{"schema_version":"2","view":"grouped","data":[{"id":73087,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-r7m8-8gfv-gw2p","summary":"CGA-r7m8-8gfv-gw2p","evidence":"osv:CGA-r7m8-8gfv-gw2p","products":[{"name":{"value":"datadog-agent-7.79","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-r7m8-8gfv-gw2p","aliases":["CGA-r7m8-8gfv-gw2p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/chainguard/datadog-agent-7.79?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r7m8-8gfv-gw2p.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/wolfi/datadog-agent-7.79?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r7m8-8gfv-gw2p.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:10Z"}]}}],"modified":"2026-10-03T10:32:47.220540788Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9049c2fd-b31e-4444-ab5b-c85ccc40bd74","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-r7m8-8gfv-gw2p","advisory_id":"9049c2fd-b31e-4444-ab5b-c85ccc40bd74","event_types":["advisory"],"published_at":"2026-10-26T02:51:36.358025+00:00","technologies":["core-osv","datadog-agent-7-79"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:06+00:00","detail_url":"/advisories/advisory%3A9049c2fd-b31e-4444-ab5b-c85ccc40bd74","group":{"id":"advisory:9049c2fd-b31e-4444-ab5b-c85ccc40bd74","revision":1,"primary_event_id":74735,"change":"published","superseded_by":[],"changed":{"id":74735,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-r7m8-8gfv-gw2p","summary":"CGA-r7m8-8gfv-gw2p","evidence":"osv:CGA-r7m8-8gfv-gw2p","products":[{"name":{"value":"datadog-agent-7.79","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-r7m8-8gfv-gw2p","aliases":["CGA-r7m8-8gfv-gw2p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/chainguard/datadog-agent-7.79?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r7m8-8gfv-gw2p.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/wolfi/datadog-agent-7.79?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r7m8-8gfv-gw2p.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:10Z"}]}}],"modified":"2026-10-03T10:32:47.220540788Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9049c2fd-b31e-4444-ab5b-c85ccc40bd74","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-r7m8-8gfv-gw2p","advisory_id":"9049c2fd-b31e-4444-ab5b-c85ccc40bd74","event_types":["advisory"],"published_at":"2026-10-26T02:51:36.358025+00:00","technologies":["core-osv","datadog-agent-7-79"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:06+00:00","detail_url":"/events/74735"},"members":[{"id":74735,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-r7m8-8gfv-gw2p","summary":"CGA-r7m8-8gfv-gw2p","evidence":"osv:CGA-r7m8-8gfv-gw2p","products":[{"name":{"value":"datadog-agent-7.79","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-r7m8-8gfv-gw2p","aliases":["CGA-r7m8-8gfv-gw2p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/chainguard/datadog-agent-7.79?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r7m8-8gfv-gw2p.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/wolfi/datadog-agent-7.79?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r7m8-8gfv-gw2p.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:10Z"}]}}],"modified":"2026-10-03T10:32:47.220540788Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9049c2fd-b31e-4444-ab5b-c85ccc40bd74","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-r7m8-8gfv-gw2p","advisory_id":"9049c2fd-b31e-4444-ab5b-c85ccc40bd74","event_types":["advisory"],"published_at":"2026-10-26T02:51:36.358025+00:00","technologies":["core-osv","datadog-agent-7-79"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:06+00:00","detail_url":"/events/74735"}]}},{"id":73080,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-r28f-xj74-4g6x","summary":"CGA-r28f-xj74-4g6x","evidence":"osv:CGA-r28f-xj74-4g6x","products":[{"name":{"value":"datadog-agent-7.79","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-r28f-xj74-4g6x","aliases":["CGA-r28f-xj74-4g6x"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/chainguard/datadog-agent-7.79?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r28f-xj74-4g6x.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/wolfi/datadog-agent-7.79?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r28f-xj74-4g6x.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:10Z"}]}}],"modified":"2026-10-03T10:32:47.155605109Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:87bac4cf-2844-40e5-a3bb-74b1deabe8d2","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-r28f-xj74-4g6x","advisory_id":"87bac4cf-2844-40e5-a3bb-74b1deabe8d2","event_types":["advisory"],"published_at":"2026-10-26T02:46:17.207078+00:00","technologies":["core-osv","datadog-agent-7-79"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:07+00:00","detail_url":"/advisories/advisory%3A87bac4cf-2844-40e5-a3bb-74b1deabe8d2","group":{"id":"advisory:87bac4cf-2844-40e5-a3bb-74b1deabe8d2","revision":1,"primary_event_id":74684,"change":"published","superseded_by":[],"changed":{"id":74684,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-r28f-xj74-4g6x","summary":"CGA-r28f-xj74-4g6x","evidence":"osv:CGA-r28f-xj74-4g6x","products":[{"name":{"value":"datadog-agent-7.79","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-r28f-xj74-4g6x","aliases":["CGA-r28f-xj74-4g6x"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/chainguard/datadog-agent-7.79?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r28f-xj74-4g6x.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/wolfi/datadog-agent-7.79?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r28f-xj74-4g6x.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:10Z"}]}}],"modified":"2026-10-03T10:32:47.155605109Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:87bac4cf-2844-40e5-a3bb-74b1deabe8d2","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-r28f-xj74-4g6x","advisory_id":"87bac4cf-2844-40e5-a3bb-74b1deabe8d2","event_types":["advisory"],"published_at":"2026-10-26T02:46:17.207078+00:00","technologies":["core-osv","datadog-agent-7-79"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:07+00:00","detail_url":"/events/74684"},"members":[{"id":74684,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-r28f-xj74-4g6x","summary":"CGA-r28f-xj74-4g6x","evidence":"osv:CGA-r28f-xj74-4g6x","products":[{"name":{"value":"datadog-agent-7.79","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-r28f-xj74-4g6x","aliases":["CGA-r28f-xj74-4g6x"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/chainguard/datadog-agent-7.79?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r28f-xj74-4g6x.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79","purl":"pkg:apk/wolfi/datadog-agent-7.79?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-r28f-xj74-4g6x.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T22:07:10Z"}]}}],"modified":"2026-10-03T10:32:47.155605109Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:87bac4cf-2844-40e5-a3bb-74b1deabe8d2","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-r28f-xj74-4g6x","advisory_id":"87bac4cf-2844-40e5-a3bb-74b1deabe8d2","event_types":["advisory"],"published_at":"2026-10-26T02:46:17.207078+00:00","technologies":["core-osv","datadog-agent-7-79"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:07+00:00","detail_url":"/events/74684"}]}},{"id":73031,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-mxcp-v9ff-5r7x","summary":"CGA-mxcp-v9ff-5r7x","evidence":"osv:CGA-mxcp-v9ff-5r7x","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-mxcp-v9ff-5r7x","aliases":["CGA-mxcp-v9ff-5r7x"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mxcp-v9ff-5r7x.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:25Z"}]}}],"modified":"2026-10-03T10:32:45.283075918Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3a9e8d2f-0f69-49e7-b473-bba96319f7cd","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mxcp-v9ff-5r7x","advisory_id":"3a9e8d2f-0f69-49e7-b473-bba96319f7cd","event_types":["advisory"],"published_at":"2026-10-26T02:27:24.946468+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:39+00:00","detail_url":"/advisories/advisory%3A3a9e8d2f-0f69-49e7-b473-bba96319f7cd","group":{"id":"advisory:3a9e8d2f-0f69-49e7-b473-bba96319f7cd","revision":1,"primary_event_id":74479,"change":"published","superseded_by":[],"changed":{"id":74479,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-mxcp-v9ff-5r7x","summary":"CGA-mxcp-v9ff-5r7x","evidence":"osv:CGA-mxcp-v9ff-5r7x","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-mxcp-v9ff-5r7x","aliases":["CGA-mxcp-v9ff-5r7x"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mxcp-v9ff-5r7x.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:25Z"}]}}],"modified":"2026-10-03T10:32:45.283075918Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3a9e8d2f-0f69-49e7-b473-bba96319f7cd","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mxcp-v9ff-5r7x","advisory_id":"3a9e8d2f-0f69-49e7-b473-bba96319f7cd","event_types":["advisory"],"published_at":"2026-10-26T02:27:24.946468+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:39+00:00","detail_url":"/events/74479"},"members":[{"id":74479,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-mxcp-v9ff-5r7x","summary":"CGA-mxcp-v9ff-5r7x","evidence":"osv:CGA-mxcp-v9ff-5r7x","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-mxcp-v9ff-5r7x","aliases":["CGA-mxcp-v9ff-5r7x"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mxcp-v9ff-5r7x.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:25Z"}]}}],"modified":"2026-10-03T10:32:45.283075918Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3a9e8d2f-0f69-49e7-b473-bba96319f7cd","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mxcp-v9ff-5r7x","advisory_id":"3a9e8d2f-0f69-49e7-b473-bba96319f7cd","event_types":["advisory"],"published_at":"2026-10-26T02:27:24.946468+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:39+00:00","detail_url":"/events/74479"}]}},{"id":72990,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-jc58-3r4g-2fp4","summary":"CGA-jc58-3r4g-2fp4","evidence":"osv:CGA-jc58-3r4g-2fp4","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-jc58-3r4g-2fp4","aliases":["CGA-jc58-3r4g-2fp4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jc58-3r4g-2fp4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:59Z"}]}}],"modified":"2026-10-03T10:32:43.059532639Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:16ac94ba-ffad-4a68-bd8d-2811d97ecdb9","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jc58-3r4g-2fp4","advisory_id":"16ac94ba-ffad-4a68-bd8d-2811d97ecdb9","event_types":["advisory"],"published_at":"2026-10-26T02:07:47.472129+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:09+00:00","detail_url":"/advisories/advisory%3A16ac94ba-ffad-4a68-bd8d-2811d97ecdb9","group":{"id":"advisory:16ac94ba-ffad-4a68-bd8d-2811d97ecdb9","revision":1,"primary_event_id":74268,"change":"published","superseded_by":[],"changed":{"id":74268,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-jc58-3r4g-2fp4","summary":"CGA-jc58-3r4g-2fp4","evidence":"osv:CGA-jc58-3r4g-2fp4","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-jc58-3r4g-2fp4","aliases":["CGA-jc58-3r4g-2fp4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jc58-3r4g-2fp4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:59Z"}]}}],"modified":"2026-10-03T10:32:43.059532639Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:16ac94ba-ffad-4a68-bd8d-2811d97ecdb9","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jc58-3r4g-2fp4","advisory_id":"16ac94ba-ffad-4a68-bd8d-2811d97ecdb9","event_types":["advisory"],"published_at":"2026-10-26T02:07:47.472129+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:09+00:00","detail_url":"/events/74268"},"members":[{"id":74268,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-jc58-3r4g-2fp4","summary":"CGA-jc58-3r4g-2fp4","evidence":"osv:CGA-jc58-3r4g-2fp4","products":[{"name":{"value":"datadog-agent-fips-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-jc58-3r4g-2fp4","aliases":["CGA-jc58-3r4g-2fp4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jc58-3r4g-2fp4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:47:59Z"}]}}],"modified":"2026-10-03T10:32:43.059532639Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:16ac94ba-ffad-4a68-bd8d-2811d97ecdb9","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jc58-3r4g-2fp4","advisory_id":"16ac94ba-ffad-4a68-bd8d-2811d97ecdb9","event_types":["advisory"],"published_at":"2026-10-26T02:07:47.472129+00:00","technologies":["core-osv","datadog-agent-fips-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:55:09+00:00","detail_url":"/events/74268"}]}},{"id":72973,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-j7fj-rhjw-xcr8","summary":"CGA-j7fj-rhjw-xcr8","evidence":"osv:CGA-j7fj-rhjw-xcr8","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-j7fj-rhjw-xcr8","aliases":["CGA-j7fj-rhjw-xcr8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j7fj-rhjw-xcr8.