{"schema_version":"2","view":"grouped","data":[{"id":73965,"cve_ids":["CVE-2026-66010"],"payload":{"kind":"advisory","title":"CGA-3c84-4x35-62gh","summary":"CGA-3c84-4x35-62gh","evidence":"osv:CGA-3c84-4x35-62gh","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.7-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"low","structured":{"id":"CGA-3c84-4x35-62gh","aliases":["CGA-3c84-4x35-62gh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.7-r2"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3c84-4x35-62gh.json"},"ecosystem_specific":{"components":[{"component_name":"dompurify","component_purl":"pkg:npm/dompurify@3.4.11","component_type":"npm","component_version":"3.4.11","component_location":"/usr/share/wazuh-dashboard/node_modules/dompurify/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-08-06T12:34:00Z"}]}}],"modified":"2026-10-03T16:12:49.930258520Z","provider":"osv","upstream":["CVE-2026-66010","GHSA-c2j3-45gr-mqc4","GHSA-jxrp-r7gx-q4j8"],"references":["https://github.com/cure53/DOMPurify/security/advisories/GHSA-c2j3-45gr-mqc4","https://github.com/cure53/DOMPurify/pull/1537","https://github.com/cure53/DOMPurify/commit/a9ca1e537422319a557a9a2aa61f003b23b4a197","https://github.com/cure53/DOMPurify","https://github.com/cure53/DOMPurify/releases/tag/3.4.12","https://nvd.nist.gov/vuln/detail/CVE-2026-66010","https://www.vulncheck.com/advisories/dompurify-before-hook-bypass-via-custom-element-handling"]},"related_cves":[{"value":"CVE-2026-66010","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3665438a-cdc9-445c-8115-f0ff4ba4e223","priority":{"reasons":[],"severity":"low","linked_cves":[{"cve":"CVE-2026-66010","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"}],"products":[{"name":{"value":"dompurify","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.4.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"low","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-c2j3-45gr-mqc4","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"low"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3c84-4x35-62gh","advisory_id":"3665438a-cdc9-445c-8115-f0ff4ba4e223","event_types":["advisory"],"published_at":"2026-10-26T05:05:56.577991+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-22T17:41:20+00:00","detail_url":"/advisories/advisory%3A3665438a-cdc9-445c-8115-f0ff4ba4e223","group":{"id":"advisory:3665438a-cdc9-445c-8115-f0ff4ba4e223","revision":1,"primary_event_id":76423,"change":"published","superseded_by":[],"changed":{"id":76423,"cve_ids":["CVE-2026-66010"],"payload":{"kind":"advisory","title":"CGA-3c84-4x35-62gh","summary":"CGA-3c84-4x35-62gh","evidence":"osv:CGA-3c84-4x35-62gh","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.7-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"low","structured":{"id":"CGA-3c84-4x35-62gh","aliases":["CGA-3c84-4x35-62gh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.7-r2"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3c84-4x35-62gh.json"},"ecosystem_specific":{"components":[{"component_name":"dompurify","component_purl":"pkg:npm/dompurify@3.4.11","component_type":"npm","component_version":"3.4.11","component_location":"/usr/share/wazuh-dashboard/node_modules/dompurify/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-08-06T12:34:00Z"}]}}],"modified":"2026-10-03T16:12:49.930258520Z","provider":"osv","upstream":["CVE-2026-66010","GHSA-c2j3-45gr-mqc4","GHSA-jxrp-r7gx-q4j8"],"references":["https://github.com/cure53/DOMPurify/security/advisories/GHSA-c2j3-45gr-mqc4","https://github.com/cure53/DOMPurify/pull/1537","https://github.com/cure53/DOMPurify/commit/a9ca1e537422319a557a9a2aa61f003b23b4a197","https://github.com/cure53/DOMPurify","https://github.com/cure53/DOMPurify/releases/tag/3.4.12","https://nvd.nist.gov/vuln/detail/CVE-2026-66010","https://www.vulncheck.com/advisories/dompurify-before-hook-bypass-via-custom-element-handling"]},"related_cves":[{"value":"CVE-2026-66010","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3665438a-cdc9-445c-8115-f0ff4ba4e223","priority":{"reasons":[],"severity":"low","linked_cves":[{"cve":"CVE-2026-66010","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"}],"products":[{"name":{"value":"dompurify","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.4.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"low","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-c2j3-45gr-mqc4","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"low"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3c84-4x35-62gh","advisory_id":"3665438a-cdc9-445c-8115-f0ff4ba4e223","event_types":["advisory"],"published_at":"2026-10-26T05:05:56.577991+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-22T17:41:20+00:00","detail_url":"/events/76423"},"members":[{"id":76423,"cve_ids":["CVE-2026-66010"],"payload":{"kind":"advisory","title":"CGA-3c84-4x35-62gh","summary":"CGA-3c84-4x35-62gh","evidence":"osv:CGA-3c84-4x35-62gh","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.7-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"low","structured":{"id":"CGA-3c84-4x35-62gh","aliases":["CGA-3c84-4x35-62gh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.7-r2"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3c84-4x35-62gh.json"},"ecosystem_specific":{"components":[{"component_name":"dompurify","component_purl":"pkg:npm/dompurify@3.4.11","component_type":"npm","component_version":"3.4.11","component_location":"/usr/share/wazuh-dashboard/node_modules/dompurify/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-08-06T12:34:00Z"}]}}],"modified":"2026-10-03T16:12:49.930258520Z","provider":"osv","upstream":["CVE-2026-66010","GHSA-c2j3-45gr-mqc4","GHSA-jxrp-r7gx-q4j8"],"references":["https://github.com/cure53/DOMPurify/security/advisories/GHSA-c2j3-45gr-mqc4","https://github.com/cure53/DOMPurify/pull/1537","https://github.com/cure53/DOMPurify/commit/a9ca1e537422319a557a9a2aa61f003b23b4a197","https://github.com/cure53/DOMPurify","https://github.com/cure53/DOMPurify/releases/tag/3.4.12","https://nvd.nist.gov/vuln/detail/CVE-2026-66010","https://www.vulncheck.com/advisories/dompurify-before-hook-bypass-via-custom-element-handling"]},"related_cves":[{"value":"CVE-2026-66010","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3665438a-cdc9-445c-8115-f0ff4ba4e223","priority":{"reasons":[],"severity":"low","linked_cves":[{"cve":"CVE-2026-66010","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"}],"products":[{"name":{"value":"dompurify","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.4.12","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"low","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-c2j3-45gr-mqc4","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"low"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3c84-4x35-62gh","advisory_id":"3665438a-cdc9-445c-8115-f0ff4ba4e223","event_types":["advisory"],"published_at":"2026-10-26T05:05:56.577991+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-22T17:41:20+00:00","detail_url":"/events/76423"}]}},{"id":71677,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-77w7-43r2-7cx3","summary":"CGA-77w7-43r2-7cx3","evidence":"osv:CGA-77w7-43r2-7cx3","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-77w7-43r2-7cx3","aliases":["CGA-77w7-43r2-7cx3"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-77w7-43r2-7cx3.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/node_modules/node-forge/package.json","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:28Z"}]}}],"modified":"2026-10-02T23:01:17.091061165Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:379d98ca-18b1-47e7-a213-63901ca819d6","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-77w7-43r2-7cx3","advisory_id":"379d98ca-18b1-47e7-a213-63901ca819d6","event_types":["advisory"],"published_at":"2026-10-25T23:28:22.830084+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:01:55+00:00","detail_url":"/advisories/advisory%3A379d98ca-18b1-47e7-a213-63901ca819d6","group":{"id":"advisory:379d98ca-18b1-47e7-a213-63901ca819d6","revision":1,"primary_event_id":72115,"change":"published","superseded_by":[],"changed":{"id":72115,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-77w7-43r2-7cx3","summary":"CGA-77w7-43r2-7cx3","evidence":"osv:CGA-77w7-43r2-7cx3","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-77w7-43r2-7cx3","aliases":["CGA-77w7-43r2-7cx3"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-77w7-43r2-7cx3.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/node_modules/node-forge/package.json","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:28Z"}]}}],"modified":"2026-10-02T23:01:17.091061165Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:379d98ca-18b1-47e7-a213-63901ca819d6","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-77w7-43r2-7cx3","advisory_id":"379d98ca-18b1-47e7-a213-63901ca819d6","event_types":["advisory"],"published_at":"2026-10-25T23:28:22.830084+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:01:55+00:00","detail_url":"/events/72115"},"members":[{"id":72115,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-77w7-43r2-7cx3","summary":"CGA-77w7-43r2-7cx3","evidence":"osv:CGA-77w7-43r2-7cx3","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-77w7-43r2-7cx3","aliases":["CGA-77w7-43r2-7cx3"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-77w7-43r2-7cx3.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/node_modules/node-forge/package.json","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:28Z"}]}}],"modified":"2026-10-02T23:01:17.091061165Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:379d98ca-18b1-47e7-a213-63901ca819d6","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-77w7-43r2-7cx3","advisory_id":"379d98ca-18b1-47e7-a213-63901ca819d6","event_types":["advisory"],"published_at":"2026-10-25T23:28:22.830084+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:01:55+00:00","detail_url":"/events/72115"}]}},{"id":71023,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-48c6-rmrh-prr4","summary":"CGA-48c6-rmrh-prr4","evidence":"osv:CGA-48c6-rmrh-prr4","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-48c6-rmrh-prr4","aliases":["CGA-48c6-rmrh-prr4"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-48c6-rmrh-prr4.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/node_modules/node-forge/package.json","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:25Z"}]}}],"modified":"2026-10-02T23:00:07.477902675Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1a5f07d3-e260-4eaa-9155-da5a86dc8465","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-48c6-rmrh-prr4","advisory_id":"1a5f07d3-e260-4eaa-9155-da5a86dc8465","event_types":["advisory"],"published_at":"2026-10-25T22:47:25.71264+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T10:17:13+00:00","detail_url":"/advisories/advisory%3A1a5f07d3-e260-4eaa-9155-da5a86dc8465","group":{"id":"advisory:1a5f07d3-e260-4eaa-9155-da5a86dc8465","revision":1,"primary_event_id":71397,"change":"published","superseded_by":[],"changed":{"id":71397,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-48c6-rmrh-prr4","summary":"CGA-48c6-rmrh-prr4","evidence":"osv:CGA-48c6-rmrh-prr4","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-48c6-rmrh-prr4","aliases":["CGA-48c6-rmrh-prr4"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-48c6-rmrh-prr4.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/node_modules/node-forge/package.json","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:25Z"}]}}],"modified":"2026-10-02T23:00:07.477902675Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1a5f07d3-e260-4eaa-9155-da5a86dc8465","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-48c6-rmrh-prr4","advisory_id":"1a5f07d3-e260-4eaa-9155-da5a86dc8465","event_types":["advisory"],"published_at":"2026-10-25T22:47:25.71264+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T10:17:13+00:00","detail_url":"/events/71397"},"members":[{"id":71397,"cve_ids":["CVE-2026-85393"],"payload":{"kind":"advisory","title":"CGA-48c6-rmrh-prr4","summary":"CGA-48c6-rmrh-prr4","evidence":"osv:CGA-48c6-rmrh-prr4","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-48c6-rmrh-prr4","aliases":["CGA-48c6-rmrh-prr4"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-48c6-rmrh-prr4.json"},"ecosystem_specific":{"components":[{"component_name":"node-forge","component_purl":"pkg:npm/node-forge@1.4.0","component_type":"npm","component_version":"1.4.0","component_location":"/usr/share/wazuh-dashboard/node_modules/node-forge/package.json","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-10-02T15:02:25Z"}]}}],"modified":"2026-10-02T23:00:07.477902675Z","provider":"osv","upstream":["CVE-2026-85393","GHSA-86w9-cpqp-85rv"],"references":[]},"related_cves":[{"value":"CVE-2026-85393","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1a5f07d3-e260-4eaa-9155-da5a86dc8465","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-86w9-cpqp-85rv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-85393","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"products":[{"name":{"value":"node-forge","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-ppp5-5v6c-4jwp","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-48c6-rmrh-prr4","advisory_id":"1a5f07d3-e260-4eaa-9155-da5a86dc8465","event_types":["advisory"],"published_at":"2026-10-25T22:47:25.71264+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T10:17:13+00:00","detail_url":"/events/71397"}]}},{"id":69754,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-xv8f-4cq7-w3mh","summary":"CGA-xv8f-4cq7-w3mh","evidence":"osv:CGA-xv8f-4cq7-w3mh","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-xv8f-4cq7-w3mh","aliases":["CGA-xv8f-4cq7-w3mh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xv8f-4cq7-w3mh.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:53Z"}]}}],"modified":"2026-10-02T17:16:51.087337660Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3587a0e8-f7e1-41f6-b913-4216d606b17a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xv8f-4cq7-w3mh","advisory_id":"3587a0e8-f7e1-41f6-b913-4216d606b17a","event_types":["advisory"],"published_at":"2026-10-25T22:07:00.708466+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:19+00:00","detail_url":"/advisories/advisory%3A3587a0e8-f7e1-41f6-b913-4216d606b17a","group":{"id":"advisory:3587a0e8-f7e1-41f6-b913-4216d606b17a","revision":1,"primary_event_id":70124,"change":"published","superseded_by":[],"changed":{"id":70124,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-xv8f-4cq7-w3mh","summary":"CGA-xv8f-4cq7-w3mh","evidence":"osv:CGA-xv8f-4cq7-w3mh","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-xv8f-4cq7-w3mh","aliases":["CGA-xv8f-4cq7-w3mh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xv8f-4cq7-w3mh.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:53Z"}]}}],"modified":"2026-10-02T17:16:51.087337660Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3587a0e8-f7e1-41f6-b913-4216d606b17a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xv8f-4cq7-w3mh","advisory_id":"3587a0e8-f7e1-41f6-b913-4216d606b17a","event_types":["advisory"],"published_at":"2026-10-25T22:07:00.708466+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:19+00:00","detail_url":"/events/70124"},"members":[{"id":70124,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-xv8f-4cq7-w3mh","summary":"CGA-xv8f-4cq7-w3mh","evidence":"osv:CGA-xv8f-4cq7-w3mh","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-xv8f-4cq7-w3mh","aliases":["CGA-xv8f-4cq7-w3mh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xv8f-4cq7-w3mh.