{
  "SchemaVersion": 2,
  "Trivy": {
    "Version": "0.70.0"
  },
  "ReportID": "01a1b919-89d3-73b3-956c-be95cfff96ac",
  "CreatedAt": "2026-11-08T04:00:21.075244628+01:00",
  "ArtifactID": "sha256:b3c4f01d294a8b8e453f73d651743058305c079d3edec638cbc42740802d4038",
  "ArtifactName": "baptistearno/typebot-viewer:latest",
  "ArtifactType": "container_image",
  "Metadata": {
    "Size": 341439488,
    "OS": {
      "Family": "debian",
      "Name": "12.15"
    },
    "ImageID": "sha256:1bd1205764960a23dae85e8d33b468c2072e622beb391d390c32d5254eb468d0",
    "DiffIDs": [
      "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7",
      "sha256:91329da0c497f409b176173a5c4702c9fd79d88e677ec0ada4a0d07f6a001eb1",
      "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65",
      "sha256:992664ed29448f28bcd1ca52f64e3d6e28894cc53078f8ed765ecc82e837b4e1",
      "sha256:48d457b4d425826a81482c431354f54f6aad16b9e333a83ae7b0e6134e625243",
      "sha256:e2dee3fc233f0f0b260b1ff7b599106e4b770679efa2cf256598e400160aa3ed",
      "sha256:b4c82362e91db26df821a57bd72fe538acae9578dd5b2357d83788d39dc539e9",
      "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471",
      "sha256:a33f149bdca7054231c959ff65e928eb3dac00e6c46379139a702575b6881fb0",
      "sha256:9df1f07671ff0a180d37163e801ea3c4a11b7d6c393fc7632ccb6cf4d4413e47",
      "sha256:22c300853e0b2357d534de838629aa8a04c1980e2e0a342e6b9c9b5a931e96f9",
      "sha256:8142a1232ae37c75ebf4bd045d57f1e2b8ab6c03c246880d3278be6dc8241eb3",
      "sha256:1b5404133fc39d938f3ef517aee3e01617176021cc56c8dfe06ce86dacc7de2e"
    ],
    "RepoTags": [
      "baptistearno/typebot-viewer:latest"
    ],
    "RepoDigests": [
      "baptistearno/typebot-viewer@sha256:1fba8b9a165c196af09c652e44feef01f6948204261d956cf7b545b2acd24425"
    ],
    "Reference": "baptistearno/typebot-viewer:latest",
    "ImageConfig": {
      "architecture": "amd64",
      "created": "2026-10-20T09:07:37.474022453Z",
      "history": [
        {
          "created": "2026-10-05T00:00:00Z",
          "created_by": "# debian.sh --arch 'amd64' out/ 'bookworm' '@1791158400'",
          "comment": "debuerreotype 0.17"
        },
        {
          "created": "2026-10-14T18:29:33Z",
          "created_by": "RUN /bin/sh -c groupadd --gid 1000 node   \u0026\u0026 useradd --uid 1000 --gid node --shell /bin/bash --create-home node # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-14T18:29:52Z",
          "created_by": "ENV NODE_VERSION=24.22.0",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-14T18:29:52Z",
          "created_by": "RUN /bin/sh -c ARCH= OPENSSL_ARCH= \u0026\u0026 dpkgArch=\"$(dpkg --print-architecture)\"     \u0026\u0026 case \"${dpkgArch##*-}\" in       amd64) ARCH='x64' OPENSSL_ARCH='linux-x86_64';;       ppc64el) ARCH='ppc64le' OPENSSL_ARCH='linux-ppc64le';;       arm64) ARCH='arm64' OPENSSL_ARCH='linux-aarch64';;       *) echo \"unsupported architecture\"; exit 1 ;;     esac     \u0026\u0026 set -ex     \u0026\u0026 apt-get update \u0026\u0026 apt-get install -y ca-certificates curl wget gnupg dirmngr xz-utils libatomic1 --no-install-recommends     \u0026\u0026 rm -rf /var/lib/apt/lists/*     \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\"     \u0026\u0026 for key in       5BE8A3F6C8A5C01D106C0AD820B1A390B168D356       DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7       CC68F5A3106FF448322E48ED27F5E38D5B0A215F       890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4       C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C       108F52B48DB57BB0CC439B2997B01419BD92F80A       655F3B5C1FB3FA8D1A0CA6BDE4A7D232B936D2FD       A363A499291CBBC940DD62E41F10027AF002F8B0     ; do       { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" \u0026\u0026 gpg --batch --fingerprint \"$key\"; } ||       { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" \u0026\u0026 gpg --batch --fingerprint \"$key\"; } ;     done     \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH.tar.xz\"     \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\"     \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc     \u0026\u0026 gpgconf --kill all     \u0026\u0026 rm -rf \"$GNUPGHOME\"     \u0026\u0026 grep \" node-v$NODE_VERSION-linux-$ARCH.tar.xz\\$\" SHASUMS256.txt | sha256sum -c -     \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner     \u0026\u0026 rm \"node-v$NODE_VERSION-linux-$ARCH.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt     \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\;     \u0026\u0026 apt-mark auto '.*' \u003e /dev/null     \u0026\u0026 find /usr/local -type f -executable -exec ldd '{}' ';'       | awk '/=\u003e/ { so = $(NF-1); if (index(so, \"/usr/local/\") == 1) { next }; gsub(\"^/(usr/)?\", \"\", so); print so }'       | sort -u       | xargs -r dpkg-query --search       | cut -d: -f1       | sort -u       | xargs -r apt-mark manual     \u0026\u0026 apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false     \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs     \u0026\u0026 node --version     \u0026\u0026 npm --version     \u0026\u0026 rm -rf /tmp/* # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-14T18:29:52Z",
          "created_by": "ENV YARN_VERSION=1.22.22",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-14T18:30:05Z",
          "created_by": "RUN /bin/sh -c set -ex   \u0026\u0026 savedAptMark=\"$(apt-mark showmanual)\"   \u0026\u0026 apt-get update \u0026\u0026 apt-get install -y ca-certificates curl wget gnupg dirmngr --no-install-recommends   \u0026\u0026 rm -rf /var/lib/apt/lists/*   \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\"   \u0026\u0026 for key in     6A010C5166006599AA17F08146C2130DFD2497F5   ; do     { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" \u0026\u0026 gpg --batch --fingerprint \"$key\"; } ||     { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" \u0026\u0026 gpg --batch --fingerprint \"$key\"; } ;   done   \u0026\u0026 curl -fsSLO --compressed \"https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz\"   \u0026\u0026 curl -fsSLO --compressed \"https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz.asc\"   \u0026\u0026 gpg --batch --verify yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz   \u0026\u0026 gpgconf --kill all   \u0026\u0026 rm -rf \"$GNUPGHOME\"   \u0026\u0026 mkdir -p /opt   \u0026\u0026 tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/   \u0026\u0026 ln -s /opt/yarn-v$YARN_VERSION/bin/yarn /usr/local/bin/yarn   \u0026\u0026 ln -s /opt/yarn-v$YARN_VERSION/bin/yarnpkg /usr/local/bin/yarnpkg   \u0026\u0026 rm yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz   \u0026\u0026 apt-mark auto '.*' \u003e /dev/null   \u0026\u0026 { [ -z \"$savedAptMark\" ] || apt-mark manual $savedAptMark \u003e /dev/null; }   \u0026\u0026 find /usr/local -type f -executable -exec ldd '{}' ';'     | awk '/=\u003e/ { so = $(NF-1); if (index(so, \"/usr/local/\") == 1) { next }; gsub(\"^/(usr/)?\", \"\", so); print so }'     | sort -u     | xargs -r dpkg-query --search     | cut -d: -f1     | sort -u     | xargs -r apt-mark manual   \u0026\u0026 apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false   \u0026\u0026 yarn --version   \u0026\u0026 rm -rf /tmp/* # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-14T18:30:05Z",
          "created_by": "COPY docker-entrypoint.sh /usr/local/bin/ # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-14T18:30:05Z",
          "created_by": "ENTRYPOINT [\"docker-entrypoint.sh\"]",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-14T18:30:05Z",
          "created_by": "CMD [\"node\"]",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-20T09:05:09Z",
          "created_by": "RUN /bin/sh -c apt-get update -qq     \u0026\u0026 apt-get install -qq --no-install-recommends     ca-certificates     openssl     \u0026\u0026 rm -rf /var/lib/apt/lists/* # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-20T09:05:09Z",
          "created_by": "WORKDIR /app",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-20T09:07:37Z",
          "created_by": "ARG SCOPE=viewer",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-20T09:07:37Z",
          "created_by": "ENV SCOPE=viewer",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-20T09:07:37Z",
          "created_by": "COPY --chown=node:node /app/apps/viewer/.next/standalone ./ # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-20T09:07:37Z",
          "created_by": "COPY --chown=node:node /app/apps/viewer/.next/static ./apps/viewer/.next/static # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-20T09:07:37Z",
          "created_by": "COPY --chown=node:node /app/apps/viewer/public ./apps/viewer/public # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-20T09:07:37Z",
          "created_by": "COPY /runtime/node_modules ./node_modules # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-20T09:07:37Z",
          "created_by": "COPY scripts/viewer-entrypoint.sh ./ # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-20T09:07:37Z",
          "created_by": "RUN |1 SCOPE=viewer /bin/sh -c chmod +x ./${SCOPE}-entrypoint.sh # buildkit",
          "comment": "buildkit.dockerfile.v0"
        },
        {
          "created": "2026-10-20T09:07:37Z",
          "created_by": "USER node",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-20T09:07:37Z",
          "created_by": "ENTRYPOINT [\"/bin/sh\" \"-c\" \"./${SCOPE}-entrypoint.sh\"]",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-20T09:07:37Z",
          "created_by": "EXPOSE [3000/tcp]",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        },
        {
          "created": "2026-10-20T09:07:37Z",
          "created_by": "ENV PORT=3000",
          "comment": "buildkit.dockerfile.v0",
          "empty_layer": true
        }
      ],
      "os": "linux",
      "rootfs": {
        "type": "layers",
        "diff_ids": [
          "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7",
          "sha256:91329da0c497f409b176173a5c4702c9fd79d88e677ec0ada4a0d07f6a001eb1",
          "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65",
          "sha256:992664ed29448f28bcd1ca52f64e3d6e28894cc53078f8ed765ecc82e837b4e1",
          "sha256:48d457b4d425826a81482c431354f54f6aad16b9e333a83ae7b0e6134e625243",
          "sha256:e2dee3fc233f0f0b260b1ff7b599106e4b770679efa2cf256598e400160aa3ed",
          "sha256:b4c82362e91db26df821a57bd72fe538acae9578dd5b2357d83788d39dc539e9",
          "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471",
          "sha256:a33f149bdca7054231c959ff65e928eb3dac00e6c46379139a702575b6881fb0",
          "sha256:9df1f07671ff0a180d37163e801ea3c4a11b7d6c393fc7632ccb6cf4d4413e47",
          "sha256:22c300853e0b2357d534de838629aa8a04c1980e2e0a342e6b9c9b5a931e96f9",
          "sha256:8142a1232ae37c75ebf4bd045d57f1e2b8ab6c03c246880d3278be6dc8241eb3",
          "sha256:1b5404133fc39d938f3ef517aee3e01617176021cc56c8dfe06ce86dacc7de2e"
        ]
      },
      "config": {
        "Entrypoint": [
          "/bin/sh",
          "-c",
          "./${SCOPE}-entrypoint.sh"
        ],
        "Env": [
          "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
          "NODE_VERSION=24.22.0",
          "YARN_VERSION=1.22.22",
          "SCOPE=viewer",
          "PORT=3000"
        ],
        "Labels": {
          "org.opencontainers.image.created": "2026-10-20T09:04:38.721Z",
          "org.opencontainers.image.description": "💬 Typebot is a powerful chatbot builder that you can self-host.",
          "org.opencontainers.image.licenses": "NOASSERTION",
          "org.opencontainers.image.revision": "a4d1862cb8cbfeee40fe5ff27efbd07e57ced5a4",
          "org.opencontainers.image.source": "https://github.com/baptisteArno/typebot.io",
          "org.opencontainers.image.title": "typebot.io",
          "org.opencontainers.image.url": "https://github.com/baptisteArno/typebot.io",
          "org.opencontainers.image.version": "v3.19.1"
        },
        "User": "node",
        "WorkingDir": "/app",
        "ExposedPorts": {
          "3000/tcp": {}
        }
      }
    },
    "Layers": [
      {
        "Size": 77936640,
        "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
      },
      {
        "Size": 21504,
        "DiffID": "sha256:91329da0c497f409b176173a5c4702c9fd79d88e677ec0ada4a0d07f6a001eb1"
      },
      {
        "Size": 150444544,
        "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
      },
      {
        "Size": 7217664,
        "DiffID": "sha256:992664ed29448f28bcd1ca52f64e3d6e28894cc53078f8ed765ecc82e837b4e1"
      },
      {
        "Size": 3584,
        "DiffID": "sha256:48d457b4d425826a81482c431354f54f6aad16b9e333a83ae7b0e6134e625243"
      },
      {
        "Size": 9688064,
        "DiffID": "sha256:e2dee3fc233f0f0b260b1ff7b599106e4b770679efa2cf256598e400160aa3ed"
      },
      {
        "Size": 1536,
        "DiffID": "sha256:b4c82362e91db26df821a57bd72fe538acae9578dd5b2357d83788d39dc539e9"
      },
      {
        "Size": 92774912,
        "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
      },
      {
        "Size": 3122688,
        "DiffID": "sha256:a33f149bdca7054231c959ff65e928eb3dac00e6c46379139a702575b6881fb0"
      },
      {
        "Size": 46080,
        "DiffID": "sha256:9df1f07671ff0a180d37163e801ea3c4a11b7d6c393fc7632ccb6cf4d4413e47"
      },
      {
        "Size": 177152,
        "DiffID": "sha256:22c300853e0b2357d534de838629aa8a04c1980e2e0a342e6b9c9b5a931e96f9"
      },
      {
        "Size": 2560,
        "DiffID": "sha256:8142a1232ae37c75ebf4bd045d57f1e2b8ab6c03c246880d3278be6dc8241eb3"
      },
      {
        "Size": 2560,
        "DiffID": "sha256:1b5404133fc39d938f3ef517aee3e01617176021cc56c8dfe06ce86dacc7de2e"
      }
    ]
  },
  "Results": [
    {
      "Target": "baptistearno/typebot-viewer:latest (debian 12.15)",
      "Class": "os-pkgs",
      "Type": "debian",
      "Packages": [
        {
          "ID": "adduser@3.134",
          "Name": "adduser",
          "Identifier": {
            "PURL": "pkg:deb/debian/adduser@3.134?arch=all\u0026distro=debian-12.15",
            "UID": "93cd263bba1f52c7"
          },
          "Version": "3.134",
          "Arch": "all",
          "SrcName": "adduser",
          "SrcVersion": "3.134",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian Adduser Developers \u003cadduser@packages.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "passwd@1:4.13+dfsg1-1+deb12u2"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/sbin/adduser",
            "/usr/sbin/deluser",
            "/usr/share/doc/adduser/NEWS.Debian.gz",
            "/usr/share/doc/adduser/README.gz",
            "/usr/share/doc/adduser/TODO",
            "/usr/share/doc/adduser/changelog.gz",
            "/usr/share/doc/adduser/copyright",
            "/usr/share/doc/adduser/examples/INSTALL",
            "/usr/share/doc/adduser/examples/README",
            "/usr/share/doc/adduser/examples/adduser.conf",
            "/usr/share/doc/adduser/examples/adduser.local",
            "/usr/share/doc/adduser/examples/adduser.local.conf",
            "/usr/share/doc/adduser/examples/adduser.local.conf.examples/bash.bashrc",
            "/usr/share/doc/adduser/examples/adduser.local.conf.examples/profile",
            "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel.other/index.html",
            "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bash_logout",
            "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bash_profile",
            "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bashrc",
            "/usr/share/doc/adduser/examples/deluser.conf",
            "/usr/share/locale/ca/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/cs/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/da/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/de/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/es/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/eu/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/fr/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/gl/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/hu/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/it/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/ja/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/ko/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/nb/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/nl/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/pl/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/pt/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/ru/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/sk/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/sv/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/uk/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/vi/LC_MESSAGES/adduser.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/adduser.mo",
            "/usr/share/man/de/man5/adduser.conf.5.gz",
            "/usr/share/man/de/man5/deluser.conf.5.gz",
            "/usr/share/man/de/man8/adduser.8.gz",
            "/usr/share/man/de/man8/deluser.8.gz",
            "/usr/share/man/fr/man5/adduser.conf.5.gz",
            "/usr/share/man/fr/man5/deluser.conf.5.gz",
            "/usr/share/man/fr/man8/adduser.8.gz",
            "/usr/share/man/fr/man8/deluser.8.gz",
            "/usr/share/man/man5/adduser.conf.5.gz",
            "/usr/share/man/man5/deluser.conf.5.gz",
            "/usr/share/man/man8/adduser.8.gz",
            "/usr/share/man/man8/adduser.local.8.gz",
            "/usr/share/man/man8/deluser.8.gz",
            "/usr/share/man/nl/man5/adduser.conf.5.gz",
            "/usr/share/man/nl/man5/deluser.conf.5.gz",
            "/usr/share/man/nl/man8/adduser.8.gz",
            "/usr/share/man/nl/man8/deluser.8.gz",
            "/usr/share/man/pt/man5/adduser.conf.5.gz",
            "/usr/share/man/pt/man5/deluser.conf.5.gz",
            "/usr/share/man/pt/man8/adduser.8.gz",
            "/usr/share/man/pt/man8/deluser.8.gz",
            "/usr/share/perl5/Debian/AdduserCommon.pm"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "apt@2.6.1",
          "Name": "apt",
          "Identifier": {
            "PURL": "pkg:deb/debian/apt@2.6.1?arch=amd64\u0026distro=debian-12.15",
            "UID": "48017cded9d6e9b5"
          },
          "Version": "2.6.1",
          "Arch": "amd64",
          "SrcName": "apt",
          "SrcVersion": "2.6.1",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "BSD-3-Clause",
            "MIT"
          ],
          "Maintainer": "APT Development Team \u003cdeity@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "adduser@3.134",
            "debian-archive-keyring@2023.3+deb12u2",
            "gpgv@2.2.40-1.1+deb12u2",
            "libapt-pkg6.0@2.6.1",
            "libc6@2.36-9+deb12u14",
            "libgcc-s1@12.2.0-14+deb12u1",
            "libgnutls30@3.7.9-2+deb12u7",
            "libseccomp2@2.5.4-1+deb12u1",
            "libstdc++6@12.2.0-14+deb12u1",
            "libsystemd0@252.39-1~deb12u2"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/systemd/system/apt-daily-upgrade.service",
            "/lib/systemd/system/apt-daily-upgrade.timer",
            "/lib/systemd/system/apt-daily.service",
            "/lib/systemd/system/apt-daily.timer",
            "/usr/bin/apt",
            "/usr/bin/apt-cache",
            "/usr/bin/apt-cdrom",
            "/usr/bin/apt-config",
            "/usr/bin/apt-get",
            "/usr/bin/apt-key",
            "/usr/bin/apt-mark",
            "/usr/lib/apt/apt-helper",
            "/usr/lib/apt/apt.systemd.daily",
            "/usr/lib/apt/methods/cdrom",
            "/usr/lib/apt/methods/copy",
            "/usr/lib/apt/methods/file",
            "/usr/lib/apt/methods/ftp",
            "/usr/lib/apt/methods/gpgv",