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:42Z"}]}}],"modified":"2026-10-03T10:32:43.058329714Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0bd5d731-f8c5-444f-b71c-4c9e1680336d","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-j7fj-rhjw-xcr8","advisory_id":"0bd5d731-f8c5-444f-b71c-4c9e1680336d","event_types":["advisory"],"published_at":"2026-10-26T02:05:16.150235+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:18+00:00","detail_url":"/advisories/advisory%3A0bd5d731-f8c5-444f-b71c-4c9e1680336d","group":{"id":"advisory:0bd5d731-f8c5-444f-b71c-4c9e1680336d","revision":1,"primary_event_id":74240,"change":"published","superseded_by":[],"changed":{"id":74240,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-j7fj-rhjw-xcr8","summary":"CGA-j7fj-rhjw-xcr8","evidence":"osv:CGA-j7fj-rhjw-xcr8","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-j7fj-rhjw-xcr8","aliases":["CGA-j7fj-rhjw-xcr8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j7fj-rhjw-xcr8.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:42Z"}]}}],"modified":"2026-10-03T10:32:43.058329714Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0bd5d731-f8c5-444f-b71c-4c9e1680336d","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-j7fj-rhjw-xcr8","advisory_id":"0bd5d731-f8c5-444f-b71c-4c9e1680336d","event_types":["advisory"],"published_at":"2026-10-26T02:05:16.150235+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:18+00:00","detail_url":"/events/74240"},"members":[{"id":74240,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-j7fj-rhjw-xcr8","summary":"CGA-j7fj-rhjw-xcr8","evidence":"osv:CGA-j7fj-rhjw-xcr8","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-j7fj-rhjw-xcr8","aliases":["CGA-j7fj-rhjw-xcr8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j7fj-rhjw-xcr8.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:42Z"}]}}],"modified":"2026-10-03T10:32:43.058329714Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0bd5d731-f8c5-444f-b71c-4c9e1680336d","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-j7fj-rhjw-xcr8","advisory_id":"0bd5d731-f8c5-444f-b71c-4c9e1680336d","event_types":["advisory"],"published_at":"2026-10-26T02:05:16.150235+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:18+00:00","detail_url":"/events/74240"}]}},{"id":72950,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-gxfj-4r4j-fpw4","summary":"CGA-gxfj-4r4j-fpw4","evidence":"osv:CGA-gxfj-4r4j-fpw4","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gxfj-4r4j-fpw4","aliases":["CGA-gxfj-4r4j-fpw4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gxfj-4r4j-fpw4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:25:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gxfj-4r4j-fpw4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:25:08Z"}]}}],"modified":"2026-10-03T10:32:41.642486038Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b6052858-66f2-4187-86b5-2bbb6b4cbf93","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gxfj-4r4j-fpw4","advisory_id":"b6052858-66f2-4187-86b5-2bbb6b4cbf93","event_types":["advisory"],"published_at":"2026-10-26T01:48:20.627182+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T03:14:12+00:00","detail_url":"/advisories/advisory%3Ab6052858-66f2-4187-86b5-2bbb6b4cbf93","group":{"id":"advisory:b6052858-66f2-4187-86b5-2bbb6b4cbf93","revision":1,"primary_event_id":74071,"change":"published","superseded_by":[],"changed":{"id":74071,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-gxfj-4r4j-fpw4","summary":"CGA-gxfj-4r4j-fpw4","evidence":"osv:CGA-gxfj-4r4j-fpw4","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gxfj-4r4j-fpw4","aliases":["CGA-gxfj-4r4j-fpw4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gxfj-4r4j-fpw4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:25:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gxfj-4r4j-fpw4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:25:08Z"}]}}],"modified":"2026-10-03T10:32:41.642486038Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b6052858-66f2-4187-86b5-2bbb6b4cbf93","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gxfj-4r4j-fpw4","advisory_id":"b6052858-66f2-4187-86b5-2bbb6b4cbf93","event_types":["advisory"],"published_at":"2026-10-26T01:48:20.627182+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T03:14:12+00:00","detail_url":"/events/74071"},"members":[{"id":74071,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-gxfj-4r4j-fpw4","summary":"CGA-gxfj-4r4j-fpw4","evidence":"osv:CGA-gxfj-4r4j-fpw4","products":[{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"datadog-agent-7.77-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.77.3-r27","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gxfj-4r4j-fpw4","aliases":["CGA-gxfj-4r4j-fpw4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gxfj-4r4j-fpw4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:25:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.77.3-r27"}]}],"package":{"name":"datadog-agent-7.77-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gxfj-4r4j-fpw4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-03T03:25:08Z"}]}}],"modified":"2026-10-03T10:32:41.642486038Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b6052858-66f2-4187-86b5-2bbb6b4cbf93","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gxfj-4r4j-fpw4","advisory_id":"b6052858-66f2-4187-86b5-2bbb6b4cbf93","event_types":["advisory"],"published_at":"2026-10-26T01:48:20.627182+00:00","technologies":["core-osv","datadog-agent-7-77-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T03:14:12+00:00","detail_url":"/events/74071"}]}},{"id":72819,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-89xm-34jx-j8xg","summary":"CGA-89xm-34jx-j8xg","evidence":"osv:CGA-89xm-34jx-j8xg","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-89xm-34jx-j8xg","aliases":["CGA-89xm-34jx-j8xg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-89xm-34jx-j8xg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:42Z"}]}}],"modified":"2026-10-03T10:32:36.652920365Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0bf43159-e812-4ecd-a523-55fdc3b5fc17","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-89xm-34jx-j8xg","advisory_id":"0bf43159-e812-4ecd-a523-55fdc3b5fc17","event_types":["advisory"],"published_at":"2026-10-26T01:11:19.521801+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:16+00:00","detail_url":"/advisories/advisory%3A0bf43159-e812-4ecd-a523-55fdc3b5fc17","group":{"id":"advisory:0bf43159-e812-4ecd-a523-55fdc3b5fc17","revision":1,"primary_event_id":73659,"change":"published","superseded_by":[],"changed":{"id":73659,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-89xm-34jx-j8xg","summary":"CGA-89xm-34jx-j8xg","evidence":"osv:CGA-89xm-34jx-j8xg","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-89xm-34jx-j8xg","aliases":["CGA-89xm-34jx-j8xg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-89xm-34jx-j8xg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:42Z"}]}}],"modified":"2026-10-03T10:32:36.652920365Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0bf43159-e812-4ecd-a523-55fdc3b5fc17","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-89xm-34jx-j8xg","advisory_id":"0bf43159-e812-4ecd-a523-55fdc3b5fc17","event_types":["advisory"],"published_at":"2026-10-26T01:11:19.521801+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:16+00:00","detail_url":"/events/73659"},"members":[{"id":73659,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-89xm-34jx-j8xg","summary":"CGA-89xm-34jx-j8xg","evidence":"osv:CGA-89xm-34jx-j8xg","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-89xm-34jx-j8xg","aliases":["CGA-89xm-34jx-j8xg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-89xm-34jx-j8xg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:42Z"}]}}],"modified":"2026-10-03T10:32:36.652920365Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0bf43159-e812-4ecd-a523-55fdc3b5fc17","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-89xm-34jx-j8xg","advisory_id":"0bf43159-e812-4ecd-a523-55fdc3b5fc17","event_types":["advisory"],"published_at":"2026-10-26T01:11:19.521801+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:16+00:00","detail_url":"/events/73659"}]}},{"id":72741,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-6h2x-pv3h-w387","summary":"CGA-6h2x-pv3h-w387","evidence":"osv:CGA-6h2x-pv3h-w387","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-6h2x-pv3h-w387","aliases":["CGA-6h2x-pv3h-w387"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6h2x-pv3h-w387.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:41Z"}]}}],"modified":"2026-10-03T10:32:34.597536656Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:652112e1-5cba-4c59-aa5f-2e228331920a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6h2x-pv3h-w387","advisory_id":"652112e1-5cba-4c59-aa5f-2e228331920a","event_types":["advisory"],"published_at":"2026-10-26T00:57:28.784977+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:15+00:00","detail_url":"/advisories/advisory%3A652112e1-5cba-4c59-aa5f-2e228331920a","group":{"id":"advisory:652112e1-5cba-4c59-aa5f-2e228331920a","revision":1,"primary_event_id":73504,"change":"published","superseded_by":[],"changed":{"id":73504,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-6h2x-pv3h-w387","summary":"CGA-6h2x-pv3h-w387","evidence":"osv:CGA-6h2x-pv3h-w387","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-6h2x-pv3h-w387","aliases":["CGA-6h2x-pv3h-w387"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6h2x-pv3h-w387.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:41Z"}]}}],"modified":"2026-10-03T10:32:34.597536656Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:652112e1-5cba-4c59-aa5f-2e228331920a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6h2x-pv3h-w387","advisory_id":"652112e1-5cba-4c59-aa5f-2e228331920a","event_types":["advisory"],"published_at":"2026-10-26T00:57:28.784977+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:15+00:00","detail_url":"/events/73504"},"members":[{"id":73504,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-6h2x-pv3h-w387","summary":"CGA-6h2x-pv3h-w387","evidence":"osv:CGA-6h2x-pv3h-w387","products":[{"name":{"value":"datadog-agent-fips-7.78-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-6h2x-pv3h-w387","aliases":["CGA-6h2x-pv3h-w387"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.78-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6h2x-pv3h-w387.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T00:56:41Z"}]}}],"modified":"2026-10-03T10:32:34.597536656Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:652112e1-5cba-4c59-aa5f-2e228331920a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6h2x-pv3h-w387","advisory_id":"652112e1-5cba-4c59-aa5f-2e228331920a","event_types":["advisory"],"published_at":"2026-10-26T00:57:28.784977+00:00","technologies":["core-osv","datadog-agent-fips-7-78-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:32:15+00:00","detail_url":"/events/73504"}]}},{"id":72719,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-674x-7595-4hjp","summary":"CGA-674x-7595-4hjp","evidence":"osv:CGA-674x-7595-4hjp","products":[{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-674x-7595-4hjp","aliases":["CGA-674x-7595-4hjp"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-674x-7595-4hjp.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:03Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-674x-7595-4hjp.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:03Z"}]}}],"modified":"2026-10-03T10:32:32.040251470Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d9c16953-34cd-4ec8-b2e3-b0f35d3ef258","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-674x-7595-4hjp","advisory_id":"d9c16953-34cd-4ec8-b2e3-b0f35d3ef258","event_types":["advisory"],"published_at":"2026-10-26T00:53:28.284165+00:00","technologies":["core-osv","datadog-agent-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:35+00:00","detail_url":"/advisories/advisory%3Ad9c16953-34cd-4ec8-b2e3-b0f35d3ef258","group":{"id":"advisory:d9c16953-34cd-4ec8-b2e3-b0f35d3ef258","revision":1,"primary_event_id":73463,"change":"published","superseded_by":[],"changed":{"id":73463,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-674x-7595-4hjp","summary":"CGA-674x-7595-4hjp","evidence":"osv:CGA-674x-7595-4hjp","products":[{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-674x-7595-4hjp","aliases":["CGA-674x-7595-4hjp"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-674x-7595-4hjp.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:03Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-674x-7595-4hjp.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:03Z"}]}}],"modified":"2026-10-03T10:32:32.040251470Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d9c16953-34cd-4ec8-b2e3-b0f35d3ef258","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-674x-7595-4hjp","advisory_id":"d9c16953-34cd-4ec8-b2e3-b0f35d3ef258","event_types":["advisory"],"published_at":"2026-10-26T00:53:28.284165+00:00","technologies":["core-osv","datadog-agent-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:35+00:00","detail_url":"/events/73463"},"members":[{"id":73463,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-674x-7595-4hjp","summary":"CGA-674x-7595-4hjp","evidence":"osv:CGA-674x-7595-4hjp","products":[{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-674x-7595-4hjp","aliases":["CGA-674x-7595-4hjp"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-674x-7595-4hjp.