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:53Z"}]}}],"modified":"2026-10-02T17:16:51.087337660Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3587a0e8-f7e1-41f6-b913-4216d606b17a","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xv8f-4cq7-w3mh","advisory_id":"3587a0e8-f7e1-41f6-b913-4216d606b17a","event_types":["advisory"],"published_at":"2026-10-25T22:07:00.708466+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:19+00:00","detail_url":"/events/70124"}]}},{"id":69752,"cve_ids":["CVE-2026-101904"],"payload":{"kind":"advisory","title":"CGA-xgqf-pfxh-7hh8","summary":"CGA-xgqf-pfxh-7hh8","evidence":"osv:CGA-xgqf-pfxh-7hh8","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-xgqf-pfxh-7hh8","aliases":["CGA-xgqf-pfxh-7hh8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xgqf-pfxh-7hh8.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:11Z"}]}}],"modified":"2026-10-02T17:16:51.064227210Z","provider":"osv","upstream":["CVE-2026-101904","GHSA-j8rh-479h-cp32"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101904.json","https://github.com/axios/axios/security/advisories/GHSA-j8rh-479h-cp32","https://nvd.nist.gov/vuln/detail/CVE-2026-101904","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101904","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3fd8efc8-a0fe-447e-83ee-8ef8f69ca41f","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101904","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101904","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xgqf-pfxh-7hh8","advisory_id":"3fd8efc8-a0fe-447e-83ee-8ef8f69ca41f","event_types":["advisory"],"published_at":"2026-10-25T22:06:58.959778+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:14+00:00","detail_url":"/advisories/advisory%3A3fd8efc8-a0fe-447e-83ee-8ef8f69ca41f","group":{"id":"advisory:3fd8efc8-a0fe-447e-83ee-8ef8f69ca41f","revision":1,"primary_event_id":70122,"change":"published","superseded_by":[],"changed":{"id":70122,"cve_ids":["CVE-2026-101904"],"payload":{"kind":"advisory","title":"CGA-xgqf-pfxh-7hh8","summary":"CGA-xgqf-pfxh-7hh8","evidence":"osv:CGA-xgqf-pfxh-7hh8","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-xgqf-pfxh-7hh8","aliases":["CGA-xgqf-pfxh-7hh8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xgqf-pfxh-7hh8.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:11Z"}]}}],"modified":"2026-10-02T17:16:51.064227210Z","provider":"osv","upstream":["CVE-2026-101904","GHSA-j8rh-479h-cp32"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101904.json","https://github.com/axios/axios/security/advisories/GHSA-j8rh-479h-cp32","https://nvd.nist.gov/vuln/detail/CVE-2026-101904","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101904","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3fd8efc8-a0fe-447e-83ee-8ef8f69ca41f","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101904","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101904","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xgqf-pfxh-7hh8","advisory_id":"3fd8efc8-a0fe-447e-83ee-8ef8f69ca41f","event_types":["advisory"],"published_at":"2026-10-25T22:06:58.959778+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:14+00:00","detail_url":"/events/70122"},"members":[{"id":70122,"cve_ids":["CVE-2026-101904"],"payload":{"kind":"advisory","title":"CGA-xgqf-pfxh-7hh8","summary":"CGA-xgqf-pfxh-7hh8","evidence":"osv:CGA-xgqf-pfxh-7hh8","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-xgqf-pfxh-7hh8","aliases":["CGA-xgqf-pfxh-7hh8"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xgqf-pfxh-7hh8.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:11Z"}]}}],"modified":"2026-10-02T17:16:51.064227210Z","provider":"osv","upstream":["CVE-2026-101904","GHSA-j8rh-479h-cp32"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101904.json","https://github.com/axios/axios/security/advisories/GHSA-j8rh-479h-cp32","https://nvd.nist.gov/vuln/detail/CVE-2026-101904","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101904","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3fd8efc8-a0fe-447e-83ee-8ef8f69ca41f","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101904","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101904","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xgqf-pfxh-7hh8","advisory_id":"3fd8efc8-a0fe-447e-83ee-8ef8f69ca41f","event_types":["advisory"],"published_at":"2026-10-25T22:06:58.959778+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:14+00:00","detail_url":"/events/70122"}]}},{"id":69690,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-v333-84cv-2j7p","summary":"CGA-v333-84cv-2j7p","evidence":"osv:CGA-v333-84cv-2j7p","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v333-84cv-2j7p","aliases":["CGA-v333-84cv-2j7p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v333-84cv-2j7p.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:52Z"}]}}],"modified":"2026-10-02T17:16:48.026466222Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c118735b-0222-4fdd-951e-5cfa251d969c","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v333-84cv-2j7p","advisory_id":"c118735b-0222-4fdd-951e-5cfa251d969c","event_types":["advisory"],"published_at":"2026-10-25T22:05:27.362021+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:18+00:00","detail_url":"/advisories/advisory%3Ac118735b-0222-4fdd-951e-5cfa251d969c","group":{"id":"advisory:c118735b-0222-4fdd-951e-5cfa251d969c","revision":1,"primary_event_id":70060,"change":"published","superseded_by":[],"changed":{"id":70060,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-v333-84cv-2j7p","summary":"CGA-v333-84cv-2j7p","evidence":"osv:CGA-v333-84cv-2j7p","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v333-84cv-2j7p","aliases":["CGA-v333-84cv-2j7p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v333-84cv-2j7p.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:52Z"}]}}],"modified":"2026-10-02T17:16:48.026466222Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c118735b-0222-4fdd-951e-5cfa251d969c","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v333-84cv-2j7p","advisory_id":"c118735b-0222-4fdd-951e-5cfa251d969c","event_types":["advisory"],"published_at":"2026-10-25T22:05:27.362021+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:18+00:00","detail_url":"/events/70060"},"members":[{"id":70060,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-v333-84cv-2j7p","summary":"CGA-v333-84cv-2j7p","evidence":"osv:CGA-v333-84cv-2j7p","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v333-84cv-2j7p","aliases":["CGA-v333-84cv-2j7p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v333-84cv-2j7p.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:52Z"}]}}],"modified":"2026-10-02T17:16:48.026466222Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c118735b-0222-4fdd-951e-5cfa251d969c","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v333-84cv-2j7p","advisory_id":"c118735b-0222-4fdd-951e-5cfa251d969c","event_types":["advisory"],"published_at":"2026-10-25T22:05:27.362021+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:18+00:00","detail_url":"/events/70060"}]}},{"id":69611,"cve_ids":["CVE-2026-101903"],"payload":{"kind":"advisory","title":"CGA-xp9c-76pr-rwwg","summary":"CGA-xp9c-76pr-rwwg","evidence":"osv:CGA-xp9c-76pr-rwwg","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-xp9c-76pr-rwwg","aliases":["CGA-xp9c-76pr-rwwg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xp9c-76pr-rwwg.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:10Z"}]}}],"modified":"2026-10-02T17:16:44.596504646Z","provider":"osv","upstream":["CVE-2026-101903","GHSA-c29m-xwm3-cm6r"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101903.json","https://github.com/axios/axios/security/advisories/GHSA-c29m-xwm3-cm6r","https://nvd.nist.gov/vuln/detail/CVE-2026-101903","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101903","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:19ad620d-be1a-48bd-ae27-151e92ad38d0","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101903","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101903","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-c29m-xwm3-cm6r","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xp9c-76pr-rwwg","advisory_id":"19ad620d-be1a-48bd-ae27-151e92ad38d0","event_types":["advisory"],"published_at":"2026-10-25T22:03:42.540185+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:13+00:00","detail_url":"/advisories/advisory%3A19ad620d-be1a-48bd-ae27-151e92ad38d0","group":{"id":"advisory:19ad620d-be1a-48bd-ae27-151e92ad38d0","revision":1,"primary_event_id":69981,"change":"published","superseded_by":[],"changed":{"id":69981,"cve_ids":["CVE-2026-101903"],"payload":{"kind":"advisory","title":"CGA-xp9c-76pr-rwwg","summary":"CGA-xp9c-76pr-rwwg","evidence":"osv:CGA-xp9c-76pr-rwwg","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-xp9c-76pr-rwwg","aliases":["CGA-xp9c-76pr-rwwg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xp9c-76pr-rwwg.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:10Z"}]}}],"modified":"2026-10-02T17:16:44.596504646Z","provider":"osv","upstream":["CVE-2026-101903","GHSA-c29m-xwm3-cm6r"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101903.json","https://github.com/axios/axios/security/advisories/GHSA-c29m-xwm3-cm6r","https://nvd.nist.gov/vuln/detail/CVE-2026-101903","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101903","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:19ad620d-be1a-48bd-ae27-151e92ad38d0","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101903","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101903","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-c29m-xwm3-cm6r","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xp9c-76pr-rwwg","advisory_id":"19ad620d-be1a-48bd-ae27-151e92ad38d0","event_types":["advisory"],"published_at":"2026-10-25T22:03:42.540185+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:13+00:00","detail_url":"/events/69981"},"members":[{"id":69981,"cve_ids":["CVE-2026-101903"],"payload":{"kind":"advisory","title":"CGA-xp9c-76pr-rwwg","summary":"CGA-xp9c-76pr-rwwg","evidence":"osv:CGA-xp9c-76pr-rwwg","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-xp9c-76pr-rwwg","aliases":["CGA-xp9c-76pr-rwwg"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xp9c-76pr-rwwg.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:10Z"}]}}],"modified":"2026-10-02T17:16:44.596504646Z","provider":"osv","upstream":["CVE-2026-101903","GHSA-c29m-xwm3-cm6r"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101903.json","https://github.com/axios/axios/security/advisories/GHSA-c29m-xwm3-cm6r","https://nvd.nist.gov/vuln/detail/CVE-2026-101903","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101903","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:19ad620d-be1a-48bd-ae27-151e92ad38d0","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101903","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101903","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-c29m-xwm3-cm6r","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xp9c-76pr-rwwg","advisory_id":"19ad620d-be1a-48bd-ae27-151e92ad38d0","event_types":["advisory"],"published_at":"2026-10-25T22:03:42.540185+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:13+00:00","detail_url":"/events/69981"}]}},{"id":69577,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-rjqp-5xm5-m358","summary":"CGA-rjqp-5xm5-m358","evidence":"osv:CGA-rjqp-5xm5-m358","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-rjqp-5xm5-m358","aliases":["CGA-rjqp-5xm5-m358"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rjqp-5xm5-m358.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:12Z"}]}}],"modified":"2026-10-02T17:16:43.227480831Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:47b2eb69-2d0f-4b01-a275-1235838451d1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rjqp-5xm5-m358","advisory_id":"47b2eb69-2d0f-4b01-a275-1235838451d1","event_types":["advisory"],"published_at":"2026-10-25T22:02:57.928471+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:14+00:00","detail_url":"/advisories/advisory%3A47b2eb69-2d0f-4b01-a275-1235838451d1","group":{"id":"advisory:47b2eb69-2d0f-4b01-a275-1235838451d1","revision":1,"primary_event_id":69947,"change":"published","superseded_by":[],"changed":{"id":69947,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-rjqp-5xm5-m358","summary":"CGA-rjqp-5xm5-m358","evidence":"osv:CGA-rjqp-5xm5-m358","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-rjqp-5xm5-m358","aliases":["CGA-rjqp-5xm5-m358"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rjqp-5xm5-m358.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:12Z"}]}}],"modified":"2026-10-02T17:16:43.227480831Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:47b2eb69-2d0f-4b01-a275-1235838451d1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rjqp-5xm5-m358","advisory_id":"47b2eb69-2d0f-4b01-a275-1235838451d1","event_types":["advisory"],"published_at":"2026-10-25T22:02:57.928471+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:14+00:00","detail_url":"/events/69947"},"members":[{"id":69947,"cve_ids":["CVE-2026-101905"],"payload":{"kind":"advisory","title":"CGA-rjqp-5xm5-m358","summary":"CGA-rjqp-5xm5-m358","evidence":"osv:CGA-rjqp-5xm5-m358","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-rjqp-5xm5-m358","aliases":["CGA-rjqp-5xm5-m358"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rjqp-5xm5-m358.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:12Z"}]}}],"modified":"2026-10-02T17:16:43.227480831Z","provider":"osv","upstream":["CVE-2026-101905","GHSA-m8m8-qj5v-23w3"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101905.json","https://github.com/axios/axios/security/advisories/GHSA-m8m8-qj5v-23w3","https://nvd.nist.gov/vuln/detail/CVE-2026-101905","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101905","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:47b2eb69-2d0f-4b01-a275-1235838451d1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101905","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101905","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101905","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-m8m8-qj5v-23w3","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rjqp-5xm5-m358","advisory_id":"47b2eb69-2d0f-4b01-a275-1235838451d1","event_types":["advisory"],"published_at":"2026-10-25T22:02:57.928471+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:14+00:00","detail_url":"/events/69947"}]}},{"id":69575,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-rpg4-2xrv-3fw2","summary":"CGA-rpg4-2xrv-3fw2","evidence":"osv:CGA-rpg4-2xrv-3fw2","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rpg4-2xrv-3fw2","aliases":["CGA-rpg4-2xrv-3fw2"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rpg4-2xrv-3fw2.