            "/usr/lib/apt/methods/http",
            "/usr/lib/apt/methods/mirror",
            "/usr/lib/apt/methods/rred",
            "/usr/lib/apt/methods/rsh",
            "/usr/lib/apt/methods/store",
            "/usr/lib/apt/solvers/dump",
            "/usr/lib/dpkg/methods/apt/desc.apt",
            "/usr/lib/dpkg/methods/apt/install",
            "/usr/lib/dpkg/methods/apt/names",
            "/usr/lib/dpkg/methods/apt/setup",
            "/usr/lib/dpkg/methods/apt/update",
            "/usr/lib/x86_64-linux-gnu/libapt-private.so.0.0.0",
            "/usr/share/bash-completion/completions/apt",
            "/usr/share/bug/apt/script",
            "/usr/share/doc/apt/NEWS.Debian.gz",
            "/usr/share/doc/apt/README.md.gz",
            "/usr/share/doc/apt/changelog.gz",
            "/usr/share/doc/apt/copyright",
            "/usr/share/doc/apt/examples/apt.conf",
            "/usr/share/doc/apt/examples/configure-index",
            "/usr/share/doc/apt/examples/preferences",
            "/usr/share/doc/apt/examples/sources.list",
            "/usr/share/lintian/overrides/apt",
            "/usr/share/locale/ar/LC_MESSAGES/apt.mo",
            "/usr/share/locale/ast/LC_MESSAGES/apt.mo",
            "/usr/share/locale/bg/LC_MESSAGES/apt.mo",
            "/usr/share/locale/bs/LC_MESSAGES/apt.mo",
            "/usr/share/locale/ca/LC_MESSAGES/apt.mo",
            "/usr/share/locale/cs/LC_MESSAGES/apt.mo",
            "/usr/share/locale/cy/LC_MESSAGES/apt.mo",
            "/usr/share/locale/da/LC_MESSAGES/apt.mo",
            "/usr/share/locale/de/LC_MESSAGES/apt.mo",
            "/usr/share/locale/dz/LC_MESSAGES/apt.mo",
            "/usr/share/locale/el/LC_MESSAGES/apt.mo",
            "/usr/share/locale/es/LC_MESSAGES/apt.mo",
            "/usr/share/locale/eu/LC_MESSAGES/apt.mo",
            "/usr/share/locale/fi/LC_MESSAGES/apt.mo",
            "/usr/share/locale/fr/LC_MESSAGES/apt.mo",
            "/usr/share/locale/gl/LC_MESSAGES/apt.mo",
            "/usr/share/locale/hu/LC_MESSAGES/apt.mo",
            "/usr/share/locale/it/LC_MESSAGES/apt.mo",
            "/usr/share/locale/ja/LC_MESSAGES/apt.mo",
            "/usr/share/locale/km/LC_MESSAGES/apt.mo",
            "/usr/share/locale/ko/LC_MESSAGES/apt.mo",
            "/usr/share/locale/ku/LC_MESSAGES/apt.mo",
            "/usr/share/locale/lt/LC_MESSAGES/apt.mo",
            "/usr/share/locale/mr/LC_MESSAGES/apt.mo",
            "/usr/share/locale/nb/LC_MESSAGES/apt.mo",
            "/usr/share/locale/ne/LC_MESSAGES/apt.mo",
            "/usr/share/locale/nl/LC_MESSAGES/apt.mo",
            "/usr/share/locale/nn/LC_MESSAGES/apt.mo",
            "/usr/share/locale/pl/LC_MESSAGES/apt.mo",
            "/usr/share/locale/pt/LC_MESSAGES/apt.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/apt.mo",
            "/usr/share/locale/ro/LC_MESSAGES/apt.mo",
            "/usr/share/locale/ru/LC_MESSAGES/apt.mo",
            "/usr/share/locale/sk/LC_MESSAGES/apt.mo",
            "/usr/share/locale/sl/LC_MESSAGES/apt.mo",
            "/usr/share/locale/sv/LC_MESSAGES/apt.mo",
            "/usr/share/locale/th/LC_MESSAGES/apt.mo",
            "/usr/share/locale/tl/LC_MESSAGES/apt.mo",
            "/usr/share/locale/tr/LC_MESSAGES/apt.mo",
            "/usr/share/locale/uk/LC_MESSAGES/apt.mo",
            "/usr/share/locale/vi/LC_MESSAGES/apt.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/apt.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/apt.mo",
            "/usr/share/man/de/man1/apt-transport-http.1.gz",
            "/usr/share/man/de/man1/apt-transport-https.1.gz",
            "/usr/share/man/de/man1/apt-transport-mirror.1.gz",
            "/usr/share/man/de/man5/apt.conf.5.gz",
            "/usr/share/man/de/man5/apt_auth.conf.5.gz",
            "/usr/share/man/de/man5/apt_preferences.5.gz",
            "/usr/share/man/de/man5/sources.list.5.gz",
            "/usr/share/man/de/man7/apt-patterns.7.gz",
            "/usr/share/man/de/man8/apt-cache.8.gz",
            "/usr/share/man/de/man8/apt-cdrom.8.gz",
            "/usr/share/man/de/man8/apt-config.8.gz",
            "/usr/share/man/de/man8/apt-get.8.gz",
            "/usr/share/man/de/man8/apt-mark.8.gz",
            "/usr/share/man/de/man8/apt-secure.8.gz",
            "/usr/share/man/de/man8/apt.8.gz",
            "/usr/share/man/es/man5/apt_preferences.5.gz",
            "/usr/share/man/es/man8/apt-cache.8.gz",
            "/usr/share/man/es/man8/apt-cdrom.8.gz",
            "/usr/share/man/es/man8/apt-config.8.gz",
            "/usr/share/man/fr/man1/apt-transport-http.1.gz",
            "/usr/share/man/fr/man1/apt-transport-https.1.gz",
            "/usr/share/man/fr/man1/apt-transport-mirror.1.gz",
            "/usr/share/man/fr/man5/apt.conf.5.gz",
            "/usr/share/man/fr/man5/apt_auth.conf.5.gz",
            "/usr/share/man/fr/man5/apt_preferences.5.gz",
            "/usr/share/man/fr/man5/sources.list.5.gz",
            "/usr/share/man/fr/man8/apt-cache.8.gz",
            "/usr/share/man/fr/man8/apt-cdrom.8.gz",
            "/usr/share/man/fr/man8/apt-config.8.gz",
            "/usr/share/man/fr/man8/apt-get.8.gz",
            "/usr/share/man/fr/man8/apt-mark.8.gz",
            "/usr/share/man/fr/man8/apt-secure.8.gz",
            "/usr/share/man/fr/man8/apt.8.gz",
            "/usr/share/man/it/man5/apt.conf.5.gz",
            "/usr/share/man/it/man5/apt_preferences.5.gz",
            "/usr/share/man/it/man5/sources.list.5.gz",
            "/usr/share/man/it/man8/apt-cache.8.gz",
            "/usr/share/man/it/man8/apt-cdrom.8.gz",
            "/usr/share/man/it/man8/apt-config.8.gz",
            "/usr/share/man/it/man8/apt-get.8.gz",
            "/usr/share/man/it/man8/apt-mark.8.gz",
            "/usr/share/man/it/man8/apt-secure.8.gz",
            "/usr/share/man/it/man8/apt.8.gz",
            "/usr/share/man/ja/man5/apt.conf.5.gz",
            "/usr/share/man/ja/man5/apt_preferences.5.gz",
            "/usr/share/man/ja/man5/sources.list.5.gz",
            "/usr/share/man/ja/man8/apt-cache.8.gz",
            "/usr/share/man/ja/man8/apt-cdrom.8.gz",
            "/usr/share/man/ja/man8/apt-config.8.gz",
            "/usr/share/man/ja/man8/apt-get.8.gz",
            "/usr/share/man/ja/man8/apt-mark.8.gz",
            "/usr/share/man/ja/man8/apt-secure.8.gz",
            "/usr/share/man/ja/man8/apt.8.gz",
            "/usr/share/man/man1/apt-transport-http.1.gz",
            "/usr/share/man/man1/apt-transport-https.1.gz",
            "/usr/share/man/man1/apt-transport-mirror.1.gz",
            "/usr/share/man/man5/apt.conf.5.gz",
            "/usr/share/man/man5/apt_auth.conf.5.gz",
            "/usr/share/man/man5/apt_preferences.5.gz",
            "/usr/share/man/man5/sources.list.5.gz",
            "/usr/share/man/man7/apt-patterns.7.gz",
            "/usr/share/man/man8/apt-cache.8.gz",
            "/usr/share/man/man8/apt-cdrom.8.gz",
            "/usr/share/man/man8/apt-config.8.gz",
            "/usr/share/man/man8/apt-get.8.gz",
            "/usr/share/man/man8/apt-key.8.gz",
            "/usr/share/man/man8/apt-mark.8.gz",
            "/usr/share/man/man8/apt-secure.8.gz",
            "/usr/share/man/man8/apt.8.gz",
            "/usr/share/man/nl/man1/apt-transport-http.1.gz",
            "/usr/share/man/nl/man1/apt-transport-https.1.gz",
            "/usr/share/man/nl/man1/apt-transport-mirror.1.gz",
            "/usr/share/man/nl/man5/apt.conf.5.gz",
            "/usr/share/man/nl/man5/apt_auth.conf.5.gz",
            "/usr/share/man/nl/man5/apt_preferences.5.gz",
            "/usr/share/man/nl/man5/sources.list.5.gz",
            "/usr/share/man/nl/man7/apt-patterns.7.gz",
            "/usr/share/man/nl/man8/apt-cache.8.gz",
            "/usr/share/man/nl/man8/apt-cdrom.8.gz",
            "/usr/share/man/nl/man8/apt-config.8.gz",
            "/usr/share/man/nl/man8/apt-get.8.gz",
            "/usr/share/man/nl/man8/apt-key.8.gz",
            "/usr/share/man/nl/man8/apt-mark.8.gz",
            "/usr/share/man/nl/man8/apt-secure.8.gz",
            "/usr/share/man/nl/man8/apt.8.gz",
            "/usr/share/man/pl/man5/apt_preferences.5.gz",
            "/usr/share/man/pl/man8/apt-cache.8.gz",
            "/usr/share/man/pl/man8/apt-cdrom.8.gz",
            "/usr/share/man/pl/man8/apt-config.8.gz",
            "/usr/share/man/pt/man1/apt-transport-http.1.gz",
            "/usr/share/man/pt/man1/apt-transport-https.1.gz",
            "/usr/share/man/pt/man1/apt-transport-mirror.1.gz",
            "/usr/share/man/pt/man5/apt.conf.5.gz",
            "/usr/share/man/pt/man5/apt_auth.conf.5.gz",
            "/usr/share/man/pt/man5/apt_preferences.5.gz",
            "/usr/share/man/pt/man5/sources.list.5.gz",
            "/usr/share/man/pt/man7/apt-patterns.7.gz",
            "/usr/share/man/pt/man8/apt-cache.8.gz",
            "/usr/share/man/pt/man8/apt-cdrom.8.gz",
            "/usr/share/man/pt/man8/apt-config.8.gz",
            "/usr/share/man/pt/man8/apt-get.8.gz",
            "/usr/share/man/pt/man8/apt-key.8.gz",
            "/usr/share/man/pt/man8/apt-mark.8.gz",
            "/usr/share/man/pt/man8/apt-secure.8.gz",
            "/usr/share/man/pt/man8/apt.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "base-files@12.4+deb12u15",
          "Name": "base-files",
          "Identifier": {
            "PURL": "pkg:deb/debian/base-files@12.4%2Bdeb12u15?arch=amd64\u0026distro=debian-12.15",
            "UID": "54cf880c47356c6e"
          },
          "Version": "12.4+deb12u15",
          "Arch": "amd64",
          "SrcName": "base-files",
          "SrcVersion": "12.4+deb12u15",
          "Licenses": [
            "GPL-2.0-or-later"
          ],
          "Maintainer": "Santiago Vila \u003csanvila@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/os-release",
            "/usr/share/base-files/dot.bashrc",
            "/usr/share/base-files/dot.profile",
            "/usr/share/base-files/dot.profile.md5sums",
            "/usr/share/base-files/info.dir",
            "/usr/share/base-files/motd",
            "/usr/share/base-files/profile",
            "/usr/share/base-files/profile.md5sums",
            "/usr/share/base-files/staff-group-for-usr-local",
            "/usr/share/common-licenses/Apache-2.0",
            "/usr/share/common-licenses/Artistic",
            "/usr/share/common-licenses/BSD",
            "/usr/share/common-licenses/CC0-1.0",
            "/usr/share/common-licenses/GFDL-1.2",
            "/usr/share/common-licenses/GFDL-1.3",
            "/usr/share/common-licenses/GPL-1",
            "/usr/share/common-licenses/GPL-2",
            "/usr/share/common-licenses/GPL-3",
            "/usr/share/common-licenses/LGPL-2",
            "/usr/share/common-licenses/LGPL-2.1",
            "/usr/share/common-licenses/LGPL-3",
            "/usr/share/common-licenses/MPL-1.1",
            "/usr/share/common-licenses/MPL-2.0",
            "/usr/share/doc/base-files/README",
            "/usr/share/doc/base-files/README.FHS",
            "/usr/share/doc/base-files/changelog.gz",
            "/usr/share/doc/base-files/copyright",
            "/usr/share/lintian/overrides/base-files"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "base-passwd@3.6.1",
          "Name": "base-passwd",
          "Identifier": {
            "PURL": "pkg:deb/debian/base-passwd@3.6.1?arch=amd64\u0026distro=debian-12.15",
            "UID": "256ec184a02b999c"
          },
          "Version": "3.6.1",
          "Arch": "amd64",
          "SrcName": "base-passwd",
          "SrcVersion": "3.6.1",
          "Licenses": [
            "GPL-2.0-only",
            "public-domain"
          ],
          "Maintainer": "Colin Watson \u003ccjwatson@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14",
            "libdebconfclient0@0.270",
            "libselinux1@3.4-1+b6"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/sbin/update-passwd",
            "/usr/share/base-passwd/group.master",
            "/usr/share/base-passwd/passwd.master",
            "/usr/share/doc-base/base-passwd.users-and-groups",
            "/usr/share/doc/base-passwd/README",
            "/usr/share/doc/base-passwd/changelog.gz",
            "/usr/share/doc/base-passwd/copyright",
            "/usr/share/doc/base-passwd/users-and-groups.html",
            "/usr/share/doc/base-passwd/users-and-groups.txt.gz",
            "/usr/share/lintian/overrides/base-passwd",
            "/usr/share/man/de/man8/update-passwd.8.gz",
            "/usr/share/man/es/man8/update-passwd.8.gz",
            "/usr/share/man/fr/man8/update-passwd.8.gz",
            "/usr/share/man/ja/man8/update-passwd.8.gz",
            "/usr/share/man/man8/update-passwd.8.gz",
            "/usr/share/man/pl/man8/update-passwd.8.gz",
            "/usr/share/man/ru/man8/update-passwd.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "bash@5.2.15-2+b13",
          "Name": "bash",
          "Identifier": {
            "PURL": "pkg:deb/debian/bash@5.2.15-2%2Bb13?arch=amd64\u0026distro=debian-12.15",
            "UID": "571283fff037d17a"
          },
          "Version": "5.2.15",
          "Release": "2+b13",
          "Arch": "amd64",
          "SrcName": "bash",
          "SrcVersion": "5.2.15",
          "SrcRelease": "2",
          "Licenses": [
            "GPL-3.0-or-later",
            "GPL-3.0-only",
            "GPL-3+ with Bison exception",
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GFDL-1.3-no-invariants-only",
            "GFDL-1.3-only",
            "Latex2e",
            "BSD-4-Clause-UC",
            "MIT",
            "permissive"
          ],
          "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "base-files@12.4+deb12u15",
            "debianutils@5.7-0.5~deb12u1"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/bin/bash",
            "/usr/bin/bashbug",
            "/usr/bin/clear_console",
            "/usr/share/debianutils/shells.d/bash",
            "/usr/share/doc/bash/CHANGES.gz",
            "/usr/share/doc/bash/COMPAT.gz",
            "/usr/share/doc/bash/INTRO.gz",
            "/usr/share/doc/bash/NEWS.gz",
            "/usr/share/doc/bash/POSIX.gz",
            "/usr/share/doc/bash/RBASH",
            "/usr/share/doc/bash/README.Debian.gz",
            "/usr/share/doc/bash/README.abs-guide",
            "/usr/share/doc/bash/README.commands.gz",
            "/usr/share/doc/bash/README.gz",
            "/usr/share/doc/bash/changelog.Debian.amd64.gz",
            "/usr/share/doc/bash/changelog.Debian.gz",
            "/usr/share/doc/bash/changelog.gz",
            "/usr/share/doc/bash/copyright",
            "/usr/share/doc/bash/inputrc.arrows",
            "/usr/share/lintian/overrides/bash",
            "/usr/share/locale/af/LC_MESSAGES/bash.mo",
            "/usr/share/locale/bg/LC_MESSAGES/bash.mo",
            "/usr/share/locale/ca/LC_MESSAGES/bash.mo",
            "/usr/share/locale/cs/LC_MESSAGES/bash.mo",
            "/usr/share/locale/da/LC_MESSAGES/bash.mo",
            "/usr/share/locale/de/LC_MESSAGES/bash.mo",
            "/usr/share/locale/el/LC_MESSAGES/bash.mo",
            "/usr/share/locale/en@boldquot/LC_MESSAGES/bash.mo",
            "/usr/share/locale/en@quot/LC_MESSAGES/bash.mo",
            "/usr/share/locale/eo/LC_MESSAGES/bash.mo",
            "/usr/share/locale/es/LC_MESSAGES/bash.mo",
            "/usr/share/locale/et/LC_MESSAGES/bash.mo",
            "/usr/share/locale/fi/LC_MESSAGES/bash.mo",
            "/usr/share/locale/fr/LC_MESSAGES/bash.mo",
            "/usr/share/locale/ga/LC_MESSAGES/bash.mo",
            "/usr/share/locale/gl/LC_MESSAGES/bash.mo",
            "/usr/share/locale/hr/LC_MESSAGES/bash.mo",
            "/usr/share/locale/hu/LC_MESSAGES/bash.mo",
            "/usr/share/locale/id/LC_MESSAGES/bash.mo",
            "/usr/share/locale/it/LC_MESSAGES/bash.mo",
            "/usr/share/locale/ja/LC_MESSAGES/bash.mo",
            "/usr/share/locale/ko/LC_MESSAGES/bash.mo",
            "/usr/share/locale/lt/LC_MESSAGES/bash.mo",
            "/usr/share/locale/nb/LC_MESSAGES/bash.mo",
            "/usr/share/locale/nl/LC_MESSAGES/bash.mo",
            "/usr/share/locale/pl/LC_MESSAGES/bash.mo",
            "/usr/share/locale/pt/LC_MESSAGES/bash.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/bash.mo",
            "/usr/share/locale/ro/LC_MESSAGES/bash.mo",
            "/usr/share/locale/ru/LC_MESSAGES/bash.mo",
            "/usr/share/locale/sk/LC_MESSAGES/bash.mo",
            "/usr/share/locale/sl/LC_MESSAGES/bash.mo",
            "/usr/share/locale/sr/LC_MESSAGES/bash.mo",
            "/usr/share/locale/sv/LC_MESSAGES/bash.mo",
            "/usr/share/locale/tr/LC_MESSAGES/bash.mo",
            "/usr/share/locale/uk/LC_MESSAGES/bash.mo",
            "/usr/share/locale/vi/LC_MESSAGES/bash.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/bash.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/bash.mo",
            "/usr/share/man/man1/bash.1.gz",
            "/usr/share/man/man1/bashbug.1.gz",
            "/usr/share/man/man1/clear_console.1.gz",
            "/usr/share/man/man1/rbash.1.gz",
            "/usr/share/man/man7/bash-builtins.7.gz",
            "/usr/share/menu/bash"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "bsdutils@1:2.38.1-5+deb12u3",
          "Name": "bsdutils",
          "Identifier": {
            "PURL": "pkg:deb/debian/bsdutils@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15\u0026epoch=1",
            "UID": "af5a434542493ff"
          },
          "Version": "2.38.1",
          "Release": "5+deb12u3",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "util-linux",
          "SrcVersion": "2.38.1",
          "SrcRelease": "5+deb12u3",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "public-domain",
            "BSD-4-Clause",
            "MIT",
            "BSD-3-Clause",
            "BSLA",
            "LGPL-2.0-or-later",
            "LGPL-2.1-or-later",
            "LGPL-3.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "util-linux packagers \u003cutil-linux@packages.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/bin/logger",
            "/usr/bin/renice",
            "/usr/bin/script",
            "/usr/bin/scriptlive",
            "/usr/bin/scriptreplay",
            "/usr/bin/wall",
            "/usr/share/bash-completion/completions/logger",
            "/usr/share/bash-completion/completions/renice",
            "/usr/share/bash-completion/completions/script",
            "/usr/share/bash-completion/completions/scriptlive",
            "/usr/share/bash-completion/completions/scriptreplay",
            "/usr/share/bash-completion/completions/wall",
            "/usr/share/doc/bsdutils/changelog.Debian.gz",
            "/usr/share/doc/bsdutils/changelog.gz",
            "/usr/share/doc/bsdutils/copyright",
            "/usr/share/lintian/overrides/bsdutils",
            "/usr/share/man/man1/logger.1.gz",
            "/usr/share/man/man1/renice.1.gz",
            "/usr/share/man/man1/script.1.gz",
            "/usr/share/man/man1/scriptlive.1.gz",
            "/usr/share/man/man1/scriptreplay.1.gz",
            "/usr/share/man/man1/wall.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "ca-certificates@20250419~deb12u1",
          "Name": "ca-certificates",
          "Identifier": {
            "PURL": "pkg:deb/debian/ca-certificates@20250419~deb12u1?arch=all\u0026distro=debian-12.15",
            "UID": "b7e3f8e5f8dc82a0"
          },
          "Version": "20250419~deb12u1",
          "Arch": "all",
          "SrcName": "ca-certificates",
          "SrcVersion": "20250419~deb12u1",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "MPL-2.0"
          ],
          "Maintainer": "Julien Cristau \u003cjcristau@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "debconf@1.5.82",
            "openssl@3.0.22-1~deb12u1"
          ],
          "Layer": {
