{"schema_version":"2","view":"grouped","data":[{"id":72949,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-gwmx-j9m3-24rw","summary":"CGA-gwmx-j9m3-24rw","evidence":"osv:CGA-gwmx-j9m3-24rw","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-gwmx-j9m3-24rw","aliases":["CGA-gwmx-j9m3-24rw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gwmx-j9m3-24rw.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:25:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gwmx-j9m3-24rw.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:25:07Z"}]}}],"modified":"2026-10-03T10:32:41.641136004Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:bb4708f6-f33e-4ca8-b18e-419d8f9d2ec7","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gwmx-j9m3-24rw","advisory_id":"bb4708f6-f33e-4ca8-b18e-419d8f9d2ec7","event_types":["advisory"],"published_at":"2026-10-26T01:48:19.267728+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T03:14:12+00:00","detail_url":"/advisories/advisory%3Abb4708f6-f33e-4ca8-b18e-419d8f9d2ec7","group":{"id":"advisory:bb4708f6-f33e-4ca8-b18e-419d8f9d2ec7","revision":1,"primary_event_id":74070,"change":"published","superseded_by":[],"changed":{"id":74070,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-gwmx-j9m3-24rw","summary":"CGA-gwmx-j9m3-24rw","evidence":"osv:CGA-gwmx-j9m3-24rw","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-gwmx-j9m3-24rw","aliases":["CGA-gwmx-j9m3-24rw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gwmx-j9m3-24rw.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:25:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gwmx-j9m3-24rw.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:25:07Z"}]}}],"modified":"2026-10-03T10:32:41.641136004Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:bb4708f6-f33e-4ca8-b18e-419d8f9d2ec7","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gwmx-j9m3-24rw","advisory_id":"bb4708f6-f33e-4ca8-b18e-419d8f9d2ec7","event_types":["advisory"],"published_at":"2026-10-26T01:48:19.267728+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T03:14:12+00:00","detail_url":"/events/74070"},"members":[{"id":74070,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-gwmx-j9m3-24rw","summary":"CGA-gwmx-j9m3-24rw","evidence":"osv:CGA-gwmx-j9m3-24rw","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-gwmx-j9m3-24rw","aliases":["CGA-gwmx-j9m3-24rw"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gwmx-j9m3-24rw.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:25:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gwmx-j9m3-24rw.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:25:07Z"}]}}],"modified":"2026-10-03T10:32:41.641136004Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:bb4708f6-f33e-4ca8-b18e-419d8f9d2ec7","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gwmx-j9m3-24rw","advisory_id":"bb4708f6-f33e-4ca8-b18e-419d8f9d2ec7","event_types":["advisory"],"published_at":"2026-10-26T01:48:19.267728+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T03:14:12+00:00","detail_url":"/events/74070"}]}},{"id":72940,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-ggjw-hwpc-57h4","summary":"CGA-ggjw-hwpc-57h4","evidence":"osv:CGA-ggjw-hwpc-57h4","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-ggjw-hwpc-57h4","aliases":["CGA-ggjw-hwpc-57h4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-ggjw-hwpc-57h4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:57Z"}]}}],"modified":"2026-10-03T10:32:41.088492197Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:895bfbf0-50d1-4cec-9797-172c718e36f8","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-ggjw-hwpc-57h4","advisory_id":"895bfbf0-50d1-4cec-9797-172c718e36f8","event_types":["advisory"],"published_at":"2026-10-26T01:41:44.353249+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:07+00:00","detail_url":"/advisories/advisory%3A895bfbf0-50d1-4cec-9797-172c718e36f8","group":{"id":"advisory:895bfbf0-50d1-4cec-9797-172c718e36f8","revision":1,"primary_event_id":74004,"change":"published","superseded_by":[],"changed":{"id":74004,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-ggjw-hwpc-57h4","summary":"CGA-ggjw-hwpc-57h4","evidence":"osv:CGA-ggjw-hwpc-57h4","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-ggjw-hwpc-57h4","aliases":["CGA-ggjw-hwpc-57h4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-ggjw-hwpc-57h4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:57Z"}]}}],"modified":"2026-10-03T10:32:41.088492197Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:895bfbf0-50d1-4cec-9797-172c718e36f8","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-ggjw-hwpc-57h4","advisory_id":"895bfbf0-50d1-4cec-9797-172c718e36f8","event_types":["advisory"],"published_at":"2026-10-26T01:41:44.353249+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:07+00:00","detail_url":"/events/74004"},"members":[{"id":74004,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-ggjw-hwpc-57h4","summary":"CGA-ggjw-hwpc-57h4","evidence":"osv:CGA-ggjw-hwpc-57h4","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-ggjw-hwpc-57h4","aliases":["CGA-ggjw-hwpc-57h4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-ggjw-hwpc-57h4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:57Z"}]}}],"modified":"2026-10-03T10:32:41.088492197Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:895bfbf0-50d1-4cec-9797-172c718e36f8","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-ggjw-hwpc-57h4","advisory_id":"895bfbf0-50d1-4cec-9797-172c718e36f8","event_types":["advisory"],"published_at":"2026-10-26T01:41:44.353249+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:07+00:00","detail_url":"/events/74004"}]}},{"id":72920,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-fmxc-7m3j-vg47","summary":"CGA-fmxc-7m3j-vg47","evidence":"osv:CGA-fmxc-7m3j-vg47","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-fmxc-7m3j-vg47","aliases":["CGA-fmxc-7m3j-vg47"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fmxc-7m3j-vg47.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:00:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fmxc-7m3j-vg47.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:00:09Z"}]}}],"modified":"2026-10-03T10:32:40.331315176Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:341ed8ef-4652-423c-993a-873a2345bf10","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fmxc-7m3j-vg47","advisory_id":"341ed8ef-4652-423c-993a-873a2345bf10","event_types":["advisory"],"published_at":"2026-10-26T01:37:23.155632+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T04:09:13+00:00","detail_url":"/advisories/advisory%3A341ed8ef-4652-423c-993a-873a2345bf10","group":{"id":"advisory:341ed8ef-4652-423c-993a-873a2345bf10","revision":1,"primary_event_id":73953,"change":"published","superseded_by":[],"changed":{"id":73953,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-fmxc-7m3j-vg47","summary":"CGA-fmxc-7m3j-vg47","evidence":"osv:CGA-fmxc-7m3j-vg47","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-fmxc-7m3j-vg47","aliases":["CGA-fmxc-7m3j-vg47"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fmxc-7m3j-vg47.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:00:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fmxc-7m3j-vg47.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:00:09Z"}]}}],"modified":"2026-10-03T10:32:40.331315176Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:341ed8ef-4652-423c-993a-873a2345bf10","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fmxc-7m3j-vg47","advisory_id":"341ed8ef-4652-423c-993a-873a2345bf10","event_types":["advisory"],"published_at":"2026-10-26T01:37:23.155632+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T04:09:13+00:00","detail_url":"/events/73953"},"members":[{"id":73953,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-fmxc-7m3j-vg47","summary":"CGA-fmxc-7m3j-vg47","evidence":"osv:CGA-fmxc-7m3j-vg47","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-fmxc-7m3j-vg47","aliases":["CGA-fmxc-7m3j-vg47"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fmxc-7m3j-vg47.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:00:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fmxc-7m3j-vg47.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:00:09Z"}]}}],"modified":"2026-10-03T10:32:40.331315176Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:341ed8ef-4652-423c-993a-873a2345bf10","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fmxc-7m3j-vg47","advisory_id":"341ed8ef-4652-423c-993a-873a2345bf10","event_types":["advisory"],"published_at":"2026-10-26T01:37:23.155632+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T04:09:13+00:00","detail_url":"/events/73953"}]}},{"id":72899,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-f6hg-mhmq-qv24","summary":"CGA-f6hg-mhmq-qv24","evidence":"osv:CGA-f6hg-mhmq-qv24","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-f6hg-mhmq-qv24","aliases":["CGA-f6hg-mhmq-qv24"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f6hg-mhmq-qv24.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:25Z"}]}}],"modified":"2026-10-03T10:32:39.791627364Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:43dbca19-2382-41bb-856b-8bc45701813e","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f6hg-mhmq-qv24","advisory_id":"43dbca19-2382-41bb-856b-8bc45701813e","event_types":["advisory"],"published_at":"2026-10-26T01:32:15.582491+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:38+00:00","detail_url":"/advisories/advisory%3A43dbca19-2382-41bb-856b-8bc45701813e","group":{"id":"advisory:43dbca19-2382-41bb-856b-8bc45701813e","revision":1,"primary_event_id":73895,"change":"published","superseded_by":[],"changed":{"id":73895,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-f6hg-mhmq-qv24","summary":"CGA-f6hg-mhmq-qv24","evidence":"osv:CGA-f6hg-mhmq-qv24","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-f6hg-mhmq-qv24","aliases":["CGA-f6hg-mhmq-qv24"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f6hg-mhmq-qv24.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:25Z"}]}}],"modified":"2026-10-03T10:32:39.791627364Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:43dbca19-2382-41bb-856b-8bc45701813e","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f6hg-mhmq-qv24","advisory_id":"43dbca19-2382-41bb-856b-8bc45701813e","event_types":["advisory"],"published_at":"2026-10-26T01:32:15.582491+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:38+00:00","detail_url":"/events/73895"},"members":[{"id":73895,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-f6hg-mhmq-qv24","summary":"CGA-f6hg-mhmq-qv24","evidence":"osv:CGA-f6hg-mhmq-qv24","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-f6hg-mhmq-qv24","aliases":["CGA-f6hg-mhmq-qv24"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f6hg-mhmq-qv24.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:25Z"}]}}],"modified":"2026-10-03T10:32:39.791627364Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:43dbca19-2382-41bb-856b-8bc45701813e","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f6hg-mhmq-qv24","advisory_id":"43dbca19-2382-41bb-856b-8bc45701813e","event_types":["advisory"],"published_at":"2026-10-26T01:32:15.582491+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:38+00:00","detail_url":"/events/73895"}]}},{"id":72861,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-9qf5-5xpp-96x8","summary":"CGA-9qf5-5xpp-96x8","evidence":"osv:CGA-9qf5-5xpp-96x8","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-9qf5-5xpp-96x8","aliases":["CGA-9qf5-5xpp-96x8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9qf5-5xpp-96x8.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:41Z"}]}}],"modified":"2026-10-03T10:32:38.197928347Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d7a971d4-7d03-493d-bba4-51941ffb3379","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9qf5-5xpp-96x8","advisory_id":"d7a971d4-7d03-493d-bba4-51941ffb3379","event_types":["advisory"],"published_at":"2026-10-26T01:19:35.854609+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:14+00:00","detail_url":"/advisories/advisory%3Ad7a971d4-7d03-493d-bba4-51941ffb3379","group":{"id":"advisory:d7a971d4-7d03-493d-bba4-51941ffb3379","revision":1,"primary_event_id":73745,"change":"published","superseded_by":[],"changed":{"id":73745,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-9qf5-5xpp-96x8","summary":"CGA-9qf5-5xpp-96x8","evidence":"osv:CGA-9qf5-5xpp-96x8","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-9qf5-5xpp-96x8","aliases":["CGA-9qf5-5xpp-96x8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9qf5-5xpp-96x8.