"openstack-horizon-2026.1-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"25.7.3_git20261001-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-xj2q-25w3-j8gh","aliases":["CGA-xj2q-25w3-j8gh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.7.3_git20261001-r1"}]}],"package":{"name":"openstack-horizon-2026.1-fips","purl":"pkg:apk/chainguard/openstack-horizon-2026.1-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xj2q-25w3-j8gh.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-horizon-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:06:39Z"}]}}],"modified":"2026-10-02T18:28:00.881634975Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6883a406-b750-4b40-ba14-0604455c839e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xj2q-25w3-j8gh","advisory_id":"6883a406-b750-4b40-ba14-0604455c839e","event_types":["advisory"],"published_at":"2026-10-25T22:45:06.912481+00:00","technologies":["core-osv","openstack-horizon-2026-1-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:32:09+00:00","detail_url":"/advisories/advisory%3A6883a406-b750-4b40-ba14-0604455c839e","group":{"id":"advisory:6883a406-b750-4b40-ba14-0604455c839e","revision":1,"primary_event_id":71309,"change":"published","superseded_by":[],"changed":{"id":71309,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-xj2q-25w3-j8gh","summary":"CGA-xj2q-25w3-j8gh","evidence":"osv:CGA-xj2q-25w3-j8gh","products":[{"name":{"value":"openstack-horizon-2026.1-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"25.7.3_git20261001-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-xj2q-25w3-j8gh","aliases":["CGA-xj2q-25w3-j8gh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.7.3_git20261001-r1"}]}],"package":{"name":"openstack-horizon-2026.1-fips","purl":"pkg:apk/chainguard/openstack-horizon-2026.1-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xj2q-25w3-j8gh.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-horizon-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:06:39Z"}]}}],"modified":"2026-10-02T18:28:00.881634975Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6883a406-b750-4b40-ba14-0604455c839e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xj2q-25w3-j8gh","advisory_id":"6883a406-b750-4b40-ba14-0604455c839e","event_types":["advisory"],"published_at":"2026-10-25T22:45:06.912481+00:00","technologies":["core-osv","openstack-horizon-2026-1-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:32:09+00:00","detail_url":"/events/71309"},"members":[{"id":71309,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-xj2q-25w3-j8gh","summary":"CGA-xj2q-25w3-j8gh","evidence":"osv:CGA-xj2q-25w3-j8gh","products":[{"name":{"value":"openstack-horizon-2026.1-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"25.7.3_git20261001-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-xj2q-25w3-j8gh","aliases":["CGA-xj2q-25w3-j8gh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.7.3_git20261001-r1"}]}],"package":{"name":"openstack-horizon-2026.1-fips","purl":"pkg:apk/chainguard/openstack-horizon-2026.1-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xj2q-25w3-j8gh.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-horizon-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:06:39Z"}]}}],"modified":"2026-10-02T18:28:00.881634975Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6883a406-b750-4b40-ba14-0604455c839e","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xj2q-25w3-j8gh","advisory_id":"6883a406-b750-4b40-ba14-0604455c839e","event_types":["advisory"],"published_at":"2026-10-25T22:45:06.912481+00:00","technologies":["core-osv","openstack-horizon-2026-1-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:32:09+00:00","detail_url":"/events/71309"}]}},{"id":70906,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-cw4j-jf68-p9hp","summary":"CGA-cw4j-jf68-p9hp","evidence":"osv:CGA-cw4j-jf68-p9hp","products":[{"name":{"value":"openstack-horizon-2026.1-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"25.7.3_git20261001-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-cw4j-jf68-p9hp","aliases":["CGA-cw4j-jf68-p9hp"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.7.3_git20261001-r1"}]}],"package":{"name":"openstack-horizon-2026.1-fips","purl":"pkg:apk/chainguard/openstack-horizon-2026.1-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cw4j-jf68-p9hp.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-horizon-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:11:12Z"}]}}],"modified":"2026-10-02T18:27:53.627606700Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1db6ba61-3d37-4e62-8d7b-8d45c564ac3c","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cw4j-jf68-p9hp","advisory_id":"1db6ba61-3d37-4e62-8d7b-8d45c564ac3c","event_types":["advisory"],"published_at":"2026-10-25T22:44:21.665288+00:00","technologies":["core-osv","openstack-horizon-2026-1-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:49:10+00:00","detail_url":"/advisories/advisory%3A1db6ba61-3d37-4e62-8d7b-8d45c564ac3c","group":{"id":"advisory:1db6ba61-3d37-4e62-8d7b-8d45c564ac3c","revision":1,"primary_event_id":71277,"change":"published","superseded_by":[],"changed":{"id":71277,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-cw4j-jf68-p9hp","summary":"CGA-cw4j-jf68-p9hp","evidence":"osv:CGA-cw4j-jf68-p9hp","products":[{"name":{"value":"openstack-horizon-2026.1-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"25.7.3_git20261001-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-cw4j-jf68-p9hp","aliases":["CGA-cw4j-jf68-p9hp"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.7.3_git20261001-r1"}]}],"package":{"name":"openstack-horizon-2026.1-fips","purl":"pkg:apk/chainguard/openstack-horizon-2026.1-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cw4j-jf68-p9hp.