            "DiffID": "sha256:e2dee3fc233f0f0b260b1ff7b599106e4b770679efa2cf256598e400160aa3ed"
          },
          "InstalledFiles": [
            "/usr/sbin/update-ca-certificates",
            "/usr/share/ca-certificates/mozilla/ACCVRAIZ1.crt",
            "/usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM.crt",
            "/usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.crt",
            "/usr/share/ca-certificates/mozilla/ANF_Secure_Server_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/Actalis_Authentication_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/AffirmTrust_Commercial.crt",
            "/usr/share/ca-certificates/mozilla/AffirmTrust_Networking.crt",
            "/usr/share/ca-certificates/mozilla/AffirmTrust_Premium.crt",
            "/usr/share/ca-certificates/mozilla/AffirmTrust_Premium_ECC.crt",
            "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt",
            "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt",
            "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt",
            "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt",
            "/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt",
            "/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.crt",
            "/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.crt",
            "/usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt",
            "/usr/share/ca-certificates/mozilla/BJCA_Global_Root_CA1.crt",
            "/usr/share/ca-certificates/mozilla/BJCA_Global_Root_CA2.crt",
            "/usr/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt",
            "/usr/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/CA_Disig_Root_R2.crt",
            "/usr/share/ca-certificates/mozilla/CFCA_EV_ROOT.crt",
            "/usr/share/ca-certificates/mozilla/COMODO_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/COMODO_ECC_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/Certainly_Root_E1.crt",
            "/usr/share/ca-certificates/mozilla/Certainly_Root_R1.crt",
            "/usr/share/ca-certificates/mozilla/Certigna.crt",
            "/usr/share/ca-certificates/mozilla/Certigna_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/Certum_EC-384_CA.crt",
            "/usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt",
            "/usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt",
            "/usr/share/ca-certificates/mozilla/Certum_Trusted_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_ECC_Root-01.crt",
            "/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_ECC_Root-02.crt",
            "/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-01.crt",
            "/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-02.crt",
            "/usr/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt",
            "/usr/share/ca-certificates/mozilla/D-TRUST_BR_Root_CA_1_2020.crt",
            "/usr/share/ca-certificates/mozilla/D-TRUST_BR_Root_CA_2_2023.crt",
            "/usr/share/ca-certificates/mozilla/D-TRUST_EV_Root_CA_1_2020.crt",
            "/usr/share/ca-certificates/mozilla/D-TRUST_EV_Root_CA_2_2023.crt",
            "/usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt",
            "/usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt",
            "/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt",
            "/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt",
            "/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt",
            "/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt",
            "/usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/DigiCert_TLS_ECC_P384_Root_G5.crt",
            "/usr/share/ca-certificates/mozilla/DigiCert_TLS_RSA4096_Root_G5.crt",
            "/usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt",
            "/usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt",
            "/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt",
            "/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G2.crt",
            "/usr/share/ca-certificates/mozilla/FIRMAPROFESIONAL_CA_ROOT-A_WEB.crt",
            "/usr/share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt",
            "/usr/share/ca-certificates/mozilla/GLOBALTRUST_2020.crt",
            "/usr/share/ca-certificates/mozilla/GTS_Root_R1.crt",
            "/usr/share/ca-certificates/mozilla/GTS_Root_R2.crt",
            "/usr/share/ca-certificates/mozilla/GTS_Root_R3.crt",
            "/usr/share/ca-certificates/mozilla/GTS_Root_R4.crt",
            "/usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R4.crt",
            "/usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt",
            "/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R3.crt",
            "/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R6.crt",
            "/usr/share/ca-certificates/mozilla/GlobalSign_Root_E46.crt",
            "/usr/share/ca-certificates/mozilla/GlobalSign_Root_R46.crt",
            "/usr/share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt",
            "/usr/share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt",
            "/usr/share/ca-certificates/mozilla/HARICA_TLS_ECC_Root_CA_2021.crt",
            "/usr/share/ca-certificates/mozilla/HARICA_TLS_RSA_Root_CA_2021.crt",
            "/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt",
            "/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt",
            "/usr/share/ca-certificates/mozilla/HiPKI_Root_CA_-_G1.crt",
            "/usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt",
            "/usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt",
            "/usr/share/ca-certificates/mozilla/ISRG_Root_X2.crt",
            "/usr/share/ca-certificates/mozilla/IdenTrust_Commercial_Root_CA_1.crt",
            "/usr/share/ca-certificates/mozilla/IdenTrust_Public_Sector_Root_CA_1.crt",
            "/usr/share/ca-certificates/mozilla/Izenpe.com.crt",
            "/usr/share/ca-certificates/mozilla/Microsec_e-Szigno_Root_CA_2009.crt",
            "/usr/share/ca-certificates/mozilla/Microsoft_ECC_Root_Certificate_Authority_2017.crt",
            "/usr/share/ca-certificates/mozilla/Microsoft_RSA_Root_Certificate_Authority_2017.crt",
            "/usr/share/ca-certificates/mozilla/NAVER_Global_Root_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt",
            "/usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt",
            "/usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt",
            "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt",
            "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2.crt",
            "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt",
            "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3.crt",
            "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt",
            "/usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt",
            "/usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt",
            "/usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt",
            "/usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt",
            "/usr/share/ca-certificates/mozilla/SSL.com_TLS_ECC_Root_CA_2022.crt",
            "/usr/share/ca-certificates/mozilla/SSL.com_TLS_RSA_Root_CA_2022.crt",
            "/usr/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt",
            "/usr/share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_E46.crt",
            "/usr/share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_R46.crt",
            "/usr/share/ca-certificates/mozilla/SecureSign_Root_CA12.crt",
            "/usr/share/ca-certificates/mozilla/SecureSign_Root_CA14.crt",
            "/usr/share/ca-certificates/mozilla/SecureSign_Root_CA15.crt",
            "/usr/share/ca-certificates/mozilla/SecureTrust_CA.crt",
            "/usr/share/ca-certificates/mozilla/Secure_Global_CA.crt",
            "/usr/share/ca-certificates/mozilla/Security_Communication_ECC_RootCA1.crt",
            "/usr/share/ca-certificates/mozilla/Security_Communication_RootCA2.crt",
            "/usr/share/ca-certificates/mozilla/Starfield_Class_2_CA.crt",
            "/usr/share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt",
            "/usr/share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt",
            "/usr/share/ca-certificates/mozilla/SwissSign_Gold_CA_-_G2.crt",
            "/usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt",
            "/usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt",
            "/usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt",
            "/usr/share/ca-certificates/mozilla/TWCA_CYBER_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/Telekom_Security_TLS_ECC_Root_2020.crt",
            "/usr/share/ca-certificates/mozilla/Telekom_Security_TLS_RSA_Root_2023.crt",
            "/usr/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt",
            "/usr/share/ca-certificates/mozilla/Telia_Root_CA_v2.crt",
            "/usr/share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G3.crt",
            "/usr/share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G4.crt",
            "/usr/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/TunTrust_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/UCA_Extended_Validation_Root.crt",
            "/usr/share/ca-certificates/mozilla/UCA_Global_G2_Root.crt",
            "/usr/share/ca-certificates/mozilla/USERTrust_ECC_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/XRamp_Global_CA_Root.crt",
            "/usr/share/ca-certificates/mozilla/certSIGN_ROOT_CA.crt",
            "/usr/share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt",
            "/usr/share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt",
            "/usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt",
            "/usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_C3.crt",
            "/usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_G3.crt",
            "/usr/share/ca-certificates/mozilla/emSign_Root_CA_-_C1.crt",
            "/usr/share/ca-certificates/mozilla/emSign_Root_CA_-_G1.crt",
            "/usr/share/ca-certificates/mozilla/vTrus_ECC_Root_CA.crt",
            "/usr/share/ca-certificates/mozilla/vTrus_Root_CA.crt",
            "/usr/share/doc/ca-certificates/README.Debian",
            "/usr/share/doc/ca-certificates/changelog.gz",
            "/usr/share/doc/ca-certificates/copyright",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/Makefile",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/README",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/ca-certificates-local.triggers",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/changelog",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/compat",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/control",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/copyright",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/postrm",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/rules",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/source/format",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/local/Local_Root_CA.crt",
            "/usr/share/doc/ca-certificates/examples/ca-certificates-local/local/Makefile",
            "/usr/share/man/man8/update-ca-certificates.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "coreutils@9.1-1",
          "Name": "coreutils",
          "Identifier": {
            "PURL": "pkg:deb/debian/coreutils@9.1-1?arch=amd64\u0026distro=debian-12.15",
            "UID": "4dcfd69f3b62ab36"
          },
          "Version": "9.1",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "coreutils",
          "SrcVersion": "9.1",
          "SrcRelease": "1",
          "Licenses": [
            "GPL-3.0-or-later",
            "BSD-4-Clause-UC",
            "GPL-3.0-only",
            "ISC",
            "FSFULLR",
            "GFDL-1.3-no-invariants-only",
            "GFDL-1.3-only"
          ],
          "Maintainer": "Michael Stone \u003cmstone@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/bin/cat",
            "/bin/chgrp",
            "/bin/chmod",
            "/bin/chown",
            "/bin/cp",
            "/bin/date",
            "/bin/dd",
            "/bin/df",
            "/bin/dir",
            "/bin/echo",
            "/bin/false",
            "/bin/ln",
            "/bin/ls",
            "/bin/mkdir",
            "/bin/mknod",
            "/bin/mktemp",
            "/bin/mv",
            "/bin/pwd",
            "/bin/readlink",
            "/bin/rm",
            "/bin/rmdir",
            "/bin/sleep",
            "/bin/stty",
            "/bin/sync",
            "/bin/touch",
            "/bin/true",
            "/bin/uname",
            "/bin/vdir",
            "/usr/bin/[",
            "/usr/bin/arch",
            "/usr/bin/b2sum",
            "/usr/bin/base32",
            "/usr/bin/base64",
            "/usr/bin/basename",
            "/usr/bin/basenc",
            "/usr/bin/chcon",
            "/usr/bin/cksum",
            "/usr/bin/comm",
            "/usr/bin/csplit",
            "/usr/bin/cut",
            "/usr/bin/dircolors",
            "/usr/bin/dirname",
            "/usr/bin/du",
            "/usr/bin/env",
            "/usr/bin/expand",
            "/usr/bin/expr",
            "/usr/bin/factor",
            "/usr/bin/fmt",
            "/usr/bin/fold",
            "/usr/bin/groups",
            "/usr/bin/head",
            "/usr/bin/hostid",
            "/usr/bin/id",
            "/usr/bin/install",
            "/usr/bin/join",
            "/usr/bin/link",
            "/usr/bin/logname",
            "/usr/bin/md5sum",
            "/usr/bin/mkfifo",
            "/usr/bin/nice",
            "/usr/bin/nl",
            "/usr/bin/nohup",
            "/usr/bin/nproc",
            "/usr/bin/numfmt",
            "/usr/bin/od",
            "/usr/bin/paste",
            "/usr/bin/pathchk",
            "/usr/bin/pinky",
            "/usr/bin/pr",
            "/usr/bin/printenv",
            "/usr/bin/printf",
            "/usr/bin/ptx",
            "/usr/bin/realpath",
            "/usr/bin/runcon",
            "/usr/bin/seq",
            "/usr/bin/sha1sum",
            "/usr/bin/sha224sum",
            "/usr/bin/sha256sum",
            "/usr/bin/sha384sum",
            "/usr/bin/sha512sum",
            "/usr/bin/shred",
            "/usr/bin/shuf",
            "/usr/bin/sort",
            "/usr/bin/split",
            "/usr/bin/stat",
            "/usr/bin/stdbuf",
            "/usr/bin/sum",
            "/usr/bin/tac",
            "/usr/bin/tail",
            "/usr/bin/tee",
            "/usr/bin/test",
            "/usr/bin/timeout",
            "/usr/bin/tr",
            "/usr/bin/truncate",
            "/usr/bin/tsort",
            "/usr/bin/tty",
            "/usr/bin/unexpand",
            "/usr/bin/uniq",
            "/usr/bin/unlink",
            "/usr/bin/users",
            "/usr/bin/wc",
            "/usr/bin/who",
            "/usr/bin/whoami",
            "/usr/bin/yes",
            "/usr/libexec/coreutils/libstdbuf.so",
            "/usr/sbin/chroot",
            "/usr/share/doc/coreutils/AUTHORS",
            "/usr/share/doc/coreutils/NEWS.Debian.gz",
            "/usr/share/doc/coreutils/NEWS.gz",
            "/usr/share/doc/coreutils/README.Debian",
            "/usr/share/doc/coreutils/README.gz",
            "/usr/share/doc/coreutils/THANKS.gz",
            "/usr/share/doc/coreutils/TODO.gz",
            "/usr/share/doc/coreutils/changelog.Debian.gz",
            "/usr/share/doc/coreutils/changelog.gz",
            "/usr/share/doc/coreutils/copyright",
            "/usr/share/info/coreutils.info.gz",
            "/usr/share/locale/af/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/be/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/bg/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/ca/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/cs/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/da/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/de/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/el/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/eo/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/es/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/et/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/eu/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/fi/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/fr/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/ga/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/gl/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/hr/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/hu/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/ia/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/id/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/it/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/ja/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/kk/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/ko/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/lg/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/lt/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/ms/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/nb/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/nl/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/pl/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/pt/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/ro/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/ru/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/sk/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/sl/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/sr/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/sv/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/tr/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/uk/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/vi/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/coreutils.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/coreutils.mo",
            "/usr/share/man/man1/arch.1.gz",
            "/usr/share/man/man1/b2sum.1.gz",
            "/usr/share/man/man1/base32.1.gz",
            "/usr/share/man/man1/base64.1.gz",
            "/usr/share/man/man1/basename.1.gz",
            "/usr/share/man/man1/basenc.1.gz",
            "/usr/share/man/man1/cat.1.gz",
            "/usr/share/man/man1/chcon.1.gz",
            "/usr/share/man/man1/chgrp.1.gz",
            "/usr/share/man/man1/chmod.1.gz",
            "/usr/share/man/man1/chown.1.gz",
            "/usr/share/man/man1/cksum.1.gz",
            "/usr/share/man/man1/comm.1.gz",
            "/usr/share/man/man1/cp.1.gz",
            "/usr/share/man/man1/csplit.1.gz",
            "/usr/share/man/man1/cut.1.gz",
            "/usr/share/man/man1/date.1.gz",
            "/usr/share/man/man1/dd.1.gz",
            "/usr/share/man/man1/df.1.gz",
            "/usr/share/man/man1/dir.1.gz",
            "/usr/share/man/man1/dircolors.1.gz",
            "/usr/share/man/man1/dirname.1.gz",
            "/usr/share/man/man1/du.1.gz",
            "/usr/share/man/man1/echo.1.gz",
            "/usr/share/man/man1/env.1.gz",
            "/usr/share/man/man1/expand.1.gz",
            "/usr/share/man/man1/expr.1.gz",
            "/usr/share/man/man1/factor.1.gz",
            "/usr/share/man/man1/false.1.gz",
            "/usr/share/man/man1/fmt.1.gz",
            "/usr/share/man/man1/fold.1.gz",
            "/usr/share/man/man1/groups.1.gz",
            "/usr/share/man/man1/head.1.gz",
            "/usr/share/man/man1/hostid.1.gz",
            "/usr/share/man/man1/id.1.gz",