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:41Z"}]}}],"modified":"2026-10-03T10:32:38.197928347Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d7a971d4-7d03-493d-bba4-51941ffb3379","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9qf5-5xpp-96x8","advisory_id":"d7a971d4-7d03-493d-bba4-51941ffb3379","event_types":["advisory"],"published_at":"2026-10-26T01:19:35.854609+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:14+00:00","detail_url":"/events/73745"},"members":[{"id":73745,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-9qf5-5xpp-96x8","summary":"CGA-9qf5-5xpp-96x8","evidence":"osv:CGA-9qf5-5xpp-96x8","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-9qf5-5xpp-96x8","aliases":["CGA-9qf5-5xpp-96x8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9qf5-5xpp-96x8.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:41Z"}]}}],"modified":"2026-10-03T10:32:38.197928347Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d7a971d4-7d03-493d-bba4-51941ffb3379","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9qf5-5xpp-96x8","advisory_id":"d7a971d4-7d03-493d-bba4-51941ffb3379","event_types":["advisory"],"published_at":"2026-10-26T01:19:35.854609+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:14+00:00","detail_url":"/events/73745"}]}},{"id":72844,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-953g-gqx9-95rg","summary":"CGA-953g-gqx9-95rg","evidence":"osv:CGA-953g-gqx9-95rg","products":[{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-953g-gqx9-95rg","aliases":["CGA-953g-gqx9-95rg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-953g-gqx9-95rg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:03Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-953g-gqx9-95rg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:03Z"}]}}],"modified":"2026-10-03T10:32:37.570030519Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:212faee6-9756-4b20-9ed8-3129fa013f65","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-953g-gqx9-95rg","advisory_id":"212faee6-9756-4b20-9ed8-3129fa013f65","event_types":["advisory"],"published_at":"2026-10-26T01:15:28.522489+00:00","technologies":["core-osv","datadog-agent-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:35+00:00","detail_url":"/advisories/advisory%3A212faee6-9756-4b20-9ed8-3129fa013f65","group":{"id":"advisory:212faee6-9756-4b20-9ed8-3129fa013f65","revision":1,"primary_event_id":73703,"change":"published","superseded_by":[],"changed":{"id":73703,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-953g-gqx9-95rg","summary":"CGA-953g-gqx9-95rg","evidence":"osv:CGA-953g-gqx9-95rg","products":[{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-953g-gqx9-95rg","aliases":["CGA-953g-gqx9-95rg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-953g-gqx9-95rg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:03Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-953g-gqx9-95rg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:03Z"}]}}],"modified":"2026-10-03T10:32:37.570030519Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:212faee6-9756-4b20-9ed8-3129fa013f65","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-953g-gqx9-95rg","advisory_id":"212faee6-9756-4b20-9ed8-3129fa013f65","event_types":["advisory"],"published_at":"2026-10-26T01:15:28.522489+00:00","technologies":["core-osv","datadog-agent-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:35+00:00","detail_url":"/events/73703"},"members":[{"id":73703,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-953g-gqx9-95rg","summary":"CGA-953g-gqx9-95rg","evidence":"osv:CGA-953g-gqx9-95rg","products":[{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-953g-gqx9-95rg","aliases":["CGA-953g-gqx9-95rg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-953g-gqx9-95rg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:03Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-953g-gqx9-95rg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:03Z"}]}}],"modified":"2026-10-03T10:32:37.570030519Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:212faee6-9756-4b20-9ed8-3129fa013f65","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-953g-gqx9-95rg","advisory_id":"212faee6-9756-4b20-9ed8-3129fa013f65","event_types":["advisory"],"published_at":"2026-10-26T01:15:28.522489+00:00","technologies":["core-osv","datadog-agent-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:35+00:00","detail_url":"/events/73703"}]}},{"id":72824,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-8vpr-pcm3-7qph","summary":"CGA-8vpr-pcm3-7qph","evidence":"osv:CGA-8vpr-pcm3-7qph","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8vpr-pcm3-7qph","aliases":["CGA-8vpr-pcm3-7qph"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8vpr-pcm3-7qph.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:24Z"}]}}],"modified":"2026-10-03T10:32:36.937918763Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:47f2dee7-6d7b-44e8-b9d0-e64e28676310","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8vpr-pcm3-7qph","advisory_id":"47f2dee7-6d7b-44e8-b9d0-e64e28676310","event_types":["advisory"],"published_at":"2026-10-26T01:12:08.407003+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:38+00:00","detail_url":"/advisories/advisory%3A47f2dee7-6d7b-44e8-b9d0-e64e28676310","group":{"id":"advisory:47f2dee7-6d7b-44e8-b9d0-e64e28676310","revision":1,"primary_event_id":73670,"change":"published","superseded_by":[],"changed":{"id":73670,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-8vpr-pcm3-7qph","summary":"CGA-8vpr-pcm3-7qph","evidence":"osv:CGA-8vpr-pcm3-7qph","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8vpr-pcm3-7qph","aliases":["CGA-8vpr-pcm3-7qph"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8vpr-pcm3-7qph.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:24Z"}]}}],"modified":"2026-10-03T10:32:36.937918763Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:47f2dee7-6d7b-44e8-b9d0-e64e28676310","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8vpr-pcm3-7qph","advisory_id":"47f2dee7-6d7b-44e8-b9d0-e64e28676310","event_types":["advisory"],"published_at":"2026-10-26T01:12:08.407003+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:38+00:00","detail_url":"/events/73670"},"members":[{"id":73670,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-8vpr-pcm3-7qph","summary":"CGA-8vpr-pcm3-7qph","evidence":"osv:CGA-8vpr-pcm3-7qph","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8vpr-pcm3-7qph","aliases":["CGA-8vpr-pcm3-7qph"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8vpr-pcm3-7qph.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:24Z"}]}}],"modified":"2026-10-03T10:32:36.937918763Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:47f2dee7-6d7b-44e8-b9d0-e64e28676310","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8vpr-pcm3-7qph","advisory_id":"47f2dee7-6d7b-44e8-b9d0-e64e28676310","event_types":["advisory"],"published_at":"2026-10-26T01:12:08.407003+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:38+00:00","detail_url":"/events/73670"}]}},{"id":72820,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-8q7c-vj75-wg4m","summary":"CGA-8q7c-vj75-wg4m","evidence":"osv:CGA-8q7c-vj75-wg4m","products":[{"name":{"value":"datadog-agent-7.79","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8q7c-vj75-wg4m","aliases":["CGA-8q7c-vj75-wg4m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/chainguard/datadog-agent-7.79?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8q7c-vj75-wg4m.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/wolfi/datadog-agent-7.79?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8q7c-vj75-wg4m.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:09Z"}]}}],"modified":"2026-10-03T10:32:36.795444555Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:01fe9094-bf49-4d28-adc4-ebb020b00cb9","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8q7c-vj75-wg4m","advisory_id":"01fe9094-bf49-4d28-adc4-ebb020b00cb9","event_types":["advisory"],"published_at":"2026-10-26T01:11:26.938238+00:00","technologies":["core-osv","datadog-agent-7-79"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:05+00:00","detail_url":"/advisories/advisory%3A01fe9094-bf49-4d28-adc4-ebb020b00cb9","group":{"id":"advisory:01fe9094-bf49-4d28-adc4-ebb020b00cb9","revision":1,"primary_event_id":73660,"change":"published","superseded_by":[],"changed":{"id":73660,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-8q7c-vj75-wg4m","summary":"CGA-8q7c-vj75-wg4m","evidence":"osv:CGA-8q7c-vj75-wg4m","products":[{"name":{"value":"datadog-agent-7.79","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8q7c-vj75-wg4m","aliases":["CGA-8q7c-vj75-wg4m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/chainguard/datadog-agent-7.79?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8q7c-vj75-wg4m.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/wolfi/datadog-agent-7.79?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8q7c-vj75-wg4m.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:09Z"}]}}],"modified":"2026-10-03T10:32:36.795444555Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:01fe9094-bf49-4d28-adc4-ebb020b00cb9","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8q7c-vj75-wg4m","advisory_id":"01fe9094-bf49-4d28-adc4-ebb020b00cb9","event_types":["advisory"],"published_at":"2026-10-26T01:11:26.938238+00:00","technologies":["core-osv","datadog-agent-7-79"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:05+00:00","detail_url":"/events/73660"},"members":[{"id":73660,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-8q7c-vj75-wg4m","summary":"CGA-8q7c-vj75-wg4m","evidence":"osv:CGA-8q7c-vj75-wg4m","products":[{"name":{"value":"datadog-agent-7.79","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8q7c-vj75-wg4m","aliases":["CGA-8q7c-vj75-wg4m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/chainguard/datadog-agent-7.79?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8q7c-vj75-wg4m.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/wolfi/datadog-agent-7.79?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8q7c-vj75-wg4m.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:09Z"}]}}],"modified":"2026-10-03T10:32:36.795444555Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:01fe9094-bf49-4d28-adc4-ebb020b00cb9","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8q7c-vj75-wg4m","advisory_id":"01fe9094-bf49-4d28-adc4-ebb020b00cb9","event_types":["advisory"],"published_at":"2026-10-26T01:11:26.938238+00:00","technologies":["core-osv","datadog-agent-7-79"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:05+00:00","detail_url":"/events/73660"}]}},{"id":72706,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-5hg9-5jmh-6jq4","summary":"CGA-5hg9-5jmh-6jq4","evidence":"osv:CGA-5hg9-5jmh-6jq4","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5hg9-5jmh-6jq4","aliases":["CGA-5hg9-5jmh-6jq4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5hg9-5jmh-6jq4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:57Z"}]}}],"modified":"2026-10-03T10:32:30.520022603Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2068d6d4-b927-499b-b4aa-a89b2b43113c","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5hg9-5jmh-6jq4","advisory_id":"2068d6d4-b927-499b-b4aa-a89b2b43113c","event_types":["advisory"],"published_at":"2026-10-26T00:51:10.542708+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:09+00:00","detail_url":"/advisories/advisory%3A2068d6d4-b927-499b-b4aa-a89b2b43113c","group":{"id":"advisory:2068d6d4-b927-499b-b4aa-a89b2b43113c","revision":1,"primary_event_id":73443,"change":"published","superseded_by":[],"changed":{"id":73443,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-5hg9-5jmh-6jq4","summary":"CGA-5hg9-5jmh-6jq4","evidence":"osv:CGA-5hg9-5jmh-6jq4","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5hg9-5jmh-6jq4","aliases":["CGA-5hg9-5jmh-6jq4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5hg9-5jmh-6jq4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:57Z"}]}}],"modified":"2026-10-03T10:32:30.520022603Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2068d6d4-b927-499b-b4aa-a89b2b43113c","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5hg9-5jmh-6jq4","advisory_id":"2068d6d4-b927-499b-b4aa-a89b2b43113c","event_types":["advisory"],"published_at":"2026-10-26T00:51:10.542708+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:09+00:00","detail_url":"/events/73443"},"members":[{"id":73443,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-5hg9-5jmh-6jq4","summary":"CGA-5hg9-5jmh-6jq4","evidence":"osv:CGA-5hg9-5jmh-6jq4","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5hg9-5jmh-6jq4","aliases":["CGA-5hg9-5jmh-6jq4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5hg9-5jmh-6jq4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:57Z"}]}}],"modified":"2026-10-03T10:32:30.520022603Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2068d6d4-b927-499b-b4aa-a89b2b43113c","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5hg9-5jmh-6jq4","advisory_id":"2068d6d4-b927-499b-b4aa-a89b2b43113c","event_types":["advisory"],"published_at":"2026-10-26T00:51:10.542708+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:09+00:00","detail_url":"/events/73443"}]}},{"id":72649,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-qppv-77qm-4p5m","summary":"CGA-qppv-77qm-4p5m","evidence":"osv:CGA-qppv-77qm-4p5m","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qppv-77qm-4p5m","aliases":["CGA-qppv-77qm-4p5m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qppv-77qm-4p5m.