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:08Z"}]}}],"modified":"2026-10-02T17:16:43.197548794Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6cbfdf60-e12d-4709-bcd6-0eac5ae5b350","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rpg4-2xrv-3fw2","advisory_id":"6cbfdf60-e12d-4709-bcd6-0eac5ae5b350","event_types":["advisory"],"published_at":"2026-10-25T22:02:55.453098+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:12+00:00","detail_url":"/advisories/advisory%3A6cbfdf60-e12d-4709-bcd6-0eac5ae5b350","group":{"id":"advisory:6cbfdf60-e12d-4709-bcd6-0eac5ae5b350","revision":1,"primary_event_id":69945,"change":"published","superseded_by":[],"changed":{"id":69945,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-rpg4-2xrv-3fw2","summary":"CGA-rpg4-2xrv-3fw2","evidence":"osv:CGA-rpg4-2xrv-3fw2","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rpg4-2xrv-3fw2","aliases":["CGA-rpg4-2xrv-3fw2"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rpg4-2xrv-3fw2.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:08Z"}]}}],"modified":"2026-10-02T17:16:43.197548794Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6cbfdf60-e12d-4709-bcd6-0eac5ae5b350","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rpg4-2xrv-3fw2","advisory_id":"6cbfdf60-e12d-4709-bcd6-0eac5ae5b350","event_types":["advisory"],"published_at":"2026-10-25T22:02:55.453098+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:12+00:00","detail_url":"/events/69945"},"members":[{"id":69945,"cve_ids":["CVE-2026-101900"],"payload":{"kind":"advisory","title":"CGA-rpg4-2xrv-3fw2","summary":"CGA-rpg4-2xrv-3fw2","evidence":"osv:CGA-rpg4-2xrv-3fw2","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rpg4-2xrv-3fw2","aliases":["CGA-rpg4-2xrv-3fw2"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rpg4-2xrv-3fw2.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:08Z"}]}}],"modified":"2026-10-02T17:16:43.197548794Z","provider":"osv","upstream":["CVE-2026-101900","GHSA-4hqw-qxg8-jxx2"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101900.json","https://github.com/axios/axios/security/advisories/GHSA-4hqw-qxg8-jxx2","https://nvd.nist.gov/vuln/detail/CVE-2026-101900","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101900","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:6cbfdf60-e12d-4709-bcd6-0eac5ae5b350","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101900","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rpg4-2xrv-3fw2","advisory_id":"6cbfdf60-e12d-4709-bcd6-0eac5ae5b350","event_types":["advisory"],"published_at":"2026-10-25T22:02:55.453098+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:12+00:00","detail_url":"/events/69945"}]}},{"id":69553,"cve_ids":["CVE-2026-101907"],"payload":{"kind":"advisory","title":"CGA-qwh7-wqrj-m2vf","summary":"CGA-qwh7-wqrj-m2vf","evidence":"osv:CGA-qwh7-wqrj-m2vf","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-qwh7-wqrj-m2vf","aliases":["CGA-qwh7-wqrj-m2vf"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qwh7-wqrj-m2vf.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:08Z"}]}}],"modified":"2026-10-02T17:16:41.979749704Z","provider":"osv","upstream":["CVE-2026-101907","GHSA-r4gj-5m52-g5wh"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101907.json","https://github.com/axios/axios/security/advisories/GHSA-r4gj-5m52-g5wh","https://nvd.nist.gov/vuln/detail/CVE-2026-101907","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101907","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2e5c1e2e-b8ae-4bd8-a01e-e117bcbc8fc7","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101907","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101907","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-r4gj-5m52-g5wh","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qwh7-wqrj-m2vf","advisory_id":"2e5c1e2e-b8ae-4bd8-a01e-e117bcbc8fc7","event_types":["advisory"],"published_at":"2026-10-25T22:02:26.030286+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:15+00:00","detail_url":"/advisories/advisory%3A2e5c1e2e-b8ae-4bd8-a01e-e117bcbc8fc7","group":{"id":"advisory:2e5c1e2e-b8ae-4bd8-a01e-e117bcbc8fc7","revision":1,"primary_event_id":69923,"change":"published","superseded_by":[],"changed":{"id":69923,"cve_ids":["CVE-2026-101907"],"payload":{"kind":"advisory","title":"CGA-qwh7-wqrj-m2vf","summary":"CGA-qwh7-wqrj-m2vf","evidence":"osv:CGA-qwh7-wqrj-m2vf","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-qwh7-wqrj-m2vf","aliases":["CGA-qwh7-wqrj-m2vf"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qwh7-wqrj-m2vf.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:08Z"}]}}],"modified":"2026-10-02T17:16:41.979749704Z","provider":"osv","upstream":["CVE-2026-101907","GHSA-r4gj-5m52-g5wh"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101907.json","https://github.com/axios/axios/security/advisories/GHSA-r4gj-5m52-g5wh","https://nvd.nist.gov/vuln/detail/CVE-2026-101907","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101907","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2e5c1e2e-b8ae-4bd8-a01e-e117bcbc8fc7","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101907","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101907","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-r4gj-5m52-g5wh","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qwh7-wqrj-m2vf","advisory_id":"2e5c1e2e-b8ae-4bd8-a01e-e117bcbc8fc7","event_types":["advisory"],"published_at":"2026-10-25T22:02:26.030286+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:15+00:00","detail_url":"/events/69923"},"members":[{"id":69923,"cve_ids":["CVE-2026-101907"],"payload":{"kind":"advisory","title":"CGA-qwh7-wqrj-m2vf","summary":"CGA-qwh7-wqrj-m2vf","evidence":"osv:CGA-qwh7-wqrj-m2vf","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-qwh7-wqrj-m2vf","aliases":["CGA-qwh7-wqrj-m2vf"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qwh7-wqrj-m2vf.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:08Z"}]}}],"modified":"2026-10-02T17:16:41.979749704Z","provider":"osv","upstream":["CVE-2026-101907","GHSA-r4gj-5m52-g5wh"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101907.json","https://github.com/axios/axios/security/advisories/GHSA-r4gj-5m52-g5wh","https://nvd.nist.gov/vuln/detail/CVE-2026-101907","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101907","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2e5c1e2e-b8ae-4bd8-a01e-e117bcbc8fc7","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101907","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101907","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-r4gj-5m52-g5wh","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qwh7-wqrj-m2vf","advisory_id":"2e5c1e2e-b8ae-4bd8-a01e-e117bcbc8fc7","event_types":["advisory"],"published_at":"2026-10-25T22:02:26.030286+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:15+00:00","detail_url":"/events/69923"}]}},{"id":69403,"cve_ids":["CVE-2026-101908"],"payload":{"kind":"advisory","title":"CGA-wjcg-6c96-pfrx","summary":"CGA-wjcg-6c96-pfrx","evidence":"osv:CGA-wjcg-6c96-pfrx","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wjcg-6c96-pfrx","aliases":["CGA-wjcg-6c96-pfrx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wjcg-6c96-pfrx.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:09Z"}]}}],"modified":"2026-10-02T17:16:35.531179846Z","provider":"osv","upstream":["CVE-2026-101908","GHSA-vh66-26gq-q6x8"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101908.json","https://github.com/axios/axios/security/advisories/GHSA-vh66-26gq-q6x8","https://nvd.nist.gov/vuln/detail/CVE-2026-101908","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101908","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:36242b31-31ab-4ee0-9f1a-ebd5b2fe643f","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101908","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101908","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wjcg-6c96-pfrx","advisory_id":"36242b31-31ab-4ee0-9f1a-ebd5b2fe643f","event_types":["advisory"],"published_at":"2026-10-25T21:58:08.085507+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:16+00:00","detail_url":"/advisories/advisory%3A36242b31-31ab-4ee0-9f1a-ebd5b2fe643f","group":{"id":"advisory:36242b31-31ab-4ee0-9f1a-ebd5b2fe643f","revision":1,"primary_event_id":69773,"change":"published","superseded_by":[],"changed":{"id":69773,"cve_ids":["CVE-2026-101908"],"payload":{"kind":"advisory","title":"CGA-wjcg-6c96-pfrx","summary":"CGA-wjcg-6c96-pfrx","evidence":"osv:CGA-wjcg-6c96-pfrx","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wjcg-6c96-pfrx","aliases":["CGA-wjcg-6c96-pfrx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wjcg-6c96-pfrx.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:09Z"}]}}],"modified":"2026-10-02T17:16:35.531179846Z","provider":"osv","upstream":["CVE-2026-101908","GHSA-vh66-26gq-q6x8"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101908.json","https://github.com/axios/axios/security/advisories/GHSA-vh66-26gq-q6x8","https://nvd.nist.gov/vuln/detail/CVE-2026-101908","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101908","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:36242b31-31ab-4ee0-9f1a-ebd5b2fe643f","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101908","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101908","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wjcg-6c96-pfrx","advisory_id":"36242b31-31ab-4ee0-9f1a-ebd5b2fe643f","event_types":["advisory"],"published_at":"2026-10-25T21:58:08.085507+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:16+00:00","detail_url":"/events/69773"},"members":[{"id":69773,"cve_ids":["CVE-2026-101908"],"payload":{"kind":"advisory","title":"CGA-wjcg-6c96-pfrx","summary":"CGA-wjcg-6c96-pfrx","evidence":"osv:CGA-wjcg-6c96-pfrx","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wjcg-6c96-pfrx","aliases":["CGA-wjcg-6c96-pfrx"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wjcg-6c96-pfrx.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:09Z"}]}}],"modified":"2026-10-02T17:16:35.531179846Z","provider":"osv","upstream":["CVE-2026-101908","GHSA-vh66-26gq-q6x8"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101908.json","https://github.com/axios/axios/security/advisories/GHSA-vh66-26gq-q6x8","https://nvd.nist.gov/vuln/detail/CVE-2026-101908","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101908","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:36242b31-31ab-4ee0-9f1a-ebd5b2fe643f","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101908","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101908","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wjcg-6c96-pfrx","advisory_id":"36242b31-31ab-4ee0-9f1a-ebd5b2fe643f","event_types":["advisory"],"published_at":"2026-10-25T21:58:08.085507+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:16+00:00","detail_url":"/events/69773"}]}},{"id":69381,"cve_ids":["CVE-2026-101909"],"payload":{"kind":"advisory","title":"CGA-mcrw-j9q6-4pp2","summary":"CGA-mcrw-j9q6-4pp2","evidence":"osv:CGA-mcrw-j9q6-4pp2","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-mcrw-j9q6-4pp2","aliases":["CGA-mcrw-j9q6-4pp2"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mcrw-j9q6-4pp2.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:09Z"}]}}],"modified":"2026-10-02T17:16:34.256854120Z","provider":"osv","upstream":["CVE-2026-101909","GHSA-x97p-jq2g-jp4f"],"references":["https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101909.json","https://github.com/axios/axios/security/advisories/GHSA-x97p-jq2g-jp4f","https://nvd.nist.gov/vuln/detail/CVE-2026-101909","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/commit/d29be181f85f6fe93397a07b1f69606d9622637b","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101909","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:553158be-009d-49cc-838b-211b442e616b","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101909","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101909","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.34.0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"axios","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-x97p-jq2g-jp4f","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mcrw-j9q6-4pp2","advisory_id":"553158be-009d-49cc-838b-211b442e616b","event_types":["advisory"],"published_at":"2026-10-25T21:57:38.223596+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:16+00:00","detail_url":"/advisories/advisory%3A553158be-009d-49cc-838b-211b442e616b","group":{"id":"advisory:553158be-009d-49cc-838b-211b442e616b","revision":1,"primary_event_id":69751,"change":"published","superseded_by":[],"changed":{"id":69751,"cve_ids":["CVE-2026-101909"],"payload":{"kind":"advisory","title":"CGA-mcrw-j9q6-4pp2","summary":"CGA-mcrw-j9q6-4pp2","evidence":"osv:CGA-mcrw-j9q6-4pp2","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-mcrw-j9q6-4pp2","aliases":["CGA-mcrw-j9q6-4pp2"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mcrw-j9q6-4pp2.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:09Z"}]}}],"modified":"2026-10-02T17:16:34.256854120Z","provider":"osv","upstream":["CVE-2026-101909","GHSA-x97p-jq2g-jp4f"],"references":["https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101909.json","https://github.com/axios/axios/security/advisories/GHSA-x97p-jq2g-jp4f","https://nvd.nist.gov/vuln/detail/CVE-2026-101909","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/commit/d29be181f85f6fe93397a07b1f69606d9622637b","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101909","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:553158be-009d-49cc-838b-211b442e616b","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101909","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101909","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.34.0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"axios","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-x97p-jq2g-jp4f","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mcrw-j9q6-4pp2","advisory_id":"553158be-009d-49cc-838b-211b442e616b","event_types":["advisory"],"published_at":"2026-10-25T21:57:38.223596+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:16+00:00","detail_url":"/events/69751"},"members":[{"id":69751,"cve_ids":["CVE-2026-101909"],"payload":{"kind":"advisory","title":"CGA-mcrw-j9q6-4pp2","summary":"CGA-mcrw-j9q6-4pp2","evidence":"osv:CGA-mcrw-j9q6-4pp2","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-mcrw-j9q6-4pp2","aliases":["CGA-mcrw-j9q6-4pp2"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mcrw-j9q6-4pp2.