            "/usr/share/man/man1/install.1.gz",
            "/usr/share/man/man1/join.1.gz",
            "/usr/share/man/man1/link.1.gz",
            "/usr/share/man/man1/ln.1.gz",
            "/usr/share/man/man1/logname.1.gz",
            "/usr/share/man/man1/ls.1.gz",
            "/usr/share/man/man1/md5sum.1.gz",
            "/usr/share/man/man1/mkdir.1.gz",
            "/usr/share/man/man1/mkfifo.1.gz",
            "/usr/share/man/man1/mknod.1.gz",
            "/usr/share/man/man1/mktemp.1.gz",
            "/usr/share/man/man1/mv.1.gz",
            "/usr/share/man/man1/nice.1.gz",
            "/usr/share/man/man1/nl.1.gz",
            "/usr/share/man/man1/nohup.1.gz",
            "/usr/share/man/man1/nproc.1.gz",
            "/usr/share/man/man1/numfmt.1.gz",
            "/usr/share/man/man1/od.1.gz",
            "/usr/share/man/man1/paste.1.gz",
            "/usr/share/man/man1/pathchk.1.gz",
            "/usr/share/man/man1/pinky.1.gz",
            "/usr/share/man/man1/pr.1.gz",
            "/usr/share/man/man1/printenv.1.gz",
            "/usr/share/man/man1/printf.1.gz",
            "/usr/share/man/man1/ptx.1.gz",
            "/usr/share/man/man1/pwd.1.gz",
            "/usr/share/man/man1/readlink.1.gz",
            "/usr/share/man/man1/realpath.1.gz",
            "/usr/share/man/man1/rm.1.gz",
            "/usr/share/man/man1/rmdir.1.gz",
            "/usr/share/man/man1/runcon.1.gz",
            "/usr/share/man/man1/seq.1.gz",
            "/usr/share/man/man1/sha1sum.1.gz",
            "/usr/share/man/man1/sha224sum.1.gz",
            "/usr/share/man/man1/sha256sum.1.gz",
            "/usr/share/man/man1/sha384sum.1.gz",
            "/usr/share/man/man1/sha512sum.1.gz",
            "/usr/share/man/man1/shred.1.gz",
            "/usr/share/man/man1/shuf.1.gz",
            "/usr/share/man/man1/sleep.1.gz",
            "/usr/share/man/man1/sort.1.gz",
            "/usr/share/man/man1/split.1.gz",
            "/usr/share/man/man1/stat.1.gz",
            "/usr/share/man/man1/stdbuf.1.gz",
            "/usr/share/man/man1/stty.1.gz",
            "/usr/share/man/man1/sum.1.gz",
            "/usr/share/man/man1/sync.1.gz",
            "/usr/share/man/man1/tac.1.gz",
            "/usr/share/man/man1/tail.1.gz",
            "/usr/share/man/man1/tee.1.gz",
            "/usr/share/man/man1/test.1.gz",
            "/usr/share/man/man1/timeout.1.gz",
            "/usr/share/man/man1/touch.1.gz",
            "/usr/share/man/man1/tr.1.gz",
            "/usr/share/man/man1/true.1.gz",
            "/usr/share/man/man1/truncate.1.gz",
            "/usr/share/man/man1/tsort.1.gz",
            "/usr/share/man/man1/tty.1.gz",
            "/usr/share/man/man1/uname.1.gz",
            "/usr/share/man/man1/unexpand.1.gz",
            "/usr/share/man/man1/uniq.1.gz",
            "/usr/share/man/man1/unlink.1.gz",
            "/usr/share/man/man1/users.1.gz",
            "/usr/share/man/man1/vdir.1.gz",
            "/usr/share/man/man1/wc.1.gz",
            "/usr/share/man/man1/who.1.gz",
            "/usr/share/man/man1/whoami.1.gz",
            "/usr/share/man/man1/yes.1.gz",
            "/usr/share/man/man8/chroot.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "dash@0.5.12-2",
          "Name": "dash",
          "Identifier": {
            "PURL": "pkg:deb/debian/dash@0.5.12-2?arch=amd64\u0026distro=debian-12.15",
            "UID": "6af8d86712be6c51"
          },
          "Version": "0.5.12",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "dash",
          "SrcVersion": "0.5.12",
          "SrcRelease": "2",
          "Licenses": [
            "BSD-3-Clause",
            "public-domain",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Andrej Shadura \u003candrewsh@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "debianutils@5.7-0.5~deb12u1",
            "dpkg@1.21.23"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/bin/dash",
            "/usr/share/debianutils/shells.d/dash",
            "/usr/share/doc/dash/NEWS.Debian.gz",
            "/usr/share/doc/dash/README.Debian.diet",
            "/usr/share/doc/dash/README.source",
            "/usr/share/doc/dash/changelog.Debian.gz",
            "/usr/share/doc/dash/changelog.gz",
            "/usr/share/doc/dash/copyright",
            "/usr/share/lintian/overrides/dash",
            "/usr/share/man/man1/dash.1.gz",
            "/usr/share/menu/dash"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "debconf@1.5.82",
          "Name": "debconf",
          "Identifier": {
            "PURL": "pkg:deb/debian/debconf@1.5.82?arch=all\u0026distro=debian-12.15",
            "UID": "7031db14643b8375"
          },
          "Version": "1.5.82",
          "Arch": "all",
          "SrcName": "debconf",
          "SrcVersion": "1.5.82",
          "Licenses": [
            "BSD-2-Clause"
          ],
          "Maintainer": "Debconf Developers \u003cdebconf-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/bin/debconf",
            "/usr/bin/debconf-apt-progress",
            "/usr/bin/debconf-communicate",
            "/usr/bin/debconf-copydb",
            "/usr/bin/debconf-escape",
            "/usr/bin/debconf-set-selections",
            "/usr/bin/debconf-show",
            "/usr/sbin/dpkg-preconfigure",
            "/usr/sbin/dpkg-reconfigure",
            "/usr/share/bash-completion/completions/debconf",
            "/usr/share/debconf/confmodule",
            "/usr/share/debconf/confmodule.sh",
            "/usr/share/debconf/debconf.conf",
            "/usr/share/debconf/fix_db.pl",
            "/usr/share/debconf/frontend",
            "/usr/share/doc/debconf/NEWS.Debian.gz",
            "/usr/share/doc/debconf/README.Debian",
            "/usr/share/doc/debconf/changelog.gz",
            "/usr/share/doc/debconf/copyright",
            "/usr/share/lintian/overrides/debconf",
            "/usr/share/man/man1/debconf-apt-progress.1.gz",
            "/usr/share/man/man1/debconf-communicate.1.gz",
            "/usr/share/man/man1/debconf-copydb.1.gz",
            "/usr/share/man/man1/debconf-escape.1.gz",
            "/usr/share/man/man1/debconf-set-selections.1.gz",
            "/usr/share/man/man1/debconf-show.1.gz",
            "/usr/share/man/man1/debconf.1.gz",
            "/usr/share/man/man8/dpkg-preconfigure.8.gz",
            "/usr/share/man/man8/dpkg-reconfigure.8.gz",
            "/usr/share/perl5/Debconf/AutoSelect.pm",
            "/usr/share/perl5/Debconf/Base.pm",
            "/usr/share/perl5/Debconf/Client/ConfModule.pm",
            "/usr/share/perl5/Debconf/ConfModule.pm",
            "/usr/share/perl5/Debconf/Config.pm",
            "/usr/share/perl5/Debconf/Db.pm",
            "/usr/share/perl5/Debconf/DbDriver.pm",
            "/usr/share/perl5/Debconf/DbDriver/Backup.pm",
            "/usr/share/perl5/Debconf/DbDriver/Cache.pm",
            "/usr/share/perl5/Debconf/DbDriver/Copy.pm",
            "/usr/share/perl5/Debconf/DbDriver/Debug.pm",
            "/usr/share/perl5/Debconf/DbDriver/DirTree.pm",
            "/usr/share/perl5/Debconf/DbDriver/Directory.pm",
            "/usr/share/perl5/Debconf/DbDriver/File.pm",
            "/usr/share/perl5/Debconf/DbDriver/LDAP.pm",
            "/usr/share/perl5/Debconf/DbDriver/PackageDir.pm",
            "/usr/share/perl5/Debconf/DbDriver/Pipe.pm",
            "/usr/share/perl5/Debconf/DbDriver/Stack.pm",
            "/usr/share/perl5/Debconf/Element.pm",
            "/usr/share/perl5/Debconf/Element/Dialog/Boolean.pm",
            "/usr/share/perl5/Debconf/Element/Dialog/Error.pm",
            "/usr/share/perl5/Debconf/Element/Dialog/Multiselect.pm",
            "/usr/share/perl5/Debconf/Element/Dialog/Note.pm",
            "/usr/share/perl5/Debconf/Element/Dialog/Password.pm",
            "/usr/share/perl5/Debconf/Element/Dialog/Progress.pm",
            "/usr/share/perl5/Debconf/Element/Dialog/Select.pm",
            "/usr/share/perl5/Debconf/Element/Dialog/String.pm",
            "/usr/share/perl5/Debconf/Element/Dialog/Text.pm",
            "/usr/share/perl5/Debconf/Element/Editor/Boolean.pm",
            "/usr/share/perl5/Debconf/Element/Editor/Error.pm",
            "/usr/share/perl5/Debconf/Element/Editor/Multiselect.pm",
            "/usr/share/perl5/Debconf/Element/Editor/Note.pm",
            "/usr/share/perl5/Debconf/Element/Editor/Password.pm",
            "/usr/share/perl5/Debconf/Element/Editor/Progress.pm",
            "/usr/share/perl5/Debconf/Element/Editor/Select.pm",
            "/usr/share/perl5/Debconf/Element/Editor/String.pm",
            "/usr/share/perl5/Debconf/Element/Editor/Text.pm",
            "/usr/share/perl5/Debconf/Element/Gnome.pm",
            "/usr/share/perl5/Debconf/Element/Gnome/Boolean.pm",
            "/usr/share/perl5/Debconf/Element/Gnome/Error.pm",
            "/usr/share/perl5/Debconf/Element/Gnome/Multiselect.pm",
            "/usr/share/perl5/Debconf/Element/Gnome/Note.pm",
            "/usr/share/perl5/Debconf/Element/Gnome/Password.pm",
            "/usr/share/perl5/Debconf/Element/Gnome/Progress.pm",
            "/usr/share/perl5/Debconf/Element/Gnome/Select.pm",
            "/usr/share/perl5/Debconf/Element/Gnome/String.pm",
            "/usr/share/perl5/Debconf/Element/Gnome/Text.pm",
            "/usr/share/perl5/Debconf/Element/Multiselect.pm",
            "/usr/share/perl5/Debconf/Element/Noninteractive.pm",
            "/usr/share/perl5/Debconf/Element/Noninteractive/Boolean.pm",
            "/usr/share/perl5/Debconf/Element/Noninteractive/Error.pm",
            "/usr/share/perl5/Debconf/Element/Noninteractive/Multiselect.pm",
            "/usr/share/perl5/Debconf/Element/Noninteractive/Note.pm",
            "/usr/share/perl5/Debconf/Element/Noninteractive/Password.pm",
            "/usr/share/perl5/Debconf/Element/Noninteractive/Progress.pm",
            "/usr/share/perl5/Debconf/Element/Noninteractive/Select.pm",
            "/usr/share/perl5/Debconf/Element/Noninteractive/String.pm",
            "/usr/share/perl5/Debconf/Element/Noninteractive/Text.pm",
            "/usr/share/perl5/Debconf/Element/Select.pm",
            "/usr/share/perl5/Debconf/Element/Teletype/Boolean.pm",
            "/usr/share/perl5/Debconf/Element/Teletype/Error.pm",
            "/usr/share/perl5/Debconf/Element/Teletype/Multiselect.pm",
            "/usr/share/perl5/Debconf/Element/Teletype/Note.pm",
            "/usr/share/perl5/Debconf/Element/Teletype/Password.pm",
            "/usr/share/perl5/Debconf/Element/Teletype/Progress.pm",
            "/usr/share/perl5/Debconf/Element/Teletype/Select.pm",
            "/usr/share/perl5/Debconf/Element/Teletype/String.pm",
            "/usr/share/perl5/Debconf/Element/Teletype/Text.pm",
            "/usr/share/perl5/Debconf/Element/Web/Boolean.pm",
            "/usr/share/perl5/Debconf/Element/Web/Error.pm",
            "/usr/share/perl5/Debconf/Element/Web/Multiselect.pm",
            "/usr/share/perl5/Debconf/Element/Web/Note.pm",
            "/usr/share/perl5/Debconf/Element/Web/Password.pm",
            "/usr/share/perl5/Debconf/Element/Web/Progress.pm",
            "/usr/share/perl5/Debconf/Element/Web/Select.pm",
            "/usr/share/perl5/Debconf/Element/Web/String.pm",
            "/usr/share/perl5/Debconf/Element/Web/Text.pm",
            "/usr/share/perl5/Debconf/Encoding.pm",
            "/usr/share/perl5/Debconf/Format.pm",
            "/usr/share/perl5/Debconf/Format/822.pm",
            "/usr/share/perl5/Debconf/FrontEnd.pm",
            "/usr/share/perl5/Debconf/FrontEnd/Dialog.pm",
            "/usr/share/perl5/Debconf/FrontEnd/Editor.pm",
            "/usr/share/perl5/Debconf/FrontEnd/Gnome.pm",
            "/usr/share/perl5/Debconf/FrontEnd/Kde.pm",
            "/usr/share/perl5/Debconf/FrontEnd/Noninteractive.pm",
            "/usr/share/perl5/Debconf/FrontEnd/Passthrough.pm",
            "/usr/share/perl5/Debconf/FrontEnd/Readline.pm",
            "/usr/share/perl5/Debconf/FrontEnd/ScreenSize.pm",
            "/usr/share/perl5/Debconf/FrontEnd/Teletype.pm",
            "/usr/share/perl5/Debconf/FrontEnd/Text.pm",
            "/usr/share/perl5/Debconf/FrontEnd/Web.pm",
            "/usr/share/perl5/Debconf/Gettext.pm",
            "/usr/share/perl5/Debconf/Iterator.pm",
            "/usr/share/perl5/Debconf/Log.pm",
            "/usr/share/perl5/Debconf/Path.pm",
            "/usr/share/perl5/Debconf/Priority.pm",
            "/usr/share/perl5/Debconf/Question.pm",
            "/usr/share/perl5/Debconf/Template.pm",
            "/usr/share/perl5/Debconf/Template/Transient.pm",
            "/usr/share/perl5/Debconf/TmpFile.pm",
            "/usr/share/perl5/Debian/DebConf/Client/ConfModule.pm",
            "/usr/share/pixmaps/debian-logo.png"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "debian-archive-keyring@2023.3+deb12u2",
          "Name": "debian-archive-keyring",
          "Identifier": {
            "PURL": "pkg:deb/debian/debian-archive-keyring@2023.3%2Bdeb12u2?arch=all\u0026distro=debian-12.15",
            "UID": "eaf3ce116c1e926d"
          },
          "Version": "2023.3+deb12u2",
          "Arch": "all",
          "SrcName": "debian-archive-keyring",
          "SrcVersion": "2023.3+deb12u2",
          "Licenses": [
            "GPL-2.0-or-later"
          ],
          "Maintainer": "Debian Release Team \u003cpackages@release.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/share/doc/debian-archive-keyring/README",
            "/usr/share/doc/debian-archive-keyring/changelog.gz",
            "/usr/share/doc/debian-archive-keyring/copyright",
            "/usr/share/keyrings/debian-archive-bookworm-automatic.gpg",
            "/usr/share/keyrings/debian-archive-bookworm-security-automatic.gpg",
            "/usr/share/keyrings/debian-archive-bookworm-stable.gpg",
            "/usr/share/keyrings/debian-archive-bullseye-automatic.gpg",
            "/usr/share/keyrings/debian-archive-bullseye-security-automatic.gpg",
            "/usr/share/keyrings/debian-archive-bullseye-stable.gpg",
            "/usr/share/keyrings/debian-archive-keyring.gpg",
            "/usr/share/keyrings/debian-archive-removed-keys.gpg",
            "/usr/share/keyrings/debian-archive-trixie-automatic.gpg",
            "/usr/share/keyrings/debian-archive-trixie-security-automatic.gpg",
            "/usr/share/keyrings/debian-archive-trixie-stable.gpg"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "debianutils@5.7-0.5~deb12u1",
          "Name": "debianutils",
          "Identifier": {
            "PURL": "pkg:deb/debian/debianutils@5.7-0.5~deb12u1?arch=amd64\u0026distro=debian-12.15",
            "UID": "e0076698ca6b7339"
          },
          "Version": "5.7",
          "Release": "0.5~deb12u1",
          "Arch": "amd64",
          "SrcName": "debianutils",
          "SrcVersion": "5.7",
          "SrcRelease": "0.5~deb12u1",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "public-domain",
            "SMAIL-GPL"
          ],
          "Maintainer": "Clint Adams \u003cclint@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/bin/run-parts",
            "/bin/tempfile",
            "/sbin/installkernel",
            "/usr/bin/ischroot",
            "/usr/bin/savelog",
            "/usr/bin/which.debianutils",
            "/usr/sbin/add-shell",
            "/usr/sbin/remove-shell",
            "/usr/sbin/update-shells",
            "/usr/share/debianutils/shells",
            "/usr/share/doc/debianutils/README.shells.gz",
            "/usr/share/doc/debianutils/changelog.Debian.gz",
            "/usr/share/doc/debianutils/changelog.gz",
            "/usr/share/doc/debianutils/copyright",
            "/usr/share/man/de/man1/which.debianutils.1.gz",
            "/usr/share/man/de/man8/add-shell.8.gz",
            "/usr/share/man/de/man8/installkernel.8.gz",
            "/usr/share/man/de/man8/remove-shell.8.gz",
            "/usr/share/man/de/man8/run-parts.8.gz",
            "/usr/share/man/de/man8/savelog.8.gz",
            "/usr/share/man/es/man1/which.debianutils.1.gz",
            "/usr/share/man/es/man8/add-shell.8.gz",
            "/usr/share/man/es/man8/installkernel.8.gz",
            "/usr/share/man/es/man8/remove-shell.8.gz",
            "/usr/share/man/es/man8/run-parts.8.gz",
            "/usr/share/man/es/man8/savelog.8.gz",
            "/usr/share/man/fr/man1/which.debianutils.1.gz",
            "/usr/share/man/fr/man8/add-shell.8.gz",
            "/usr/share/man/fr/man8/installkernel.8.gz",
            "/usr/share/man/fr/man8/remove-shell.8.gz",
            "/usr/share/man/fr/man8/run-parts.8.gz",
            "/usr/share/man/fr/man8/savelog.8.gz",
            "/usr/share/man/it/man1/which.debianutils.1.gz",
            "/usr/share/man/it/man8/add-shell.8.gz",
            "/usr/share/man/it/man8/installkernel.8.gz",
            "/usr/share/man/it/man8/remove-shell.8.gz",
            "/usr/share/man/it/man8/run-parts.8.gz",
            "/usr/share/man/it/man8/savelog.8.gz",
            "/usr/share/man/ja/man1/which.debianutils.1.gz",
            "/usr/share/man/ja/man8/add-shell.8.gz",
            "/usr/share/man/ja/man8/installkernel.8.gz",
            "/usr/share/man/ja/man8/remove-shell.8.gz",
            "/usr/share/man/ja/man8/run-parts.8.gz",
            "/usr/share/man/ja/man8/savelog.8.gz",
            "/usr/share/man/man1/ischroot.1.gz",
            "/usr/share/man/man1/tempfile.1.gz",
            "/usr/share/man/man1/which.debianutils.1.gz",
            "/usr/share/man/man8/add-shell.8.gz",
            "/usr/share/man/man8/installkernel.8.gz",
            "/usr/share/man/man8/remove-shell.8.gz",
            "/usr/share/man/man8/run-parts.8.gz",
            "/usr/share/man/man8/savelog.8.gz",
            "/usr/share/man/man8/update-shells.8.gz",
            "/usr/share/man/pl/man1/which.debianutils.1.gz",
            "/usr/share/man/pl/man8/add-shell.8.gz",
            "/usr/share/man/pl/man8/installkernel.8.gz",
            "/usr/share/man/pl/man8/remove-shell.8.gz",
            "/usr/share/man/pl/man8/run-parts.8.gz",
            "/usr/share/man/pl/man8/savelog.8.gz",
            "/usr/share/man/pt/man1/which.1.gz",
            "/usr/share/man/pt/man8/add-shell.8.gz",
            "/usr/share/man/pt/man8/installkernel.8.gz",
            "/usr/share/man/pt/man8/remove-shell.8.gz",
            "/usr/share/man/pt/man8/run-parts.8.gz",
            "/usr/share/man/pt/man8/savelog.8.gz",
            "/usr/share/man/sl/man1/which.debianutils.1.gz",
            "/usr/share/man/sl/man8/add-shell.8.gz",
            "/usr/share/man/sl/man8/installkernel.8.gz",
            "/usr/share/man/sl/man8/remove-shell.8.gz",
            "/usr/share/man/sl/man8/run-parts.8.gz",
            "/usr/share/man/sl/man8/savelog.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "diffutils@1:3.8-4",
          "Name": "diffutils",
          "Identifier": {
            "PURL": "pkg:deb/debian/diffutils@3.8-4?arch=amd64\u0026distro=debian-12.15\u0026epoch=1",
            "UID": "88676a587026548b"
          },
          "Version": "3.8",
          "Release": "4",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "diffutils",
          "SrcVersion": "3.8",
          "SrcRelease": "4",
          "SrcEpoch": 1,
          "Licenses": [
            "GPL-3.0-or-later",
            "FSFULLR",
            "LGPL-2.1-or-later",
            "GPL-3.0-with-autoconf-exception+",
            "GPL-3.0-only",
            "GPL-3+ with texinfo exception",
            "LGPL-2.0-or-later",
            "GPL-2.0-or-later",
            "X11",
            "FSFAP",
            "GFDL-1.3-no-invariants-only",
            "LGPL-3.0-or-later",
            "LGPL-3.0-only",
            "public-domain",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "GPL-2.0-only",
            "GFDL-1.3-only"
          ],
          "Maintainer": "Santiago Vila \u003csanvila@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/bin/cmp",