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-horizon-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:11:12Z"}]}}],"modified":"2026-10-02T18:27:53.627606700Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1db6ba61-3d37-4e62-8d7b-8d45c564ac3c","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cw4j-jf68-p9hp","advisory_id":"1db6ba61-3d37-4e62-8d7b-8d45c564ac3c","event_types":["advisory"],"published_at":"2026-10-25T22:44:21.665288+00:00","technologies":["core-osv","openstack-horizon-2026-1-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:49:10+00:00","detail_url":"/events/71277"},"members":[{"id":71277,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-cw4j-jf68-p9hp","summary":"CGA-cw4j-jf68-p9hp","evidence":"osv:CGA-cw4j-jf68-p9hp","products":[{"name":{"value":"openstack-horizon-2026.1-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"25.7.3_git20261001-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-cw4j-jf68-p9hp","aliases":["CGA-cw4j-jf68-p9hp"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.7.3_git20261001-r1"}]}],"package":{"name":"openstack-horizon-2026.1-fips","purl":"pkg:apk/chainguard/openstack-horizon-2026.1-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cw4j-jf68-p9hp.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-horizon-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:11:12Z"}]}}],"modified":"2026-10-02T18:27:53.627606700Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1db6ba61-3d37-4e62-8d7b-8d45c564ac3c","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cw4j-jf68-p9hp","advisory_id":"1db6ba61-3d37-4e62-8d7b-8d45c564ac3c","event_types":["advisory"],"published_at":"2026-10-25T22:44:21.665288+00:00","technologies":["core-osv","openstack-horizon-2026-1-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:49:10+00:00","detail_url":"/events/71277"}]}},{"id":70894,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-vcg6-qfhw-rcqc","summary":"CGA-vcg6-qfhw-rcqc","evidence":"osv:CGA-vcg6-qfhw-rcqc","products":[{"name":{"value":"openstack-keystone-2025.2-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"28.0.1_git20260902-r6","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-vcg6-qfhw-rcqc","aliases":["CGA-vcg6-qfhw-rcqc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.1_git20260902-r6"}]}],"package":{"name":"openstack-keystone-2025.2-fips","purl":"pkg:apk/chainguard/openstack-keystone-2025.2-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vcg6-qfhw-rcqc.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-keystone-2025.2/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:32:08Z"}]}}],"modified":"2026-10-02T18:27:51.411075429Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5de7ed90-fcb7-4427-815b-70793791e091","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vcg6-qfhw-rcqc","advisory_id":"5de7ed90-fcb7-4427-815b-70793791e091","event_types":["advisory"],"published_at":"2026-10-25T22:44:07.887779+00:00","technologies":["core-osv","openstack-keystone-2025-2-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:27:09+00:00","detail_url":"/advisories/advisory%3A5de7ed90-fcb7-4427-815b-70793791e091","group":{"id":"advisory:5de7ed90-fcb7-4427-815b-70793791e091","revision":1,"primary_event_id":71265,"change":"published","superseded_by":[],"changed":{"id":71265,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-vcg6-qfhw-rcqc","summary":"CGA-vcg6-qfhw-rcqc","evidence":"osv:CGA-vcg6-qfhw-rcqc","products":[{"name":{"value":"openstack-keystone-2025.2-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"28.0.1_git20260902-r6","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-vcg6-qfhw-rcqc","aliases":["CGA-vcg6-qfhw-rcqc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.1_git20260902-r6"}]}],"package":{"name":"openstack-keystone-2025.2-fips","purl":"pkg:apk/chainguard/openstack-keystone-2025.2-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vcg6-qfhw-rcqc.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-keystone-2025.2/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:32:08Z"}]}}],"modified":"2026-10-02T18:27:51.411075429Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5de7ed90-fcb7-4427-815b-70793791e091","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vcg6-qfhw-rcqc","advisory_id":"5de7ed90-fcb7-4427-815b-70793791e091","event_types":["advisory"],"published_at":"2026-10-25T22:44:07.887779+00:00","technologies":["core-osv","openstack-keystone-2025-2-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:27:09+00:00","detail_url":"/events/71265"},"members":[{"id":71265,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-vcg6-qfhw-rcqc","summary":"CGA-vcg6-qfhw-rcqc","evidence":"osv:CGA-vcg6-qfhw-rcqc","products":[{"name":{"value":"openstack-keystone-2025.2-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"28.0.1_git20260902-r6","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-vcg6-qfhw-rcqc","aliases":["CGA-vcg6-qfhw-rcqc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.1_git20260902-r6"}]}],"package":{"name":"openstack-keystone-2025.2-fips","purl":"pkg:apk/chainguard/openstack-keystone-2025.2-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vcg6-qfhw-rcqc.