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:09Z"}]}}],"modified":"2026-10-02T17:16:34.256854120Z","provider":"osv","upstream":["CVE-2026-101909","GHSA-x97p-jq2g-jp4f"],"references":["https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101909.json","https://github.com/axios/axios/security/advisories/GHSA-x97p-jq2g-jp4f","https://nvd.nist.gov/vuln/detail/CVE-2026-101909","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/commit/d29be181f85f6fe93397a07b1f69606d9622637b","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101909","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:553158be-009d-49cc-838b-211b442e616b","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101909","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101909","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.34.0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"axios","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-x97p-jq2g-jp4f","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mcrw-j9q6-4pp2","advisory_id":"553158be-009d-49cc-838b-211b442e616b","event_types":["advisory"],"published_at":"2026-10-25T21:57:38.223596+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:16+00:00","detail_url":"/events/69751"}]}},{"id":69376,"cve_ids":["CVE-2026-101901"],"payload":{"kind":"advisory","title":"CGA-m6c7-467r-frwh","summary":"CGA-m6c7-467r-frwh","evidence":"osv:CGA-m6c7-467r-frwh","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-m6c7-467r-frwh","aliases":["CGA-m6c7-467r-frwh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m6c7-467r-frwh.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:10Z"}]}}],"modified":"2026-10-02T17:16:34.099416872Z","provider":"osv","upstream":["CVE-2026-101901","GHSA-542g-h47m-68v8"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101901.json","https://github.com/axios/axios/security/advisories/GHSA-542g-h47m-68v8","https://nvd.nist.gov/vuln/detail/CVE-2026-101901","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101901","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cf37b5c7-52ea-4b31-a0d2-659aa3bcc915","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101901","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101901","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-542g-h47m-68v8","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m6c7-467r-frwh","advisory_id":"cf37b5c7-52ea-4b31-a0d2-659aa3bcc915","event_types":["advisory"],"published_at":"2026-10-25T21:57:29.670377+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:12+00:00","detail_url":"/advisories/advisory%3Acf37b5c7-52ea-4b31-a0d2-659aa3bcc915","group":{"id":"advisory:cf37b5c7-52ea-4b31-a0d2-659aa3bcc915","revision":1,"primary_event_id":69746,"change":"published","superseded_by":[],"changed":{"id":69746,"cve_ids":["CVE-2026-101901"],"payload":{"kind":"advisory","title":"CGA-m6c7-467r-frwh","summary":"CGA-m6c7-467r-frwh","evidence":"osv:CGA-m6c7-467r-frwh","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-m6c7-467r-frwh","aliases":["CGA-m6c7-467r-frwh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m6c7-467r-frwh.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:10Z"}]}}],"modified":"2026-10-02T17:16:34.099416872Z","provider":"osv","upstream":["CVE-2026-101901","GHSA-542g-h47m-68v8"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101901.json","https://github.com/axios/axios/security/advisories/GHSA-542g-h47m-68v8","https://nvd.nist.gov/vuln/detail/CVE-2026-101901","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101901","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cf37b5c7-52ea-4b31-a0d2-659aa3bcc915","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101901","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101901","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-542g-h47m-68v8","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m6c7-467r-frwh","advisory_id":"cf37b5c7-52ea-4b31-a0d2-659aa3bcc915","event_types":["advisory"],"published_at":"2026-10-25T21:57:29.670377+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:12+00:00","detail_url":"/events/69746"},"members":[{"id":69746,"cve_ids":["CVE-2026-101901"],"payload":{"kind":"advisory","title":"CGA-m6c7-467r-frwh","summary":"CGA-m6c7-467r-frwh","evidence":"osv:CGA-m6c7-467r-frwh","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-m6c7-467r-frwh","aliases":["CGA-m6c7-467r-frwh"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m6c7-467r-frwh.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:10Z"}]}}],"modified":"2026-10-02T17:16:34.099416872Z","provider":"osv","upstream":["CVE-2026-101901","GHSA-542g-h47m-68v8"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101901.json","https://github.com/axios/axios/security/advisories/GHSA-542g-h47m-68v8","https://nvd.nist.gov/vuln/detail/CVE-2026-101901","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101901","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cf37b5c7-52ea-4b31-a0d2-659aa3bcc915","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101901","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101901","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-542g-h47m-68v8","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m6c7-467r-frwh","advisory_id":"cf37b5c7-52ea-4b31-a0d2-659aa3bcc915","event_types":["advisory"],"published_at":"2026-10-25T21:57:29.670377+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:12+00:00","detail_url":"/events/69746"}]}},{"id":69367,"cve_ids":["CVE-2026-101909"],"payload":{"kind":"advisory","title":"CGA-gj59-xhvh-c56x","summary":"CGA-gj59-xhvh-c56x","evidence":"osv:CGA-gj59-xhvh-c56x","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gj59-xhvh-c56x","aliases":["CGA-gj59-xhvh-c56x"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gj59-xhvh-c56x.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:54Z"}]}}],"modified":"2026-10-02T17:16:33.574690693Z","provider":"osv","upstream":["CVE-2026-101909","GHSA-x97p-jq2g-jp4f"],"references":["https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101909.json","https://github.com/axios/axios/security/advisories/GHSA-x97p-jq2g-jp4f","https://nvd.nist.gov/vuln/detail/CVE-2026-101909","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/commit/d29be181f85f6fe93397a07b1f69606d9622637b","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101909","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:58e4b878-3c5c-4337-8342-5791030a95f4","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101909","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101909","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.34.0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"axios","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-x97p-jq2g-jp4f","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gj59-xhvh-c56x","advisory_id":"58e4b878-3c5c-4337-8342-5791030a95f4","event_types":["advisory"],"published_at":"2026-10-25T21:57:20.574562+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:20+00:00","detail_url":"/advisories/advisory%3A58e4b878-3c5c-4337-8342-5791030a95f4","group":{"id":"advisory:58e4b878-3c5c-4337-8342-5791030a95f4","revision":1,"primary_event_id":69737,"change":"published","superseded_by":[],"changed":{"id":69737,"cve_ids":["CVE-2026-101909"],"payload":{"kind":"advisory","title":"CGA-gj59-xhvh-c56x","summary":"CGA-gj59-xhvh-c56x","evidence":"osv:CGA-gj59-xhvh-c56x","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gj59-xhvh-c56x","aliases":["CGA-gj59-xhvh-c56x"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gj59-xhvh-c56x.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:54Z"}]}}],"modified":"2026-10-02T17:16:33.574690693Z","provider":"osv","upstream":["CVE-2026-101909","GHSA-x97p-jq2g-jp4f"],"references":["https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101909.json","https://github.com/axios/axios/security/advisories/GHSA-x97p-jq2g-jp4f","https://nvd.nist.gov/vuln/detail/CVE-2026-101909","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/commit/d29be181f85f6fe93397a07b1f69606d9622637b","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101909","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:58e4b878-3c5c-4337-8342-5791030a95f4","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101909","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101909","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.34.0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"axios","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-x97p-jq2g-jp4f","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gj59-xhvh-c56x","advisory_id":"58e4b878-3c5c-4337-8342-5791030a95f4","event_types":["advisory"],"published_at":"2026-10-25T21:57:20.574562+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:20+00:00","detail_url":"/events/69737"},"members":[{"id":69737,"cve_ids":["CVE-2026-101909"],"payload":{"kind":"advisory","title":"CGA-gj59-xhvh-c56x","summary":"CGA-gj59-xhvh-c56x","evidence":"osv:CGA-gj59-xhvh-c56x","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gj59-xhvh-c56x","aliases":["CGA-gj59-xhvh-c56x"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gj59-xhvh-c56x.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:54Z"}]}}],"modified":"2026-10-02T17:16:33.574690693Z","provider":"osv","upstream":["CVE-2026-101909","GHSA-x97p-jq2g-jp4f"],"references":["https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101909.json","https://github.com/axios/axios/security/advisories/GHSA-x97p-jq2g-jp4f","https://nvd.nist.gov/vuln/detail/CVE-2026-101909","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/commit/d29be181f85f6fe93397a07b1f69606d9622637b","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101909","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:58e4b878-3c5c-4337-8342-5791030a95f4","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101909","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101909","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101909","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.34.0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"axios","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-x97p-jq2g-jp4f","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gj59-xhvh-c56x","advisory_id":"58e4b878-3c5c-4337-8342-5791030a95f4","event_types":["advisory"],"published_at":"2026-10-25T21:57:20.574562+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:20+00:00","detail_url":"/events/69737"}]}},{"id":69358,"cve_ids":["CVE-2026-101902"],"payload":{"kind":"advisory","title":"CGA-hh4m-38g7-j4j6","summary":"CGA-hh4m-38g7-j4j6","evidence":"osv:CGA-hh4m-38g7-j4j6","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hh4m-38g7-j4j6","aliases":["CGA-hh4m-38g7-j4j6"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hh4m-38g7-j4j6.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:53Z"}]}}],"modified":"2026-10-02T17:16:32.987793243Z","provider":"osv","upstream":["CVE-2026-101902","GHSA-9fr6-4gfg-395g"],"references":["https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101902.json","https://github.com/axios/axios/security/advisories/GHSA-9fr6-4gfg-395g","https://nvd.nist.gov/vuln/detail/CVE-2026-101902","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101902","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8f6e4127-b2e2-48ad-8879-966cc1e85efc","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101902","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101902","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hh4m-38g7-j4j6","advisory_id":"8f6e4127-b2e2-48ad-8879-966cc1e85efc","event_types":["advisory"],"published_at":"2026-10-25T21:57:12.436055+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:18+00:00","detail_url":"/advisories/advisory%3A8f6e4127-b2e2-48ad-8879-966cc1e85efc","group":{"id":"advisory:8f6e4127-b2e2-48ad-8879-966cc1e85efc","revision":1,"primary_event_id":69728,"change":"published","superseded_by":[],"changed":{"id":69728,"cve_ids":["CVE-2026-101902"],"payload":{"kind":"advisory","title":"CGA-hh4m-38g7-j4j6","summary":"CGA-hh4m-38g7-j4j6","evidence":"osv:CGA-hh4m-38g7-j4j6","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hh4m-38g7-j4j6","aliases":["CGA-hh4m-38g7-j4j6"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hh4m-38g7-j4j6.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:53Z"}]}}],"modified":"2026-10-02T17:16:32.987793243Z","provider":"osv","upstream":["CVE-2026-101902","GHSA-9fr6-4gfg-395g"],"references":["https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101902.json","https://github.com/axios/axios/security/advisories/GHSA-9fr6-4gfg-395g","https://nvd.nist.gov/vuln/detail/CVE-2026-101902","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101902","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8f6e4127-b2e2-48ad-8879-966cc1e85efc","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101902","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101902","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hh4m-38g7-j4j6","advisory_id":"8f6e4127-b2e2-48ad-8879-966cc1e85efc","event_types":["advisory"],"published_at":"2026-10-25T21:57:12.436055+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:18+00:00","detail_url":"/events/69728"},"members":[{"id":69728,"cve_ids":["CVE-2026-101902"],"payload":{"kind":"advisory","title":"CGA-hh4m-38g7-j4j6","summary":"CGA-hh4m-38g7-j4j6","evidence":"osv:CGA-hh4m-38g7-j4j6","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hh4m-38g7-j4j6","aliases":["CGA-hh4m-38g7-j4j6"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hh4m-38g7-j4j6.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:53Z"}]}}],"modified":"2026-10-02T17:16:32.987793243Z","provider":"osv","upstream":["CVE-2026-101902","GHSA-9fr6-4gfg-395g"],"references":["https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101902.json","https://github.com/axios/axios/security/advisories/GHSA-9fr6-4gfg-395g","https://nvd.nist.gov/vuln/detail/CVE-2026-101902","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101902","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8f6e4127-b2e2-48ad-8879-966cc1e85efc","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101902","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101902","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hh4m-38g7-j4j6","advisory_id":"8f6e4127-b2e2-48ad-8879-966cc1e85efc","event_types":["advisory"],"published_at":"2026-10-25T21:57:12.436055+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:18+00:00","detail_url":"/events/69728"}]}},{"id":69334,"cve_ids":["CVE-2026-101907"],"payload":{"kind":"advisory","title":"CGA-fmq3-p3j4-mr6h","summary":"CGA-fmq3-p3j4-mr6h","evidence":"osv:CGA-fmq3-p3j4-mr6h","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-fmq3-p3j4-mr6h","aliases":["CGA-fmq3-p3j4-mr6h"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fmq3-p3j4-mr6h.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:54Z"}]}}],"modified":"2026-10-02T17:16:32.078279862Z","provider":"osv","upstream":["CVE-2026-101907","GHSA-r4gj-5m52-g5wh"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101907.json","https://github.com/axios/axios/security/advisories/GHSA-r4gj-5m52-g5wh","https://nvd.nist.gov/vuln/detail/CVE-2026-101907","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101907","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:bb9fc894-2b07-4acf-aa6f-c7b185db0724","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101907","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101907","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-r4gj-5m52-g5wh","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fmq3-p3j4-mr6h","advisory_id":"bb9fc894-2b07-4acf-aa6f-c7b185db0724","event_types":["advisory"],"published_at":"2026-10-25T21:56:44.523327+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:20+00:00","detail_url":"/advisories/advisory%3Abb9fc894-2b07-4acf-aa6f-c7b185db0724","group":{"id":"advisory:bb9fc894-2b07-4acf-aa6f-c7b185db0724","revision":1,"primary_event_id":69704,"change":"published","superseded_by":[],"changed":{"id":69704,"cve_ids":["CVE-2026-101907"],"payload":{"kind":"advisory","title":"CGA-fmq3-p3j4-mr6h","summary":"CGA-fmq3-p3j4-mr6h","evidence":"osv:CGA-fmq3-p3j4-mr6h","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-fmq3-p3j4-mr6h","aliases":["CGA-fmq3-p3j4-mr6h"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fmq3-p3j4-mr6h.