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:03Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-674x-7595-4hjp.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:03Z"}]}}],"modified":"2026-10-03T10:32:32.040251470Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d9c16953-34cd-4ec8-b2e3-b0f35d3ef258","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-674x-7595-4hjp","advisory_id":"d9c16953-34cd-4ec8-b2e3-b0f35d3ef258","event_types":["advisory"],"published_at":"2026-10-26T00:53:28.284165+00:00","technologies":["core-osv","datadog-agent-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:35+00:00","detail_url":"/events/73463"}]}},{"id":72684,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-52f2-mxp9-2q69","summary":"CGA-52f2-mxp9-2q69","evidence":"osv:CGA-52f2-mxp9-2q69","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-52f2-mxp9-2q69","aliases":["CGA-52f2-mxp9-2q69"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-52f2-mxp9-2q69.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:24Z"}]}}],"modified":"2026-10-03T10:32:27.524940029Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8711642a-eb31-4db0-a64a-b46dad64ca2d","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-52f2-mxp9-2q69","advisory_id":"8711642a-eb31-4db0-a64a-b46dad64ca2d","event_types":["advisory"],"published_at":"2026-10-26T00:47:01.27286+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:38+00:00","detail_url":"/advisories/advisory%3A8711642a-eb31-4db0-a64a-b46dad64ca2d","group":{"id":"advisory:8711642a-eb31-4db0-a64a-b46dad64ca2d","revision":1,"primary_event_id":73411,"change":"published","superseded_by":[],"changed":{"id":73411,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-52f2-mxp9-2q69","summary":"CGA-52f2-mxp9-2q69","evidence":"osv:CGA-52f2-mxp9-2q69","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-52f2-mxp9-2q69","aliases":["CGA-52f2-mxp9-2q69"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-52f2-mxp9-2q69.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:24Z"}]}}],"modified":"2026-10-03T10:32:27.524940029Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8711642a-eb31-4db0-a64a-b46dad64ca2d","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-52f2-mxp9-2q69","advisory_id":"8711642a-eb31-4db0-a64a-b46dad64ca2d","event_types":["advisory"],"published_at":"2026-10-26T00:47:01.27286+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:38+00:00","detail_url":"/events/73411"},"members":[{"id":73411,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-52f2-mxp9-2q69","summary":"CGA-52f2-mxp9-2q69","evidence":"osv:CGA-52f2-mxp9-2q69","products":[{"name":{"value":"datadog-agent-fips-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-52f2-mxp9-2q69","aliases":["CGA-52f2-mxp9-2q69"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-fips-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-52f2-mxp9-2q69.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T23:33:24Z"}]}}],"modified":"2026-10-03T10:32:27.524940029Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8711642a-eb31-4db0-a64a-b46dad64ca2d","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-52f2-mxp9-2q69","advisory_id":"8711642a-eb31-4db0-a64a-b46dad64ca2d","event_types":["advisory"],"published_at":"2026-10-26T00:47:01.27286+00:00","technologies":["core-osv","datadog-agent-fips-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:16:38+00:00","detail_url":"/events/73411"}]}},{"id":72490,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-7hxm-9jrj-5276","summary":"CGA-7hxm-9jrj-5276","evidence":"osv:CGA-7hxm-9jrj-5276","products":[{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-7hxm-9jrj-5276","aliases":["CGA-7hxm-9jrj-5276"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7hxm-9jrj-5276.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:02Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7hxm-9jrj-5276.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:02Z"}]}}],"modified":"2026-10-03T10:30:12.679636243Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f689d251-1476-462a-82ee-ed0fcf087641","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7hxm-9jrj-5276","advisory_id":"f689d251-1476-462a-82ee-ed0fcf087641","event_types":["advisory"],"published_at":"2026-10-26T00:24:22.103571+00:00","technologies":["core-osv","datadog-agent-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:34+00:00","detail_url":"/advisories/advisory%3Af689d251-1476-462a-82ee-ed0fcf087641","group":{"id":"advisory:f689d251-1476-462a-82ee-ed0fcf087641","revision":1,"primary_event_id":73138,"change":"published","superseded_by":[],"changed":{"id":73138,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-7hxm-9jrj-5276","summary":"CGA-7hxm-9jrj-5276","evidence":"osv:CGA-7hxm-9jrj-5276","products":[{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-7hxm-9jrj-5276","aliases":["CGA-7hxm-9jrj-5276"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7hxm-9jrj-5276.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:02Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7hxm-9jrj-5276.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:02Z"}]}}],"modified":"2026-10-03T10:30:12.679636243Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f689d251-1476-462a-82ee-ed0fcf087641","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7hxm-9jrj-5276","advisory_id":"f689d251-1476-462a-82ee-ed0fcf087641","event_types":["advisory"],"published_at":"2026-10-26T00:24:22.103571+00:00","technologies":["core-osv","datadog-agent-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:34+00:00","detail_url":"/events/73138"},"members":[{"id":73138,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-7hxm-9jrj-5276","summary":"CGA-7hxm-9jrj-5276","evidence":"osv:CGA-7hxm-9jrj-5276","products":[{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.81-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-7hxm-9jrj-5276","aliases":["CGA-7hxm-9jrj-5276"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7hxm-9jrj-5276.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:02Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.81-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.81-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7hxm-9jrj-5276.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.6.3","component_type":"python","component_version":"2.6.3","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-03T02:12:02Z"}]}}],"modified":"2026-10-03T10:30:12.679636243Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f689d251-1476-462a-82ee-ed0fcf087641","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7hxm-9jrj-5276","advisory_id":"f689d251-1476-462a-82ee-ed0fcf087641","event_types":["advisory"],"published_at":"2026-10-26T00:24:22.103571+00:00","technologies":["core-osv","datadog-agent-7-81-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T15:09:34+00:00","detail_url":"/events/73138"}]}},{"id":72032,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-x2cr-w4v9-w4ph","summary":"CGA-x2cr-w4v9-w4ph","evidence":"osv:CGA-x2cr-w4v9-w4ph","products":[{"name":{"value":"jupyterhub-k8s-singleuser-sample","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.2-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x2cr-w4v9-w4ph","aliases":["CGA-x2cr-w4v9-w4ph"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-r4"}]}],"package":{"name":"jupyterhub-k8s-singleuser-sample","purl":"pkg:apk/chainguard/jupyterhub-k8s-singleuser-sample?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x2cr-w4v9-w4ph.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jupyterhub-k8s-singleuser-sample/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:39:58Z"}]}}],"modified":"2026-10-02T23:01:54.730765214Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:65f06eca-2544-4f10-b3f7-05645e3fde2d","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x2cr-w4v9-w4ph","advisory_id":"65f06eca-2544-4f10-b3f7-05645e3fde2d","event_types":["advisory"],"published_at":"2026-10-26T00:11:40.95358+00:00","technologies":["core-osv","jupyterhub-k8s-singleuser-sample"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:03:11+00:00","detail_url":"/advisories/advisory%3A65f06eca-2544-4f10-b3f7-05645e3fde2d","group":{"id":"advisory:65f06eca-2544-4f10-b3f7-05645e3fde2d","revision":1,"primary_event_id":72653,"change":"published","superseded_by":[],"changed":{"id":72653,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-x2cr-w4v9-w4ph","summary":"CGA-x2cr-w4v9-w4ph","evidence":"osv:CGA-x2cr-w4v9-w4ph","products":[{"name":{"value":"jupyterhub-k8s-singleuser-sample","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.2-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x2cr-w4v9-w4ph","aliases":["CGA-x2cr-w4v9-w4ph"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-r4"}]}],"package":{"name":"jupyterhub-k8s-singleuser-sample","purl":"pkg:apk/chainguard/jupyterhub-k8s-singleuser-sample?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x2cr-w4v9-w4ph.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jupyterhub-k8s-singleuser-sample/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:39:58Z"}]}}],"modified":"2026-10-02T23:01:54.730765214Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:65f06eca-2544-4f10-b3f7-05645e3fde2d","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x2cr-w4v9-w4ph","advisory_id":"65f06eca-2544-4f10-b3f7-05645e3fde2d","event_types":["advisory"],"published_at":"2026-10-26T00:11:40.95358+00:00","technologies":["core-osv","jupyterhub-k8s-singleuser-sample"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:03:11+00:00","detail_url":"/events/72653"},"members":[{"id":72653,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-x2cr-w4v9-w4ph","summary":"CGA-x2cr-w4v9-w4ph","evidence":"osv:CGA-x2cr-w4v9-w4ph","products":[{"name":{"value":"jupyterhub-k8s-singleuser-sample","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.2-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x2cr-w4v9-w4ph","aliases":["CGA-x2cr-w4v9-w4ph"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-r4"}]}],"package":{"name":"jupyterhub-k8s-singleuser-sample","purl":"pkg:apk/chainguard/jupyterhub-k8s-singleuser-sample?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x2cr-w4v9-w4ph.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jupyterhub-k8s-singleuser-sample/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:39:58Z"}]}}],"modified":"2026-10-02T23:01:54.730765214Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:65f06eca-2544-4f10-b3f7-05645e3fde2d","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x2cr-w4v9-w4ph","advisory_id":"65f06eca-2544-4f10-b3f7-05645e3fde2d","event_types":["advisory"],"published_at":"2026-10-26T00:11:40.95358+00:00","technologies":["core-osv","jupyterhub-k8s-singleuser-sample"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:03:11+00:00","detail_url":"/events/72653"}]}},{"id":72014,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-wgmj-74wj-pj24","summary":"CGA-wgmj-74wj-pj24","evidence":"osv:CGA-wgmj-74wj-pj24","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wgmj-74wj-pj24","aliases":["CGA-wgmj-74wj-pj24"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wgmj-74wj-pj24.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T20:29:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wgmj-74wj-pj24.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T20:29:09Z"}]}}],"modified":"2026-10-02T23:01:51.370499402Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:aac8f658-1b4b-4ce7-a56a-e4374e86d4ef","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wgmj-74wj-pj24","advisory_id":"aac8f658-1b4b-4ce7-a56a-e4374e86d4ef","event_types":["advisory"],"published_at":"2026-10-26T00:08:41.868789+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:49:21+00:00","detail_url":"/advisories/advisory%3Aaac8f658-1b4b-4ce7-a56a-e4374e86d4ef","group":{"id":"advisory:aac8f658-1b4b-4ce7-a56a-e4374e86d4ef","revision":1,"primary_event_id":72608,"change":"published","superseded_by":[],"changed":{"id":72608,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-wgmj-74wj-pj24","summary":"CGA-wgmj-74wj-pj24","evidence":"osv:CGA-wgmj-74wj-pj24","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wgmj-74wj-pj24","aliases":["CGA-wgmj-74wj-pj24"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wgmj-74wj-pj24.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T20:29:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wgmj-74wj-pj24.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T20:29:09Z"}]}}],"modified":"2026-10-02T23:01:51.370499402Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:aac8f658-1b4b-4ce7-a56a-e4374e86d4ef","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wgmj-74wj-pj24","advisory_id":"aac8f658-1b4b-4ce7-a56a-e4374e86d4ef","event_types":["advisory"],"published_at":"2026-10-26T00:08:41.868789+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:49:21+00:00","detail_url":"/events/72608"},"members":[{"id":72608,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-wgmj-74wj-pj24","summary":"CGA-wgmj-74wj-pj24","evidence":"osv:CGA-wgmj-74wj-pj24","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wgmj-74wj-pj24","aliases":["CGA-wgmj-74wj-pj24"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wgmj-74wj-pj24.