            "/usr/bin/diff",
            "/usr/bin/diff3",
            "/usr/bin/sdiff",
            "/usr/share/doc/diffutils/NEWS.gz",
            "/usr/share/doc/diffutils/changelog.Debian.gz",
            "/usr/share/doc/diffutils/changelog.gz",
            "/usr/share/doc/diffutils/copyright",
            "/usr/share/info/diffutils.info.gz",
            "/usr/share/locale/bg/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/ca/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/cs/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/da/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/de/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/el/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/eo/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/es/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/fi/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/fr/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/ga/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/gl/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/he/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/hr/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/hu/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/id/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/it/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/ja/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/lv/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/ms/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/nb/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/nl/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/pl/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/pt/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/ro/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/ru/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/sr/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/sv/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/tr/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/uk/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/vi/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/diffutils.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/diffutils.mo",
            "/usr/share/man/man1/cmp.1.gz",
            "/usr/share/man/man1/diff.1.gz",
            "/usr/share/man/man1/diff3.1.gz",
            "/usr/share/man/man1/sdiff.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "dpkg@1.21.23",
          "Name": "dpkg",
          "Identifier": {
            "PURL": "pkg:deb/debian/dpkg@1.21.23?arch=amd64\u0026distro=debian-12.15",
            "UID": "2e1d958a3913bf70"
          },
          "Version": "1.21.23",
          "Arch": "amd64",
          "SrcName": "dpkg",
          "SrcVersion": "1.21.23",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "BSD-2-Clause",
            "public-domain-s-s-d"
          ],
          "Maintainer": "Dpkg Developers \u003cdebian-dpkg@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "tar@1.34+dfsg-1.2+deb12u1"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/systemd/system/dpkg-db-backup.service",
            "/lib/systemd/system/dpkg-db-backup.timer",
            "/sbin/start-stop-daemon",
            "/usr/bin/dpkg",
            "/usr/bin/dpkg-deb",
            "/usr/bin/dpkg-divert",
            "/usr/bin/dpkg-maintscript-helper",
            "/usr/bin/dpkg-query",
            "/usr/bin/dpkg-realpath",
            "/usr/bin/dpkg-split",
            "/usr/bin/dpkg-statoverride",
            "/usr/bin/dpkg-trigger",
            "/usr/bin/update-alternatives",
            "/usr/libexec/dpkg/dpkg-db-backup",
            "/usr/sbin/dpkg-fsys-usrunmess",
            "/usr/share/bug/dpkg",
            "/usr/share/doc/dpkg/AUTHORS",
            "/usr/share/doc/dpkg/README.api",
            "/usr/share/doc/dpkg/README.bug-usertags.gz",
            "/usr/share/doc/dpkg/README.feature-removal-schedule.gz",
            "/usr/share/doc/dpkg/THANKS.gz",
            "/usr/share/doc/dpkg/changelog.gz",
            "/usr/share/doc/dpkg/copyright",
            "/usr/share/dpkg/abitable",
            "/usr/share/dpkg/cputable",
            "/usr/share/dpkg/ostable",
            "/usr/share/dpkg/sh/dpkg-error.sh",
            "/usr/share/dpkg/tupletable",
            "/usr/share/lintian/overrides/dpkg",
            "/usr/share/lintian/profiles/dpkg/main.profile",
            "/usr/share/locale/ast/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/bs/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/ca/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/cs/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/da/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/de/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/dz/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/el/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/eo/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/es/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/et/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/eu/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/fr/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/gl/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/hu/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/id/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/it/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/ja/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/km/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/ko/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/ku/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/lt/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/mr/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/nb/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/ne/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/nl/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/nn/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/oc/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/pa/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/pl/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/pt/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/ro/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/ru/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/sk/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/sv/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/th/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/tl/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/tr/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/vi/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/dpkg.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/dpkg.mo",
            "/usr/share/man/de/man1/dpkg-deb.1.gz",
            "/usr/share/man/de/man1/dpkg-divert.1.gz",
            "/usr/share/man/de/man1/dpkg-maintscript-helper.1.gz",
            "/usr/share/man/de/man1/dpkg-query.1.gz",
            "/usr/share/man/de/man1/dpkg-realpath.1.gz",
            "/usr/share/man/de/man1/dpkg-split.1.gz",
            "/usr/share/man/de/man1/dpkg-statoverride.1.gz",
            "/usr/share/man/de/man1/dpkg-trigger.1.gz",
            "/usr/share/man/de/man1/dpkg.1.gz",
            "/usr/share/man/de/man1/update-alternatives.1.gz",
            "/usr/share/man/de/man5/dpkg.cfg.5.gz",
            "/usr/share/man/de/man8/dpkg-fsys-usrunmess.8.gz",
            "/usr/share/man/de/man8/start-stop-daemon.8.gz",
            "/usr/share/man/es/man1/dpkg-split.1.gz",
            "/usr/share/man/es/man5/dpkg.cfg.5.gz",
            "/usr/share/man/fr/man1/dpkg-deb.1.gz",
            "/usr/share/man/fr/man1/dpkg-divert.1.gz",
            "/usr/share/man/fr/man1/dpkg-maintscript-helper.1.gz",
            "/usr/share/man/fr/man1/dpkg-query.1.gz",
            "/usr/share/man/fr/man1/dpkg-realpath.1.gz",
            "/usr/share/man/fr/man1/dpkg-split.1.gz",
            "/usr/share/man/fr/man1/dpkg-statoverride.1.gz",
            "/usr/share/man/fr/man1/dpkg-trigger.1.gz",
            "/usr/share/man/fr/man1/dpkg.1.gz",
            "/usr/share/man/fr/man1/update-alternatives.1.gz",
            "/usr/share/man/fr/man5/dpkg.cfg.5.gz",
            "/usr/share/man/fr/man8/dpkg-fsys-usrunmess.8.gz",
            "/usr/share/man/fr/man8/start-stop-daemon.8.gz",
            "/usr/share/man/hu/man5/dpkg.cfg.5.gz",
            "/usr/share/man/it/man1/dpkg-split.1.gz",
            "/usr/share/man/it/man5/dpkg.cfg.5.gz",
            "/usr/share/man/ja/man1/dpkg-split.1.gz",
            "/usr/share/man/ja/man5/dpkg.cfg.5.gz",
            "/usr/share/man/man1/dpkg-deb.1.gz",
            "/usr/share/man/man1/dpkg-divert.1.gz",
            "/usr/share/man/man1/dpkg-maintscript-helper.1.gz",
            "/usr/share/man/man1/dpkg-query.1.gz",
            "/usr/share/man/man1/dpkg-realpath.1.gz",
            "/usr/share/man/man1/dpkg-split.1.gz",
            "/usr/share/man/man1/dpkg-statoverride.1.gz",
            "/usr/share/man/man1/dpkg-trigger.1.gz",
            "/usr/share/man/man1/dpkg.1.gz",
            "/usr/share/man/man1/update-alternatives.1.gz",
            "/usr/share/man/man5/dpkg.cfg.5.gz",
            "/usr/share/man/man8/dpkg-fsys-usrunmess.8.gz",
            "/usr/share/man/man8/start-stop-daemon.8.gz",
            "/usr/share/man/nl/man1/dpkg-deb.1.gz",
            "/usr/share/man/nl/man1/dpkg-divert.1.gz",
            "/usr/share/man/nl/man1/dpkg-maintscript-helper.1.gz",
            "/usr/share/man/nl/man1/dpkg-query.1.gz",
            "/usr/share/man/nl/man1/dpkg-realpath.1.gz",
            "/usr/share/man/nl/man1/dpkg-split.1.gz",
            "/usr/share/man/nl/man1/dpkg-statoverride.1.gz",
            "/usr/share/man/nl/man1/dpkg-trigger.1.gz",
            "/usr/share/man/nl/man1/dpkg.1.gz",
            "/usr/share/man/nl/man1/update-alternatives.1.gz",
            "/usr/share/man/nl/man5/dpkg.cfg.5.gz",
            "/usr/share/man/nl/man8/dpkg-fsys-usrunmess.8.gz",
            "/usr/share/man/nl/man8/start-stop-daemon.8.gz",
            "/usr/share/man/pl/man1/dpkg-split.1.gz",
            "/usr/share/man/pl/man5/dpkg.cfg.5.gz",
            "/usr/share/man/pt/man1/dpkg-deb.1.gz",
            "/usr/share/man/pt/man1/dpkg-divert.1.gz",
            "/usr/share/man/pt/man1/dpkg-maintscript-helper.1.gz",
            "/usr/share/man/pt/man1/dpkg-query.1.gz",
            "/usr/share/man/pt/man1/dpkg-realpath.1.gz",
            "/usr/share/man/pt/man1/dpkg-split.1.gz",
            "/usr/share/man/pt/man1/dpkg-statoverride.1.gz",
            "/usr/share/man/pt/man1/dpkg-trigger.1.gz",
            "/usr/share/man/pt/man1/dpkg.1.gz",
            "/usr/share/man/pt/man1/update-alternatives.1.gz",
            "/usr/share/man/pt/man5/dpkg.cfg.5.gz",
            "/usr/share/man/pt/man8/dpkg-fsys-usrunmess.8.gz",
            "/usr/share/man/pt/man8/start-stop-daemon.8.gz",
            "/usr/share/man/sv/man1/dpkg-deb.1.gz",
            "/usr/share/man/sv/man1/dpkg-divert.1.gz",
            "/usr/share/man/sv/man1/dpkg-maintscript-helper.1.gz",
            "/usr/share/man/sv/man1/dpkg-query.1.gz",
            "/usr/share/man/sv/man1/dpkg-realpath.1.gz",
            "/usr/share/man/sv/man1/dpkg-split.1.gz",
            "/usr/share/man/sv/man1/dpkg-statoverride.1.gz",
            "/usr/share/man/sv/man1/dpkg-trigger.1.gz",
            "/usr/share/man/sv/man1/dpkg.1.gz",
            "/usr/share/man/sv/man1/update-alternatives.1.gz",
            "/usr/share/man/sv/man5/dpkg.cfg.5.gz",
            "/usr/share/man/sv/man8/dpkg-fsys-usrunmess.8.gz",
            "/usr/share/man/sv/man8/start-stop-daemon.8.gz",
            "/usr/share/polkit-1/actions/org.dpkg.pkexec.update-alternatives.policy"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "e2fsprogs@1.47.0-2+b2",
          "Name": "e2fsprogs",
          "Identifier": {
            "PURL": "pkg:deb/debian/e2fsprogs@1.47.0-2%2Bb2?arch=amd64\u0026distro=debian-12.15",
            "UID": "6fae48e2d7b7859d"
          },
          "Version": "1.47.0",
          "Release": "2+b2",
          "Arch": "amd64",
          "SrcName": "e2fsprogs",
          "SrcVersion": "1.47.0",
          "SrcRelease": "2",
          "Licenses": [
            "GPL-2.0-only",
            "LGPL-2.0-only",
            "BSD-3-Clause",
            "Apache-2.0",
            "ISC",
            "GPL-2.0-or-later",
            "MIT-US-export",
            "Kazlib",
            "Latex2e",
            "GPL-2+ with Texinfo exception"
          ],
          "Maintainer": "Theodore Y. Ts'o \u003ctytso@mit.edu\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "logsave@1.47.0-2+b2"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/systemd/system/e2scrub@.service",
            "/lib/systemd/system/e2scrub_all.service",
            "/lib/systemd/system/e2scrub_all.timer",
            "/lib/systemd/system/e2scrub_fail@.service",
            "/lib/systemd/system/e2scrub_reap.service",
            "/lib/udev/rules.d/96-e2scrub.rules",
            "/sbin/badblocks",
            "/sbin/debugfs",
            "/sbin/dumpe2fs",
            "/sbin/e2fsck",
            "/sbin/e2image",
            "/sbin/e2scrub",
            "/sbin/e2scrub_all",
            "/sbin/e2undo",
            "/sbin/mke2fs",
            "/sbin/resize2fs",
            "/sbin/tune2fs",
            "/usr/bin/chattr",
            "/usr/bin/lsattr",
            "/usr/lib/x86_64-linux-gnu/e2fsprogs/e2scrub_all_cron",
            "/usr/lib/x86_64-linux-gnu/e2fsprogs/e2scrub_fail",
            "/usr/sbin/e2freefrag",
            "/usr/sbin/e4crypt",
            "/usr/sbin/e4defrag",
            "/usr/sbin/filefrag",
            "/usr/sbin/mklost+found",
            "/usr/share/doc/e2fsprogs/NEWS.gz",
            "/usr/share/doc/e2fsprogs/README",
            "/usr/share/doc/e2fsprogs/changelog.Debian.amd64.gz",
            "/usr/share/doc/e2fsprogs/changelog.Debian.gz",
            "/usr/share/doc/e2fsprogs/copyright",
            "/usr/share/lintian/overrides/e2fsprogs",
            "/usr/share/man/man1/chattr.1.gz",
            "/usr/share/man/man1/lsattr.1.gz",
            "/usr/share/man/man5/e2fsck.conf.5.gz",
            "/usr/share/man/man5/ext4.5.gz",
            "/usr/share/man/man5/mke2fs.conf.5.gz",
            "/usr/share/man/man8/badblocks.8.gz",
            "/usr/share/man/man8/debugfs.8.gz",
            "/usr/share/man/man8/dumpe2fs.8.gz",
            "/usr/share/man/man8/e2freefrag.8.gz",
            "/usr/share/man/man8/e2fsck.8.gz",
            "/usr/share/man/man8/e2image.8.gz",
            "/usr/share/man/man8/e2label.8.gz",
            "/usr/share/man/man8/e2mmpstatus.8.gz",
            "/usr/share/man/man8/e2scrub.8.gz",
            "/usr/share/man/man8/e2scrub_all.8.gz",
            "/usr/share/man/man8/e2undo.8.gz",
            "/usr/share/man/man8/e4crypt.8.gz",
            "/usr/share/man/man8/e4defrag.8.gz",
            "/usr/share/man/man8/filefrag.8.gz",
            "/usr/share/man/man8/mke2fs.8.gz",
            "/usr/share/man/man8/mklost+found.8.gz",
            "/usr/share/man/man8/resize2fs.8.gz",
            "/usr/share/man/man8/tune2fs.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "findutils@4.9.0-4",
          "Name": "findutils",
          "Identifier": {
            "PURL": "pkg:deb/debian/findutils@4.9.0-4?arch=amd64\u0026distro=debian-12.15",
            "UID": "bd0eb429e40f4af1"
          },
          "Version": "4.9.0",
          "Release": "4",
          "Arch": "amd64",
          "SrcName": "findutils",
          "SrcVersion": "4.9.0",
          "SrcRelease": "4",
          "Licenses": [
            "GFDL-1.3-no-invariants-or-later",
            "GPL-3.0-or-later",
            "FSFAP",
            "GPL-3+ with Autoconf-data exception",
            "FSFULLR",
            "GPL-2+ with Autoconf-data exception",
            "GPL-2.0-or-later",
            "X11",
            "public-domain",
            "GPL with automake exception",
            "LGPL-2.1-or-later",
            "LGPL-2.0-or-later",
            "LGPL-3.0-or-later",
            "BSD-3-clause and/or GPL-3+",
            "GPL-3+ with Bison-2.2 exception",
            "LGPL-3.0-only",
            "ISC and/or LGPL-2.1+",
            "BSD-3-Clause",
            "GFDL-1.3-only",
            "GPL-2.0-only",
            "GPL-3.0-only",
            "ISC",
            "LGPL-2.0-only",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Andreas Metzler \u003cametzler@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/bin/find",
            "/usr/bin/xargs",
            "/usr/share/doc-base/findutils.findutils",
            "/usr/share/doc/findutils/NEWS.Debian.gz",
            "/usr/share/doc/findutils/NEWS.gz",
            "/usr/share/doc/findutils/README.gz",
            "/usr/share/doc/findutils/TODO",
            "/usr/share/doc/findutils/changelog.Debian.gz",
            "/usr/share/doc/findutils/changelog.gz",
            "/usr/share/doc/findutils/copyright",
            "/usr/share/info/find-maint.info.gz",
            "/usr/share/info/find.info-1.gz",
            "/usr/share/info/find.info-2.gz",
            "/usr/share/info/find.info.gz",
            "/usr/share/locale/be/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/bg/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/ca/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/cs/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/da/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/de/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/el/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/eo/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/es/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/et/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/fi/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/fr/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/ga/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/gl/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/hr/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/hu/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/id/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/it/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/ja/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/ko/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/lg/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/lt/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/ms/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/nb/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/nl/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/pl/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/pt/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/ro/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/ru/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/sk/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/sl/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/sr/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/sv/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/tr/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/uk/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/vi/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/findutils.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/findutils.mo",
            "/usr/share/man/man1/find.1.gz",
            "/usr/share/man/man1/xargs.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "gcc-12-base@12.2.0-14+deb12u1",
          "Name": "gcc-12-base",
          "Identifier": {
            "PURL": "pkg:deb/debian/gcc-12-base@12.2.0-14%2Bdeb12u1?arch=amd64\u0026distro=debian-12.15",
            "UID": "4cdf3a9f4926a4"
          },
          "Version": "12.2.0",
          "Release": "14+deb12u1",
          "Arch": "amd64",
          "SrcName": "gcc-12",
          "SrcVersion": "12.2.0",