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:42Z"}]}}],"modified":"2026-10-03T10:32:14.654886611Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4151512e-f68c-4a98-b0f5-619024901353","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qppv-77qm-4p5m","advisory_id":"4151512e-f68c-4a98-b0f5-619024901353","event_types":["advisory"],"published_at":"2026-10-26T00:43:17.963212+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:17+00:00","detail_url":"/advisories/advisory%3A4151512e-f68c-4a98-b0f5-619024901353","group":{"id":"advisory:4151512e-f68c-4a98-b0f5-619024901353","revision":1,"primary_event_id":73367,"change":"published","superseded_by":[],"changed":{"id":73367,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-qppv-77qm-4p5m","summary":"CGA-qppv-77qm-4p5m","evidence":"osv:CGA-qppv-77qm-4p5m","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qppv-77qm-4p5m","aliases":["CGA-qppv-77qm-4p5m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qppv-77qm-4p5m.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:42Z"}]}}],"modified":"2026-10-03T10:32:14.654886611Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4151512e-f68c-4a98-b0f5-619024901353","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qppv-77qm-4p5m","advisory_id":"4151512e-f68c-4a98-b0f5-619024901353","event_types":["advisory"],"published_at":"2026-10-26T00:43:17.963212+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:17+00:00","detail_url":"/events/73367"},"members":[{"id":73367,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-qppv-77qm-4p5m","summary":"CGA-qppv-77qm-4p5m","evidence":"osv:CGA-qppv-77qm-4p5m","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qppv-77qm-4p5m","aliases":["CGA-qppv-77qm-4p5m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qppv-77qm-4p5m.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:42Z"}]}}],"modified":"2026-10-03T10:32:14.654886611Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4151512e-f68c-4a98-b0f5-619024901353","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qppv-77qm-4p5m","advisory_id":"4151512e-f68c-4a98-b0f5-619024901353","event_types":["advisory"],"published_at":"2026-10-26T00:43:17.963212+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:17+00:00","detail_url":"/events/73367"}]}},{"id":72030,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-wrwv-5p6c-x26p","summary":"CGA-wrwv-5p6c-x26p","evidence":"osv:CGA-wrwv-5p6c-x26p","products":[{"name":{"value":"airflow-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.11.2-r26","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wrwv-5p6c-x26p","aliases":["CGA-wrwv-5p6c-x26p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-r26"}]}],"package":{"name":"airflow-2","purl":"pkg:apk/chainguard/airflow-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wrwv-5p6c-x26p.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/airflow/lib/python3.12/site-packages/urllib3-2.6.3.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:29:10Z"}]}}],"modified":"2026-10-02T23:01:54.115637472Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8e505dba-7c6f-4cb6-a0e8-52f4facfef0d","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wrwv-5p6c-x26p","advisory_id":"8e505dba-7c6f-4cb6-a0e8-52f4facfef0d","event_types":["advisory"],"published_at":"2026-10-26T00:11:28.454948+00:00","technologies":["airflow-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:38:41+00:00","detail_url":"/advisories/advisory%3A8e505dba-7c6f-4cb6-a0e8-52f4facfef0d","group":{"id":"advisory:8e505dba-7c6f-4cb6-a0e8-52f4facfef0d","revision":1,"primary_event_id":72649,"change":"published","superseded_by":[],"changed":{"id":72649,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-wrwv-5p6c-x26p","summary":"CGA-wrwv-5p6c-x26p","evidence":"osv:CGA-wrwv-5p6c-x26p","products":[{"name":{"value":"airflow-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.11.2-r26","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wrwv-5p6c-x26p","aliases":["CGA-wrwv-5p6c-x26p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-r26"}]}],"package":{"name":"airflow-2","purl":"pkg:apk/chainguard/airflow-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wrwv-5p6c-x26p.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/airflow/lib/python3.12/site-packages/urllib3-2.6.3.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:29:10Z"}]}}],"modified":"2026-10-02T23:01:54.115637472Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8e505dba-7c6f-4cb6-a0e8-52f4facfef0d","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wrwv-5p6c-x26p","advisory_id":"8e505dba-7c6f-4cb6-a0e8-52f4facfef0d","event_types":["advisory"],"published_at":"2026-10-26T00:11:28.454948+00:00","technologies":["airflow-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:38:41+00:00","detail_url":"/events/72649"},"members":[{"id":72649,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-wrwv-5p6c-x26p","summary":"CGA-wrwv-5p6c-x26p","evidence":"osv:CGA-wrwv-5p6c-x26p","products":[{"name":{"value":"airflow-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.11.2-r26","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wrwv-5p6c-x26p","aliases":["CGA-wrwv-5p6c-x26p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-r26"}]}],"package":{"name":"airflow-2","purl":"pkg:apk/chainguard/airflow-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wrwv-5p6c-x26p.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/airflow/lib/python3.12/site-packages/urllib3-2.6.3.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:29:10Z"}]}}],"modified":"2026-10-02T23:01:54.115637472Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8e505dba-7c6f-4cb6-a0e8-52f4facfef0d","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wrwv-5p6c-x26p","advisory_id":"8e505dba-7c6f-4cb6-a0e8-52f4facfef0d","event_types":["advisory"],"published_at":"2026-10-26T00:11:28.454948+00:00","technologies":["airflow-2","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:38:41+00:00","detail_url":"/events/72649"}]}},{"id":71973,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-v5jh-3rmp-qp64","summary":"CGA-v5jh-3rmp-qp64","evidence":"osv:CGA-v5jh-3rmp-qp64","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v5jh-3rmp-qp64","aliases":["CGA-v5jh-3rmp-qp64"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v5jh-3rmp-qp64.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T20:29:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v5jh-3rmp-qp64.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T20:29:09Z"}]}}],"modified":"2026-10-02T23:01:47.507171902Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ae77794a-36aa-47fd-ab94-e1664d7f3935","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v5jh-3rmp-qp64","advisory_id":"ae77794a-36aa-47fd-ab94-e1664d7f3935","event_types":["advisory"],"published_at":"2026-10-26T00:02:42.202238+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:49:21+00:00","detail_url":"/advisories/advisory%3Aae77794a-36aa-47fd-ab94-e1664d7f3935","group":{"id":"advisory:ae77794a-36aa-47fd-ab94-e1664d7f3935","revision":1,"primary_event_id":72545,"change":"published","superseded_by":[],"changed":{"id":72545,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-v5jh-3rmp-qp64","summary":"CGA-v5jh-3rmp-qp64","evidence":"osv:CGA-v5jh-3rmp-qp64","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v5jh-3rmp-qp64","aliases":["CGA-v5jh-3rmp-qp64"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v5jh-3rmp-qp64.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T20:29:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v5jh-3rmp-qp64.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T20:29:09Z"}]}}],"modified":"2026-10-02T23:01:47.507171902Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ae77794a-36aa-47fd-ab94-e1664d7f3935","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v5jh-3rmp-qp64","advisory_id":"ae77794a-36aa-47fd-ab94-e1664d7f3935","event_types":["advisory"],"published_at":"2026-10-26T00:02:42.202238+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:49:21+00:00","detail_url":"/events/72545"},"members":[{"id":72545,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-v5jh-3rmp-qp64","summary":"CGA-v5jh-3rmp-qp64","evidence":"osv:CGA-v5jh-3rmp-qp64","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v5jh-3rmp-qp64","aliases":["CGA-v5jh-3rmp-qp64"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v5jh-3rmp-qp64.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T20:29:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v5jh-3rmp-qp64.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T20:29:09Z"}]}}],"modified":"2026-10-02T23:01:47.507171902Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ae77794a-36aa-47fd-ab94-e1664d7f3935","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v5jh-3rmp-qp64","advisory_id":"ae77794a-36aa-47fd-ab94-e1664d7f3935","event_types":["advisory"],"published_at":"2026-10-26T00:02:42.202238+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:49:21+00:00","detail_url":"/events/72545"}]}},{"id":71939,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-q96c-qjm6-73vx","summary":"CGA-q96c-qjm6-73vx","evidence":"osv:CGA-q96c-qjm6-73vx","products":[{"name":{"value":"awx","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"24.6.1-r64","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-q96c-qjm6-73vx","aliases":["CGA-q96c-qjm6-73vx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.6.1-r64"}]}],"package":{"name":"awx","purl":"pkg:apk/chainguard/awx?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q96c-qjm6-73vx.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/var/lib/awx/venv/awx/lib/python3.11/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:36:09Z"}]}}],"modified":"2026-10-02T23:01:43.205414254Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3d024bb6-4f65-4160-b22c-514565a4d50d","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q96c-qjm6-73vx","advisory_id":"3d024bb6-4f65-4160-b22c-514565a4d50d","event_types":["advisory"],"published_at":"2026-10-25T23:57:19.087755+00:00","technologies":["awx","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:50:54+00:00","detail_url":"/advisories/advisory%3A3d024bb6-4f65-4160-b22c-514565a4d50d","group":{"id":"advisory:3d024bb6-4f65-4160-b22c-514565a4d50d","revision":1,"primary_event_id":72483,"change":"published","superseded_by":[],"changed":{"id":72483,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-q96c-qjm6-73vx","summary":"CGA-q96c-qjm6-73vx","evidence":"osv:CGA-q96c-qjm6-73vx","products":[{"name":{"value":"awx","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"24.6.1-r64","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-q96c-qjm6-73vx","aliases":["CGA-q96c-qjm6-73vx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.6.1-r64"}]}],"package":{"name":"awx","purl":"pkg:apk/chainguard/awx?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q96c-qjm6-73vx.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/var/lib/awx/venv/awx/lib/python3.11/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:36:09Z"}]}}],"modified":"2026-10-02T23:01:43.205414254Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3d024bb6-4f65-4160-b22c-514565a4d50d","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q96c-qjm6-73vx","advisory_id":"3d024bb6-4f65-4160-b22c-514565a4d50d","event_types":["advisory"],"published_at":"2026-10-25T23:57:19.087755+00:00","technologies":["awx","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:50:54+00:00","detail_url":"/events/72483"},"members":[{"id":72483,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-q96c-qjm6-73vx","summary":"CGA-q96c-qjm6-73vx","evidence":"osv:CGA-q96c-qjm6-73vx","products":[{"name":{"value":"awx","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"24.6.1-r64","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-q96c-qjm6-73vx","aliases":["CGA-q96c-qjm6-73vx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.6.1-r64"}]}],"package":{"name":"awx","purl":"pkg:apk/chainguard/awx?