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:54Z"}]}}],"modified":"2026-10-02T17:16:32.078279862Z","provider":"osv","upstream":["CVE-2026-101907","GHSA-r4gj-5m52-g5wh"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101907.json","https://github.com/axios/axios/security/advisories/GHSA-r4gj-5m52-g5wh","https://nvd.nist.gov/vuln/detail/CVE-2026-101907","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101907","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:bb9fc894-2b07-4acf-aa6f-c7b185db0724","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101907","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101907","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-r4gj-5m52-g5wh","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fmq3-p3j4-mr6h","advisory_id":"bb9fc894-2b07-4acf-aa6f-c7b185db0724","event_types":["advisory"],"published_at":"2026-10-25T21:56:44.523327+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:20+00:00","detail_url":"/events/69704"},"members":[{"id":69704,"cve_ids":["CVE-2026-101907"],"payload":{"kind":"advisory","title":"CGA-fmq3-p3j4-mr6h","summary":"CGA-fmq3-p3j4-mr6h","evidence":"osv:CGA-fmq3-p3j4-mr6h","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-fmq3-p3j4-mr6h","aliases":["CGA-fmq3-p3j4-mr6h"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fmq3-p3j4-mr6h.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:54Z"}]}}],"modified":"2026-10-02T17:16:32.078279862Z","provider":"osv","upstream":["CVE-2026-101907","GHSA-r4gj-5m52-g5wh"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101907.json","https://github.com/axios/axios/security/advisories/GHSA-r4gj-5m52-g5wh","https://nvd.nist.gov/vuln/detail/CVE-2026-101907","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101907","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:bb9fc894-2b07-4acf-aa6f-c7b185db0724","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101907","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101907","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101907","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-r4gj-5m52-g5wh","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fmq3-p3j4-mr6h","advisory_id":"bb9fc894-2b07-4acf-aa6f-c7b185db0724","event_types":["advisory"],"published_at":"2026-10-25T21:56:44.523327+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:20+00:00","detail_url":"/events/69704"}]}},{"id":69318,"cve_ids":["CVE-2026-101901"],"payload":{"kind":"advisory","title":"CGA-f9rc-64mv-6wh5","summary":"CGA-f9rc-64mv-6wh5","evidence":"osv:CGA-f9rc-64mv-6wh5","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-f9rc-64mv-6wh5","aliases":["CGA-f9rc-64mv-6wh5"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f9rc-64mv-6wh5.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:50Z"}]}}],"modified":"2026-10-02T17:16:31.486752422Z","provider":"osv","upstream":["CVE-2026-101901","GHSA-542g-h47m-68v8"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101901.json","https://github.com/axios/axios/security/advisories/GHSA-542g-h47m-68v8","https://nvd.nist.gov/vuln/detail/CVE-2026-101901","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101901","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c0696bc3-3840-4e4c-8523-b1e17522ed7c","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101901","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101901","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-542g-h47m-68v8","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f9rc-64mv-6wh5","advisory_id":"c0696bc3-3840-4e4c-8523-b1e17522ed7c","event_types":["advisory"],"published_at":"2026-10-25T21:56:25.470629+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:18+00:00","detail_url":"/advisories/advisory%3Ac0696bc3-3840-4e4c-8523-b1e17522ed7c","group":{"id":"advisory:c0696bc3-3840-4e4c-8523-b1e17522ed7c","revision":1,"primary_event_id":69688,"change":"published","superseded_by":[],"changed":{"id":69688,"cve_ids":["CVE-2026-101901"],"payload":{"kind":"advisory","title":"CGA-f9rc-64mv-6wh5","summary":"CGA-f9rc-64mv-6wh5","evidence":"osv:CGA-f9rc-64mv-6wh5","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-f9rc-64mv-6wh5","aliases":["CGA-f9rc-64mv-6wh5"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f9rc-64mv-6wh5.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:50Z"}]}}],"modified":"2026-10-02T17:16:31.486752422Z","provider":"osv","upstream":["CVE-2026-101901","GHSA-542g-h47m-68v8"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101901.json","https://github.com/axios/axios/security/advisories/GHSA-542g-h47m-68v8","https://nvd.nist.gov/vuln/detail/CVE-2026-101901","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101901","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c0696bc3-3840-4e4c-8523-b1e17522ed7c","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101901","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101901","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-542g-h47m-68v8","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f9rc-64mv-6wh5","advisory_id":"c0696bc3-3840-4e4c-8523-b1e17522ed7c","event_types":["advisory"],"published_at":"2026-10-25T21:56:25.470629+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:18+00:00","detail_url":"/events/69688"},"members":[{"id":69688,"cve_ids":["CVE-2026-101901"],"payload":{"kind":"advisory","title":"CGA-f9rc-64mv-6wh5","summary":"CGA-f9rc-64mv-6wh5","evidence":"osv:CGA-f9rc-64mv-6wh5","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-f9rc-64mv-6wh5","aliases":["CGA-f9rc-64mv-6wh5"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f9rc-64mv-6wh5.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:50Z"}]}}],"modified":"2026-10-02T17:16:31.486752422Z","provider":"osv","upstream":["CVE-2026-101901","GHSA-542g-h47m-68v8"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101901.json","https://github.com/axios/axios/security/advisories/GHSA-542g-h47m-68v8","https://nvd.nist.gov/vuln/detail/CVE-2026-101901","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101901","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c0696bc3-3840-4e4c-8523-b1e17522ed7c","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101901","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101901","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101901","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-542g-h47m-68v8","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f9rc-64mv-6wh5","advisory_id":"c0696bc3-3840-4e4c-8523-b1e17522ed7c","event_types":["advisory"],"published_at":"2026-10-25T21:56:25.470629+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:18+00:00","detail_url":"/events/69688"}]}},{"id":69312,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-f7mr-fvq2-227q","summary":"CGA-f7mr-fvq2-227q","evidence":"osv:CGA-f7mr-fvq2-227q","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-f7mr-fvq2-227q","aliases":["CGA-f7mr-fvq2-227q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f7mr-fvq2-227q.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:51Z"}]}}],"modified":"2026-10-02T17:16:31.284050890Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4c516203-c689-4f8e-991e-9ca1e02172a0","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f7mr-fvq2-227q","advisory_id":"4c516203-c689-4f8e-991e-9ca1e02172a0","event_types":["advisory"],"published_at":"2026-10-25T21:56:19.113403+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:17+00:00","detail_url":"/advisories/advisory%3A4c516203-c689-4f8e-991e-9ca1e02172a0","group":{"id":"advisory:4c516203-c689-4f8e-991e-9ca1e02172a0","revision":1,"primary_event_id":69682,"change":"published","superseded_by":[],"changed":{"id":69682,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-f7mr-fvq2-227q","summary":"CGA-f7mr-fvq2-227q","evidence":"osv:CGA-f7mr-fvq2-227q","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-f7mr-fvq2-227q","aliases":["CGA-f7mr-fvq2-227q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f7mr-fvq2-227q.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:51Z"}]}}],"modified":"2026-10-02T17:16:31.284050890Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4c516203-c689-4f8e-991e-9ca1e02172a0","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f7mr-fvq2-227q","advisory_id":"4c516203-c689-4f8e-991e-9ca1e02172a0","event_types":["advisory"],"published_at":"2026-10-25T21:56:19.113403+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:17+00:00","detail_url":"/events/69682"},"members":[{"id":69682,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-f7mr-fvq2-227q","summary":"CGA-f7mr-fvq2-227q","evidence":"osv:CGA-f7mr-fvq2-227q","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-f7mr-fvq2-227q","aliases":["CGA-f7mr-fvq2-227q"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f7mr-fvq2-227q.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:51Z"}]}}],"modified":"2026-10-02T17:16:31.284050890Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4c516203-c689-4f8e-991e-9ca1e02172a0","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f7mr-fvq2-227q","advisory_id":"4c516203-c689-4f8e-991e-9ca1e02172a0","event_types":["advisory"],"published_at":"2026-10-25T21:56:19.113403+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:17+00:00","detail_url":"/events/69682"}]}},{"id":69307,"cve_ids":["CVE-2026-101902"],"payload":{"kind":"advisory","title":"CGA-f5cp-ggr7-vv7c","summary":"CGA-f5cp-ggr7-vv7c","evidence":"osv:CGA-f5cp-ggr7-vv7c","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-f5cp-ggr7-vv7c","aliases":["CGA-f5cp-ggr7-vv7c"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f5cp-ggr7-vv7c.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:11Z"}]}}],"modified":"2026-10-02T17:16:31.058405114Z","provider":"osv","upstream":["CVE-2026-101902","GHSA-9fr6-4gfg-395g"],"references":["https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101902.json","https://github.com/axios/axios/security/advisories/GHSA-9fr6-4gfg-395g","https://nvd.nist.gov/vuln/detail/CVE-2026-101902","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101902","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:54ff4fec-2324-4dad-9a5a-8557c65be561","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101902","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101902","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f5cp-ggr7-vv7c","advisory_id":"54ff4fec-2324-4dad-9a5a-8557c65be561","event_types":["advisory"],"published_at":"2026-10-25T21:56:14.389365+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:13+00:00","detail_url":"/advisories/advisory%3A54ff4fec-2324-4dad-9a5a-8557c65be561","group":{"id":"advisory:54ff4fec-2324-4dad-9a5a-8557c65be561","revision":1,"primary_event_id":69677,"change":"published","superseded_by":[],"changed":{"id":69677,"cve_ids":["CVE-2026-101902"],"payload":{"kind":"advisory","title":"CGA-f5cp-ggr7-vv7c","summary":"CGA-f5cp-ggr7-vv7c","evidence":"osv:CGA-f5cp-ggr7-vv7c","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-f5cp-ggr7-vv7c","aliases":["CGA-f5cp-ggr7-vv7c"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f5cp-ggr7-vv7c.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:11Z"}]}}],"modified":"2026-10-02T17:16:31.058405114Z","provider":"osv","upstream":["CVE-2026-101902","GHSA-9fr6-4gfg-395g"],"references":["https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101902.json","https://github.com/axios/axios/security/advisories/GHSA-9fr6-4gfg-395g","https://nvd.nist.gov/vuln/detail/CVE-2026-101902","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101902","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:54ff4fec-2324-4dad-9a5a-8557c65be561","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101902","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101902","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f5cp-ggr7-vv7c","advisory_id":"54ff4fec-2324-4dad-9a5a-8557c65be561","event_types":["advisory"],"published_at":"2026-10-25T21:56:14.389365+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:13+00:00","detail_url":"/events/69677"},"members":[{"id":69677,"cve_ids":["CVE-2026-101902"],"payload":{"kind":"advisory","title":"CGA-f5cp-ggr7-vv7c","summary":"CGA-f5cp-ggr7-vv7c","evidence":"osv:CGA-f5cp-ggr7-vv7c","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-f5cp-ggr7-vv7c","aliases":["CGA-f5cp-ggr7-vv7c"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f5cp-ggr7-vv7c.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:11Z"}]}}],"modified":"2026-10-02T17:16:31.058405114Z","provider":"osv","upstream":["CVE-2026-101902","GHSA-9fr6-4gfg-395g"],"references":["https://github.com/axios/axios/releases/tag/v0.34.0","https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101902.json","https://github.com/axios/axios/security/advisories/GHSA-9fr6-4gfg-395g","https://nvd.nist.gov/vuln/detail/CVE-2026-101902","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101902","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:54ff4fec-2324-4dad-9a5a-8557c65be561","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101902","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101902","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f5cp-ggr7-vv7c","advisory_id":"54ff4fec-2324-4dad-9a5a-8557c65be561","event_types":["advisory"],"published_at":"2026-10-25T21:56:14.389365+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:13+00:00","detail_url":"/events/69677"}]}},{"id":68991,"cve_ids":["CVE-2026-101903"],"payload":{"kind":"advisory","title":"CGA-5qr5-rhrp-wxqf","summary":"CGA-5qr5-rhrp-wxqf","evidence":"osv:CGA-5qr5-rhrp-wxqf","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5qr5-rhrp-wxqf","aliases":["CGA-5qr5-rhrp-wxqf"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5qr5-rhrp-wxqf.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:50Z"}]}}],"modified":"2026-10-02T17:16:17.001779077Z","provider":"osv","upstream":["CVE-2026-101903","GHSA-c29m-xwm3-cm6r"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101903.json","https://github.com/axios/axios/security/advisories/GHSA-c29m-xwm3-cm6r","https://nvd.nist.gov/vuln/detail/CVE-2026-101903","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101903","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:bf55a1c6-36a8-48d8-98d4-3e1682982cf9","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101903","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101903","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-c29m-xwm3-cm6r","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5qr5-rhrp-wxqf","advisory_id":"bf55a1c6-36a8-48d8-98d4-3e1682982cf9","event_types":["advisory"],"published_at":"2026-10-25T21:50:17.569718+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:19+00:00","detail_url":"/advisories/advisory%3Abf55a1c6-36a8-48d8-98d4-3e1682982cf9","group":{"id":"advisory:bf55a1c6-36a8-48d8-98d4-3e1682982cf9","revision":1,"primary_event_id":69361,"change":"published","superseded_by":[],"changed":{"id":69361,"cve_ids":["CVE-2026-101903"],"payload":{"kind":"advisory","title":"CGA-5qr5-rhrp-wxqf","summary":"CGA-5qr5-rhrp-wxqf","evidence":"osv:CGA-5qr5-rhrp-wxqf","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5qr5-rhrp-wxqf","aliases":["CGA-5qr5-rhrp-wxqf"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5qr5-rhrp-wxqf.