          "SrcRelease": "14+deb12u1",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-3.0-only",
            "GFDL-1.2-only",
            "GPL-2.0-only",
            "Artistic-2.0",
            "LGPL-2.0-or-later"
          ],
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/share/doc/gcc-12-base/README.Debian.amd64.gz",
            "/usr/share/doc/gcc-12-base/TODO.Debian",
            "/usr/share/doc/gcc-12-base/changelog.Debian.gz",
            "/usr/share/doc/gcc-12-base/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "gpgv@2.2.40-1.1+deb12u2",
          "Name": "gpgv",
          "Identifier": {
            "PURL": "pkg:deb/debian/gpgv@2.2.40-1.1%2Bdeb12u2?arch=amd64\u0026distro=debian-12.15",
            "UID": "64286f6c7d0c92ee"
          },
          "Version": "2.2.40",
          "Release": "1.1+deb12u2",
          "Arch": "amd64",
          "SrcName": "gnupg2",
          "SrcVersion": "2.2.40",
          "SrcRelease": "1.1+deb12u2",
          "Licenses": [
            "GPL-3.0-or-later",
            "permissive",
            "LGPL-2.1-or-later",
            "MIT",
            "BSD-3-Clause",
            "LGPL-3.0-or-later",
            "RFC-Reference",
            "TinySCHEME",
            "CC0-1.0",
            "GPL-3.0-only",
            "LGPL-3.0-only",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Debian GnuPG Maintainers \u003cpkg-gnupg-maint@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libbz2-1.0@1.0.8-5+b1",
            "libc6@2.36-9+deb12u14",
            "libgcrypt20@1.10.1-3+deb12u1",
            "libgpg-error0@1.46-1",
            "zlib1g@1:1.2.13.dfsg-1"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/bin/gpgv",
            "/usr/share/doc/gpgv/NEWS.Debian.gz",
            "/usr/share/doc/gpgv/changelog.Debian.gz",
            "/usr/share/doc/gpgv/changelog.gz",
            "/usr/share/doc/gpgv/copyright",
            "/usr/share/man/man1/gpgv.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "grep@3.8-5",
          "Name": "grep",
          "Identifier": {
            "PURL": "pkg:deb/debian/grep@3.8-5?arch=amd64\u0026distro=debian-12.15",
            "UID": "6bd0b786cc1d6e8f"
          },
          "Version": "3.8",
          "Release": "5",
          "Arch": "amd64",
          "SrcName": "grep",
          "SrcVersion": "3.8",
          "SrcRelease": "5",
          "Licenses": [
            "GPL-3.0-or-later",
            "GPL-3.0-only"
          ],
          "Maintainer": "Anibal Monsalve Salazar \u003canibal@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "dpkg@1.21.23"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/bin/egrep",
            "/bin/fgrep",
            "/bin/grep",
            "/usr/bin/rgrep",
            "/usr/share/doc/grep/AUTHORS",
            "/usr/share/doc/grep/NEWS.Debian.gz",
            "/usr/share/doc/grep/NEWS.gz",
            "/usr/share/doc/grep/README",
            "/usr/share/doc/grep/THANKS.gz",
            "/usr/share/doc/grep/TODO.gz",
            "/usr/share/doc/grep/changelog.Debian.gz",
            "/usr/share/doc/grep/changelog.gz",
            "/usr/share/doc/grep/copyright",
            "/usr/share/info/grep.info.gz",
            "/usr/share/locale/af/LC_MESSAGES/grep.mo",
            "/usr/share/locale/be/LC_MESSAGES/grep.mo",
            "/usr/share/locale/bg/LC_MESSAGES/grep.mo",
            "/usr/share/locale/ca/LC_MESSAGES/grep.mo",
            "/usr/share/locale/cs/LC_MESSAGES/grep.mo",
            "/usr/share/locale/da/LC_MESSAGES/grep.mo",
            "/usr/share/locale/de/LC_MESSAGES/grep.mo",
            "/usr/share/locale/el/LC_MESSAGES/grep.mo",
            "/usr/share/locale/eo/LC_MESSAGES/grep.mo",
            "/usr/share/locale/es/LC_MESSAGES/grep.mo",
            "/usr/share/locale/et/LC_MESSAGES/grep.mo",
            "/usr/share/locale/eu/LC_MESSAGES/grep.mo",
            "/usr/share/locale/fi/LC_MESSAGES/grep.mo",
            "/usr/share/locale/fr/LC_MESSAGES/grep.mo",
            "/usr/share/locale/ga/LC_MESSAGES/grep.mo",
            "/usr/share/locale/gl/LC_MESSAGES/grep.mo",
            "/usr/share/locale/he/LC_MESSAGES/grep.mo",
            "/usr/share/locale/hr/LC_MESSAGES/grep.mo",
            "/usr/share/locale/hu/LC_MESSAGES/grep.mo",
            "/usr/share/locale/id/LC_MESSAGES/grep.mo",
            "/usr/share/locale/it/LC_MESSAGES/grep.mo",
            "/usr/share/locale/ja/LC_MESSAGES/grep.mo",
            "/usr/share/locale/ka/LC_MESSAGES/grep.mo",
            "/usr/share/locale/ko/LC_MESSAGES/grep.mo",
            "/usr/share/locale/ky/LC_MESSAGES/grep.mo",
            "/usr/share/locale/lt/LC_MESSAGES/grep.mo",
            "/usr/share/locale/nb/LC_MESSAGES/grep.mo",
            "/usr/share/locale/nl/LC_MESSAGES/grep.mo",
            "/usr/share/locale/pa/LC_MESSAGES/grep.mo",
            "/usr/share/locale/pl/LC_MESSAGES/grep.mo",
            "/usr/share/locale/pt/LC_MESSAGES/grep.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/grep.mo",
            "/usr/share/locale/ro/LC_MESSAGES/grep.mo",
            "/usr/share/locale/ru/LC_MESSAGES/grep.mo",
            "/usr/share/locale/sk/LC_MESSAGES/grep.mo",
            "/usr/share/locale/sl/LC_MESSAGES/grep.mo",
            "/usr/share/locale/sr/LC_MESSAGES/grep.mo",
            "/usr/share/locale/sv/LC_MESSAGES/grep.mo",
            "/usr/share/locale/ta/LC_MESSAGES/grep.mo",
            "/usr/share/locale/th/LC_MESSAGES/grep.mo",
            "/usr/share/locale/tr/LC_MESSAGES/grep.mo",
            "/usr/share/locale/uk/LC_MESSAGES/grep.mo",
            "/usr/share/locale/vi/LC_MESSAGES/grep.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/grep.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/grep.mo",
            "/usr/share/man/man1/grep.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "gzip@1.12-1",
          "Name": "gzip",
          "Identifier": {
            "PURL": "pkg:deb/debian/gzip@1.12-1?arch=amd64\u0026distro=debian-12.15",
            "UID": "e6df36a0bee4727c"
          },
          "Version": "1.12",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "gzip",
          "SrcVersion": "1.12",
          "SrcRelease": "1",
          "Licenses": [
            "GPL-3.0-or-later",
            "GFDL-1.3+-no-invariant",
            "FSF-manpages",
            "GPL-3.0-only",
            "GFDL-3"
          ],
          "Maintainer": "Milan Kupcevic \u003cmilan@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "dpkg@1.21.23"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/bin/gunzip",
            "/bin/gzexe",
            "/bin/gzip",
            "/bin/uncompress",
            "/bin/zcat",
            "/bin/zcmp",
            "/bin/zdiff",
            "/bin/zegrep",
            "/bin/zfgrep",
            "/bin/zforce",
            "/bin/zgrep",
            "/bin/zless",
            "/bin/zmore",
            "/bin/znew",
            "/usr/share/doc/gzip/NEWS.gz",
            "/usr/share/doc/gzip/README.gz",
            "/usr/share/doc/gzip/TODO",
            "/usr/share/doc/gzip/changelog.Debian.gz",
            "/usr/share/doc/gzip/changelog.gz",
            "/usr/share/doc/gzip/copyright",
            "/usr/share/info/gzip.info.gz",
            "/usr/share/man/man1/gzexe.1.gz",
            "/usr/share/man/man1/gzip.1.gz",
            "/usr/share/man/man1/zdiff.1.gz",
            "/usr/share/man/man1/zforce.1.gz",
            "/usr/share/man/man1/zgrep.1.gz",
            "/usr/share/man/man1/zless.1.gz",
            "/usr/share/man/man1/zmore.1.gz",
            "/usr/share/man/man1/znew.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "hostname@3.23+nmu1",
          "Name": "hostname",
          "Identifier": {
            "PURL": "pkg:deb/debian/hostname@3.23%2Bnmu1?arch=amd64\u0026distro=debian-12.15",
            "UID": "ac0861c445a984c2"
          },
          "Version": "3.23+nmu1",
          "Arch": "amd64",
          "SrcName": "hostname",
          "SrcVersion": "3.23+nmu1",
          "Licenses": [
            "GPL-2.0-only"
          ],
          "Maintainer": "Michael Meskes \u003cmeskes@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/bin/hostname",
            "/usr/share/doc/hostname/changelog.gz",
            "/usr/share/doc/hostname/copyright",
            "/usr/share/man/man1/hostname.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "init-system-helpers@1.65.2+deb12u1",
          "Name": "init-system-helpers",
          "Identifier": {
            "PURL": "pkg:deb/debian/init-system-helpers@1.65.2%2Bdeb12u1?arch=all\u0026distro=debian-12.15",
            "UID": "eb19be52d5305b25"
          },
          "Version": "1.65.2+deb12u1",
          "Arch": "all",
          "SrcName": "init-system-helpers",
          "SrcVersion": "1.65.2+deb12u1",
          "Licenses": [
            "BSD-3-Clause",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "usr-is-merged@37~deb12u1"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/bin/deb-systemd-helper",
            "/usr/bin/deb-systemd-invoke",
            "/usr/sbin/invoke-rc.d",
            "/usr/sbin/service",
            "/usr/sbin/update-rc.d",
            "/usr/share/bug/init-system-helpers/control",
            "/usr/share/doc/init-system-helpers/README.invoke-rc.d.gz",
            "/usr/share/doc/init-system-helpers/README.policy-rc.d.gz",
            "/usr/share/doc/init-system-helpers/changelog.gz",
            "/usr/share/doc/init-system-helpers/copyright",
            "/usr/share/lintian/overrides/init-system-helpers",
            "/usr/share/man/man1/deb-systemd-helper.1p.gz",
            "/usr/share/man/man1/deb-systemd-invoke.1p.gz",
            "/usr/share/man/man8/invoke-rc.d.8.gz",
            "/usr/share/man/man8/service.8.gz",
            "/usr/share/man/man8/update-rc.d.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libacl1@2.3.1-3",
          "Name": "libacl1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libacl1@2.3.1-3?arch=amd64\u0026distro=debian-12.15",
            "UID": "7231f68d66ac38b5"
          },
          "Version": "2.3.1",
          "Release": "3",
          "Arch": "amd64",
          "SrcName": "acl",
          "SrcVersion": "2.3.1",
          "SrcRelease": "3",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "LGPL-2.0-or-later",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libacl.so.1.1.2301",
            "/usr/share/doc/libacl1/changelog.Debian.gz",
            "/usr/share/doc/libacl1/changelog.gz",
            "/usr/share/doc/libacl1/copyright",
            "/usr/share/lintian/overrides/libacl1"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libapt-pkg6.0@2.6.1",
          "Name": "libapt-pkg6.0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libapt-pkg6.0@2.6.1?arch=amd64\u0026distro=debian-12.15",
            "UID": "43df2d940f387e5b"
          },
          "Version": "2.6.1",
          "Arch": "amd64",
          "SrcName": "apt",
          "SrcVersion": "2.6.1",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "BSD-3-Clause",
            "MIT"
          ],
          "Maintainer": "APT Development Team \u003cdeity@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libbz2-1.0@1.0.8-5+b1",
            "libc6@2.36-9+deb12u14",
            "libgcc-s1@12.2.0-14+deb12u1",
            "libgcrypt20@1.10.1-3+deb12u1",
            "liblz4-1@1.9.4-1",
            "liblzma5@5.4.1-1+deb12u2",
            "libstdc++6@12.2.0-14+deb12u1",
            "libsystemd0@252.39-1~deb12u2",
            "libudev1@252.39-1~deb12u2",
            "libxxhash0@0.8.1-1",
            "libzstd1@1.5.4+dfsg2-5",
            "zlib1g@1:1.2.13.dfsg-1"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libapt-pkg.so.6.0.0",
            "/usr/share/doc/libapt-pkg6.0/NEWS.Debian.gz",
            "/usr/share/doc/libapt-pkg6.0/changelog.gz",
            "/usr/share/doc/libapt-pkg6.0/copyright",
            "/usr/share/locale/ar/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/ast/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/bg/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/bs/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/ca/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/cs/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/cy/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/da/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/de/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/dz/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/el/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/es/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/eu/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/fi/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/fr/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/gl/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/hu/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/it/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/ja/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/km/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/ko/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/ku/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/lt/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/mr/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/nb/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/ne/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/nl/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/nn/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/pl/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/pt/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/ro/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/ru/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/sk/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/sl/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/sv/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/th/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/tl/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/tr/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/uk/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/vi/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/libapt-pkg6.0.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/libapt-pkg6.0.mo"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libattr1@1:2.5.1-4",
          "Name": "libattr1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libattr1@2.5.1-4?arch=amd64\u0026distro=debian-12.15\u0026epoch=1",
            "UID": "f518c6c499c1b23d"
          },
          "Version": "2.5.1",
          "Release": "4",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "attr",
          "SrcVersion": "2.5.1",
          "SrcRelease": "4",
          "SrcEpoch": 1,
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "LGPL-2.0-or-later",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libattr.so.1.1.2501",
            "/usr/share/doc/libattr1/changelog.Debian.gz",
            "/usr/share/doc/libattr1/changelog.gz",
            "/usr/share/doc/libattr1/copyright",
            "/usr/share/lintian/overrides/libattr1"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libaudit-common@1:3.0.9-1",
          "Name": "libaudit-common",
          "Identifier": {
            "PURL": "pkg:deb/debian/libaudit-common@3.0.9-1?arch=all\u0026distro=debian-12.15\u0026epoch=1",
            "UID": "501d3bae9dbba871"
          },
          "Version": "3.0.9",
          "Release": "1",
          "Epoch": 1,
          "Arch": "all",
          "SrcName": "audit",
          "SrcVersion": "3.0.9",
          "SrcRelease": "1",
          "SrcEpoch": 1,
          "Licenses": [
            "GPL-2.0-only",
            "LGPL-2.1-only",
            "GPL-1.0-only"
          ],
          "Maintainer": "Laurent Bigonville \u003cbigon@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/share/doc/libaudit-common/changelog.Debian.gz",
            "/usr/share/doc/libaudit-common/changelog.gz",
            "/usr/share/doc/libaudit-common/copyright",
            "/usr/share/man/man5/libaudit.conf.5.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libaudit1@1:3.0.9-1",
          "Name": "libaudit1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libaudit1@3.0.9-1?arch=amd64\u0026distro=debian-12.15\u0026epoch=1",
            "UID": "6fa2aa50bb112627"
          },
          "Version": "3.0.9",
          "Release": "1",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "audit",
          "SrcVersion": "3.0.9",
          "SrcRelease": "1",
          "SrcEpoch": 1,
          "Licenses": [
            "GPL-2.0-only",
            "LGPL-2.1-only",
            "GPL-1.0-only"
          ],
          "Maintainer": "Laurent Bigonville \u003cbigon@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libaudit-common@1:3.0.9-1",
            "libc6@2.36-9+deb12u14",
            "libcap-ng0@0.8.3-1+b3"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/x86_64-linux-gnu/libaudit.so.1.0.0",
            "/usr/share/doc/libaudit1/changelog.Debian.gz",
            "/usr/share/doc/libaudit1/changelog.gz",
            "/usr/share/doc/libaudit1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libblkid1@2.38.1-5+deb12u3",
          "Name": "libblkid1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libblkid1@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "ef2ef32fd8f1c6bb"
          },
          "Version": "2.38.1",
          "Release": "5+deb12u3",
          "Arch": "amd64",
          "SrcName": "util-linux",
          "SrcVersion": "2.38.1",
          "SrcRelease": "5+deb12u3",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "public-domain",
            "BSD-4-Clause",
            "MIT",
            "BSD-3-Clause",
            "BSLA",
            "LGPL-2.0-or-later",
            "LGPL-2.1-or-later",
            "LGPL-3.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "util-linux packagers \u003cutil-linux@packages.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libblkid.so.1.1.0",
            "/usr/share/doc/libblkid1/changelog.Debian.gz",
            "/usr/share/doc/libblkid1/changelog.gz",
            "/usr/share/doc/libblkid1/copyright",
            "/usr/share/lintian/overrides/libblkid1"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libbz2-1.0@1.0.8-5+b1",
          "Name": "libbz2-1.0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libbz2-1.0@1.0.8-5%2Bb1?arch=amd64\u0026distro=debian-12.15",
            "UID": "a9f97ed113aa4026"
          },
          "Version": "1.0.8",
          "Release": "5+b1",
          "Arch": "amd64",
          "SrcName": "bzip2",
          "SrcVersion": "1.0.8",
          "SrcRelease": "5",
          "Licenses": [
            "BSD-3-Clause",
            "GPL-2.0-only"
          ],
          "Maintainer": "Anibal Monsalve Salazar \u003canibal@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/x86_64-linux-gnu/libbz2.so.1.0.4",
            "/usr/share/doc/libbz2-1.0/changelog.Debian.amd64.gz",
            "/usr/share/doc/libbz2-1.0/changelog.Debian.gz",
            "/usr/share/doc/libbz2-1.0/changelog.gz",
            "/usr/share/doc/libbz2-1.0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libc-bin@2.36-9+deb12u14",
          "Name": "libc-bin",
          "Identifier": {
            "PURL": "pkg:deb/debian/libc-bin@2.36-9%2Bdeb12u14?arch=amd64\u0026distro=debian-12.15",
            "UID": "fffe74ad3db2b1d6"
          },
          "Version": "2.36",
          "Release": "9+deb12u14",
          "Arch": "amd64",
          "SrcName": "glibc",
          "SrcVersion": "2.36",
          "SrcRelease": "9+deb12u14",
          "Licenses": [
            "LGPL-2.1-only",
            "GPL-2.0-only"
          ],
          "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/sbin/ldconfig",
            "/usr/bin/getconf",
            "/usr/bin/getent",
            "/usr/bin/iconv",
            "/usr/bin/ldd",
            "/usr/bin/locale",