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T20:29:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wgmj-74wj-pj24.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T20:29:09Z"}]}}],"modified":"2026-10-02T23:01:51.370499402Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:aac8f658-1b4b-4ce7-a56a-e4374e86d4ef","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wgmj-74wj-pj24","advisory_id":"aac8f658-1b4b-4ce7-a56a-e4374e86d4ef","event_types":["advisory"],"published_at":"2026-10-26T00:08:41.868789+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:49:21+00:00","detail_url":"/events/72608"}]}},{"id":72009,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-wc7p-2xmw-rp67","summary":"CGA-wc7p-2xmw-rp67","evidence":"osv:CGA-wc7p-2xmw-rp67","products":[{"name":{"value":"jupyterhub-k8s-singleuser-sample","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.2-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wc7p-2xmw-rp67","aliases":["CGA-wc7p-2xmw-rp67"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-r4"}]}],"package":{"name":"jupyterhub-k8s-singleuser-sample","purl":"pkg:apk/chainguard/jupyterhub-k8s-singleuser-sample?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wc7p-2xmw-rp67.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jupyterhub-k8s-singleuser-sample/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:10:59Z"}]}}],"modified":"2026-10-02T23:01:50.061891674Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:35e23748-f94c-4b8d-b874-b118a0eddd47","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wc7p-2xmw-rp67","advisory_id":"35e23748-f94c-4b8d-b874-b118a0eddd47","event_types":["advisory"],"published_at":"2026-10-26T00:07:51.563656+00:00","technologies":["core-osv","jupyterhub-k8s-singleuser-sample"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:18:11+00:00","detail_url":"/advisories/advisory%3A35e23748-f94c-4b8d-b874-b118a0eddd47","group":{"id":"advisory:35e23748-f94c-4b8d-b874-b118a0eddd47","revision":1,"primary_event_id":72597,"change":"published","superseded_by":[],"changed":{"id":72597,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-wc7p-2xmw-rp67","summary":"CGA-wc7p-2xmw-rp67","evidence":"osv:CGA-wc7p-2xmw-rp67","products":[{"name":{"value":"jupyterhub-k8s-singleuser-sample","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.2-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wc7p-2xmw-rp67","aliases":["CGA-wc7p-2xmw-rp67"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-r4"}]}],"package":{"name":"jupyterhub-k8s-singleuser-sample","purl":"pkg:apk/chainguard/jupyterhub-k8s-singleuser-sample?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wc7p-2xmw-rp67.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jupyterhub-k8s-singleuser-sample/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:10:59Z"}]}}],"modified":"2026-10-02T23:01:50.061891674Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:35e23748-f94c-4b8d-b874-b118a0eddd47","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wc7p-2xmw-rp67","advisory_id":"35e23748-f94c-4b8d-b874-b118a0eddd47","event_types":["advisory"],"published_at":"2026-10-26T00:07:51.563656+00:00","technologies":["core-osv","jupyterhub-k8s-singleuser-sample"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:18:11+00:00","detail_url":"/events/72597"},"members":[{"id":72597,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-wc7p-2xmw-rp67","summary":"CGA-wc7p-2xmw-rp67","evidence":"osv:CGA-wc7p-2xmw-rp67","products":[{"name":{"value":"jupyterhub-k8s-singleuser-sample","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.4.2-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wc7p-2xmw-rp67","aliases":["CGA-wc7p-2xmw-rp67"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-r4"}]}],"package":{"name":"jupyterhub-k8s-singleuser-sample","purl":"pkg:apk/chainguard/jupyterhub-k8s-singleuser-sample?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wc7p-2xmw-rp67.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jupyterhub-k8s-singleuser-sample/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:10:59Z"}]}}],"modified":"2026-10-02T23:01:50.061891674Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:35e23748-f94c-4b8d-b874-b118a0eddd47","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wc7p-2xmw-rp67","advisory_id":"35e23748-f94c-4b8d-b874-b118a0eddd47","event_types":["advisory"],"published_at":"2026-10-26T00:07:51.563656+00:00","technologies":["core-osv","jupyterhub-k8s-singleuser-sample"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:18:11+00:00","detail_url":"/events/72597"}]}},{"id":71853,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-hjwx-rc92-6p6f","summary":"CGA-hjwx-rc92-6p6f","evidence":"osv:CGA-hjwx-rc92-6p6f","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-hjwx-rc92-6p6f","aliases":["CGA-hjwx-rc92-6p6f"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hjwx-rc92-6p6f.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:21Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hjwx-rc92-6p6f.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:21Z"}]}}],"modified":"2026-10-02T23:01:34.190641216Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2fb59a67-113a-4bd5-8cb5-b03e1025a410","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hjwx-rc92-6p6f","advisory_id":"2fb59a67-113a-4bd5-8cb5-b03e1025a410","event_types":["advisory"],"published_at":"2026-10-25T23:44:19.305129+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:51+00:00","detail_url":"/advisories/advisory%3A2fb59a67-113a-4bd5-8cb5-b03e1025a410","group":{"id":"advisory:2fb59a67-113a-4bd5-8cb5-b03e1025a410","revision":1,"primary_event_id":72347,"change":"published","superseded_by":[],"changed":{"id":72347,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-hjwx-rc92-6p6f","summary":"CGA-hjwx-rc92-6p6f","evidence":"osv:CGA-hjwx-rc92-6p6f","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-hjwx-rc92-6p6f","aliases":["CGA-hjwx-rc92-6p6f"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hjwx-rc92-6p6f.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:21Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hjwx-rc92-6p6f.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:21Z"}]}}],"modified":"2026-10-02T23:01:34.190641216Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2fb59a67-113a-4bd5-8cb5-b03e1025a410","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hjwx-rc92-6p6f","advisory_id":"2fb59a67-113a-4bd5-8cb5-b03e1025a410","event_types":["advisory"],"published_at":"2026-10-25T23:44:19.305129+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:51+00:00","detail_url":"/events/72347"},"members":[{"id":72347,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-hjwx-rc92-6p6f","summary":"CGA-hjwx-rc92-6p6f","evidence":"osv:CGA-hjwx-rc92-6p6f","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-hjwx-rc92-6p6f","aliases":["CGA-hjwx-rc92-6p6f"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hjwx-rc92-6p6f.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:21Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hjwx-rc92-6p6f.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:21Z"}]}}],"modified":"2026-10-02T23:01:34.190641216Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2fb59a67-113a-4bd5-8cb5-b03e1025a410","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hjwx-rc92-6p6f","advisory_id":"2fb59a67-113a-4bd5-8cb5-b03e1025a410","event_types":["advisory"],"published_at":"2026-10-25T23:44:19.305129+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:51+00:00","detail_url":"/events/72347"}]}},{"id":71774,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-77cq-2wvm-7r5w","summary":"CGA-77cq-2wvm-7r5w","evidence":"osv:CGA-77cq-2wvm-7r5w","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-77cq-2wvm-7r5w","aliases":["CGA-77cq-2wvm-7r5w"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-77cq-2wvm-7r5w.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:20Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-77cq-2wvm-7r5w.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:20Z"}]}}],"modified":"2026-10-02T23:01:27.108599949Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:00528776-68a4-49fd-98f5-1fc1021de0d4","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-77cq-2wvm-7r5w","advisory_id":"00528776-68a4-49fd-98f5-1fc1021de0d4","event_types":["advisory"],"published_at":"2026-10-25T23:36:40.184576+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:49+00:00","detail_url":"/advisories/advisory%3A00528776-68a4-49fd-98f5-1fc1021de0d4","group":{"id":"advisory:00528776-68a4-49fd-98f5-1fc1021de0d4","revision":1,"primary_event_id":72235,"change":"published","superseded_by":[],"changed":{"id":72235,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-77cq-2wvm-7r5w","summary":"CGA-77cq-2wvm-7r5w","evidence":"osv:CGA-77cq-2wvm-7r5w","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-77cq-2wvm-7r5w","aliases":["CGA-77cq-2wvm-7r5w"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-77cq-2wvm-7r5w.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:20Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-77cq-2wvm-7r5w.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:20Z"}]}}],"modified":"2026-10-02T23:01:27.108599949Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:00528776-68a4-49fd-98f5-1fc1021de0d4","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-77cq-2wvm-7r5w","advisory_id":"00528776-68a4-49fd-98f5-1fc1021de0d4","event_types":["advisory"],"published_at":"2026-10-25T23:36:40.184576+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:49+00:00","detail_url":"/events/72235"},"members":[{"id":72235,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-77cq-2wvm-7r5w","summary":"CGA-77cq-2wvm-7r5w","evidence":"osv:CGA-77cq-2wvm-7r5w","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-77cq-2wvm-7r5w","aliases":["CGA-77cq-2wvm-7r5w"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-77cq-2wvm-7r5w.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:20Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-77cq-2wvm-7r5w.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:20Z"}]}}],"modified":"2026-10-02T23:01:27.108599949Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:00528776-68a4-49fd-98f5-1fc1021de0d4","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-77cq-2wvm-7r5w","advisory_id":"00528776-68a4-49fd-98f5-1fc1021de0d4","event_types":["advisory"],"published_at":"2026-10-25T23:36:40.184576+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:49+00:00","detail_url":"/events/72235"}]}},{"id":71759,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-65mr-23c7-v7vm","summary":"CGA-65mr-23c7-v7vm","evidence":"osv:CGA-65mr-23c7-v7vm","products":[{"name":{"value":"pypy-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pypy-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-65mr-23c7-v7vm","aliases":["CGA-65mr-23c7-v7vm"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/chainguard/pypy-3.10?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-65mr-23c7-v7vm.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:40:41Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/wolfi/pypy-3.10?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-65mr-23c7-v7vm.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:40:41Z"}]}}],"modified":"2026-10-02T23:01:24.461453093Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:aaf96bbc-b97f-4270-8cc7-7a4503b0e75a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-65mr-23c7-v7vm","advisory_id":"aaf96bbc-b97f-4270-8cc7-7a4503b0e75a","event_types":["advisory"],"published_at":"2026-10-25T23:35:10.579546+00:00","technologies":["core-osv","pypy-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:19:53+00:00","detail_url":"/advisories/advisory%3Aaaf96bbc-b97f-4270-8cc7-7a4503b0e75a","group":{"id":"advisory:aaf96bbc-b97f-4270-8cc7-7a4503b0e75a","revision":1,"primary_event_id":72210,"change":"published","superseded_by":[],"changed":{"id":72210,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-65mr-23c7-v7vm","summary":"CGA-65mr-23c7-v7vm","evidence":"osv:CGA-65mr-23c7-v7vm","products":[{"name":{"value":"pypy-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pypy-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-65mr-23c7-v7vm","aliases":["CGA-65mr-23c7-v7vm"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/chainguard/pypy-3.10?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-65mr-23c7-v7vm.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:40:41Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/wolfi/pypy-3.10?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-65mr-23c7-v7vm.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:40:41Z"}]}}],"modified":"2026-10-02T23:01:24.461453093Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:aaf96bbc-b97f-4270-8cc7-7a4503b0e75a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-65mr-23c7-v7vm","advisory_id":"aaf96bbc-b97f-4270-8cc7-7a4503b0e75a","event_types":["advisory"],"published_at":"2026-10-25T23:35:10.579546+00:00","technologies":["core-osv","pypy-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:19:53+00:00","detail_url":"/events/72210"},"members":[{"id":72210,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-65mr-23c7-v7vm","summary":"CGA-65mr-23c7-v7vm","evidence":"osv:CGA-65mr-23c7-v7vm","products":[{"name":{"value":"pypy-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pypy-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-65mr-23c7-v7vm","aliases":["CGA-65mr-23c7-v7vm"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/chainguard/pypy-3.10?