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:50Z"}]}}],"modified":"2026-10-02T17:16:17.001779077Z","provider":"osv","upstream":["CVE-2026-101903","GHSA-c29m-xwm3-cm6r"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101903.json","https://github.com/axios/axios/security/advisories/GHSA-c29m-xwm3-cm6r","https://nvd.nist.gov/vuln/detail/CVE-2026-101903","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101903","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:bf55a1c6-36a8-48d8-98d4-3e1682982cf9","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101903","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101903","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-c29m-xwm3-cm6r","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5qr5-rhrp-wxqf","advisory_id":"bf55a1c6-36a8-48d8-98d4-3e1682982cf9","event_types":["advisory"],"published_at":"2026-10-25T21:50:17.569718+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:19+00:00","detail_url":"/events/69361"},"members":[{"id":69361,"cve_ids":["CVE-2026-101903"],"payload":{"kind":"advisory","title":"CGA-5qr5-rhrp-wxqf","summary":"CGA-5qr5-rhrp-wxqf","evidence":"osv:CGA-5qr5-rhrp-wxqf","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5qr5-rhrp-wxqf","aliases":["CGA-5qr5-rhrp-wxqf"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5qr5-rhrp-wxqf.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:50Z"}]}}],"modified":"2026-10-02T17:16:17.001779077Z","provider":"osv","upstream":["CVE-2026-101903","GHSA-c29m-xwm3-cm6r"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101903.json","https://github.com/axios/axios/security/advisories/GHSA-c29m-xwm3-cm6r","https://nvd.nist.gov/vuln/detail/CVE-2026-101903","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101903","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:bf55a1c6-36a8-48d8-98d4-3e1682982cf9","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101903","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101903","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101903","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-c29m-xwm3-cm6r","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5qr5-rhrp-wxqf","advisory_id":"bf55a1c6-36a8-48d8-98d4-3e1682982cf9","event_types":["advisory"],"published_at":"2026-10-25T21:50:17.569718+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:19+00:00","detail_url":"/events/69361"}]}},{"id":68952,"cve_ids":["CVE-2026-101906"],"payload":{"kind":"advisory","title":"CGA-6239-jw49-c9c9","summary":"CGA-6239-jw49-c9c9","evidence":"osv:CGA-6239-jw49-c9c9","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-6239-jw49-c9c9","aliases":["CGA-6239-jw49-c9c9"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6239-jw49-c9c9.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:53Z"}]}}],"modified":"2026-10-02T17:16:07.247055095Z","provider":"osv","upstream":["CVE-2026-101906","GHSA-mghh-pgcx-3jjj"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101906.json","https://github.com/axios/axios/security/advisories/GHSA-mghh-pgcx-3jjj","https://nvd.nist.gov/vuln/detail/CVE-2026-101906","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101906","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b73fe04d-07b2-4417-9f6f-8242e1fd3e32","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101906","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101906","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-mghh-pgcx-3jjj","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6239-jw49-c9c9","advisory_id":"b73fe04d-07b2-4417-9f6f-8242e1fd3e32","event_types":["advisory"],"published_at":"2026-10-25T21:49:37.471769+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:19+00:00","detail_url":"/advisories/advisory%3Ab73fe04d-07b2-4417-9f6f-8242e1fd3e32","group":{"id":"advisory:b73fe04d-07b2-4417-9f6f-8242e1fd3e32","revision":1,"primary_event_id":69322,"change":"published","superseded_by":[],"changed":{"id":69322,"cve_ids":["CVE-2026-101906"],"payload":{"kind":"advisory","title":"CGA-6239-jw49-c9c9","summary":"CGA-6239-jw49-c9c9","evidence":"osv:CGA-6239-jw49-c9c9","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-6239-jw49-c9c9","aliases":["CGA-6239-jw49-c9c9"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6239-jw49-c9c9.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:53Z"}]}}],"modified":"2026-10-02T17:16:07.247055095Z","provider":"osv","upstream":["CVE-2026-101906","GHSA-mghh-pgcx-3jjj"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101906.json","https://github.com/axios/axios/security/advisories/GHSA-mghh-pgcx-3jjj","https://nvd.nist.gov/vuln/detail/CVE-2026-101906","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101906","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b73fe04d-07b2-4417-9f6f-8242e1fd3e32","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101906","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101906","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-mghh-pgcx-3jjj","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6239-jw49-c9c9","advisory_id":"b73fe04d-07b2-4417-9f6f-8242e1fd3e32","event_types":["advisory"],"published_at":"2026-10-25T21:49:37.471769+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:19+00:00","detail_url":"/events/69322"},"members":[{"id":69322,"cve_ids":["CVE-2026-101906"],"payload":{"kind":"advisory","title":"CGA-6239-jw49-c9c9","summary":"CGA-6239-jw49-c9c9","evidence":"osv:CGA-6239-jw49-c9c9","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-6239-jw49-c9c9","aliases":["CGA-6239-jw49-c9c9"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6239-jw49-c9c9.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:53Z"}]}}],"modified":"2026-10-02T17:16:07.247055095Z","provider":"osv","upstream":["CVE-2026-101906","GHSA-mghh-pgcx-3jjj"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101906.json","https://github.com/axios/axios/security/advisories/GHSA-mghh-pgcx-3jjj","https://nvd.nist.gov/vuln/detail/CVE-2026-101906","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101906","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b73fe04d-07b2-4417-9f6f-8242e1fd3e32","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101906","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101906","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-mghh-pgcx-3jjj","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6239-jw49-c9c9","advisory_id":"b73fe04d-07b2-4417-9f6f-8242e1fd3e32","event_types":["advisory"],"published_at":"2026-10-25T21:49:37.471769+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:19+00:00","detail_url":"/events/69322"}]}},{"id":68848,"cve_ids":["CVE-2026-101906"],"payload":{"kind":"advisory","title":"CGA-4fc4-qqfq-2g8m","summary":"CGA-4fc4-qqfq-2g8m","evidence":"osv:CGA-4fc4-qqfq-2g8m","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-4fc4-qqfq-2g8m","aliases":["CGA-4fc4-qqfq-2g8m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4fc4-qqfq-2g8m.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:07Z"}]}}],"modified":"2026-10-02T17:15:39.974126484Z","provider":"osv","upstream":["CVE-2026-101906","GHSA-mghh-pgcx-3jjj"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101906.json","https://github.com/axios/axios/security/advisories/GHSA-mghh-pgcx-3jjj","https://nvd.nist.gov/vuln/detail/CVE-2026-101906","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101906","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4a221740-3a07-4a38-a672-c6006ab35e01","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101906","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101906","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-mghh-pgcx-3jjj","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4fc4-qqfq-2g8m","advisory_id":"4a221740-3a07-4a38-a672-c6006ab35e01","event_types":["advisory"],"published_at":"2026-10-25T21:47:12.10901+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:15+00:00","detail_url":"/advisories/advisory%3A4a221740-3a07-4a38-a672-c6006ab35e01","group":{"id":"advisory:4a221740-3a07-4a38-a672-c6006ab35e01","revision":1,"primary_event_id":69218,"change":"published","superseded_by":[],"changed":{"id":69218,"cve_ids":["CVE-2026-101906"],"payload":{"kind":"advisory","title":"CGA-4fc4-qqfq-2g8m","summary":"CGA-4fc4-qqfq-2g8m","evidence":"osv:CGA-4fc4-qqfq-2g8m","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-4fc4-qqfq-2g8m","aliases":["CGA-4fc4-qqfq-2g8m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4fc4-qqfq-2g8m.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:07Z"}]}}],"modified":"2026-10-02T17:15:39.974126484Z","provider":"osv","upstream":["CVE-2026-101906","GHSA-mghh-pgcx-3jjj"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101906.json","https://github.com/axios/axios/security/advisories/GHSA-mghh-pgcx-3jjj","https://nvd.nist.gov/vuln/detail/CVE-2026-101906","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101906","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4a221740-3a07-4a38-a672-c6006ab35e01","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101906","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101906","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-mghh-pgcx-3jjj","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4fc4-qqfq-2g8m","advisory_id":"4a221740-3a07-4a38-a672-c6006ab35e01","event_types":["advisory"],"published_at":"2026-10-25T21:47:12.10901+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:15+00:00","detail_url":"/events/69218"},"members":[{"id":69218,"cve_ids":["CVE-2026-101906"],"payload":{"kind":"advisory","title":"CGA-4fc4-qqfq-2g8m","summary":"CGA-4fc4-qqfq-2g8m","evidence":"osv:CGA-4fc4-qqfq-2g8m","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-4fc4-qqfq-2g8m","aliases":["CGA-4fc4-qqfq-2g8m"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4fc4-qqfq-2g8m.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:07Z"}]}}],"modified":"2026-10-02T17:15:39.974126484Z","provider":"osv","upstream":["CVE-2026-101906","GHSA-mghh-pgcx-3jjj"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101906.json","https://github.com/axios/axios/security/advisories/GHSA-mghh-pgcx-3jjj","https://nvd.nist.gov/vuln/detail/CVE-2026-101906","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101906","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4a221740-3a07-4a38-a672-c6006ab35e01","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101906","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101906","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101906","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-mghh-pgcx-3jjj","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4fc4-qqfq-2g8m","advisory_id":"4a221740-3a07-4a38-a672-c6006ab35e01","event_types":["advisory"],"published_at":"2026-10-25T21:47:12.10901+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:15+00:00","detail_url":"/events/69218"}]}},{"id":68784,"cve_ids":["CVE-2026-101899"],"payload":{"kind":"advisory","title":"CGA-3fm7-r9qg-r3qc","summary":"CGA-3fm7-r9qg-r3qc","evidence":"osv:CGA-3fm7-r9qg-r3qc","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3fm7-r9qg-r3qc","aliases":["CGA-3fm7-r9qg-r3qc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3fm7-r9qg-r3qc.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:12Z"}]}}],"modified":"2026-10-02T17:15:22.389122094Z","provider":"osv","upstream":["CVE-2026-101899","GHSA-44g4-m2mj-wpvx"],"references":["https://github.com/axios/axios/security/advisories/GHSA-44g4-m2mj-wpvx","https://github.com/axios/axios/pull/11141","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios","https://github.com/axios/axios/releases/tag/v1.20.0"]},"related_cves":[{"value":"CVE-2026-101899","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:be50c8a5-a118-4a50-87e8-09082f3347c0","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101899","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101899","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3fm7-r9qg-r3qc","advisory_id":"be50c8a5-a118-4a50-87e8-09082f3347c0","event_types":["advisory"],"published_at":"2026-10-25T21:46:05.360702+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:12+00:00","detail_url":"/advisories/advisory%3Abe50c8a5-a118-4a50-87e8-09082f3347c0","group":{"id":"advisory:be50c8a5-a118-4a50-87e8-09082f3347c0","revision":1,"primary_event_id":69154,"change":"published","superseded_by":[],"changed":{"id":69154,"cve_ids":["CVE-2026-101899"],"payload":{"kind":"advisory","title":"CGA-3fm7-r9qg-r3qc","summary":"CGA-3fm7-r9qg-r3qc","evidence":"osv:CGA-3fm7-r9qg-r3qc","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3fm7-r9qg-r3qc","aliases":["CGA-3fm7-r9qg-r3qc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3fm7-r9qg-r3qc.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:12Z"}]}}],"modified":"2026-10-02T17:15:22.389122094Z","provider":"osv","upstream":["CVE-2026-101899","GHSA-44g4-m2mj-wpvx"],"references":["https://github.com/axios/axios/security/advisories/GHSA-44g4-m2mj-wpvx","https://github.com/axios/axios/pull/11141","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios","https://github.com/axios/axios/releases/tag/v1.20.0"]},"related_cves":[{"value":"CVE-2026-101899","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:be50c8a5-a118-4a50-87e8-09082f3347c0","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101899","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101899","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3fm7-r9qg-r3qc","advisory_id":"be50c8a5-a118-4a50-87e8-09082f3347c0","event_types":["advisory"],"published_at":"2026-10-25T21:46:05.360702+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:12+00:00","detail_url":"/events/69154"},"members":[{"id":69154,"cve_ids":["CVE-2026-101899"],"payload":{"kind":"advisory","title":"CGA-3fm7-r9qg-r3qc","summary":"CGA-3fm7-r9qg-r3qc","evidence":"osv:CGA-3fm7-r9qg-r3qc","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3fm7-r9qg-r3qc","aliases":["CGA-3fm7-r9qg-r3qc"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3fm7-r9qg-r3qc.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:12Z"}]}}],"modified":"2026-10-02T17:15:22.389122094Z","provider":"osv","upstream":["CVE-2026-101899","GHSA-44g4-m2mj-wpvx"],"references":["https://github.com/axios/axios/security/advisories/GHSA-44g4-m2mj-wpvx","https://github.com/axios/axios/pull/11141","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios","https://github.com/axios/axios/releases/tag/v1.20.0"]},"related_cves":[{"value":"CVE-2026-101899","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:be50c8a5-a118-4a50-87e8-09082f3347c0","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101899","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101899","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3fm7-r9qg-r3qc","advisory_id":"be50c8a5-a118-4a50-87e8-09082f3347c0","event_types":["advisory"],"published_at":"2026-10-25T21:46:05.360702+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:12+00:00","detail_url":"/events/69154"}]}},{"id":68764,"cve_ids":["CVE-2026-101899"],"payload":{"kind":"advisory","title":"CGA-32j8-jrp5-49f3","summary":"CGA-32j8-jrp5-49f3","evidence":"osv:CGA-32j8-jrp5-49f3","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-32j8-jrp5-49f3","aliases":["CGA-32j8-jrp5-49f3"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-32j8-jrp5-49f3.