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q96c-qjm6-73vx.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/var/lib/awx/venv/awx/lib/python3.11/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:36:09Z"}]}}],"modified":"2026-10-02T23:01:43.205414254Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3d024bb6-4f65-4160-b22c-514565a4d50d","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q96c-qjm6-73vx","advisory_id":"3d024bb6-4f65-4160-b22c-514565a4d50d","event_types":["advisory"],"published_at":"2026-10-25T23:57:19.087755+00:00","technologies":["awx","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:50:54+00:00","detail_url":"/events/72483"}]}},{"id":71862,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-hq99-cv5q-mg39","summary":"CGA-hq99-cv5q-mg39","evidence":"osv:CGA-hq99-cv5q-mg39","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hq99-cv5q-mg39","aliases":["CGA-hq99-cv5q-mg39"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hq99-cv5q-mg39.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hq99-cv5q-mg39.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}}],"modified":"2026-10-02T23:01:34.886777103Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e9ccb1a7-d12f-43c2-ae7b-c6b21249c923","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hq99-cv5q-mg39","advisory_id":"e9ccb1a7-d12f-43c2-ae7b-c6b21249c923","event_types":["advisory"],"published_at":"2026-10-25T23:45:22.525258+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:50+00:00","detail_url":"/advisories/advisory%3Ae9ccb1a7-d12f-43c2-ae7b-c6b21249c923","group":{"id":"advisory:e9ccb1a7-d12f-43c2-ae7b-c6b21249c923","revision":1,"primary_event_id":72357,"change":"published","superseded_by":[],"changed":{"id":72357,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-hq99-cv5q-mg39","summary":"CGA-hq99-cv5q-mg39","evidence":"osv:CGA-hq99-cv5q-mg39","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hq99-cv5q-mg39","aliases":["CGA-hq99-cv5q-mg39"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hq99-cv5q-mg39.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hq99-cv5q-mg39.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}}],"modified":"2026-10-02T23:01:34.886777103Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e9ccb1a7-d12f-43c2-ae7b-c6b21249c923","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hq99-cv5q-mg39","advisory_id":"e9ccb1a7-d12f-43c2-ae7b-c6b21249c923","event_types":["advisory"],"published_at":"2026-10-25T23:45:22.525258+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:50+00:00","detail_url":"/events/72357"},"members":[{"id":72357,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-hq99-cv5q-mg39","summary":"CGA-hq99-cv5q-mg39","evidence":"osv:CGA-hq99-cv5q-mg39","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hq99-cv5q-mg39","aliases":["CGA-hq99-cv5q-mg39"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hq99-cv5q-mg39.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hq99-cv5q-mg39.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}}],"modified":"2026-10-02T23:01:34.886777103Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e9ccb1a7-d12f-43c2-ae7b-c6b21249c923","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hq99-cv5q-mg39","advisory_id":"e9ccb1a7-d12f-43c2-ae7b-c6b21249c923","event_types":["advisory"],"published_at":"2026-10-25T23:45:22.525258+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:50+00:00","detail_url":"/events/72357"}]}},{"id":71639,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-rqh5-gwhx-7c67","summary":"CGA-rqh5-gwhx-7c67","evidence":"osv:CGA-rqh5-gwhx-7c67","products":[{"name":{"value":"pypy-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pypy-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rqh5-gwhx-7c67","aliases":["CGA-rqh5-gwhx-7c67"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/chainguard/pypy-3.10?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rqh5-gwhx-7c67.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/wolfi/pypy-3.10?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rqh5-gwhx-7c67.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:07Z"}]}}],"modified":"2026-10-02T23:01:13.192348554Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6c926106-2153-40f0-b07d-aeb3bc398d9b","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rqh5-gwhx-7c67","advisory_id":"6c926106-2153-40f0-b07d-aeb3bc398d9b","event_types":["advisory"],"published_at":"2026-10-25T23:25:07.532967+00:00","technologies":["core-osv","pypy-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:46:04+00:00","detail_url":"/advisories/advisory%3A6c926106-2153-40f0-b07d-aeb3bc398d9b","group":{"id":"advisory:6c926106-2153-40f0-b07d-aeb3bc398d9b","revision":1,"primary_event_id":72070,"change":"published","superseded_by":[],"changed":{"id":72070,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-rqh5-gwhx-7c67","summary":"CGA-rqh5-gwhx-7c67","evidence":"osv:CGA-rqh5-gwhx-7c67","products":[{"name":{"value":"pypy-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pypy-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rqh5-gwhx-7c67","aliases":["CGA-rqh5-gwhx-7c67"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/chainguard/pypy-3.10?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rqh5-gwhx-7c67.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/wolfi/pypy-3.10?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rqh5-gwhx-7c67.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:07Z"}]}}],"modified":"2026-10-02T23:01:13.192348554Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6c926106-2153-40f0-b07d-aeb3bc398d9b","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rqh5-gwhx-7c67","advisory_id":"6c926106-2153-40f0-b07d-aeb3bc398d9b","event_types":["advisory"],"published_at":"2026-10-25T23:25:07.532967+00:00","technologies":["core-osv","pypy-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:46:04+00:00","detail_url":"/events/72070"},"members":[{"id":72070,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-rqh5-gwhx-7c67","summary":"CGA-rqh5-gwhx-7c67","evidence":"osv:CGA-rqh5-gwhx-7c67","products":[{"name":{"value":"pypy-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pypy-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rqh5-gwhx-7c67","aliases":["CGA-rqh5-gwhx-7c67"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/chainguard/pypy-3.10?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rqh5-gwhx-7c67.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/wolfi/pypy-3.10?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rqh5-gwhx-7c67.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:07Z"}]}}],"modified":"2026-10-02T23:01:13.192348554Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6c926106-2153-40f0-b07d-aeb3bc398d9b","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rqh5-gwhx-7c67","advisory_id":"6c926106-2153-40f0-b07d-aeb3bc398d9b","event_types":["advisory"],"published_at":"2026-10-25T23:25:07.532967+00:00","technologies":["core-osv","pypy-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:46:04+00:00","detail_url":"/events/72070"}]}},{"id":71617,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-q6pq-3999-hx39","summary":"CGA-q6pq-3999-hx39","evidence":"osv:CGA-q6pq-3999-hx39","products":[{"name":{"value":"apache-beam-python-3.14-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.76.0-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-q6pq-3999-hx39","aliases":["CGA-q6pq-3999-hx39"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76.0-r4"}]}],"package":{"name":"apache-beam-python-3.14-sdk","purl":"pkg:apk/chainguard/apache-beam-python-3.14-sdk?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q6pq-3999-hx39.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/share/apache-beam/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:49:07Z"}]}}],"modified":"2026-10-02T23:01:10.463781943Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:72c30e22-6ebb-4341-8b78-0ec61fd4e776","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q6pq-3999-hx39","advisory_id":"72c30e22-6ebb-4341-8b78-0ec61fd4e776","event_types":["advisory"],"published_at":"2026-10-25T23:23:13.980222+00:00","technologies":["apache-beam-python-3-14-sdk","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:43:16+00:00","detail_url":"/advisories/advisory%3A72c30e22-6ebb-4341-8b78-0ec61fd4e776","group":{"id":"advisory:72c30e22-6ebb-4341-8b78-0ec61fd4e776","revision":1,"primary_event_id":72041,"change":"published","superseded_by":[],"changed":{"id":72041,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-q6pq-3999-hx39","summary":"CGA-q6pq-3999-hx39","evidence":"osv:CGA-q6pq-3999-hx39","products":[{"name":{"value":"apache-beam-python-3.14-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.76.0-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-q6pq-3999-hx39","aliases":["CGA-q6pq-3999-hx39"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76.0-r4"}]}],"package":{"name":"apache-beam-python-3.14-sdk","purl":"pkg:apk/chainguard/apache-beam-python-3.14-sdk?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q6pq-3999-hx39.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/share/apache-beam/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:49:07Z"}]}}],"modified":"2026-10-02T23:01:10.463781943Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:72c30e22-6ebb-4341-8b78-0ec61fd4e776","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q6pq-3999-hx39","advisory_id":"72c30e22-6ebb-4341-8b78-0ec61fd4e776","event_types":["advisory"],"published_at":"2026-10-25T23:23:13.980222+00:00","technologies":["apache-beam-python-3-14-sdk","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:43:16+00:00","detail_url":"/events/72041"},"members":[{"id":72041,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-q6pq-3999-hx39","summary":"CGA-q6pq-3999-hx39","evidence":"osv:CGA-q6pq-3999-hx39","products":[{"name":{"value":"apache-beam-python-3.14-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.76.0-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-q6pq-3999-hx39","aliases":["CGA-q6pq-3999-hx39"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76.0-r4"}]}],"package":{"name":"apache-beam-python-3.14-sdk","purl":"pkg:apk/chainguard/apache-beam-python-3.14-sdk?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q6pq-3999-hx39.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/share/apache-beam/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:49:07Z"}]}}],"modified":"2026-10-02T23:01:10.463781943Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:72c30e22-6ebb-4341-8b78-0ec61fd4e776","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q6pq-3999-hx39","advisory_id":"72c30e22-6ebb-4341-8b78-0ec61fd4e776","event_types":["advisory"],"published_at":"2026-10-25T23:23:13.980222+00:00","technologies":["apache-beam-python-3-14-sdk","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:43:16+00:00","detail_url":"/events/72041"}]}},{"id":71421,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-ph9m-cv7x-cf88","summary":"CGA-ph9m-cv7x-cf88","evidence":"osv:CGA-ph9m-cv7x-cf88","products":[{"name":{"value":"jupyterhub-k8s-singleuser-sample","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.2-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-ph9m-cv7x-cf88","aliases":["CGA-ph9m-cv7x-cf88"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-r4"}]}],"package":{"name":"jupyterhub-k8s-singleuser-sample","purl":"pkg:apk/chainguard/jupyterhub-k8s-singleuser-sample?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-ph9m-cv7x-cf88.