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-65mr-23c7-v7vm.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:40:41Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/wolfi/pypy-3.10?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-65mr-23c7-v7vm.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:40:41Z"}]}}],"modified":"2026-10-02T23:01:24.461453093Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:aaf96bbc-b97f-4270-8cc7-7a4503b0e75a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-65mr-23c7-v7vm","advisory_id":"aaf96bbc-b97f-4270-8cc7-7a4503b0e75a","event_types":["advisory"],"published_at":"2026-10-25T23:35:10.579546+00:00","technologies":["core-osv","pypy-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:19:53+00:00","detail_url":"/events/72210"}]}},{"id":71669,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-5mcp-8jfg-9c56","summary":"CGA-5mcp-8jfg-9c56","evidence":"osv:CGA-5mcp-8jfg-9c56","products":[{"name":{"value":"apache-beam-python-3.14-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.76.0-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5mcp-8jfg-9c56","aliases":["CGA-5mcp-8jfg-9c56"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76.0-r4"}]}],"package":{"name":"apache-beam-python-3.14-sdk","purl":"pkg:apk/chainguard/apache-beam-python-3.14-sdk?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5mcp-8jfg-9c56.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/share/apache-beam/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:09:12Z"}]}}],"modified":"2026-10-02T23:01:16.540694525Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:934d00a2-97dd-4cbc-b9c9-0c022a740cdd","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5mcp-8jfg-9c56","advisory_id":"934d00a2-97dd-4cbc-b9c9-0c022a740cdd","event_types":["advisory"],"published_at":"2026-10-25T23:27:55.176033+00:00","technologies":["apache-beam-python-3-14-sdk","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:30:46+00:00","detail_url":"/advisories/advisory%3A934d00a2-97dd-4cbc-b9c9-0c022a740cdd","group":{"id":"advisory:934d00a2-97dd-4cbc-b9c9-0c022a740cdd","revision":1,"primary_event_id":72107,"change":"published","superseded_by":[],"changed":{"id":72107,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-5mcp-8jfg-9c56","summary":"CGA-5mcp-8jfg-9c56","evidence":"osv:CGA-5mcp-8jfg-9c56","products":[{"name":{"value":"apache-beam-python-3.14-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.76.0-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5mcp-8jfg-9c56","aliases":["CGA-5mcp-8jfg-9c56"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76.0-r4"}]}],"package":{"name":"apache-beam-python-3.14-sdk","purl":"pkg:apk/chainguard/apache-beam-python-3.14-sdk?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5mcp-8jfg-9c56.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/share/apache-beam/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:09:12Z"}]}}],"modified":"2026-10-02T23:01:16.540694525Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:934d00a2-97dd-4cbc-b9c9-0c022a740cdd","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5mcp-8jfg-9c56","advisory_id":"934d00a2-97dd-4cbc-b9c9-0c022a740cdd","event_types":["advisory"],"published_at":"2026-10-25T23:27:55.176033+00:00","technologies":["apache-beam-python-3-14-sdk","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:30:46+00:00","detail_url":"/events/72107"},"members":[{"id":72107,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-5mcp-8jfg-9c56","summary":"CGA-5mcp-8jfg-9c56","evidence":"osv:CGA-5mcp-8jfg-9c56","products":[{"name":{"value":"apache-beam-python-3.14-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.76.0-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5mcp-8jfg-9c56","aliases":["CGA-5mcp-8jfg-9c56"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76.0-r4"}]}],"package":{"name":"apache-beam-python-3.14-sdk","purl":"pkg:apk/chainguard/apache-beam-python-3.14-sdk?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5mcp-8jfg-9c56.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/share/apache-beam/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:09:12Z"}]}}],"modified":"2026-10-02T23:01:16.540694525Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:934d00a2-97dd-4cbc-b9c9-0c022a740cdd","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5mcp-8jfg-9c56","advisory_id":"934d00a2-97dd-4cbc-b9c9-0c022a740cdd","event_types":["advisory"],"published_at":"2026-10-25T23:27:55.176033+00:00","technologies":["apache-beam-python-3-14-sdk","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:30:46+00:00","detail_url":"/events/72107"}]}},{"id":71665,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-x354-66q6-82xm","summary":"CGA-x354-66q6-82xm","evidence":"osv:CGA-x354-66q6-82xm","products":[{"name":{"value":"apache-beam-python-3.14-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.76.0-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x354-66q6-82xm","aliases":["CGA-x354-66q6-82xm"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76.0-r4"}]}],"package":{"name":"apache-beam-python-3.14-sdk","purl":"pkg:apk/chainguard/apache-beam-python-3.14-sdk?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x354-66q6-82xm.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/share/apache-beam/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:49:07Z"}]}}],"modified":"2026-10-02T23:01:15.888670038Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:420e2ce6-e8b2-449a-86f8-389c365a3fcc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x354-66q6-82xm","advisory_id":"420e2ce6-e8b2-449a-86f8-389c365a3fcc","event_types":["advisory"],"published_at":"2026-10-25T23:27:32.52767+00:00","technologies":["apache-beam-python-3-14-sdk","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:43:16+00:00","detail_url":"/advisories/advisory%3A420e2ce6-e8b2-449a-86f8-389c365a3fcc","group":{"id":"advisory:420e2ce6-e8b2-449a-86f8-389c365a3fcc","revision":1,"primary_event_id":72101,"change":"published","superseded_by":[],"changed":{"id":72101,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-x354-66q6-82xm","summary":"CGA-x354-66q6-82xm","evidence":"osv:CGA-x354-66q6-82xm","products":[{"name":{"value":"apache-beam-python-3.14-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.76.0-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x354-66q6-82xm","aliases":["CGA-x354-66q6-82xm"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76.0-r4"}]}],"package":{"name":"apache-beam-python-3.14-sdk","purl":"pkg:apk/chainguard/apache-beam-python-3.14-sdk?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x354-66q6-82xm.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/share/apache-beam/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:49:07Z"}]}}],"modified":"2026-10-02T23:01:15.888670038Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:420e2ce6-e8b2-449a-86f8-389c365a3fcc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x354-66q6-82xm","advisory_id":"420e2ce6-e8b2-449a-86f8-389c365a3fcc","event_types":["advisory"],"published_at":"2026-10-25T23:27:32.52767+00:00","technologies":["apache-beam-python-3-14-sdk","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:43:16+00:00","detail_url":"/events/72101"},"members":[{"id":72101,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-x354-66q6-82xm","summary":"CGA-x354-66q6-82xm","evidence":"osv:CGA-x354-66q6-82xm","products":[{"name":{"value":"apache-beam-python-3.14-sdk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.76.0-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x354-66q6-82xm","aliases":["CGA-x354-66q6-82xm"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76.0-r4"}]}],"package":{"name":"apache-beam-python-3.14-sdk","purl":"pkg:apk/chainguard/apache-beam-python-3.14-sdk?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x354-66q6-82xm.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/share/apache-beam/lib/python3.14/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:49:07Z"}]}}],"modified":"2026-10-02T23:01:15.888670038Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:420e2ce6-e8b2-449a-86f8-389c365a3fcc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x354-66q6-82xm","advisory_id":"420e2ce6-e8b2-449a-86f8-389c365a3fcc","event_types":["advisory"],"published_at":"2026-10-25T23:27:32.52767+00:00","technologies":["apache-beam-python-3-14-sdk","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:43:16+00:00","detail_url":"/events/72101"}]}},{"id":71404,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-gh8q-cph4-xvvq","summary":"CGA-gh8q-cph4-xvvq","evidence":"osv:CGA-gh8q-cph4-xvvq","products":[{"name":{"value":"kubeflow-pipelines-apiserver-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.17.2-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gh8q-cph4-xvvq","aliases":["CGA-gh8q-cph4-xvvq"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.2-r5"}]}],"package":{"name":"kubeflow-pipelines-apiserver-fips","purl":"pkg:apk/chainguard/kubeflow-pipelines-apiserver-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gh8q-cph4-xvvq.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/python3.11/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:53:08Z"}]}}],"modified":"2026-10-02T23:00:48.626406196Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ca4a1c7c-23e9-4cfb-b54f-a50c2a291b8a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gh8q-cph4-xvvq","advisory_id":"ca4a1c7c-23e9-4cfb-b54f-a50c2a291b8a","event_types":["advisory"],"published_at":"2026-10-25T23:08:01.76509+00:00","technologies":["core-osv","kubeflow-pipelines-apiserver-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:45:45+00:00","detail_url":"/advisories/advisory%3Aca4a1c7c-23e9-4cfb-b54f-a50c2a291b8a","group":{"id":"advisory:ca4a1c7c-23e9-4cfb-b54f-a50c2a291b8a","revision":1,"primary_event_id":71795,"change":"published","superseded_by":[],"changed":{"id":71795,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-gh8q-cph4-xvvq","summary":"CGA-gh8q-cph4-xvvq","evidence":"osv:CGA-gh8q-cph4-xvvq","products":[{"name":{"value":"kubeflow-pipelines-apiserver-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.17.2-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gh8q-cph4-xvvq","aliases":["CGA-gh8q-cph4-xvvq"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.2-r5"}]}],"package":{"name":"kubeflow-pipelines-apiserver-fips","purl":"pkg:apk/chainguard/kubeflow-pipelines-apiserver-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gh8q-cph4-xvvq.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/python3.11/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:53:08Z"}]}}],"modified":"2026-10-02T23:00:48.626406196Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ca4a1c7c-23e9-4cfb-b54f-a50c2a291b8a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gh8q-cph4-xvvq","advisory_id":"ca4a1c7c-23e9-4cfb-b54f-a50c2a291b8a","event_types":["advisory"],"published_at":"2026-10-25T23:08:01.76509+00:00","technologies":["core-osv","kubeflow-pipelines-apiserver-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:45:45+00:00","detail_url":"/events/71795"},"members":[{"id":71795,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-gh8q-cph4-xvvq","summary":"CGA-gh8q-cph4-xvvq","evidence":"osv:CGA-gh8q-cph4-xvvq","products":[{"name":{"value":"kubeflow-pipelines-apiserver-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.17.2-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gh8q-cph4-xvvq","aliases":["CGA-gh8q-cph4-xvvq"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.2-r5"}]}],"package":{"name":"kubeflow-pipelines-apiserver-fips","purl":"pkg:apk/chainguard/kubeflow-pipelines-apiserver-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gh8q-cph4-xvvq.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/python3.11/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:53:08Z"}]}}],"modified":"2026-10-02T23:00:48.626406196Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ca4a1c7c-23e9-4cfb-b54f-a50c2a291b8a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gh8q-cph4-xvvq","advisory_id":"ca4a1c7c-23e9-4cfb-b54f-a50c2a291b8a","event_types":["advisory"],"published_at":"2026-10-25T23:08:01.76509+00:00","technologies":["core-osv","kubeflow-pipelines-apiserver-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:45:45+00:00","detail_url":"/events/71795"}]}},{"id":71185,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-5848-387g-jg62","summary":"CGA-5848-387g-jg62","evidence":"osv:CGA-5848-387g-jg62","products":[{"name":{"value":"awx","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"24.6.1-r64","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5848-387g-jg62","aliases":["CGA-5848-387g-jg62"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.6.1-r64"}]}],"package":{"name":"awx","purl":"pkg:apk/chainguard/awx?