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:51Z"}]}}],"modified":"2026-10-02T17:15:18.201303267Z","provider":"osv","upstream":["CVE-2026-101899","GHSA-44g4-m2mj-wpvx"],"references":["https://github.com/axios/axios/security/advisories/GHSA-44g4-m2mj-wpvx","https://github.com/axios/axios/pull/11141","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios","https://github.com/axios/axios/releases/tag/v1.20.0"]},"related_cves":[{"value":"CVE-2026-101899","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:64d64196-e815-44b4-bc3a-74816eb21582","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101899","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101899","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-32j8-jrp5-49f3","advisory_id":"64d64196-e815-44b4-bc3a-74816eb21582","event_types":["advisory"],"published_at":"2026-10-25T21:45:48.13329+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:17+00:00","detail_url":"/advisories/advisory%3A64d64196-e815-44b4-bc3a-74816eb21582","group":{"id":"advisory:64d64196-e815-44b4-bc3a-74816eb21582","revision":1,"primary_event_id":69134,"change":"published","superseded_by":[],"changed":{"id":69134,"cve_ids":["CVE-2026-101899"],"payload":{"kind":"advisory","title":"CGA-32j8-jrp5-49f3","summary":"CGA-32j8-jrp5-49f3","evidence":"osv:CGA-32j8-jrp5-49f3","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-32j8-jrp5-49f3","aliases":["CGA-32j8-jrp5-49f3"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-32j8-jrp5-49f3.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:51Z"}]}}],"modified":"2026-10-02T17:15:18.201303267Z","provider":"osv","upstream":["CVE-2026-101899","GHSA-44g4-m2mj-wpvx"],"references":["https://github.com/axios/axios/security/advisories/GHSA-44g4-m2mj-wpvx","https://github.com/axios/axios/pull/11141","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios","https://github.com/axios/axios/releases/tag/v1.20.0"]},"related_cves":[{"value":"CVE-2026-101899","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:64d64196-e815-44b4-bc3a-74816eb21582","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101899","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101899","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-32j8-jrp5-49f3","advisory_id":"64d64196-e815-44b4-bc3a-74816eb21582","event_types":["advisory"],"published_at":"2026-10-25T21:45:48.13329+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:17+00:00","detail_url":"/events/69134"},"members":[{"id":69134,"cve_ids":["CVE-2026-101899"],"payload":{"kind":"advisory","title":"CGA-32j8-jrp5-49f3","summary":"CGA-32j8-jrp5-49f3","evidence":"osv:CGA-32j8-jrp5-49f3","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-32j8-jrp5-49f3","aliases":["CGA-32j8-jrp5-49f3"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-32j8-jrp5-49f3.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:51Z"}]}}],"modified":"2026-10-02T17:15:18.201303267Z","provider":"osv","upstream":["CVE-2026-101899","GHSA-44g4-m2mj-wpvx"],"references":["https://github.com/axios/axios/security/advisories/GHSA-44g4-m2mj-wpvx","https://github.com/axios/axios/pull/11141","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios","https://github.com/axios/axios/releases/tag/v1.20.0"]},"related_cves":[{"value":"CVE-2026-101899","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:64d64196-e815-44b4-bc3a-74816eb21582","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101899","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101899","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-32j8-jrp5-49f3","advisory_id":"64d64196-e815-44b4-bc3a-74816eb21582","event_types":["advisory"],"published_at":"2026-10-25T21:45:48.13329+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:17+00:00","detail_url":"/events/69134"}]}},{"id":68747,"cve_ids":["CVE-2026-101904"],"payload":{"kind":"advisory","title":"CGA-2chh-mf87-hm2f","summary":"CGA-2chh-mf87-hm2f","evidence":"osv:CGA-2chh-mf87-hm2f","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-2chh-mf87-hm2f","aliases":["CGA-2chh-mf87-hm2f"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2chh-mf87-hm2f.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:52Z"}]}}],"modified":"2026-10-02T17:15:14.986640038Z","provider":"osv","upstream":["CVE-2026-101904","GHSA-j8rh-479h-cp32"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101904.json","https://github.com/axios/axios/security/advisories/GHSA-j8rh-479h-cp32","https://nvd.nist.gov/vuln/detail/CVE-2026-101904","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101904","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5e2d9cea-c4c8-4ed7-89e6-23e6ae644c19","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101904","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101904","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2chh-mf87-hm2f","advisory_id":"5e2d9cea-c4c8-4ed7-89e6-23e6ae644c19","event_types":["advisory"],"published_at":"2026-10-25T21:45:30.58253+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:19+00:00","detail_url":"/advisories/advisory%3A5e2d9cea-c4c8-4ed7-89e6-23e6ae644c19","group":{"id":"advisory:5e2d9cea-c4c8-4ed7-89e6-23e6ae644c19","revision":1,"primary_event_id":69117,"change":"published","superseded_by":[],"changed":{"id":69117,"cve_ids":["CVE-2026-101904"],"payload":{"kind":"advisory","title":"CGA-2chh-mf87-hm2f","summary":"CGA-2chh-mf87-hm2f","evidence":"osv:CGA-2chh-mf87-hm2f","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-2chh-mf87-hm2f","aliases":["CGA-2chh-mf87-hm2f"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2chh-mf87-hm2f.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:52Z"}]}}],"modified":"2026-10-02T17:15:14.986640038Z","provider":"osv","upstream":["CVE-2026-101904","GHSA-j8rh-479h-cp32"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101904.json","https://github.com/axios/axios/security/advisories/GHSA-j8rh-479h-cp32","https://nvd.nist.gov/vuln/detail/CVE-2026-101904","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101904","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5e2d9cea-c4c8-4ed7-89e6-23e6ae644c19","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101904","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101904","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2chh-mf87-hm2f","advisory_id":"5e2d9cea-c4c8-4ed7-89e6-23e6ae644c19","event_types":["advisory"],"published_at":"2026-10-25T21:45:30.58253+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:19+00:00","detail_url":"/events/69117"},"members":[{"id":69117,"cve_ids":["CVE-2026-101904"],"payload":{"kind":"advisory","title":"CGA-2chh-mf87-hm2f","summary":"CGA-2chh-mf87-hm2f","evidence":"osv:CGA-2chh-mf87-hm2f","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-2chh-mf87-hm2f","aliases":["CGA-2chh-mf87-hm2f"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2chh-mf87-hm2f.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:52Z"}]}}],"modified":"2026-10-02T17:15:14.986640038Z","provider":"osv","upstream":["CVE-2026-101904","GHSA-j8rh-479h-cp32"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101904.json","https://github.com/axios/axios/security/advisories/GHSA-j8rh-479h-cp32","https://nvd.nist.gov/vuln/detail/CVE-2026-101904","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101904","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5e2d9cea-c4c8-4ed7-89e6-23e6ae644c19","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101904","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101904","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2chh-mf87-hm2f","advisory_id":"5e2d9cea-c4c8-4ed7-89e6-23e6ae644c19","event_types":["advisory"],"published_at":"2026-10-25T21:45:30.58253+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:19+00:00","detail_url":"/events/69117"}]}},{"id":68737,"cve_ids":["CVE-2026-101908"],"payload":{"kind":"advisory","title":"CGA-97rm-47m7-j964","summary":"CGA-97rm-47m7-j964","evidence":"osv:CGA-97rm-47m7-j964","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-97rm-47m7-j964","aliases":["CGA-97rm-47m7-j964"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-97rm-47m7-j964.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:51Z"}]}}],"modified":"2026-10-02T17:15:13.121828599Z","provider":"osv","upstream":["CVE-2026-101908","GHSA-vh66-26gq-q6x8"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101908.json","https://github.com/axios/axios/security/advisories/GHSA-vh66-26gq-q6x8","https://nvd.nist.gov/vuln/detail/CVE-2026-101908","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101908","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8f0e2be7-5e6e-4304-876e-45df1ba933c2","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101908","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101908","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-97rm-47m7-j964","advisory_id":"8f0e2be7-5e6e-4304-876e-45df1ba933c2","event_types":["advisory"],"published_at":"2026-10-25T21:45:20.337564+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:20+00:00","detail_url":"/advisories/advisory%3A8f0e2be7-5e6e-4304-876e-45df1ba933c2","group":{"id":"advisory:8f0e2be7-5e6e-4304-876e-45df1ba933c2","revision":1,"primary_event_id":69107,"change":"published","superseded_by":[],"changed":{"id":69107,"cve_ids":["CVE-2026-101908"],"payload":{"kind":"advisory","title":"CGA-97rm-47m7-j964","summary":"CGA-97rm-47m7-j964","evidence":"osv:CGA-97rm-47m7-j964","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-97rm-47m7-j964","aliases":["CGA-97rm-47m7-j964"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-97rm-47m7-j964.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:51Z"}]}}],"modified":"2026-10-02T17:15:13.121828599Z","provider":"osv","upstream":["CVE-2026-101908","GHSA-vh66-26gq-q6x8"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101908.json","https://github.com/axios/axios/security/advisories/GHSA-vh66-26gq-q6x8","https://nvd.nist.gov/vuln/detail/CVE-2026-101908","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101908","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8f0e2be7-5e6e-4304-876e-45df1ba933c2","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101908","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101908","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-97rm-47m7-j964","advisory_id":"8f0e2be7-5e6e-4304-876e-45df1ba933c2","event_types":["advisory"],"published_at":"2026-10-25T21:45:20.337564+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:20+00:00","detail_url":"/events/69107"},"members":[{"id":69107,"cve_ids":["CVE-2026-101908"],"payload":{"kind":"advisory","title":"CGA-97rm-47m7-j964","summary":"CGA-97rm-47m7-j964","evidence":"osv:CGA-97rm-47m7-j964","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-97rm-47m7-j964","aliases":["CGA-97rm-47m7-j964"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-97rm-47m7-j964.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T12:01:51Z"}]}}],"modified":"2026-10-02T17:15:13.121828599Z","provider":"osv","upstream":["CVE-2026-101908","GHSA-vh66-26gq-q6x8"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101908.json","https://github.com/axios/axios/security/advisories/GHSA-vh66-26gq-q6x8","https://nvd.nist.gov/vuln/detail/CVE-2026-101908","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101908","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8f0e2be7-5e6e-4304-876e-45df1ba933c2","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-101908","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101908","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-97rm-47m7-j964","advisory_id":"8f0e2be7-5e6e-4304-876e-45df1ba933c2","event_types":["advisory"],"published_at":"2026-10-25T21:45:20.337564+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:00:20+00:00","detail_url":"/events/69107"}]}},{"id":68736,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-88r9-mpvc-cf5p","summary":"CGA-88r9-mpvc-cf5p","evidence":"osv:CGA-88r9-mpvc-cf5p","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-88r9-mpvc-cf5p","aliases":["CGA-88r9-mpvc-cf5p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-88r9-mpvc-cf5p.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:10Z"}]}}],"modified":"2026-10-02T17:15:12.529989863Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ae26186c-2da6-4423-aa73-def7d1f0a082","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-88r9-mpvc-cf5p","advisory_id":"ae26186c-2da6-4423-aa73-def7d1f0a082","event_types":["advisory"],"published_at":"2026-10-25T21:45:19.358242+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:11+00:00","detail_url":"/advisories/advisory%3Aae26186c-2da6-4423-aa73-def7d1f0a082","group":{"id":"advisory:ae26186c-2da6-4423-aa73-def7d1f0a082","revision":1,"primary_event_id":69106,"change":"published","superseded_by":[],"changed":{"id":69106,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-88r9-mpvc-cf5p","summary":"CGA-88r9-mpvc-cf5p","evidence":"osv:CGA-88r9-mpvc-cf5p","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-88r9-mpvc-cf5p","aliases":["CGA-88r9-mpvc-cf5p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-88r9-mpvc-cf5p.