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jupyterhub-k8s-singleuser-sample/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:39:58Z"}]}}],"modified":"2026-10-02T23:00:50.722508404Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c070c96f-3e64-4f13-b6fe-53fd3d456263","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-ph9m-cv7x-cf88","advisory_id":"c070c96f-3e64-4f13-b6fe-53fd3d456263","event_types":["advisory"],"published_at":"2026-10-25T23:09:00.284236+00:00","technologies":["core-osv","jupyterhub-k8s-singleuser-sample"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:03:10+00:00","detail_url":"/advisories/advisory%3Ac070c96f-3e64-4f13-b6fe-53fd3d456263","group":{"id":"advisory:c070c96f-3e64-4f13-b6fe-53fd3d456263","revision":1,"primary_event_id":71816,"change":"published","superseded_by":[],"changed":{"id":71816,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-ph9m-cv7x-cf88","summary":"CGA-ph9m-cv7x-cf88","evidence":"osv:CGA-ph9m-cv7x-cf88","products":[{"name":{"value":"jupyterhub-k8s-singleuser-sample","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.2-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-ph9m-cv7x-cf88","aliases":["CGA-ph9m-cv7x-cf88"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-r4"}]}],"package":{"name":"jupyterhub-k8s-singleuser-sample","purl":"pkg:apk/chainguard/jupyterhub-k8s-singleuser-sample?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-ph9m-cv7x-cf88.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jupyterhub-k8s-singleuser-sample/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:39:58Z"}]}}],"modified":"2026-10-02T23:00:50.722508404Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c070c96f-3e64-4f13-b6fe-53fd3d456263","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-ph9m-cv7x-cf88","advisory_id":"c070c96f-3e64-4f13-b6fe-53fd3d456263","event_types":["advisory"],"published_at":"2026-10-25T23:09:00.284236+00:00","technologies":["core-osv","jupyterhub-k8s-singleuser-sample"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:03:10+00:00","detail_url":"/events/71816"},"members":[{"id":71816,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-ph9m-cv7x-cf88","summary":"CGA-ph9m-cv7x-cf88","evidence":"osv:CGA-ph9m-cv7x-cf88","products":[{"name":{"value":"jupyterhub-k8s-singleuser-sample","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.2-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-ph9m-cv7x-cf88","aliases":["CGA-ph9m-cv7x-cf88"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-r4"}]}],"package":{"name":"jupyterhub-k8s-singleuser-sample","purl":"pkg:apk/chainguard/jupyterhub-k8s-singleuser-sample?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-ph9m-cv7x-cf88.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jupyterhub-k8s-singleuser-sample/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:39:58Z"}]}}],"modified":"2026-10-02T23:00:50.722508404Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c070c96f-3e64-4f13-b6fe-53fd3d456263","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-ph9m-cv7x-cf88","advisory_id":"c070c96f-3e64-4f13-b6fe-53fd3d456263","event_types":["advisory"],"published_at":"2026-10-25T23:09:00.284236+00:00","technologies":["core-osv","jupyterhub-k8s-singleuser-sample"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:03:10+00:00","detail_url":"/events/71816"}]}},{"id":71412,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-gjwq-gvg5-52m9","summary":"CGA-gjwq-gvg5-52m9","evidence":"osv:CGA-gjwq-gvg5-52m9","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-gjwq-gvg5-52m9","aliases":["CGA-gjwq-gvg5-52m9"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gjwq-gvg5-52m9.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T20:29:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gjwq-gvg5-52m9.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T20:29:08Z"}]}}],"modified":"2026-10-02T23:00:49.119517037Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7e59243e-5681-4ff7-8a2b-344f9abde282","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gjwq-gvg5-52m9","advisory_id":"7e59243e-5681-4ff7-8a2b-344f9abde282","event_types":["advisory"],"published_at":"2026-10-25T23:08:17.083696+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:49:20+00:00","detail_url":"/advisories/advisory%3A7e59243e-5681-4ff7-8a2b-344f9abde282","group":{"id":"advisory:7e59243e-5681-4ff7-8a2b-344f9abde282","revision":1,"primary_event_id":71803,"change":"published","superseded_by":[],"changed":{"id":71803,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-gjwq-gvg5-52m9","summary":"CGA-gjwq-gvg5-52m9","evidence":"osv:CGA-gjwq-gvg5-52m9","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-gjwq-gvg5-52m9","aliases":["CGA-gjwq-gvg5-52m9"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gjwq-gvg5-52m9.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T20:29:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gjwq-gvg5-52m9.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T20:29:08Z"}]}}],"modified":"2026-10-02T23:00:49.119517037Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7e59243e-5681-4ff7-8a2b-344f9abde282","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gjwq-gvg5-52m9","advisory_id":"7e59243e-5681-4ff7-8a2b-344f9abde282","event_types":["advisory"],"published_at":"2026-10-25T23:08:17.083696+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:49:20+00:00","detail_url":"/events/71803"},"members":[{"id":71803,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-gjwq-gvg5-52m9","summary":"CGA-gjwq-gvg5-52m9","evidence":"osv:CGA-gjwq-gvg5-52m9","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-gjwq-gvg5-52m9","aliases":["CGA-gjwq-gvg5-52m9"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gjwq-gvg5-52m9.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T20:29:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gjwq-gvg5-52m9.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T20:29:08Z"}]}}],"modified":"2026-10-02T23:00:49.119517037Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7e59243e-5681-4ff7-8a2b-344f9abde282","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gjwq-gvg5-52m9","advisory_id":"7e59243e-5681-4ff7-8a2b-344f9abde282","event_types":["advisory"],"published_at":"2026-10-25T23:08:17.083696+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:49:20+00:00","detail_url":"/events/71803"}]}},{"id":71394,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-fr95-7wm5-gxfx","summary":"CGA-fr95-7wm5-gxfx","evidence":"osv:CGA-fr95-7wm5-gxfx","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-fr95-7wm5-gxfx","aliases":["CGA-fr95-7wm5-gxfx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fr95-7wm5-gxfx.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fr95-7wm5-gxfx.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}}],"modified":"2026-10-02T23:00:47.912461801Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d11bdebc-c27a-4fc5-b23c-9e888920085f","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fr95-7wm5-gxfx","advisory_id":"d11bdebc-c27a-4fc5-b23c-9e888920085f","event_types":["advisory"],"published_at":"2026-10-25T23:07:40.897403+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:49+00:00","detail_url":"/advisories/advisory%3Ad11bdebc-c27a-4fc5-b23c-9e888920085f","group":{"id":"advisory:d11bdebc-c27a-4fc5-b23c-9e888920085f","revision":1,"primary_event_id":71785,"change":"published","superseded_by":[],"changed":{"id":71785,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-fr95-7wm5-gxfx","summary":"CGA-fr95-7wm5-gxfx","evidence":"osv:CGA-fr95-7wm5-gxfx","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-fr95-7wm5-gxfx","aliases":["CGA-fr95-7wm5-gxfx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fr95-7wm5-gxfx.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fr95-7wm5-gxfx.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}}],"modified":"2026-10-02T23:00:47.912461801Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d11bdebc-c27a-4fc5-b23c-9e888920085f","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fr95-7wm5-gxfx","advisory_id":"d11bdebc-c27a-4fc5-b23c-9e888920085f","event_types":["advisory"],"published_at":"2026-10-25T23:07:40.897403+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:49+00:00","detail_url":"/events/71785"},"members":[{"id":71785,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-fr95-7wm5-gxfx","summary":"CGA-fr95-7wm5-gxfx","evidence":"osv:CGA-fr95-7wm5-gxfx","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-fr95-7wm5-gxfx","aliases":["CGA-fr95-7wm5-gxfx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fr95-7wm5-gxfx.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fr95-7wm5-gxfx.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}}],"modified":"2026-10-02T23:00:47.912461801Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d11bdebc-c27a-4fc5-b23c-9e888920085f","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fr95-7wm5-gxfx","advisory_id":"d11bdebc-c27a-4fc5-b23c-9e888920085f","event_types":["advisory"],"published_at":"2026-10-25T23:07:40.897403+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:49+00:00","detail_url":"/events/71785"}]}},{"id":71328,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-937f-w253-427f","summary":"CGA-937f-w253-427f","evidence":"osv:CGA-937f-w253-427f","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-937f-w253-427f","aliases":["CGA-937f-w253-427f"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-937f-w253-427f.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-937f-w253-427f.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}}],"modified":"2026-10-02T23:00:41.470503790Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2618e9aa-54e6-4d35-a0c2-14c8a1bd65f7","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-937f-w253-427f","advisory_id":"2618e9aa-54e6-4d35-a0c2-14c8a1bd65f7","event_types":["advisory"],"published_at":"2026-10-25T23:02:55.127214+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:48+00:00","detail_url":"/advisories/advisory%3A2618e9aa-54e6-4d35-a0c2-14c8a1bd65f7","group":{"id":"advisory:2618e9aa-54e6-4d35-a0c2-14c8a1bd65f7","revision":1,"primary_event_id":71717,"change":"published","superseded_by":[],"changed":{"id":71717,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-937f-w253-427f","summary":"CGA-937f-w253-427f","evidence":"osv:CGA-937f-w253-427f","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-937f-w253-427f","aliases":["CGA-937f-w253-427f"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-937f-w253-427f.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-937f-w253-427f.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}}],"modified":"2026-10-02T23:00:41.470503790Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2618e9aa-54e6-4d35-a0c2-14c8a1bd65f7","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-937f-w253-427f","advisory_id":"2618e9aa-54e6-4d35-a0c2-14c8a1bd65f7","event_types":["advisory"],"published_at":"2026-10-25T23:02:55.127214+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:48+00:00","detail_url":"/events/71717"},"members":[{"id":71717,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-937f-w253-427f","summary":"CGA-937f-w253-427f","evidence":"osv:CGA-937f-w253-427f","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-937f-w253-427f","aliases":["CGA-937f-w253-427f"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-937f-w253-427f.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-937f-w253-427f.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:17Z"}]}}],"modified":"2026-10-02T23:00:41.470503790Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2618e9aa-54e6-4d35-a0c2-14c8a1bd65f7","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-937f-w253-427f","advisory_id":"2618e9aa-54e6-4d35-a0c2-14c8a1bd65f7","event_types":["advisory"],"published_at":"2026-10-25T23:02:55.127214+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:48+00:00","detail_url":"/events/71717"}]}},{"id":71262,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-5cr9-xcjg-p466","summary":"CGA-5cr9-xcjg-p466","evidence":"osv:CGA-5cr9-xcjg-p466","products":[{"name":{"value":"apache-beam-python-3.14-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.76.0-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5cr9-xcjg-p466","aliases":["CGA-5cr9-xcjg-p466"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76.0-r4"}]}],"package":{"name":"apache-beam-python-3.14-sdk","purl":"pkg:apk/chainguard/apache-beam-python-3.14-sdk?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5cr9-xcjg-p466.