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5848-387g-jg62.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/var/lib/awx/venv/awx/lib/python3.11/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:36:10Z"}]}}],"modified":"2026-10-02T23:00:25.387958748Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f35c306a-dc36-49ad-9824-190754fbaec5","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5848-387g-jg62","advisory_id":"f35c306a-dc36-49ad-9824-190754fbaec5","event_types":["advisory"],"published_at":"2026-10-25T22:55:04.03053+00:00","technologies":["awx","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:50:55+00:00","detail_url":"/advisories/advisory%3Af35c306a-dc36-49ad-9824-190754fbaec5","group":{"id":"advisory:f35c306a-dc36-49ad-9824-190754fbaec5","revision":1,"primary_event_id":71566,"change":"published","superseded_by":[],"changed":{"id":71566,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-5848-387g-jg62","summary":"CGA-5848-387g-jg62","evidence":"osv:CGA-5848-387g-jg62","products":[{"name":{"value":"awx","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"24.6.1-r64","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5848-387g-jg62","aliases":["CGA-5848-387g-jg62"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.6.1-r64"}]}],"package":{"name":"awx","purl":"pkg:apk/chainguard/awx?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5848-387g-jg62.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/var/lib/awx/venv/awx/lib/python3.11/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:36:10Z"}]}}],"modified":"2026-10-02T23:00:25.387958748Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f35c306a-dc36-49ad-9824-190754fbaec5","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5848-387g-jg62","advisory_id":"f35c306a-dc36-49ad-9824-190754fbaec5","event_types":["advisory"],"published_at":"2026-10-25T22:55:04.03053+00:00","technologies":["awx","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:50:55+00:00","detail_url":"/events/71566"},"members":[{"id":71566,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-5848-387g-jg62","summary":"CGA-5848-387g-jg62","evidence":"osv:CGA-5848-387g-jg62","products":[{"name":{"value":"awx","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"24.6.1-r64","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5848-387g-jg62","aliases":["CGA-5848-387g-jg62"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.6.1-r64"}]}],"package":{"name":"awx","purl":"pkg:apk/chainguard/awx?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5848-387g-jg62.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/var/lib/awx/venv/awx/lib/python3.11/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:36:10Z"}]}}],"modified":"2026-10-02T23:00:25.387958748Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f35c306a-dc36-49ad-9824-190754fbaec5","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5848-387g-jg62","advisory_id":"f35c306a-dc36-49ad-9824-190754fbaec5","event_types":["advisory"],"published_at":"2026-10-25T22:55:04.03053+00:00","technologies":["awx","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:50:55+00:00","detail_url":"/events/71566"}]}},{"id":71040,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-89jj-6r9j-777q","summary":"CGA-89jj-6r9j-777q","evidence":"osv:CGA-89jj-6r9j-777q","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-89jj-6r9j-777q","aliases":["CGA-89jj-6r9j-777q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-89jj-6r9j-777q.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:20Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-89jj-6r9j-777q.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:20Z"}]}}],"modified":"2026-10-02T23:00:09.435659770Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4ed4305f-b0ba-4a48-93af-4f95f7c44e6b","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-89jj-6r9j-777q","advisory_id":"4ed4305f-b0ba-4a48-93af-4f95f7c44e6b","event_types":["advisory"],"published_at":"2026-10-25T22:48:11.445874+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:50+00:00","detail_url":"/advisories/advisory%3A4ed4305f-b0ba-4a48-93af-4f95f7c44e6b","group":{"id":"advisory:4ed4305f-b0ba-4a48-93af-4f95f7c44e6b","revision":1,"primary_event_id":71414,"change":"published","superseded_by":[],"changed":{"id":71414,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-89jj-6r9j-777q","summary":"CGA-89jj-6r9j-777q","evidence":"osv:CGA-89jj-6r9j-777q","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-89jj-6r9j-777q","aliases":["CGA-89jj-6r9j-777q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-89jj-6r9j-777q.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:20Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-89jj-6r9j-777q.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:20Z"}]}}],"modified":"2026-10-02T23:00:09.435659770Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4ed4305f-b0ba-4a48-93af-4f95f7c44e6b","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-89jj-6r9j-777q","advisory_id":"4ed4305f-b0ba-4a48-93af-4f95f7c44e6b","event_types":["advisory"],"published_at":"2026-10-25T22:48:11.445874+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:50+00:00","detail_url":"/events/71414"},"members":[{"id":71414,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-89jj-6r9j-777q","summary":"CGA-89jj-6r9j-777q","evidence":"osv:CGA-89jj-6r9j-777q","products":[{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"datadog-agent-7.79-core-integrations","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-89jj-6r9j-777q","aliases":["CGA-89jj-6r9j-777q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/chainguard/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-89jj-6r9j-777q.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:20Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"datadog-agent-7.79-core-integrations","purl":"pkg:apk/wolfi/datadog-agent-7.79-core-integrations?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-89jj-6r9j-777q.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fix_not_planned","latest_event_timestamp":"2026-10-02T19:39:20Z"}]}}],"modified":"2026-10-02T23:00:09.435659770Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4ed4305f-b0ba-4a48-93af-4f95f7c44e6b","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-89jj-6r9j-777q","advisory_id":"4ed4305f-b0ba-4a48-93af-4f95f7c44e6b","event_types":["advisory"],"published_at":"2026-10-25T22:48:11.445874+00:00","technologies":["core-osv","datadog-agent-7-79-core-integrations"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:52:50+00:00","detail_url":"/events/71414"}]}},{"id":71034,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-59cw-63w3-qqh4","summary":"CGA-59cw-63w3-qqh4","evidence":"osv:CGA-59cw-63w3-qqh4","products":[{"name":{"value":"pypy-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pypy-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-59cw-63w3-qqh4","aliases":["CGA-59cw-63w3-qqh4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/chainguard/pypy-3.10?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-59cw-63w3-qqh4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/wolfi/pypy-3.10?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-59cw-63w3-qqh4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:06Z"}]}}],"modified":"2026-10-02T23:00:08.499533295Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1bf66e8c-8261-4da5-803d-159f15282f71","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-59cw-63w3-qqh4","advisory_id":"1bf66e8c-8261-4da5-803d-159f15282f71","event_types":["advisory"],"published_at":"2026-10-25T22:47:58.343815+00:00","technologies":["core-osv","pypy-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:46:04+00:00","detail_url":"/advisories/advisory%3A1bf66e8c-8261-4da5-803d-159f15282f71","group":{"id":"advisory:1bf66e8c-8261-4da5-803d-159f15282f71","revision":1,"primary_event_id":71408,"change":"published","superseded_by":[],"changed":{"id":71408,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-59cw-63w3-qqh4","summary":"CGA-59cw-63w3-qqh4","evidence":"osv:CGA-59cw-63w3-qqh4","products":[{"name":{"value":"pypy-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pypy-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-59cw-63w3-qqh4","aliases":["CGA-59cw-63w3-qqh4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/chainguard/pypy-3.10?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-59cw-63w3-qqh4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/wolfi/pypy-3.10?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-59cw-63w3-qqh4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:06Z"}]}}],"modified":"2026-10-02T23:00:08.499533295Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1bf66e8c-8261-4da5-803d-159f15282f71","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-59cw-63w3-qqh4","advisory_id":"1bf66e8c-8261-4da5-803d-159f15282f71","event_types":["advisory"],"published_at":"2026-10-25T22:47:58.343815+00:00","technologies":["core-osv","pypy-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:46:04+00:00","detail_url":"/events/71408"},"members":[{"id":71408,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-59cw-63w3-qqh4","summary":"CGA-59cw-63w3-qqh4","evidence":"osv:CGA-59cw-63w3-qqh4","products":[{"name":{"value":"pypy-3.10","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pypy-3.10","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.3.19-r21","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-59cw-63w3-qqh4","aliases":["CGA-59cw-63w3-qqh4"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/chainguard/pypy-3.10?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-59cw-63w3-qqh4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.19-r21"}]}],"package":{"name":"pypy-3.10","purl":"pkg:apk/wolfi/pypy-3.10?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-59cw-63w3-qqh4.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/usr/lib/pypy3.10/site-packages/pip/_vendor/vendor.txt","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:48:06Z"}]}}],"modified":"2026-10-02T23:00:08.499533295Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1bf66e8c-8261-4da5-803d-159f15282f71","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-59cw-63w3-qqh4","advisory_id":"1bf66e8c-8261-4da5-803d-159f15282f71","event_types":["advisory"],"published_at":"2026-10-25T22:47:58.343815+00:00","technologies":["core-osv","pypy-3-10"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:46:04+00:00","detail_url":"/events/71408"}]}},{"id":70949,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-fpf5-v829-x98w","summary":"CGA-fpf5-v829-x98w","evidence":"osv:CGA-fpf5-v829-x98w","products":[{"name":{"value":"openstack-keystone-2025.2-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"28.0.1_git20260902-r6","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-fpf5-v829-x98w","aliases":["CGA-fpf5-v829-x98w"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.1_git20260902-r6"}]}],"package":{"name":"openstack-keystone-2025.2-fips","purl":"pkg:apk/chainguard/openstack-keystone-2025.2-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fpf5-v829-x98w.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-keystone-2025.2/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:32:08Z"}]}}],"modified":"2026-10-02T18:28:03.265508867Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b85a00c1-01d8-4b13-8ed6-566785d69167","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fpf5-v829-x98w","advisory_id":"b85a00c1-01d8-4b13-8ed6-566785d69167","event_types":["advisory"],"published_at":"2026-10-25T22:45:19.590916+00:00","technologies":["core-osv","openstack-keystone-2025-2-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:27:10+00:00","detail_url":"/advisories/advisory%3Ab85a00c1-01d8-4b13-8ed6-566785d69167","group":{"id":"advisory:b85a00c1-01d8-4b13-8ed6-566785d69167","revision":1,"primary_event_id":71320,"change":"published","superseded_by":[],"changed":{"id":71320,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-fpf5-v829-x98w","summary":"CGA-fpf5-v829-x98w","evidence":"osv:CGA-fpf5-v829-x98w","products":[{"name":{"value":"openstack-keystone-2025.2-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"28.0.1_git20260902-r6","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-fpf5-v829-x98w","aliases":["CGA-fpf5-v829-x98w"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.1_git20260902-r6"}]}],"package":{"name":"openstack-keystone-2025.2-fips","purl":"pkg:apk/chainguard/openstack-keystone-2025.2-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fpf5-v829-x98w.