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:10Z"}]}}],"modified":"2026-10-02T17:15:12.529989863Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ae26186c-2da6-4423-aa73-def7d1f0a082","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-88r9-mpvc-cf5p","advisory_id":"ae26186c-2da6-4423-aa73-def7d1f0a082","event_types":["advisory"],"published_at":"2026-10-25T21:45:19.358242+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:11+00:00","detail_url":"/events/69106"},"members":[{"id":69106,"cve_ids":["CVE-2026-101898"],"payload":{"kind":"advisory","title":"CGA-88r9-mpvc-cf5p","summary":"CGA-88r9-mpvc-cf5p","evidence":"osv:CGA-88r9-mpvc-cf5p","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-88r9-mpvc-cf5p","aliases":["CGA-88r9-mpvc-cf5p"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r3"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-88r9-mpvc-cf5p.json"},"ecosystem_specific":{"components":[{"component_name":"axios","component_purl":"pkg:npm/axios@1.18.0","component_type":"npm","component_version":"1.18.0","component_location":"/usr/share/wazuh-dashboard/node_modules/axios/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T10:17:10Z"}]}}],"modified":"2026-10-02T17:15:12.529989863Z","provider":"osv","upstream":["CVE-2026-101898","GHSA-3pq3-5fj3-cg6v"],"references":["https://github.com/axios/axios/releases/tag/v1.20.0","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101898.json","https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v","https://nvd.nist.gov/vuln/detail/CVE-2026-101898","https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","https://github.com/axios/axios/pull/11141"]},"related_cves":[{"value":"CVE-2026-101898","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ae26186c-2da6-4423-aa73-def7d1f0a082","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-101898","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}}],"products":[{"name":{"value":"axios","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101898","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"},{"cve":"CVE-2026-101898","metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N"}],"products":[{"name":{"value":"axios","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.20.0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-3pq3-5fj3-cg6v","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-88r9-mpvc-cf5p","advisory_id":"ae26186c-2da6-4423-aa73-def7d1f0a082","event_types":["advisory"],"published_at":"2026-10-25T21:45:19.358242+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T10:17:11+00:00","detail_url":"/events/69106"}]}},{"id":63144,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-jrjj-2w99-vxj8","summary":"CGA-jrjj-2w99-vxj8","evidence":"osv:CGA-jrjj-2w99-vxj8","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-jrjj-2w99-vxj8","aliases":["CGA-jrjj-2w99-vxj8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r2"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jrjj-2w99-vxj8.json"},"ecosystem_specific":{"components":[{"component_name":"brace-expansion","component_purl":"pkg:npm/brace-expansion@1.1.18","component_type":"npm","component_version":"1.1.18","component_location":"/usr/share/wazuh-dashboard/node_modules/brace-expansion/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T12:00:16Z"}]}}],"modified":"2026-10-01T16:33:13.740385949Z","provider":"osv","references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102278.json","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7","https://nvd.nist.gov/vuln/detail/CVE-2026-102278","https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b","https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c","https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5e5c6f29-9e0f-445e-baa4-02a1b445ad08","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jrjj-2w99-vxj8","advisory_id":"5e5c6f29-9e0f-445e-baa4-02a1b445ad08","event_types":["advisory"],"published_at":"2026-10-25T19:18:20.262431+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-30T09:37:13+00:00","detail_url":"/advisories/advisory%3A5e5c6f29-9e0f-445e-baa4-02a1b445ad08","group":{"id":"advisory:5e5c6f29-9e0f-445e-baa4-02a1b445ad08","revision":1,"primary_event_id":62377,"change":"published","superseded_by":[],"changed":{"id":62377,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-jrjj-2w99-vxj8","summary":"CGA-jrjj-2w99-vxj8","evidence":"osv:CGA-jrjj-2w99-vxj8","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-jrjj-2w99-vxj8","aliases":["CGA-jrjj-2w99-vxj8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r2"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jrjj-2w99-vxj8.json"},"ecosystem_specific":{"components":[{"component_name":"brace-expansion","component_purl":"pkg:npm/brace-expansion@1.1.18","component_type":"npm","component_version":"1.1.18","component_location":"/usr/share/wazuh-dashboard/node_modules/brace-expansion/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T12:00:16Z"}]}}],"modified":"2026-10-01T16:33:13.740385949Z","provider":"osv","references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102278.json","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7","https://nvd.nist.gov/vuln/detail/CVE-2026-102278","https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b","https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c","https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5e5c6f29-9e0f-445e-baa4-02a1b445ad08","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jrjj-2w99-vxj8","advisory_id":"5e5c6f29-9e0f-445e-baa4-02a1b445ad08","event_types":["advisory"],"published_at":"2026-10-25T19:18:20.262431+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-30T09:37:13+00:00","detail_url":"/events/62377"},"members":[{"id":62377,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-jrjj-2w99-vxj8","summary":"CGA-jrjj-2w99-vxj8","evidence":"osv:CGA-jrjj-2w99-vxj8","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-jrjj-2w99-vxj8","aliases":["CGA-jrjj-2w99-vxj8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r2"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jrjj-2w99-vxj8.json"},"ecosystem_specific":{"components":[{"component_name":"brace-expansion","component_purl":"pkg:npm/brace-expansion@1.1.18","component_type":"npm","component_version":"1.1.18","component_location":"/usr/share/wazuh-dashboard/node_modules/brace-expansion/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T12:00:16Z"}]}}],"modified":"2026-10-01T16:33:13.740385949Z","provider":"osv","references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102278.json","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7","https://nvd.nist.gov/vuln/detail/CVE-2026-102278","https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b","https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c","https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5e5c6f29-9e0f-445e-baa4-02a1b445ad08","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jrjj-2w99-vxj8","advisory_id":"5e5c6f29-9e0f-445e-baa4-02a1b445ad08","event_types":["advisory"],"published_at":"2026-10-25T19:18:20.262431+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-30T09:37:13+00:00","detail_url":"/events/62377"}]}},{"id":63048,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-v79g-w3gp-jh5w","summary":"CGA-v79g-w3gp-jh5w","evidence":"osv:CGA-v79g-w3gp-jh5w","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-v79g-w3gp-jh5w","aliases":["CGA-v79g-w3gp-jh5w"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r2"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v79g-w3gp-jh5w.json"},"ecosystem_specific":{"components":[{"component_name":"brace-expansion","component_purl":"pkg:npm/brace-expansion@1.1.18","component_type":"npm","component_version":"1.1.18","component_location":"/usr/share/wazuh-dashboard/node_modules/brace-expansion/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T10:17:10Z"}]}}],"modified":"2026-10-01T16:33:10.162483Z","provider":"osv","references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102278.json","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7","https://nvd.nist.gov/vuln/detail/CVE-2026-102278","https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b","https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c","https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d2b11147-57e5-42ab-8a4d-a5405043ca5f","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v79g-w3gp-jh5w","advisory_id":"d2b11147-57e5-42ab-8a4d-a5405043ca5f","event_types":["advisory"],"published_at":"2026-10-25T19:16:15.719247+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-30T12:02:34+00:00","detail_url":"/advisories/advisory%3Ad2b11147-57e5-42ab-8a4d-a5405043ca5f","group":{"id":"advisory:d2b11147-57e5-42ab-8a4d-a5405043ca5f","revision":1,"primary_event_id":62281,"change":"published","superseded_by":[],"changed":{"id":62281,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-v79g-w3gp-jh5w","summary":"CGA-v79g-w3gp-jh5w","evidence":"osv:CGA-v79g-w3gp-jh5w","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-v79g-w3gp-jh5w","aliases":["CGA-v79g-w3gp-jh5w"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r2"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v79g-w3gp-jh5w.json"},"ecosystem_specific":{"components":[{"component_name":"brace-expansion","component_purl":"pkg:npm/brace-expansion@1.1.18","component_type":"npm","component_version":"1.1.18","component_location":"/usr/share/wazuh-dashboard/node_modules/brace-expansion/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T10:17:10Z"}]}}],"modified":"2026-10-01T16:33:10.162483Z","provider":"osv","references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102278.json","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7","https://nvd.nist.gov/vuln/detail/CVE-2026-102278","https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b","https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c","https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d2b11147-57e5-42ab-8a4d-a5405043ca5f","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v79g-w3gp-jh5w","advisory_id":"d2b11147-57e5-42ab-8a4d-a5405043ca5f","event_types":["advisory"],"published_at":"2026-10-25T19:16:15.719247+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-30T12:02:34+00:00","detail_url":"/events/62281"},"members":[{"id":62281,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-v79g-w3gp-jh5w","summary":"CGA-v79g-w3gp-jh5w","evidence":"osv:CGA-v79g-w3gp-jh5w","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-v79g-w3gp-jh5w","aliases":["CGA-v79g-w3gp-jh5w"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r2"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v79g-w3gp-jh5w.json"},"ecosystem_specific":{"components":[{"component_name":"brace-expansion","component_purl":"pkg:npm/brace-expansion@1.1.18","component_type":"npm","component_version":"1.1.18","component_location":"/usr/share/wazuh-dashboard/node_modules/brace-expansion/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T10:17:10Z"}]}}],"modified":"2026-10-01T16:33:10.162483Z","provider":"osv","references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102278.json","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7","https://nvd.nist.gov/vuln/detail/CVE-2026-102278","https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b","https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c","https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d2b11147-57e5-42ab-8a4d-a5405043ca5f","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v79g-w3gp-jh5w","advisory_id":"d2b11147-57e5-42ab-8a4d-a5405043ca5f","event_types":["advisory"],"published_at":"2026-10-25T19:16:15.719247+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-30T12:02:34+00:00","detail_url":"/events/62281"}]}},{"id":63033,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-vx4q-w246-pr85","summary":"CGA-vx4q-w246-pr85","evidence":"osv:CGA-vx4q-w246-pr85","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-vx4q-w246-pr85","aliases":["CGA-vx4q-w246-pr85"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r2"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vx4q-w246-pr85.json"},"ecosystem_specific":{"components":[{"component_name":"brace-expansion","component_purl":"pkg:npm/brace-expansion@1.1.18","component_type":"npm","component_version":"1.1.18","component_location":"/usr/share/wazuh-dashboard/node_modules/brace-expansion/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T12:00:16Z"}]}}],"modified":"2026-10-01T16:33:09.044631650Z","provider":"osv","references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102276.json","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p","https://nvd.nist.gov/vuln/detail/CVE-2026-102276","https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc","https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c","https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc","https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ef453c81-fccf-4af2-ad49-b0bd3ff2f11e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vx4q-w246-pr85","advisory_id":"ef453c81-fccf-4af2-ad49-b0bd3ff2f11e","event_types":["advisory"],"published_at":"2026-10-25T19:16:06.55514+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-30T09:37:12+00:00","detail_url":"/advisories/advisory%3Aef453c81-fccf-4af2-ad49-b0bd3ff2f11e","group":{"id":"advisory:ef453c81-fccf-4af2-ad49-b0bd3ff2f11e","revision":1,"primary_event_id":62268,"change":"published","superseded_by":[],"changed":{"id":62268,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-vx4q-w246-pr85","summary":"CGA-vx4q-w246-pr85","evidence":"osv:CGA-vx4q-w246-pr85","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-vx4q-w246-pr85","aliases":["CGA-vx4q-w246-pr85"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r2"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vx4q-w246-pr85.json"},"ecosystem_specific":{"components":[{"component_name":"brace-expansion","component_purl":"pkg:npm/brace-expansion@1.1.18","component_type":"npm","component_version":"1.1.18","component_location":"/usr/share/wazuh-dashboard/node_modules/brace-expansion/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T12:00:16Z"}]}}],"modified":"2026-10-01T16:33:09.044631650Z","provider":"osv","references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102276.json","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p","https://nvd.nist.gov/vuln/detail/CVE-2026-102276","https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc","https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c","https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc","https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ef453c81-fccf-4af2-ad49-b0bd3ff2f11e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vx4q-w246-pr85","advisory_id":"ef453c81-fccf-4af2-ad49-b0bd3ff2f11e","event_types":["advisory"],"published_at":"2026-10-25T19:16:06.55514+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-30T09:37:12+00:00","detail_url":"/events/62268"},"members":[{"id":62268,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-vx4q-w246-pr85","summary":"CGA-vx4q-w246-pr85","evidence":"osv:CGA-vx4q-w246-pr85","products":[{"name":{"value":"wazuh-dashboard","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.14.8-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-vx4q-w246-pr85","aliases":["CGA-vx4q-w246-pr85"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.8-r2"}]}],"package":{"name":"wazuh-dashboard","purl":"pkg:apk/chainguard/wazuh-dashboard?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vx4q-w246-pr85.json"},"ecosystem_specific":{"components":[{"component_name":"brace-expansion","component_purl":"pkg:npm/brace-expansion@1.1.18","component_type":"npm","component_version":"1.1.18","component_location":"/usr/share/wazuh-dashboard/node_modules/brace-expansion/package.json","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T12:00:16Z"}]}}],"modified":"2026-10-01T16:33:09.044631650Z","provider":"osv","references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102276.json","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p","https://nvd.nist.gov/vuln/detail/CVE-2026-102276","https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc","https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c","https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc","https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ef453c81-fccf-4af2-ad49-b0bd3ff2f11e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vx4q-w246-pr85","advisory_id":"ef453c81-fccf-4af2-ad49-b0bd3ff2f11e","event_types":["advisory"],"published_at":"2026-10-25T19:16:06.55514+00:00","technologies":["core-osv","wazuh-dashboard"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-30T09:37:12+00:00","detail_url":"/events/62268"}]}}],"next_after":73965,"next_before":63033}