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/share/apache-beam/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:09:12Z"}]}}],"modified":"2026-10-02T23:00:34.625534419Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4d663830-e4ca-47ca-a78a-e0aa47bd0d1d","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5cr9-xcjg-p466","advisory_id":"4d663830-e4ca-47ca-a78a-e0aa47bd0d1d","event_types":["advisory"],"published_at":"2026-10-25T22:59:33.805266+00:00","technologies":["apache-beam-python-3-14-sdk","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:30:46+00:00","detail_url":"/advisories/advisory%3A4d663830-e4ca-47ca-a78a-e0aa47bd0d1d","group":{"id":"advisory:4d663830-e4ca-47ca-a78a-e0aa47bd0d1d","revision":1,"primary_event_id":71647,"change":"published","superseded_by":[],"changed":{"id":71647,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-5cr9-xcjg-p466","summary":"CGA-5cr9-xcjg-p466","evidence":"osv:CGA-5cr9-xcjg-p466","products":[{"name":{"value":"apache-beam-python-3.14-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.76.0-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5cr9-xcjg-p466","aliases":["CGA-5cr9-xcjg-p466"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76.0-r4"}]}],"package":{"name":"apache-beam-python-3.14-sdk","purl":"pkg:apk/chainguard/apache-beam-python-3.14-sdk?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5cr9-xcjg-p466.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/share/apache-beam/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:09:12Z"}]}}],"modified":"2026-10-02T23:00:34.625534419Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4d663830-e4ca-47ca-a78a-e0aa47bd0d1d","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5cr9-xcjg-p466","advisory_id":"4d663830-e4ca-47ca-a78a-e0aa47bd0d1d","event_types":["advisory"],"published_at":"2026-10-25T22:59:33.805266+00:00","technologies":["apache-beam-python-3-14-sdk","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:30:46+00:00","detail_url":"/events/71647"},"members":[{"id":71647,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-5cr9-xcjg-p466","summary":"CGA-5cr9-xcjg-p466","evidence":"osv:CGA-5cr9-xcjg-p466","products":[{"name":{"value":"apache-beam-python-3.14-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.76.0-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5cr9-xcjg-p466","aliases":["CGA-5cr9-xcjg-p466"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76.0-r4"}]}],"package":{"name":"apache-beam-python-3.14-sdk","purl":"pkg:apk/chainguard/apache-beam-python-3.14-sdk?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5cr9-xcjg-p466.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/share/apache-beam/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:09:12Z"}]}}],"modified":"2026-10-02T23:00:34.625534419Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4d663830-e4ca-47ca-a78a-e0aa47bd0d1d","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5cr9-xcjg-p466","advisory_id":"4d663830-e4ca-47ca-a78a-e0aa47bd0d1d","event_types":["advisory"],"published_at":"2026-10-25T22:59:33.805266+00:00","technologies":["apache-beam-python-3-14-sdk","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:30:46+00:00","detail_url":"/events/71647"}]}},{"id":71181,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-9rpp-9wjx-gf48","summary":"CGA-9rpp-9wjx-gf48","evidence":"osv:CGA-9rpp-9wjx-gf48","products":[{"name":{"value":"pypy-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pypy-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-9rpp-9wjx-gf48","aliases":["CGA-9rpp-9wjx-gf48"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/chainguard/pypy-3.10?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9rpp-9wjx-gf48.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:40:40Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/wolfi/pypy-3.10?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9rpp-9wjx-gf48.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:40:40Z"}]}}],"modified":"2026-10-02T23:00:24.772007413Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1adf6080-c974-461b-a9cb-5595539ed371","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9rpp-9wjx-gf48","advisory_id":"1adf6080-c974-461b-a9cb-5595539ed371","event_types":["advisory"],"published_at":"2026-10-25T22:54:57.421647+00:00","technologies":["core-osv","pypy-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:19:53+00:00","detail_url":"/advisories/advisory%3A1adf6080-c974-461b-a9cb-5595539ed371","group":{"id":"advisory:1adf6080-c974-461b-a9cb-5595539ed371","revision":1,"primary_event_id":71562,"change":"published","superseded_by":[],"changed":{"id":71562,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-9rpp-9wjx-gf48","summary":"CGA-9rpp-9wjx-gf48","evidence":"osv:CGA-9rpp-9wjx-gf48","products":[{"name":{"value":"pypy-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pypy-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-9rpp-9wjx-gf48","aliases":["CGA-9rpp-9wjx-gf48"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/chainguard/pypy-3.10?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9rpp-9wjx-gf48.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:40:40Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/wolfi/pypy-3.10?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9rpp-9wjx-gf48.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:40:40Z"}]}}],"modified":"2026-10-02T23:00:24.772007413Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1adf6080-c974-461b-a9cb-5595539ed371","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9rpp-9wjx-gf48","advisory_id":"1adf6080-c974-461b-a9cb-5595539ed371","event_types":["advisory"],"published_at":"2026-10-25T22:54:57.421647+00:00","technologies":["core-osv","pypy-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:19:53+00:00","detail_url":"/events/71562"},"members":[{"id":71562,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-9rpp-9wjx-gf48","summary":"CGA-9rpp-9wjx-gf48","evidence":"osv:CGA-9rpp-9wjx-gf48","products":[{"name":{"value":"pypy-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pypy-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-9rpp-9wjx-gf48","aliases":["CGA-9rpp-9wjx-gf48"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/chainguard/pypy-3.10?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9rpp-9wjx-gf48.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:40:40Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/wolfi/pypy-3.10?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9rpp-9wjx-gf48.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:40:40Z"}]}}],"modified":"2026-10-02T23:00:24.772007413Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1adf6080-c974-461b-a9cb-5595539ed371","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9rpp-9wjx-gf48","advisory_id":"1adf6080-c974-461b-a9cb-5595539ed371","event_types":["advisory"],"published_at":"2026-10-25T22:54:57.421647+00:00","technologies":["core-osv","pypy-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:19:53+00:00","detail_url":"/events/71562"}]}},{"id":71169,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-4659-3hxg-mq9m","summary":"CGA-4659-3hxg-mq9m","evidence":"osv:CGA-4659-3hxg-mq9m","products":[{"name":{"value":"jupyterhub-k8s-singleuser-sample","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.2-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-4659-3hxg-mq9m","aliases":["CGA-4659-3hxg-mq9m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-r4"}]}],"package":{"name":"jupyterhub-k8s-singleuser-sample","purl":"pkg:apk/chainguard/jupyterhub-k8s-singleuser-sample?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4659-3hxg-mq9m.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jupyterhub-k8s-singleuser-sample/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:10:59Z"}]}}],"modified":"2026-10-02T23:00:24.107690614Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b2a6d592-52da-4f16-b6d3-183b8665e413","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4659-3hxg-mq9m","advisory_id":"b2a6d592-52da-4f16-b6d3-183b8665e413","event_types":["advisory"],"published_at":"2026-10-25T22:54:14.007474+00:00","technologies":["core-osv","jupyterhub-k8s-singleuser-sample"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:18:10+00:00","detail_url":"/advisories/advisory%3Ab2a6d592-52da-4f16-b6d3-183b8665e413","group":{"id":"advisory:b2a6d592-52da-4f16-b6d3-183b8665e413","revision":1,"primary_event_id":71549,"change":"published","superseded_by":[],"changed":{"id":71549,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-4659-3hxg-mq9m","summary":"CGA-4659-3hxg-mq9m","evidence":"osv:CGA-4659-3hxg-mq9m","products":[{"name":{"value":"jupyterhub-k8s-singleuser-sample","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.2-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-4659-3hxg-mq9m","aliases":["CGA-4659-3hxg-mq9m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-r4"}]}],"package":{"name":"jupyterhub-k8s-singleuser-sample","purl":"pkg:apk/chainguard/jupyterhub-k8s-singleuser-sample?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4659-3hxg-mq9m.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jupyterhub-k8s-singleuser-sample/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:10:59Z"}]}}],"modified":"2026-10-02T23:00:24.107690614Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b2a6d592-52da-4f16-b6d3-183b8665e413","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4659-3hxg-mq9m","advisory_id":"b2a6d592-52da-4f16-b6d3-183b8665e413","event_types":["advisory"],"published_at":"2026-10-25T22:54:14.007474+00:00","technologies":["core-osv","jupyterhub-k8s-singleuser-sample"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:18:10+00:00","detail_url":"/events/71549"},"members":[{"id":71549,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-4659-3hxg-mq9m","summary":"CGA-4659-3hxg-mq9m","evidence":"osv:CGA-4659-3hxg-mq9m","products":[{"name":{"value":"jupyterhub-k8s-singleuser-sample","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.2-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-4659-3hxg-mq9m","aliases":["CGA-4659-3hxg-mq9m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-r4"}]}],"package":{"name":"jupyterhub-k8s-singleuser-sample","purl":"pkg:apk/chainguard/jupyterhub-k8s-singleuser-sample?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4659-3hxg-mq9m.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jupyterhub-k8s-singleuser-sample/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:10:59Z"}]}}],"modified":"2026-10-02T23:00:24.107690614Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b2a6d592-52da-4f16-b6d3-183b8665e413","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4659-3hxg-mq9m","advisory_id":"b2a6d592-52da-4f16-b6d3-183b8665e413","event_types":["advisory"],"published_at":"2026-10-25T22:54:14.007474+00:00","technologies":["core-osv","jupyterhub-k8s-singleuser-sample"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:18:10+00:00","detail_url":"/events/71549"}]}},{"id":71057,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-m25m-xj6f-qpc7","summary":"CGA-m25m-xj6f-qpc7","evidence":"osv:CGA-m25m-xj6f-qpc7","products":[{"name":{"value":"kubeflow-pipelines-apiserver-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.17.2-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-m25m-xj6f-qpc7","aliases":["CGA-m25m-xj6f-qpc7"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.2-r5"}]}],"package":{"name":"kubeflow-pipelines-apiserver-fips","purl":"pkg:apk/chainguard/kubeflow-pipelines-apiserver-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m25m-xj6f-qpc7.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/python3.11/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:53:07Z"}]}}],"modified":"2026-10-02T23:00:10.794774475Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:94bfccbe-14dc-4786-acf6-b0055eec6e52","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m25m-xj6f-qpc7","advisory_id":"94bfccbe-14dc-4786-acf6-b0055eec6e52","event_types":["advisory"],"published_at":"2026-10-25T22:48:55.100084+00:00","technologies":["core-osv","kubeflow-pipelines-apiserver-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:45:45+00:00","detail_url":"/advisories/advisory%3A94bfccbe-14dc-4786-acf6-b0055eec6e52","group":{"id":"advisory:94bfccbe-14dc-4786-acf6-b0055eec6e52","revision":1,"primary_event_id":71431,"change":"published","superseded_by":[],"changed":{"id":71431,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-m25m-xj6f-qpc7","summary":"CGA-m25m-xj6f-qpc7","evidence":"osv:CGA-m25m-xj6f-qpc7","products":[{"name":{"value":"kubeflow-pipelines-apiserver-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.17.2-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-m25m-xj6f-qpc7","aliases":["CGA-m25m-xj6f-qpc7"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.2-r5"}]}],"package":{"name":"kubeflow-pipelines-apiserver-fips","purl":"pkg:apk/chainguard/kubeflow-pipelines-apiserver-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m25m-xj6f-qpc7.