            "/usr/bin/localedef",
            "/usr/bin/pldd",
            "/usr/bin/tzselect",
            "/usr/bin/zdump",
            "/usr/lib/locale/C.utf8/LC_ADDRESS",
            "/usr/lib/locale/C.utf8/LC_COLLATE",
            "/usr/lib/locale/C.utf8/LC_CTYPE",
            "/usr/lib/locale/C.utf8/LC_IDENTIFICATION",
            "/usr/lib/locale/C.utf8/LC_MEASUREMENT",
            "/usr/lib/locale/C.utf8/LC_MESSAGES/SYS_LC_MESSAGES",
            "/usr/lib/locale/C.utf8/LC_MONETARY",
            "/usr/lib/locale/C.utf8/LC_NAME",
            "/usr/lib/locale/C.utf8/LC_NUMERIC",
            "/usr/lib/locale/C.utf8/LC_PAPER",
            "/usr/lib/locale/C.utf8/LC_TELEPHONE",
            "/usr/lib/locale/C.utf8/LC_TIME",
            "/usr/sbin/iconvconfig",
            "/usr/sbin/zic",
            "/usr/share/doc/libc-bin/changelog.Debian.gz",
            "/usr/share/doc/libc-bin/changelog.gz",
            "/usr/share/doc/libc-bin/copyright",
            "/usr/share/libc-bin/nsswitch.conf",
            "/usr/share/lintian/overrides/libc-bin",
            "/usr/share/man/man1/getconf.1.gz",
            "/usr/share/man/man1/tzselect.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libc6@2.36-9+deb12u14",
          "Name": "libc6",
          "Identifier": {
            "PURL": "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=amd64\u0026distro=debian-12.15",
            "UID": "348ed513aa2cf7e9"
          },
          "Version": "2.36",
          "Release": "9+deb12u14",
          "Arch": "amd64",
          "SrcName": "glibc",
          "SrcVersion": "2.36",
          "SrcRelease": "9+deb12u14",
          "Licenses": [
            "LGPL-2.1-only",
            "GPL-2.0-only"
          ],
          "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libgcc-s1@12.2.0-14+deb12u1"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2",
            "/lib/x86_64-linux-gnu/libBrokenLocale.so.1",
            "/lib/x86_64-linux-gnu/libanl.so.1",
            "/lib/x86_64-linux-gnu/libc.so.6",
            "/lib/x86_64-linux-gnu/libc_malloc_debug.so.0",
            "/lib/x86_64-linux-gnu/libdl.so.2",
            "/lib/x86_64-linux-gnu/libm.so.6",
            "/lib/x86_64-linux-gnu/libmemusage.so",
            "/lib/x86_64-linux-gnu/libmvec.so.1",
            "/lib/x86_64-linux-gnu/libnsl.so.1",
            "/lib/x86_64-linux-gnu/libnss_compat.so.2",
            "/lib/x86_64-linux-gnu/libnss_dns.so.2",
            "/lib/x86_64-linux-gnu/libnss_files.so.2",
            "/lib/x86_64-linux-gnu/libnss_hesiod.so.2",
            "/lib/x86_64-linux-gnu/libpcprofile.so",
            "/lib/x86_64-linux-gnu/libpthread.so.0",
            "/lib/x86_64-linux-gnu/libresolv.so.2",
            "/lib/x86_64-linux-gnu/librt.so.1",
            "/lib/x86_64-linux-gnu/libthread_db.so.1",
            "/lib/x86_64-linux-gnu/libutil.so.1",
            "/usr/lib/x86_64-linux-gnu/gconv/ANSI_X3.110.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ARMSCII-8.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ASMO_449.so",
            "/usr/lib/x86_64-linux-gnu/gconv/BIG5.so",
            "/usr/lib/x86_64-linux-gnu/gconv/BIG5HKSCS.so",
            "/usr/lib/x86_64-linux-gnu/gconv/BRF.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP10007.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP1125.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP1250.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP1251.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP1252.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP1253.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP1254.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP1255.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP1256.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP1257.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP1258.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP737.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP770.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP771.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP772.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP773.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP774.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP775.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CP932.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CSN_369103.so",
            "/usr/lib/x86_64-linux-gnu/gconv/CWI.so",
            "/usr/lib/x86_64-linux-gnu/gconv/DEC-MCS.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-AT-DE-A.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-AT-DE.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-CA-FR.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-DK-NO-A.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-DK-NO.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES-A.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES-S.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FI-SE-A.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FI-SE.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FR.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-IS-FRISS.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-IT.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-PT.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-UK.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-US.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ECMA-CYRILLIC.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EUC-CN.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EUC-JISX0213.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EUC-JP-MS.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EUC-JP.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EUC-KR.so",
            "/usr/lib/x86_64-linux-gnu/gconv/EUC-TW.so",
            "/usr/lib/x86_64-linux-gnu/gconv/GB18030.so",
            "/usr/lib/x86_64-linux-gnu/gconv/GBBIG5.so",
            "/usr/lib/x86_64-linux-gnu/gconv/GBGBK.so",
            "/usr/lib/x86_64-linux-gnu/gconv/GBK.so",
            "/usr/lib/x86_64-linux-gnu/gconv/GEORGIAN-ACADEMY.so",
            "/usr/lib/x86_64-linux-gnu/gconv/GEORGIAN-PS.so",
            "/usr/lib/x86_64-linux-gnu/gconv/GOST_19768-74.so",
            "/usr/lib/x86_64-linux-gnu/gconv/GREEK-CCITT.so",
            "/usr/lib/x86_64-linux-gnu/gconv/GREEK7-OLD.so",
            "/usr/lib/x86_64-linux-gnu/gconv/GREEK7.so",
            "/usr/lib/x86_64-linux-gnu/gconv/HP-GREEK8.so",
            "/usr/lib/x86_64-linux-gnu/gconv/HP-ROMAN8.so",
            "/usr/lib/x86_64-linux-gnu/gconv/HP-ROMAN9.so",
            "/usr/lib/x86_64-linux-gnu/gconv/HP-THAI8.so",
            "/usr/lib/x86_64-linux-gnu/gconv/HP-TURKISH8.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM037.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM038.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1004.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1008.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1008_420.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1025.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1026.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1046.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1047.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1097.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1112.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1122.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1123.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1124.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1129.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1130.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1132.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1133.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1137.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1140.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1141.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1142.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1143.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1144.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1145.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1146.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1147.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1148.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1149.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1153.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1154.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1155.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1156.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1157.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1158.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1160.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1161.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1162.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1163.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1164.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1166.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1167.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM12712.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1364.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1371.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1388.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1390.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM1399.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM16804.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM256.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM273.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM274.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM275.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM277.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM278.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM280.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM281.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM284.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM285.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM290.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM297.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM420.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM423.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM424.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM437.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM4517.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM4899.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM4909.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM4971.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM500.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM5347.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM803.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM850.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM851.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM852.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM855.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM856.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM857.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM858.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM860.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM861.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM862.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM863.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM864.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM865.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM866.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM866NAV.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM868.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM869.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM870.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM871.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM874.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM875.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM880.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM891.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM901.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM902.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM903.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM9030.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM904.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM905.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM9066.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM918.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM921.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM922.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM930.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM932.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM933.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM935.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM937.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM939.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM943.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IBM9448.so",
            "/usr/lib/x86_64-linux-gnu/gconv/IEC_P27-1.so",
            "/usr/lib/x86_64-linux-gnu/gconv/INIS-8.so",
            "/usr/lib/x86_64-linux-gnu/gconv/INIS-CYRILLIC.so",
            "/usr/lib/x86_64-linux-gnu/gconv/INIS.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISIRI-3342.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-CN-EXT.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-CN.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-JP-3.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-JP.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-KR.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO-IR-197.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO-IR-209.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO646.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-1.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-10.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-11.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-13.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-14.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-15.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-16.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-2.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-3.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-4.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-5.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-6.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-7.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-8.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-9.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-9E.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO_10367-BOX.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO_11548-1.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO_2033.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO_5427-EXT.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO_5427.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO_5428.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO_6937-2.so",
            "/usr/lib/x86_64-linux-gnu/gconv/ISO_6937.so",
            "/usr/lib/x86_64-linux-gnu/gconv/JOHAB.so",
            "/usr/lib/x86_64-linux-gnu/gconv/KOI-8.so",
            "/usr/lib/x86_64-linux-gnu/gconv/KOI8-R.so",
            "/usr/lib/x86_64-linux-gnu/gconv/KOI8-RU.so",
            "/usr/lib/x86_64-linux-gnu/gconv/KOI8-T.so",
            "/usr/lib/x86_64-linux-gnu/gconv/KOI8-U.so",
            "/usr/lib/x86_64-linux-gnu/gconv/LATIN-GREEK-1.so",
            "/usr/lib/x86_64-linux-gnu/gconv/LATIN-GREEK.so",
            "/usr/lib/x86_64-linux-gnu/gconv/MAC-CENTRALEUROPE.so",
            "/usr/lib/x86_64-linux-gnu/gconv/MAC-IS.so",
            "/usr/lib/x86_64-linux-gnu/gconv/MAC-SAMI.so",
            "/usr/lib/x86_64-linux-gnu/gconv/MAC-UK.so",
            "/usr/lib/x86_64-linux-gnu/gconv/MACINTOSH.so",
            "/usr/lib/x86_64-linux-gnu/gconv/MIK.so",
            "/usr/lib/x86_64-linux-gnu/gconv/NATS-DANO.so",
            "/usr/lib/x86_64-linux-gnu/gconv/NATS-SEFI.so",
            "/usr/lib/x86_64-linux-gnu/gconv/PT154.so",
            "/usr/lib/x86_64-linux-gnu/gconv/RK1048.so",
            "/usr/lib/x86_64-linux-gnu/gconv/SAMI-WS2.so",
            "/usr/lib/x86_64-linux-gnu/gconv/SHIFT_JISX0213.so",
            "/usr/lib/x86_64-linux-gnu/gconv/SJIS.so",
            "/usr/lib/x86_64-linux-gnu/gconv/T.61.so",
            "/usr/lib/x86_64-linux-gnu/gconv/TCVN5712-1.so",
            "/usr/lib/x86_64-linux-gnu/gconv/TIS-620.so",
            "/usr/lib/x86_64-linux-gnu/gconv/TSCII.so",
            "/usr/lib/x86_64-linux-gnu/gconv/UHC.so",
            "/usr/lib/x86_64-linux-gnu/gconv/UNICODE.so",
            "/usr/lib/x86_64-linux-gnu/gconv/UTF-16.so",
            "/usr/lib/x86_64-linux-gnu/gconv/UTF-32.so",
            "/usr/lib/x86_64-linux-gnu/gconv/UTF-7.so",
            "/usr/lib/x86_64-linux-gnu/gconv/VISCII.so",
            "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules",
            "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache",
            "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.d/gconv-modules-extra.conf",
            "/usr/lib/x86_64-linux-gnu/gconv/libCNS.so",
            "/usr/lib/x86_64-linux-gnu/gconv/libGB.so",
            "/usr/lib/x86_64-linux-gnu/gconv/libISOIR165.so",
            "/usr/lib/x86_64-linux-gnu/gconv/libJIS.so",
            "/usr/lib/x86_64-linux-gnu/gconv/libJISX0213.so",
            "/usr/lib/x86_64-linux-gnu/gconv/libKSC.so",
            "/usr/share/doc/libc6/NEWS.Debian.gz",
            "/usr/share/doc/libc6/NEWS.gz",
            "/usr/share/doc/libc6/README.Debian.gz",
            "/usr/share/doc/libc6/README.hesiod.gz",
            "/usr/share/doc/libc6/changelog.Debian.gz",
            "/usr/share/doc/libc6/changelog.gz",
            "/usr/share/doc/libc6/copyright",
            "/usr/share/lintian/overrides/libc6"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libcap-ng0@0.8.3-1+b3",
          "Name": "libcap-ng0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libcap-ng0@0.8.3-1%2Bb3?arch=amd64\u0026distro=debian-12.15",
            "UID": "88debe617c7a36f4"
          },
          "Version": "0.8.3",
          "Release": "1+b3",
          "Arch": "amd64",
          "SrcName": "libcap-ng",
          "SrcVersion": "0.8.3",
          "SrcRelease": "1",
          "Licenses": [
            "LGPL-2.1-or-later",
            "GPL-2.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.1-only",
            "GPL-2.0-only"
          ],
          "Maintainer": "Håvard F. Aasen \u003chavard.f.aasen@pfft.no\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/x86_64-linux-gnu/libcap-ng.so.0.0.0",
            "/lib/x86_64-linux-gnu/libdrop_ambient.so.0.0.0",
            "/usr/share/doc/libcap-ng0/changelog.Debian.amd64.gz",
            "/usr/share/doc/libcap-ng0/changelog.Debian.gz",
            "/usr/share/doc/libcap-ng0/changelog.gz",
            "/usr/share/doc/libcap-ng0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libcap2@1:2.66-4+deb12u3+b1",
          "Name": "libcap2",
          "Identifier": {
            "PURL": "pkg:deb/debian/libcap2@2.66-4%2Bdeb12u3%2Bb1?arch=amd64\u0026distro=debian-12.15\u0026epoch=1",
            "UID": "1af72e5dac96ffcc"
          },
          "Version": "2.66",
          "Release": "4+deb12u3+b1",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "libcap2",
          "SrcVersion": "2.66",
          "SrcRelease": "4+deb12u3",
          "SrcEpoch": 1,