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-keystone-2025.2/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:32:08Z"}]}}],"modified":"2026-10-02T18:27:51.411075429Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5de7ed90-fcb7-4427-815b-70793791e091","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vcg6-qfhw-rcqc","advisory_id":"5de7ed90-fcb7-4427-815b-70793791e091","event_types":["advisory"],"published_at":"2026-10-25T22:44:07.887779+00:00","technologies":["core-osv","openstack-keystone-2025-2-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:27:09+00:00","detail_url":"/events/71265"}]}},{"id":70780,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-v4m7-2cvj-mgmw","summary":"CGA-v4m7-2cvj-mgmw","evidence":"osv:CGA-v4m7-2cvj-mgmw","products":[{"name":{"value":"py3.12-opentelemetry-exporter-otlp","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.40.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-v4m7-2cvj-mgmw","aliases":["CGA-v4m7-2cvj-mgmw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-r3"}]}],"package":{"name":"py3.12-opentelemetry-exporter-otlp","purl":"pkg:apk/chainguard/py3.12-opentelemetry-exporter-otlp?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v4m7-2cvj-mgmw.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:01:26Z"}]}}],"modified":"2026-10-02T18:25:45.635910281Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c4b9485c-4374-422c-89d4-6fc89441463f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v4m7-2cvj-mgmw","advisory_id":"c4b9485c-4374-422c-89d4-6fc89441463f","event_types":["advisory"],"published_at":"2026-10-25T22:39:11.203932+00:00","technologies":["core-osv","py3-12-opentelemetry-exporter-otlp"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:38:27+00:00","detail_url":"/advisories/advisory%3Ac4b9485c-4374-422c-89d4-6fc89441463f","group":{"id":"advisory:c4b9485c-4374-422c-89d4-6fc89441463f","revision":1,"primary_event_id":71151,"change":"published","superseded_by":[],"changed":{"id":71151,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-v4m7-2cvj-mgmw","summary":"CGA-v4m7-2cvj-mgmw","evidence":"osv:CGA-v4m7-2cvj-mgmw","products":[{"name":{"value":"py3.12-opentelemetry-exporter-otlp","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.40.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-v4m7-2cvj-mgmw","aliases":["CGA-v4m7-2cvj-mgmw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-r3"}]}],"package":{"name":"py3.12-opentelemetry-exporter-otlp","purl":"pkg:apk/chainguard/py3.12-opentelemetry-exporter-otlp?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v4m7-2cvj-mgmw.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:01:26Z"}]}}],"modified":"2026-10-02T18:25:45.635910281Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c4b9485c-4374-422c-89d4-6fc89441463f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v4m7-2cvj-mgmw","advisory_id":"c4b9485c-4374-422c-89d4-6fc89441463f","event_types":["advisory"],"published_at":"2026-10-25T22:39:11.203932+00:00","technologies":["core-osv","py3-12-opentelemetry-exporter-otlp"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:38:27+00:00","detail_url":"/events/71151"},"members":[{"id":71151,"cve_ids":["CVE-2026-97687"],"payload":{"kind":"advisory","title":"CGA-v4m7-2cvj-mgmw","summary":"CGA-v4m7-2cvj-mgmw","evidence":"osv:CGA-v4m7-2cvj-mgmw","products":[{"name":{"value":"py3.12-opentelemetry-exporter-otlp","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.40.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-v4m7-2cvj-mgmw","aliases":["CGA-v4m7-2cvj-mgmw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-r3"}]}],"package":{"name":"py3.12-opentelemetry-exporter-otlp","purl":"pkg:apk/chainguard/py3.12-opentelemetry-exporter-otlp?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v4m7-2cvj-mgmw.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:01:26Z"}]}}],"modified":"2026-10-02T18:25:45.635910281Z","provider":"osv","upstream":["CVE-2026-97687","GHSA-8988-9cw3-xx77"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97687.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77","https://nvd.nist.gov/vuln/detail/CVE-2026-97687","https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465","https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3","https://github.com/urllib3/urllib3/pull/5093"]},"related_cves":[{"value":"CVE-2026-97687","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c4b9485c-4374-422c-89d4-6fc89441463f","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97687","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97687","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v4m7-2cvj-mgmw","advisory_id":"c4b9485c-4374-422c-89d4-6fc89441463f","event_types":["advisory"],"published_at":"2026-10-25T22:39:11.203932+00:00","technologies":["core-osv","py3-12-opentelemetry-exporter-otlp"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:38:27+00:00","detail_url":"/events/71151"}]}}],"next_after":73152,"next_before":70780}