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/python3.11/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:53:07Z"}]}}],"modified":"2026-10-02T23:00:10.794774475Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:94bfccbe-14dc-4786-acf6-b0055eec6e52","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m25m-xj6f-qpc7","advisory_id":"94bfccbe-14dc-4786-acf6-b0055eec6e52","event_types":["advisory"],"published_at":"2026-10-25T22:48:55.100084+00:00","technologies":["core-osv","kubeflow-pipelines-apiserver-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:45:45+00:00","detail_url":"/events/71431"},"members":[{"id":71431,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-m25m-xj6f-qpc7","summary":"CGA-m25m-xj6f-qpc7","evidence":"osv:CGA-m25m-xj6f-qpc7","products":[{"name":{"value":"kubeflow-pipelines-apiserver-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.17.2-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-m25m-xj6f-qpc7","aliases":["CGA-m25m-xj6f-qpc7"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.2-r5"}]}],"package":{"name":"kubeflow-pipelines-apiserver-fips","purl":"pkg:apk/chainguard/kubeflow-pipelines-apiserver-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m25m-xj6f-qpc7.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/python3.11/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:53:07Z"}]}}],"modified":"2026-10-02T23:00:10.794774475Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:94bfccbe-14dc-4786-acf6-b0055eec6e52","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m25m-xj6f-qpc7","advisory_id":"94bfccbe-14dc-4786-acf6-b0055eec6e52","event_types":["advisory"],"published_at":"2026-10-25T22:48:55.100084+00:00","technologies":["core-osv","kubeflow-pipelines-apiserver-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:45:45+00:00","detail_url":"/events/71431"}]}},{"id":70947,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-5mjf-vgfg-5pxh","summary":"CGA-5mjf-vgfg-5pxh","evidence":"osv:CGA-5mjf-vgfg-5pxh","products":[{"name":{"value":"openstack-horizon-2026.1-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"25.7.3_git20261001-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5mjf-vgfg-5pxh","aliases":["CGA-5mjf-vgfg-5pxh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.7.3_git20261001-r1"}]}],"package":{"name":"openstack-horizon-2026.1-fips","purl":"pkg:apk/chainguard/openstack-horizon-2026.1-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5mjf-vgfg-5pxh.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-horizon-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:11:11Z"}]}}],"modified":"2026-10-02T18:28:02.949932797Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:893fbab7-3e0a-4a86-a863-100c259fe518","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5mjf-vgfg-5pxh","advisory_id":"893fbab7-3e0a-4a86-a863-100c259fe518","event_types":["advisory"],"published_at":"2026-10-25T22:45:16.107159+00:00","technologies":["core-osv","openstack-horizon-2026-1-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:49:10+00:00","detail_url":"/advisories/advisory%3A893fbab7-3e0a-4a86-a863-100c259fe518","group":{"id":"advisory:893fbab7-3e0a-4a86-a863-100c259fe518","revision":1,"primary_event_id":71318,"change":"published","superseded_by":[],"changed":{"id":71318,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-5mjf-vgfg-5pxh","summary":"CGA-5mjf-vgfg-5pxh","evidence":"osv:CGA-5mjf-vgfg-5pxh","products":[{"name":{"value":"openstack-horizon-2026.1-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"25.7.3_git20261001-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5mjf-vgfg-5pxh","aliases":["CGA-5mjf-vgfg-5pxh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.7.3_git20261001-r1"}]}],"package":{"name":"openstack-horizon-2026.1-fips","purl":"pkg:apk/chainguard/openstack-horizon-2026.1-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5mjf-vgfg-5pxh.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-horizon-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:11:11Z"}]}}],"modified":"2026-10-02T18:28:02.949932797Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:893fbab7-3e0a-4a86-a863-100c259fe518","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5mjf-vgfg-5pxh","advisory_id":"893fbab7-3e0a-4a86-a863-100c259fe518","event_types":["advisory"],"published_at":"2026-10-25T22:45:16.107159+00:00","technologies":["core-osv","openstack-horizon-2026-1-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:49:10+00:00","detail_url":"/events/71318"},"members":[{"id":71318,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-5mjf-vgfg-5pxh","summary":"CGA-5mjf-vgfg-5pxh","evidence":"osv:CGA-5mjf-vgfg-5pxh","products":[{"name":{"value":"openstack-horizon-2026.1-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"25.7.3_git20261001-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5mjf-vgfg-5pxh","aliases":["CGA-5mjf-vgfg-5pxh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.7.3_git20261001-r1"}]}],"package":{"name":"openstack-horizon-2026.1-fips","purl":"pkg:apk/chainguard/openstack-horizon-2026.1-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5mjf-vgfg-5pxh.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-horizon-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:11:11Z"}]}}],"modified":"2026-10-02T18:28:02.949932797Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:893fbab7-3e0a-4a86-a863-100c259fe518","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5mjf-vgfg-5pxh","advisory_id":"893fbab7-3e0a-4a86-a863-100c259fe518","event_types":["advisory"],"published_at":"2026-10-25T22:45:16.107159+00:00","technologies":["core-osv","openstack-horizon-2026-1-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:49:10+00:00","detail_url":"/events/71318"}]}},{"id":70852,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-w4xc-jg24-7998","summary":"CGA-w4xc-jg24-7998","evidence":"osv:CGA-w4xc-jg24-7998","products":[{"name":{"value":"py3.12-opentelemetry-exporter-otlp","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.40.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-w4xc-jg24-7998","aliases":["CGA-w4xc-jg24-7998"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-r3"}]}],"package":{"name":"py3.12-opentelemetry-exporter-otlp","purl":"pkg:apk/chainguard/py3.12-opentelemetry-exporter-otlp?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w4xc-jg24-7998.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:01:25Z"}]}}],"modified":"2026-10-02T18:25:49.690195391Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ed72800c-3cac-43fe-a951-11c01b4bb3d8","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w4xc-jg24-7998","advisory_id":"ed72800c-3cac-43fe-a951-11c01b4bb3d8","event_types":["advisory"],"published_at":"2026-10-25T22:42:23.98602+00:00","technologies":["core-osv","py3-12-opentelemetry-exporter-otlp"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:38:28+00:00","detail_url":"/advisories/advisory%3Aed72800c-3cac-43fe-a951-11c01b4bb3d8","group":{"id":"advisory:ed72800c-3cac-43fe-a951-11c01b4bb3d8","revision":1,"primary_event_id":71223,"change":"published","superseded_by":[],"changed":{"id":71223,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-w4xc-jg24-7998","summary":"CGA-w4xc-jg24-7998","evidence":"osv:CGA-w4xc-jg24-7998","products":[{"name":{"value":"py3.12-opentelemetry-exporter-otlp","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.40.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-w4xc-jg24-7998","aliases":["CGA-w4xc-jg24-7998"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-r3"}]}],"package":{"name":"py3.12-opentelemetry-exporter-otlp","purl":"pkg:apk/chainguard/py3.12-opentelemetry-exporter-otlp?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w4xc-jg24-7998.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:01:25Z"}]}}],"modified":"2026-10-02T18:25:49.690195391Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ed72800c-3cac-43fe-a951-11c01b4bb3d8","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w4xc-jg24-7998","advisory_id":"ed72800c-3cac-43fe-a951-11c01b4bb3d8","event_types":["advisory"],"published_at":"2026-10-25T22:42:23.98602+00:00","technologies":["core-osv","py3-12-opentelemetry-exporter-otlp"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:38:28+00:00","detail_url":"/events/71223"},"members":[{"id":71223,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-w4xc-jg24-7998","summary":"CGA-w4xc-jg24-7998","evidence":"osv:CGA-w4xc-jg24-7998","products":[{"name":{"value":"py3.12-opentelemetry-exporter-otlp","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.40.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-w4xc-jg24-7998","aliases":["CGA-w4xc-jg24-7998"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-r3"}]}],"package":{"name":"py3.12-opentelemetry-exporter-otlp","purl":"pkg:apk/chainguard/py3.12-opentelemetry-exporter-otlp?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w4xc-jg24-7998.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:01:25Z"}]}}],"modified":"2026-10-02T18:25:49.690195391Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ed72800c-3cac-43fe-a951-11c01b4bb3d8","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w4xc-jg24-7998","advisory_id":"ed72800c-3cac-43fe-a951-11c01b4bb3d8","event_types":["advisory"],"published_at":"2026-10-25T22:42:23.98602+00:00","technologies":["core-osv","py3-12-opentelemetry-exporter-otlp"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:38:28+00:00","detail_url":"/events/71223"}]}},{"id":70847,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-w2xv-mrv8-frc7","summary":"CGA-w2xv-mrv8-frc7","evidence":"osv:CGA-w2xv-mrv8-frc7","products":[{"name":{"value":"litellm","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.103.2-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-w2xv-mrv8-frc7","aliases":["CGA-w2xv-mrv8-frc7"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.103.2-r2"}]}],"package":{"name":"litellm","purl":"pkg:apk/chainguard/litellm?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w2xv-mrv8-frc7.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T08:53:19Z"}]}}],"modified":"2026-10-02T18:25:49.653153576Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c9f46117-76e6-4a2f-aa3c-f74bc38360b5","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w2xv-mrv8-frc7","advisory_id":"c9f46117-76e6-4a2f-aa3c-f74bc38360b5","event_types":["advisory"],"published_at":"2026-10-25T22:42:15.171654+00:00","technologies":["core-osv","litellm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:54:47+00:00","detail_url":"/advisories/advisory%3Ac9f46117-76e6-4a2f-aa3c-f74bc38360b5","group":{"id":"advisory:c9f46117-76e6-4a2f-aa3c-f74bc38360b5","revision":1,"primary_event_id":71218,"change":"published","superseded_by":[],"changed":{"id":71218,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-w2xv-mrv8-frc7","summary":"CGA-w2xv-mrv8-frc7","evidence":"osv:CGA-w2xv-mrv8-frc7","products":[{"name":{"value":"litellm","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.103.2-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-w2xv-mrv8-frc7","aliases":["CGA-w2xv-mrv8-frc7"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.103.2-r2"}]}],"package":{"name":"litellm","purl":"pkg:apk/chainguard/litellm?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w2xv-mrv8-frc7.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T08:53:19Z"}]}}],"modified":"2026-10-02T18:25:49.653153576Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c9f46117-76e6-4a2f-aa3c-f74bc38360b5","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w2xv-mrv8-frc7","advisory_id":"c9f46117-76e6-4a2f-aa3c-f74bc38360b5","event_types":["advisory"],"published_at":"2026-10-25T22:42:15.171654+00:00","technologies":["core-osv","litellm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:54:47+00:00","detail_url":"/events/71218"},"members":[{"id":71218,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-w2xv-mrv8-frc7","summary":"CGA-w2xv-mrv8-frc7","evidence":"osv:CGA-w2xv-mrv8-frc7","products":[{"name":{"value":"litellm","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.103.2-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-w2xv-mrv8-frc7","aliases":["CGA-w2xv-mrv8-frc7"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.103.2-r2"}]}],"package":{"name":"litellm","purl":"pkg:apk/chainguard/litellm?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w2xv-mrv8-frc7.