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-keystone-2025.2/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:32:08Z"}]}}],"modified":"2026-10-02T18:28:03.265508867Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b85a00c1-01d8-4b13-8ed6-566785d69167","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fpf5-v829-x98w","advisory_id":"b85a00c1-01d8-4b13-8ed6-566785d69167","event_types":["advisory"],"published_at":"2026-10-25T22:45:19.590916+00:00","technologies":["core-osv","openstack-keystone-2025-2-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:27:10+00:00","detail_url":"/events/71320"},"members":[{"id":71320,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-fpf5-v829-x98w","summary":"CGA-fpf5-v829-x98w","evidence":"osv:CGA-fpf5-v829-x98w","products":[{"name":{"value":"openstack-keystone-2025.2-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"28.0.1_git20260902-r6","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-fpf5-v829-x98w","aliases":["CGA-fpf5-v829-x98w"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.1_git20260902-r6"}]}],"package":{"name":"openstack-keystone-2025.2-fips","purl":"pkg:apk/chainguard/openstack-keystone-2025.2-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fpf5-v829-x98w.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-keystone-2025.2/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:32:08Z"}]}}],"modified":"2026-10-02T18:28:03.265508867Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b85a00c1-01d8-4b13-8ed6-566785d69167","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fpf5-v829-x98w","advisory_id":"b85a00c1-01d8-4b13-8ed6-566785d69167","event_types":["advisory"],"published_at":"2026-10-25T22:45:19.590916+00:00","technologies":["core-osv","openstack-keystone-2025-2-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:27:10+00:00","detail_url":"/events/71320"}]}},{"id":70895,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-h4qh-9w7w-372q","summary":"CGA-h4qh-9w7w-372q","evidence":"osv:CGA-h4qh-9w7w-372q","products":[{"name":{"value":"openstack-horizon-2026.1-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"25.7.3_git20261001-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-h4qh-9w7w-372q","aliases":["CGA-h4qh-9w7w-372q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.7.3_git20261001-r1"}]}],"package":{"name":"openstack-horizon-2026.1-fips","purl":"pkg:apk/chainguard/openstack-horizon-2026.1-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h4qh-9w7w-372q.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-horizon-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:06:40Z"}]}}],"modified":"2026-10-02T18:27:51.703913278Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:713d3183-fdca-43eb-b159-8b218329f675","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-h4qh-9w7w-372q","advisory_id":"713d3183-fdca-43eb-b159-8b218329f675","event_types":["advisory"],"published_at":"2026-10-25T22:44:09.312518+00:00","technologies":["core-osv","openstack-horizon-2026-1-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:32:10+00:00","detail_url":"/advisories/advisory%3A713d3183-fdca-43eb-b159-8b218329f675","group":{"id":"advisory:713d3183-fdca-43eb-b159-8b218329f675","revision":1,"primary_event_id":71266,"change":"published","superseded_by":[],"changed":{"id":71266,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-h4qh-9w7w-372q","summary":"CGA-h4qh-9w7w-372q","evidence":"osv:CGA-h4qh-9w7w-372q","products":[{"name":{"value":"openstack-horizon-2026.1-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"25.7.3_git20261001-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-h4qh-9w7w-372q","aliases":["CGA-h4qh-9w7w-372q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.7.3_git20261001-r1"}]}],"package":{"name":"openstack-horizon-2026.1-fips","purl":"pkg:apk/chainguard/openstack-horizon-2026.1-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h4qh-9w7w-372q.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-horizon-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:06:40Z"}]}}],"modified":"2026-10-02T18:27:51.703913278Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:713d3183-fdca-43eb-b159-8b218329f675","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-h4qh-9w7w-372q","advisory_id":"713d3183-fdca-43eb-b159-8b218329f675","event_types":["advisory"],"published_at":"2026-10-25T22:44:09.312518+00:00","technologies":["core-osv","openstack-horizon-2026-1-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:32:10+00:00","detail_url":"/events/71266"},"members":[{"id":71266,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-h4qh-9w7w-372q","summary":"CGA-h4qh-9w7w-372q","evidence":"osv:CGA-h4qh-9w7w-372q","products":[{"name":{"value":"openstack-horizon-2026.1-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"25.7.3_git20261001-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-h4qh-9w7w-372q","aliases":["CGA-h4qh-9w7w-372q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.7.3_git20261001-r1"}]}],"package":{"name":"openstack-horizon-2026.1-fips","purl":"pkg:apk/chainguard/openstack-horizon-2026.1-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h4qh-9w7w-372q.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-horizon-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:06:40Z"}]}}],"modified":"2026-10-02T18:27:51.703913278Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:713d3183-fdca-43eb-b159-8b218329f675","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-h4qh-9w7w-372q","advisory_id":"713d3183-fdca-43eb-b159-8b218329f675","event_types":["advisory"],"published_at":"2026-10-25T22:44:09.312518+00:00","technologies":["core-osv","openstack-horizon-2026-1-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:32:10+00:00","detail_url":"/events/71266"}]}},{"id":70891,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-q2gq-mgpp-2h28","summary":"CGA-q2gq-mgpp-2h28","evidence":"osv:CGA-q2gq-mgpp-2h28","products":[{"name":{"value":"openstack-horizon-2026.1-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"25.7.3_git20261001-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-q2gq-mgpp-2h28","aliases":["CGA-q2gq-mgpp-2h28"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.7.3_git20261001-r1"}]}],"package":{"name":"openstack-horizon-2026.1-fips","purl":"pkg:apk/chainguard/openstack-horizon-2026.1-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q2gq-mgpp-2h28.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-horizon-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:11:11Z"}]}}],"modified":"2026-10-02T18:27:49.513223794Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:26aea906-d166-4893-8c90-b9984143714a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q2gq-mgpp-2h28","advisory_id":"26aea906-d166-4893-8c90-b9984143714a","event_types":["advisory"],"published_at":"2026-10-25T22:44:05.040968+00:00","technologies":["core-osv","openstack-horizon-2026-1-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:49:10+00:00","detail_url":"/advisories/advisory%3A26aea906-d166-4893-8c90-b9984143714a","group":{"id":"advisory:26aea906-d166-4893-8c90-b9984143714a","revision":1,"primary_event_id":71262,"change":"published","superseded_by":[],"changed":{"id":71262,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-q2gq-mgpp-2h28","summary":"CGA-q2gq-mgpp-2h28","evidence":"osv:CGA-q2gq-mgpp-2h28","products":[{"name":{"value":"openstack-horizon-2026.1-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"25.7.3_git20261001-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-q2gq-mgpp-2h28","aliases":["CGA-q2gq-mgpp-2h28"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.7.3_git20261001-r1"}]}],"package":{"name":"openstack-horizon-2026.1-fips","purl":"pkg:apk/chainguard/openstack-horizon-2026.1-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q2gq-mgpp-2h28.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-horizon-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:11:11Z"}]}}],"modified":"2026-10-02T18:27:49.513223794Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:26aea906-d166-4893-8c90-b9984143714a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q2gq-mgpp-2h28","advisory_id":"26aea906-d166-4893-8c90-b9984143714a","event_types":["advisory"],"published_at":"2026-10-25T22:44:05.040968+00:00","technologies":["core-osv","openstack-horizon-2026-1-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:49:10+00:00","detail_url":"/events/71262"},"members":[{"id":71262,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-q2gq-mgpp-2h28","summary":"CGA-q2gq-mgpp-2h28","evidence":"osv:CGA-q2gq-mgpp-2h28","products":[{"name":{"value":"openstack-horizon-2026.1-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"25.7.3_git20261001-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-q2gq-mgpp-2h28","aliases":["CGA-q2gq-mgpp-2h28"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.7.3_git20261001-r1"}]}],"package":{"name":"openstack-horizon-2026.1-fips","purl":"pkg:apk/chainguard/openstack-horizon-2026.1-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q2gq-mgpp-2h28.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-horizon-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:11:11Z"}]}}],"modified":"2026-10-02T18:27:49.513223794Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:26aea906-d166-4893-8c90-b9984143714a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q2gq-mgpp-2h28","advisory_id":"26aea906-d166-4893-8c90-b9984143714a","event_types":["advisory"],"published_at":"2026-10-25T22:44:05.040968+00:00","technologies":["core-osv","openstack-horizon-2026-1-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:49:10+00:00","detail_url":"/events/71262"}]}},{"id":70868,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-x6xw-4wrj-rqvg","summary":"CGA-x6xw-4wrj-rqvg","evidence":"osv:CGA-x6xw-4wrj-rqvg","products":[{"name":{"value":"jwt-tool","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.3.0-r7","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"jwt-tool","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.3.0-r7","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x6xw-4wrj-rqvg","aliases":["CGA-x6xw-4wrj-rqvg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r7"}]}],"package":{"name":"jwt-tool","purl":"pkg:apk/chainguard/jwt-tool?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x6xw-4wrj-rqvg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jwt-tool/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:03:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r7"}]}],"package":{"name":"jwt-tool","purl":"pkg:apk/wolfi/jwt-tool?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x6xw-4wrj-rqvg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jwt-tool/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:03:07Z"}]}}],"modified":"2026-10-02T18:25:50.404981490Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:76770a6e-3b7f-4703-8647-c3d4fc1f7e11","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x6xw-4wrj-rqvg","advisory_id":"76770a6e-3b7f-4703-8647-c3d4fc1f7e11","event_types":["advisory"],"published_at":"2026-10-25T22:43:10.338531+00:00","technologies":["core-osv","jwt-tool"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:59:38+00:00","detail_url":"/advisories/advisory%3A76770a6e-3b7f-4703-8647-c3d4fc1f7e11","group":{"id":"advisory:76770a6e-3b7f-4703-8647-c3d4fc1f7e11","revision":1,"primary_event_id":71239,"change":"published","superseded_by":[],"changed":{"id":71239,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-x6xw-4wrj-rqvg","summary":"CGA-x6xw-4wrj-rqvg","evidence":"osv:CGA-x6xw-4wrj-rqvg","products":[{"name":{"value":"jwt-tool","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.3.0-r7","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"jwt-tool","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.3.0-r7","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x6xw-4wrj-rqvg","aliases":["CGA-x6xw-4wrj-rqvg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r7"}]}],"package":{"name":"jwt-tool","purl":"pkg:apk/chainguard/jwt-tool?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x6xw-4wrj-rqvg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jwt-tool/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:03:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r7"}]}],"package":{"name":"jwt-tool","purl":"pkg:apk/wolfi/jwt-tool?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x6xw-4wrj-rqvg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jwt-tool/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:03:07Z"}]}}],"modified":"2026-10-02T18:25:50.404981490Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:76770a6e-3b7f-4703-8647-c3d4fc1f7e11","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x6xw-4wrj-rqvg","advisory_id":"76770a6e-3b7f-4703-8647-c3d4fc1f7e11","event_types":["advisory"],"published_at":"2026-10-25T22:43:10.338531+00:00","technologies":["core-osv","jwt-tool"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:59:38+00:00","detail_url":"/events/71239"},"members":[{"id":71239,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-x6xw-4wrj-rqvg","summary":"CGA-x6xw-4wrj-rqvg","evidence":"osv:CGA-x6xw-4wrj-rqvg","products":[{"name":{"value":"jwt-tool","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.3.0-r7","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"jwt-tool","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.3.0-r7","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x6xw-4wrj-rqvg","aliases":["CGA-x6xw-4wrj-rqvg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r7"}]}],"package":{"name":"jwt-tool","purl":"pkg:apk/chainguard/jwt-tool?