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T08:53:19Z"}]}}],"modified":"2026-10-02T18:25:49.653153576Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c9f46117-76e6-4a2f-aa3c-f74bc38360b5","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w2xv-mrv8-frc7","advisory_id":"c9f46117-76e6-4a2f-aa3c-f74bc38360b5","event_types":["advisory"],"published_at":"2026-10-25T22:42:15.171654+00:00","technologies":["core-osv","litellm"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:54:47+00:00","detail_url":"/events/71218"}]}},{"id":70816,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-x4h3-24jv-j292","summary":"CGA-x4h3-24jv-j292","evidence":"osv:CGA-x4h3-24jv-j292","products":[{"name":{"value":"openstack-keystone-2025.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"27.0.1_git20260910-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-x4h3-24jv-j292","aliases":["CGA-x4h3-24jv-j292"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.0.1_git20260910-r4"}]}],"package":{"name":"openstack-keystone-2025.1","purl":"pkg:apk/chainguard/openstack-keystone-2025.1?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x4h3-24jv-j292.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-keystone-2025.1/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:20:08Z"}]}}],"modified":"2026-10-02T18:25:47.169238407Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d9bf8764-422c-4013-a509-116e815855fc","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x4h3-24jv-j292","advisory_id":"d9bf8764-422c-4013-a509-116e815855fc","event_types":["advisory"],"published_at":"2026-10-25T22:40:46.89051+00:00","technologies":["core-osv","openstack-keystone-2025-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:49:51+00:00","detail_url":"/advisories/advisory%3Ad9bf8764-422c-4013-a509-116e815855fc","group":{"id":"advisory:d9bf8764-422c-4013-a509-116e815855fc","revision":1,"primary_event_id":71187,"change":"published","superseded_by":[],"changed":{"id":71187,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-x4h3-24jv-j292","summary":"CGA-x4h3-24jv-j292","evidence":"osv:CGA-x4h3-24jv-j292","products":[{"name":{"value":"openstack-keystone-2025.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"27.0.1_git20260910-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-x4h3-24jv-j292","aliases":["CGA-x4h3-24jv-j292"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.0.1_git20260910-r4"}]}],"package":{"name":"openstack-keystone-2025.1","purl":"pkg:apk/chainguard/openstack-keystone-2025.1?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x4h3-24jv-j292.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-keystone-2025.1/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:20:08Z"}]}}],"modified":"2026-10-02T18:25:47.169238407Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d9bf8764-422c-4013-a509-116e815855fc","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x4h3-24jv-j292","advisory_id":"d9bf8764-422c-4013-a509-116e815855fc","event_types":["advisory"],"published_at":"2026-10-25T22:40:46.89051+00:00","technologies":["core-osv","openstack-keystone-2025-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:49:51+00:00","detail_url":"/events/71187"},"members":[{"id":71187,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-x4h3-24jv-j292","summary":"CGA-x4h3-24jv-j292","evidence":"osv:CGA-x4h3-24jv-j292","products":[{"name":{"value":"openstack-keystone-2025.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"27.0.1_git20260910-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-x4h3-24jv-j292","aliases":["CGA-x4h3-24jv-j292"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.0.1_git20260910-r4"}]}],"package":{"name":"openstack-keystone-2025.1","purl":"pkg:apk/chainguard/openstack-keystone-2025.1?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x4h3-24jv-j292.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-keystone-2025.1/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:20:08Z"}]}}],"modified":"2026-10-02T18:25:47.169238407Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d9bf8764-422c-4013-a509-116e815855fc","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x4h3-24jv-j292","advisory_id":"d9bf8764-422c-4013-a509-116e815855fc","event_types":["advisory"],"published_at":"2026-10-25T22:40:46.89051+00:00","technologies":["core-osv","openstack-keystone-2025-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:49:51+00:00","detail_url":"/events/71187"}]}},{"id":70755,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-qr25-vfcx-86wq","summary":"CGA-qr25-vfcx-86wq","evidence":"osv:CGA-qr25-vfcx-86wq","products":[{"name":{"value":"openstack-placement-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"15.0.0_git20260806-r12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qr25-vfcx-86wq","aliases":["CGA-qr25-vfcx-86wq"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.0.0_git20260806-r12"}]}],"package":{"name":"openstack-placement-2026.1","purl":"pkg:apk/chainguard/openstack-placement-2026.1?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qr25-vfcx-86wq.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-placement-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:28:31Z"}]}}],"modified":"2026-10-02T18:25:44.770009752Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:da01efa1-c88c-48a0-ab78-e8dfd07977a3","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qr25-vfcx-86wq","advisory_id":"da01efa1-c88c-48a0-ab78-e8dfd07977a3","event_types":["advisory"],"published_at":"2026-10-25T22:37:51.760141+00:00","technologies":["core-osv","openstack-placement-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:43:43+00:00","detail_url":"/advisories/advisory%3Ada01efa1-c88c-48a0-ab78-e8dfd07977a3","group":{"id":"advisory:da01efa1-c88c-48a0-ab78-e8dfd07977a3","revision":1,"primary_event_id":71126,"change":"published","superseded_by":[],"changed":{"id":71126,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-qr25-vfcx-86wq","summary":"CGA-qr25-vfcx-86wq","evidence":"osv:CGA-qr25-vfcx-86wq","products":[{"name":{"value":"openstack-placement-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"15.0.0_git20260806-r12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qr25-vfcx-86wq","aliases":["CGA-qr25-vfcx-86wq"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.0.0_git20260806-r12"}]}],"package":{"name":"openstack-placement-2026.1","purl":"pkg:apk/chainguard/openstack-placement-2026.1?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qr25-vfcx-86wq.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-placement-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:28:31Z"}]}}],"modified":"2026-10-02T18:25:44.770009752Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:da01efa1-c88c-48a0-ab78-e8dfd07977a3","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qr25-vfcx-86wq","advisory_id":"da01efa1-c88c-48a0-ab78-e8dfd07977a3","event_types":["advisory"],"published_at":"2026-10-25T22:37:51.760141+00:00","technologies":["core-osv","openstack-placement-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:43:43+00:00","detail_url":"/events/71126"},"members":[{"id":71126,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-qr25-vfcx-86wq","summary":"CGA-qr25-vfcx-86wq","evidence":"osv:CGA-qr25-vfcx-86wq","products":[{"name":{"value":"openstack-placement-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"15.0.0_git20260806-r12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qr25-vfcx-86wq","aliases":["CGA-qr25-vfcx-86wq"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.0.0_git20260806-r12"}]}],"package":{"name":"openstack-placement-2026.1","purl":"pkg:apk/chainguard/openstack-placement-2026.1?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qr25-vfcx-86wq.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-placement-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:28:31Z"}]}}],"modified":"2026-10-02T18:25:44.770009752Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:da01efa1-c88c-48a0-ab78-e8dfd07977a3","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qr25-vfcx-86wq","advisory_id":"da01efa1-c88c-48a0-ab78-e8dfd07977a3","event_types":["advisory"],"published_at":"2026-10-25T22:37:51.760141+00:00","technologies":["core-osv","openstack-placement-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:43:43+00:00","detail_url":"/events/71126"}]}},{"id":70720,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-pwwq-m2q5-mhpc","summary":"CGA-pwwq-m2q5-mhpc","evidence":"osv:CGA-pwwq-m2q5-mhpc","products":[{"name":{"value":"openstack-neutron-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"28.0.2_git20260928-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-pwwq-m2q5-mhpc","aliases":["CGA-pwwq-m2q5-mhpc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.2_git20260928-r5"}]}],"package":{"name":"openstack-neutron-2026.1","purl":"pkg:apk/chainguard/openstack-neutron-2026.1?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pwwq-m2q5-mhpc.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-neutron-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:41Z"}]}}],"modified":"2026-10-02T18:25:42.853417271Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7ab626af-3640-4d3e-a1a8-f90584927dd3","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-pwwq-m2q5-mhpc","advisory_id":"7ab626af-3640-4d3e-a1a8-f90584927dd3","event_types":["advisory"],"published_at":"2026-10-25T22:36:05.409451+00:00","technologies":["core-osv","openstack-neutron-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:15:47+00:00","detail_url":"/advisories/advisory%3A7ab626af-3640-4d3e-a1a8-f90584927dd3","group":{"id":"advisory:7ab626af-3640-4d3e-a1a8-f90584927dd3","revision":1,"primary_event_id":71091,"change":"published","superseded_by":[],"changed":{"id":71091,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-pwwq-m2q5-mhpc","summary":"CGA-pwwq-m2q5-mhpc","evidence":"osv:CGA-pwwq-m2q5-mhpc","products":[{"name":{"value":"openstack-neutron-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"28.0.2_git20260928-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-pwwq-m2q5-mhpc","aliases":["CGA-pwwq-m2q5-mhpc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.2_git20260928-r5"}]}],"package":{"name":"openstack-neutron-2026.1","purl":"pkg:apk/chainguard/openstack-neutron-2026.1?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pwwq-m2q5-mhpc.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-neutron-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:41Z"}]}}],"modified":"2026-10-02T18:25:42.853417271Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7ab626af-3640-4d3e-a1a8-f90584927dd3","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-pwwq-m2q5-mhpc","advisory_id":"7ab626af-3640-4d3e-a1a8-f90584927dd3","event_types":["advisory"],"published_at":"2026-10-25T22:36:05.409451+00:00","technologies":["core-osv","openstack-neutron-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:15:47+00:00","detail_url":"/events/71091"},"members":[{"id":71091,"cve_ids":["CVE-2026-97688"],"payload":{"kind":"advisory","title":"CGA-pwwq-m2q5-mhpc","summary":"CGA-pwwq-m2q5-mhpc","evidence":"osv:CGA-pwwq-m2q5-mhpc","products":[{"name":{"value":"openstack-neutron-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"28.0.2_git20260928-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-pwwq-m2q5-mhpc","aliases":["CGA-pwwq-m2q5-mhpc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.2_git20260928-r5"}]}],"package":{"name":"openstack-neutron-2026.1","purl":"pkg:apk/chainguard/openstack-neutron-2026.1?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pwwq-m2q5-mhpc.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-neutron-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:41Z"}]}}],"modified":"2026-10-02T18:25:42.853417271Z","provider":"osv","upstream":["CVE-2026-97688","GHSA-gh4c-6fx4-qh6g"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97688.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g","https://nvd.nist.gov/vuln/detail/CVE-2026-97688","https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"]},"related_cves":[{"value":"CVE-2026-97688","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7ab626af-3640-4d3e-a1a8-f90584927dd3","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-97688","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97688","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-pwwq-m2q5-mhpc","advisory_id":"7ab626af-3640-4d3e-a1a8-f90584927dd3","event_types":["advisory"],"published_at":"2026-10-25T22:36:05.409451+00:00","technologies":["core-osv","openstack-neutron-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:15:47+00:00","detail_url":"/events/71091"}]}}],"next_after":72949,"next_before":70720}