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x6xw-4wrj-rqvg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jwt-tool/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:03:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r7"}]}],"package":{"name":"jwt-tool","purl":"pkg:apk/wolfi/jwt-tool?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x6xw-4wrj-rqvg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/jwt-tool/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:03:07Z"}]}}],"modified":"2026-10-02T18:25:50.404981490Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:76770a6e-3b7f-4703-8647-c3d4fc1f7e11","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x6xw-4wrj-rqvg","advisory_id":"76770a6e-3b7f-4703-8647-c3d4fc1f7e11","event_types":["advisory"],"published_at":"2026-10-25T22:43:10.338531+00:00","technologies":["core-osv","jwt-tool"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:59:38+00:00","detail_url":"/events/71239"}]}},{"id":70793,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-w5cx-vw7h-5675","summary":"CGA-w5cx-vw7h-5675","evidence":"osv:CGA-w5cx-vw7h-5675","products":[{"name":{"value":"openstack-manila-2025.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"21.0.2_git20260923-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-w5cx-vw7h-5675","aliases":["CGA-w5cx-vw7h-5675"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.2_git20260923-r2"}]}],"package":{"name":"openstack-manila-2025.2","purl":"pkg:apk/chainguard/openstack-manila-2025.2?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w5cx-vw7h-5675.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-manila-2025.2/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:58:27Z"}]}}],"modified":"2026-10-02T18:25:46.257768173Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4a4252bc-ddb6-4a0f-8a93-cdfaa4368385","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w5cx-vw7h-5675","advisory_id":"4a4252bc-ddb6-4a0f-8a93-cdfaa4368385","event_types":["advisory"],"published_at":"2026-10-25T22:39:52.26476+00:00","technologies":["core-osv","openstack-manila-2025-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:54:09+00:00","detail_url":"/advisories/advisory%3A4a4252bc-ddb6-4a0f-8a93-cdfaa4368385","group":{"id":"advisory:4a4252bc-ddb6-4a0f-8a93-cdfaa4368385","revision":1,"primary_event_id":71164,"change":"published","superseded_by":[],"changed":{"id":71164,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-w5cx-vw7h-5675","summary":"CGA-w5cx-vw7h-5675","evidence":"osv:CGA-w5cx-vw7h-5675","products":[{"name":{"value":"openstack-manila-2025.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"21.0.2_git20260923-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-w5cx-vw7h-5675","aliases":["CGA-w5cx-vw7h-5675"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.2_git20260923-r2"}]}],"package":{"name":"openstack-manila-2025.2","purl":"pkg:apk/chainguard/openstack-manila-2025.2?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w5cx-vw7h-5675.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-manila-2025.2/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:58:27Z"}]}}],"modified":"2026-10-02T18:25:46.257768173Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4a4252bc-ddb6-4a0f-8a93-cdfaa4368385","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w5cx-vw7h-5675","advisory_id":"4a4252bc-ddb6-4a0f-8a93-cdfaa4368385","event_types":["advisory"],"published_at":"2026-10-25T22:39:52.26476+00:00","technologies":["core-osv","openstack-manila-2025-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:54:09+00:00","detail_url":"/events/71164"},"members":[{"id":71164,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-w5cx-vw7h-5675","summary":"CGA-w5cx-vw7h-5675","evidence":"osv:CGA-w5cx-vw7h-5675","products":[{"name":{"value":"openstack-manila-2025.2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"21.0.2_git20260923-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-w5cx-vw7h-5675","aliases":["CGA-w5cx-vw7h-5675"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.2_git20260923-r2"}]}],"package":{"name":"openstack-manila-2025.2","purl":"pkg:apk/chainguard/openstack-manila-2025.2?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w5cx-vw7h-5675.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-manila-2025.2/lib/python3.12/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:58:27Z"}]}}],"modified":"2026-10-02T18:25:46.257768173Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4a4252bc-ddb6-4a0f-8a93-cdfaa4368385","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w5cx-vw7h-5675","advisory_id":"4a4252bc-ddb6-4a0f-8a93-cdfaa4368385","event_types":["advisory"],"published_at":"2026-10-25T22:39:52.26476+00:00","technologies":["core-osv","openstack-manila-2025-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:54:09+00:00","detail_url":"/events/71164"}]}},{"id":70781,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-vg89-92r6-836q","summary":"CGA-vg89-92r6-836q","evidence":"osv:CGA-vg89-92r6-836q","products":[{"name":{"value":"openstack-neutron-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"28.0.2_git20260928-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-vg89-92r6-836q","aliases":["CGA-vg89-92r6-836q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.2_git20260928-r5"}]}],"package":{"name":"openstack-neutron-2026.1","purl":"pkg:apk/chainguard/openstack-neutron-2026.1?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vg89-92r6-836q.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-neutron-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:40Z"}]}}],"modified":"2026-10-02T18:25:45.721242471Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d4d8232f-fabb-4149-bf96-5f5edbccfd65","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vg89-92r6-836q","advisory_id":"d4d8232f-fabb-4149-bf96-5f5edbccfd65","event_types":["advisory"],"published_at":"2026-10-25T22:39:12.550524+00:00","technologies":["core-osv","openstack-neutron-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:15:47+00:00","detail_url":"/advisories/advisory%3Ad4d8232f-fabb-4149-bf96-5f5edbccfd65","group":{"id":"advisory:d4d8232f-fabb-4149-bf96-5f5edbccfd65","revision":1,"primary_event_id":71152,"change":"published","superseded_by":[],"changed":{"id":71152,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-vg89-92r6-836q","summary":"CGA-vg89-92r6-836q","evidence":"osv:CGA-vg89-92r6-836q","products":[{"name":{"value":"openstack-neutron-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"28.0.2_git20260928-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-vg89-92r6-836q","aliases":["CGA-vg89-92r6-836q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.2_git20260928-r5"}]}],"package":{"name":"openstack-neutron-2026.1","purl":"pkg:apk/chainguard/openstack-neutron-2026.1?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vg89-92r6-836q.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-neutron-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:40Z"}]}}],"modified":"2026-10-02T18:25:45.721242471Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d4d8232f-fabb-4149-bf96-5f5edbccfd65","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vg89-92r6-836q","advisory_id":"d4d8232f-fabb-4149-bf96-5f5edbccfd65","event_types":["advisory"],"published_at":"2026-10-25T22:39:12.550524+00:00","technologies":["core-osv","openstack-neutron-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:15:47+00:00","detail_url":"/events/71152"},"members":[{"id":71152,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-vg89-92r6-836q","summary":"CGA-vg89-92r6-836q","evidence":"osv:CGA-vg89-92r6-836q","products":[{"name":{"value":"openstack-neutron-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"28.0.2_git20260928-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-vg89-92r6-836q","aliases":["CGA-vg89-92r6-836q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.0.2_git20260928-r5"}]}],"package":{"name":"openstack-neutron-2026.1","purl":"pkg:apk/chainguard/openstack-neutron-2026.1?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vg89-92r6-836q.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/chainguard/openstack-neutron-2026.1/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:08:40Z"}]}}],"modified":"2026-10-02T18:25:45.721242471Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d4d8232f-fabb-4149-bf96-5f5edbccfd65","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vg89-92r6-836q","advisory_id":"d4d8232f-fabb-4149-bf96-5f5edbccfd65","event_types":["advisory"],"published_at":"2026-10-25T22:39:12.550524+00:00","technologies":["core-osv","openstack-neutron-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:15:47+00:00","detail_url":"/events/71152"}]}},{"id":70745,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-v9q3-2fg7-g8mg","summary":"CGA-v9q3-2fg7-g8mg","evidence":"osv:CGA-v9q3-2fg7-g8mg","products":[{"name":{"value":"openstack-kolla-toolbox-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"22.2.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-v9q3-2fg7-g8mg","aliases":["CGA-v9q3-2fg7-g8mg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.2.0-r3"}]}],"package":{"name":"openstack-kolla-toolbox-2026.1","purl":"pkg:apk/chainguard/openstack-kolla-toolbox-2026.1?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v9q3-2fg7-g8mg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/ansible/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:40:07Z"}]}}],"modified":"2026-10-02T18:25:44.263554079Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:932037b3-a844-4fc7-943c-07758126f0be","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v9q3-2fg7-g8mg","advisory_id":"932037b3-a844-4fc7-943c-07758126f0be","event_types":["advisory"],"published_at":"2026-10-25T22:37:17.646696+00:00","technologies":["core-osv","openstack-kolla-toolbox-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:47:32+00:00","detail_url":"/advisories/advisory%3A932037b3-a844-4fc7-943c-07758126f0be","group":{"id":"advisory:932037b3-a844-4fc7-943c-07758126f0be","revision":1,"primary_event_id":71116,"change":"published","superseded_by":[],"changed":{"id":71116,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-v9q3-2fg7-g8mg","summary":"CGA-v9q3-2fg7-g8mg","evidence":"osv:CGA-v9q3-2fg7-g8mg","products":[{"name":{"value":"openstack-kolla-toolbox-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"22.2.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-v9q3-2fg7-g8mg","aliases":["CGA-v9q3-2fg7-g8mg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.2.0-r3"}]}],"package":{"name":"openstack-kolla-toolbox-2026.1","purl":"pkg:apk/chainguard/openstack-kolla-toolbox-2026.1?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v9q3-2fg7-g8mg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/ansible/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:40:07Z"}]}}],"modified":"2026-10-02T18:25:44.263554079Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:932037b3-a844-4fc7-943c-07758126f0be","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v9q3-2fg7-g8mg","advisory_id":"932037b3-a844-4fc7-943c-07758126f0be","event_types":["advisory"],"published_at":"2026-10-25T22:37:17.646696+00:00","technologies":["core-osv","openstack-kolla-toolbox-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:47:32+00:00","detail_url":"/events/71116"},"members":[{"id":71116,"cve_ids":["CVE-2026-97689"],"payload":{"kind":"advisory","title":"CGA-v9q3-2fg7-g8mg","summary":"CGA-v9q3-2fg7-g8mg","evidence":"osv:CGA-v9q3-2fg7-g8mg","products":[{"name":{"value":"openstack-kolla-toolbox-2026.1","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"22.2.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-v9q3-2fg7-g8mg","aliases":["CGA-v9q3-2fg7-g8mg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.2.0-r3"}]}],"package":{"name":"openstack-kolla-toolbox-2026.1","purl":"pkg:apk/chainguard/openstack-kolla-toolbox-2026.1?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v9q3-2fg7-g8mg.json"},"ecosystem_specific":{"components":[{"component_name":"urllib3","component_purl":"pkg:pypi/urllib3@2.7.0","component_type":"python","component_version":"2.7.0","component_location":"/opt/ansible/lib/python3.13/site-packages/urllib3-2.7.0.dist-info/METADATA","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:40:07Z"}]}}],"modified":"2026-10-02T18:25:44.263554079Z","provider":"osv","upstream":["CVE-2026-97689","GHSA-vxq7-64xx-v4gw"],"references":["https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97689.json","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"]},"related_cves":[{"value":"CVE-2026-97689","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:932037b3-a844-4fc7-943c-07758126f0be","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-97689","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"urllib3","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97689","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v9q3-2fg7-g8mg","advisory_id":"932037b3-a844-4fc7-943c-07758126f0be","event_types":["advisory"],"published_at":"2026-10-25T22:37:17.646696+00:00","technologies":["core-osv","openstack-kolla-toolbox-2026-1"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:47:32+00:00","detail_url":"/events/71116"}]}}],"next_after":73087,"next_before":70745}