          "Licenses": [
            "BSD-3-Clause",
            "GPL-2.0-only",
            "GPL-2.0-or-later"
          ],
          "Maintainer": "Christian Kastner \u003cckk@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/x86_64-linux-gnu/libcap.so.2.66",
            "/lib/x86_64-linux-gnu/libpsx.so.2.66",
            "/usr/share/doc/libcap2/changelog.Debian.amd64.gz",
            "/usr/share/doc/libcap2/changelog.Debian.gz",
            "/usr/share/doc/libcap2/changelog.gz",
            "/usr/share/doc/libcap2/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libcom-err2@1.47.0-2+b2",
          "Name": "libcom-err2",
          "Identifier": {
            "PURL": "pkg:deb/debian/libcom-err2@1.47.0-2%2Bb2?arch=amd64\u0026distro=debian-12.15",
            "UID": "594a811db84333e5"
          },
          "Version": "1.47.0",
          "Release": "2+b2",
          "Arch": "amd64",
          "SrcName": "e2fsprogs",
          "SrcVersion": "1.47.0",
          "SrcRelease": "2",
          "Licenses": [
            "GPL-2.0-only",
            "LGPL-2.0-only",
            "BSD-3-Clause",
            "Apache-2.0",
            "ISC",
            "GPL-2.0-or-later",
            "MIT-US-export",
            "Kazlib",
            "Latex2e",
            "GPL-2+ with Texinfo exception"
          ],
          "Maintainer": "Theodore Y. Ts'o \u003ctytso@mit.edu\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/x86_64-linux-gnu/libcom_err.so.2.1",
            "/usr/share/doc/libcom-err2/changelog.Debian.amd64.gz",
            "/usr/share/doc/libcom-err2/changelog.Debian.gz",
            "/usr/share/doc/libcom-err2/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libcrypt1@1:4.4.33-2",
          "Name": "libcrypt1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libcrypt1@4.4.33-2?arch=amd64\u0026distro=debian-12.15\u0026epoch=1",
            "UID": "73fbe2e0b284aa14"
          },
          "Version": "4.4.33",
          "Release": "2",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "libxcrypt",
          "SrcVersion": "4.4.33",
          "SrcRelease": "2",
          "SrcEpoch": 1,
          "Maintainer": "Marco d'Itri \u003cmd@linux.it\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/x86_64-linux-gnu/libcrypt.so.1.1.0",
            "/usr/share/doc/libcrypt1/changelog.Debian.gz",
            "/usr/share/doc/libcrypt1/changelog.gz",
            "/usr/share/doc/libcrypt1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libdb5.3@5.3.28+dfsg2-1",
          "Name": "libdb5.3",
          "Identifier": {
            "PURL": "pkg:deb/debian/libdb5.3@5.3.28%2Bdfsg2-1?arch=amd64\u0026distro=debian-12.15",
            "UID": "266a3c30ab7cc889"
          },
          "Version": "5.3.28+dfsg2",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "db5.3",
          "SrcVersion": "5.3.28+dfsg2",
          "SrcRelease": "1",
          "Licenses": [
            "Sleepycat",
            "BSD-3-Clause",
            "MS-PL",
            "GPL-2.0-or-later",
            "Artistic-2.0",
            "X11",
            "MIT-old",
            "TCL-like",
            "BSD-3-clause-fjord",
            "GPL-3.0-only",
            "Zlib"
          ],
          "Maintainer": "Bastian Germann \u003cbage@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libdb-5.3.so",
            "/usr/share/doc/libdb5.3/build_signature_amd64.txt",
            "/usr/share/doc/libdb5.3/changelog.Debian.gz",
            "/usr/share/doc/libdb5.3/copyright",
            "/usr/share/lintian/overrides/libdb5.3"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libdebconfclient0@0.270",
          "Name": "libdebconfclient0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libdebconfclient0@0.270?arch=amd64\u0026distro=debian-12.15",
            "UID": "4fce62d658bacc56"
          },
          "Version": "0.270",
          "Arch": "amd64",
          "SrcName": "cdebconf",
          "SrcVersion": "0.270",
          "Licenses": [
            "BSD-2-Clause",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian Install System Team \u003cdebian-boot@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libdebconfclient.so.0.0.0",
            "/usr/share/doc/libdebconfclient0/changelog.gz",
            "/usr/share/doc/libdebconfclient0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libext2fs2@1.47.0-2+b2",
          "Name": "libext2fs2",
          "Identifier": {
            "PURL": "pkg:deb/debian/libext2fs2@1.47.0-2%2Bb2?arch=amd64\u0026distro=debian-12.15",
            "UID": "eb8ca4e2d173bd30"
          },
          "Version": "1.47.0",
          "Release": "2+b2",
          "Arch": "amd64",
          "SrcName": "e2fsprogs",
          "SrcVersion": "1.47.0",
          "SrcRelease": "2",
          "Licenses": [
            "GPL-2.0-only",
            "LGPL-2.0-only",
            "BSD-3-Clause",
            "Apache-2.0",
            "ISC",
            "GPL-2.0-or-later",
            "MIT-US-export",
            "Kazlib",
            "Latex2e",
            "GPL-2+ with Texinfo exception"
          ],
          "Maintainer": "Theodore Y. Ts'o \u003ctytso@mit.edu\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/x86_64-linux-gnu/libe2p.so.2.3",
            "/lib/x86_64-linux-gnu/libext2fs.so.2.4",
            "/usr/share/doc/libext2fs2/changelog.Debian.amd64.gz",
            "/usr/share/doc/libext2fs2/changelog.Debian.gz",
            "/usr/share/doc/libext2fs2/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libffi8@3.4.4-1",
          "Name": "libffi8",
          "Identifier": {
            "PURL": "pkg:deb/debian/libffi8@3.4.4-1?arch=amd64\u0026distro=debian-12.15",
            "UID": "6aa49bd0bc25466c"
          },
          "Version": "3.4.4",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "libffi",
          "SrcVersion": "3.4.4",
          "SrcRelease": "1",
          "Licenses": [
            "MIT",
            "X11",
            "GPL-2.0-or-later",
            "GPL-3.0-or-later",
            "MPL-1.1",
            "LGPL-2.1-or-later",
            "public-domain"
          ],
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libffi.so.8.1.2",
            "/usr/share/doc/libffi8/changelog.Debian.gz",
            "/usr/share/doc/libffi8/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libgcc-s1@12.2.0-14+deb12u1",
          "Name": "libgcc-s1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libgcc-s1@12.2.0-14%2Bdeb12u1?arch=amd64\u0026distro=debian-12.15",
            "UID": "30dd46e15657e503"
          },
          "Version": "12.2.0",
          "Release": "14+deb12u1",
          "Arch": "amd64",
          "SrcName": "gcc-12",
          "SrcVersion": "12.2.0",
          "SrcRelease": "14+deb12u1",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "gcc-12-base@12.2.0-14+deb12u1",
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/x86_64-linux-gnu/libgcc_s.so.1",
            "/usr/share/lintian/overrides/libgcc-s1"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libgcrypt20@1.10.1-3+deb12u1",
          "Name": "libgcrypt20",
          "Identifier": {
            "PURL": "pkg:deb/debian/libgcrypt20@1.10.1-3%2Bdeb12u1?arch=amd64\u0026distro=debian-12.15",
            "UID": "fa3462de6167db33"
          },
          "Version": "1.10.1",
          "Release": "3+deb12u1",
          "Arch": "amd64",
          "SrcName": "libgcrypt20",
          "SrcVersion": "1.10.1",
          "SrcRelease": "3+deb12u1",
          "Licenses": [
            "LGPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian GnuTLS Maintainers \u003cpkg-gnutls-maint@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14",
            "libgpg-error0@1.46-1"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libgcrypt.so.20.4.1",
            "/usr/share/doc/libgcrypt20/AUTHORS.gz",
            "/usr/share/doc/libgcrypt20/NEWS.gz",
            "/usr/share/doc/libgcrypt20/README.gz",
            "/usr/share/doc/libgcrypt20/THANKS.gz",
            "/usr/share/doc/libgcrypt20/changelog.Debian.gz",
            "/usr/share/doc/libgcrypt20/changelog.gz",
            "/usr/share/doc/libgcrypt20/copyright",
            "/usr/share/libgcrypt20/clean-up-unmanaged-libraries"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libgmp10@2:6.2.1+dfsg1-1.1",
          "Name": "libgmp10",
          "Identifier": {
            "PURL": "pkg:deb/debian/libgmp10@6.2.1%2Bdfsg1-1.1?arch=amd64\u0026distro=debian-12.15\u0026epoch=2",
            "UID": "c266356721669ceb"
          },
          "Version": "6.2.1+dfsg1",
          "Release": "1.1",
          "Epoch": 2,
          "Arch": "amd64",
          "SrcName": "gmp",
          "SrcVersion": "6.2.1+dfsg1",
          "SrcRelease": "1.1",
          "SrcEpoch": 2,
          "Licenses": [
            "GPL-2.0-or-later",
            "LGPL-3.0-or-later",
            "GPL-3.0-or-later",
            "GPL-3+ with Bison exception",
            "GPL-2.0-only",
            "GPL-3.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Debian Science Team \u003cdebian-science-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libgmp.so.10.4.1",
            "/usr/share/doc/libgmp10/README.Debian",
            "/usr/share/doc/libgmp10/changelog.Debian.gz",
            "/usr/share/doc/libgmp10/changelog.gz",
            "/usr/share/doc/libgmp10/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libgnutls30@3.7.9-2+deb12u7",
          "Name": "libgnutls30",
          "Identifier": {
            "PURL": "pkg:deb/debian/libgnutls30@3.7.9-2%2Bdeb12u7?arch=amd64\u0026distro=debian-12.15",
            "UID": "1825cdc4e3258ffb"
          },
          "Version": "3.7.9",
          "Release": "2+deb12u7",
          "Arch": "amd64",
          "SrcName": "gnutls28",
          "SrcVersion": "3.7.9",
          "SrcRelease": "2+deb12u7",
          "Licenses": [
            "LGPL-2.1-only",
            "LGPL-2.0-or-later",
            "LGPL-3.0-only",
            "GPL-2.0-or-later",
            "GPL-3.0-only",
            "GFDL-1.3-only",
            "CC0-1.0",
            "MIT",
            "Apache-2.0",
            "LGPL-3.0-or-later",
            "LGPL-2.1-or-later",
            "GPL-3.0-or-later",
            "BSD-3-Clause"
          ],
          "Maintainer": "Debian GnuTLS Maintainers \u003cpkg-gnutls-maint@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14",
            "libgmp10@2:6.2.1+dfsg1-1.1",
            "libhogweed6@3.8.1-2",
            "libidn2-0@2.3.3-1+b1",
            "libnettle8@3.8.1-2",
            "libp11-kit0@0.24.1-2",
            "libtasn1-6@4.19.0-2+deb12u1",
            "libunistring2@1.0-2"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libgnutls.so.30.34.3",
            "/usr/share/doc/libgnutls30/AUTHORS.gz",
            "/usr/share/doc/libgnutls30/NEWS.Debian.gz",
            "/usr/share/doc/libgnutls30/NEWS.gz",
            "/usr/share/doc/libgnutls30/README.md.gz",
            "/usr/share/doc/libgnutls30/THANKS.gz",
            "/usr/share/doc/libgnutls30/changelog.Debian.gz",
            "/usr/share/doc/libgnutls30/changelog.gz",
            "/usr/share/doc/libgnutls30/copyright",
            "/usr/share/locale/cs/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/de/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/eo/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/es/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/fi/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/fr/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/it/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/ka/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/ms/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/nl/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/pl/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/ro/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/sr/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/sv/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/uk/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/vi/LC_MESSAGES/gnutls30.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/gnutls30.mo"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libgpg-error0@1.46-1",
          "Name": "libgpg-error0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libgpg-error0@1.46-1?arch=amd64\u0026distro=debian-12.15",
            "UID": "87a36dd3f556a5a4"
          },
          "Version": "1.46",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "libgpg-error",
          "SrcVersion": "1.46",
          "SrcRelease": "1",
          "Licenses": [
            "LGPL-2.1-or-later",
            "BSD-3-Clause",
            "g10-permissive",
            "GPL-3.0-or-later",
            "LGPL-2.1-only",
            "GPL-3.0-only"
          ],
          "Maintainer": "Debian GnuPG Maintainers \u003cpkg-gnupg-maint@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/x86_64-linux-gnu/libgpg-error.so.0.33.1",
            "/usr/share/doc/libgpg-error0/README.gz",
            "/usr/share/doc/libgpg-error0/changelog.Debian.gz",
            "/usr/share/doc/libgpg-error0/changelog.gz",
            "/usr/share/doc/libgpg-error0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libhogweed6@3.8.1-2",
          "Name": "libhogweed6",
          "Identifier": {
            "PURL": "pkg:deb/debian/libhogweed6@3.8.1-2?arch=amd64\u0026distro=debian-12.15",
            "UID": "24f3ef2a444c7bb0"
          },
          "Version": "3.8.1",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "nettle",
          "SrcVersion": "3.8.1",
          "SrcRelease": "2",
          "Licenses": [
            "LGPL-3.0-or-later",
            "GPL-2.0-or-later",
            "LGPL-2.0-or-later",
            "LGPL-2.0-only",
            "MIT",
            "GPL-3.0-or-later",
            "GPL-3.0-with-autoconf-exception+",
            "public-domain",
            "GPL-2.0-only",
            "GAP"
          ],
          "Maintainer": "Magnus Holmgren \u003cholmgren@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14",
            "libgmp10@2:6.2.1+dfsg1-1.1",
            "libnettle8@3.8.1-2"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libhogweed.so.6.6",
            "/usr/share/doc/libhogweed6/changelog.Debian.gz",
            "/usr/share/doc/libhogweed6/changelog.gz",
            "/usr/share/doc/libhogweed6/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libidn2-0@2.3.3-1+b1",
          "Name": "libidn2-0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libidn2-0@2.3.3-1%2Bb1?arch=amd64\u0026distro=debian-12.15",
            "UID": "45ac5e890c6624db"
          },
          "Version": "2.3.3",
          "Release": "1+b1",
          "Arch": "amd64",
          "SrcName": "libidn2",
          "SrcVersion": "2.3.3",
          "SrcRelease": "1",
          "Licenses": [
            "GPL-3.0-or-later",
            "LGPL-3.0-or-later",
            "GPL-2.0-or-later",
            "Unicode",
            "GPL-3.0-only",
            "GPL-2.0-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "Debian Libidn team \u003chelp-libidn@gnu.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14",
            "libunistring2@1.0-2"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libidn2.so.0.3.8",
            "/usr/share/doc/libidn2-0/AUTHORS",
            "/usr/share/doc/libidn2-0/NEWS.gz",
            "/usr/share/doc/libidn2-0/README.md.gz",
            "/usr/share/doc/libidn2-0/changelog.Debian.amd64.gz",
            "/usr/share/doc/libidn2-0/changelog.Debian.gz",
            "/usr/share/doc/libidn2-0/changelog.gz",
            "/usr/share/doc/libidn2-0/copyright",
            "/usr/share/lintian/overrides/libidn2-0",
            "/usr/share/locale/cs/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/da/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/de/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/eo/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/es/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/fi/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/fr/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/fur/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/hr/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/hu/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/id/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/it/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/ja/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/ka/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/nl/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/pl/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/ro/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/ru/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/sr/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/sv/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/uk/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/vi/LC_MESSAGES/libidn2.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/libidn2.mo"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "liblz4-1@1.9.4-1",
          "Name": "liblz4-1",
          "Identifier": {
            "PURL": "pkg:deb/debian/liblz4-1@1.9.4-1?arch=amd64\u0026distro=debian-12.15",
            "UID": "90d5806a87917e38"
          },
          "Version": "1.9.4",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "lz4",
          "SrcVersion": "1.9.4",
          "SrcRelease": "1",
          "Licenses": [
            "BSD-2-Clause",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Nobuhiro Iwamatsu \u003ciwamatsu@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/liblz4.so.1.9.4",
            "/usr/share/doc/liblz4-1/changelog.Debian.gz",
            "/usr/share/doc/liblz4-1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "liblzma5@5.4.1-1+deb12u2",
          "Name": "liblzma5",
          "Identifier": {
            "PURL": "pkg:deb/debian/liblzma5@5.4.1-1%2Bdeb12u2?arch=amd64\u0026distro=debian-12.15",
            "UID": "f49be9106088e293"
          },
          "Version": "5.4.1",
          "Release": "1+deb12u2",
          "Arch": "amd64",
          "SrcName": "xz-utils",
          "SrcVersion": "5.4.1",
          "SrcRelease": "1+deb12u2",
          "Licenses": [
            "PD",
            "probably-PD",
            "GPL-2.0-or-later",
            "LGPL-2.1-or-later",
            "permissive-fsf",
            "Autoconf",
            "permissive-nowarranty",
            "GPL-2.0-only",
            "none",
            "config-h",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "noderivs",
            "PD-debian",
            "GPL-3.0-only"
          ],
          "Maintainer": "Sebastian Andrzej Siewior \u003csebastian@breakpoint.cc\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/x86_64-linux-gnu/liblzma.so.5.4.1",
            "/usr/share/doc/liblzma5/AUTHORS",
            "/usr/share/doc/liblzma5/NEWS.gz",
            "/usr/share/doc/liblzma5/THANKS",
            "/usr/share/doc/liblzma5/changelog.Debian.gz",
            "/usr/share/doc/liblzma5/changelog.gz",
            "/usr/share/doc/liblzma5/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libmd0@1.0.4-2",
          "Name": "libmd0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libmd0@1.0.4-2?arch=amd64\u0026distro=debian-12.15",
            "UID": "35bf60005b880824"
          },
          "Version": "1.0.4",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "libmd",
          "SrcVersion": "1.0.4",
          "SrcRelease": "2",
          "Licenses": [
            "BSD-3-Clause",
            "BSD-3-clause-Aaron-D-Gifford",
            "BSD-2-Clause",
            "BSD-2-Clause-NetBSD",
            "ISC",
            "Beerware",
            "public-domain-md4",
            "public-domain-md5",
            "public-domain-sha1"
          ],
          "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libmd.so.0.0.5",
            "/usr/share/doc/libmd0/changelog.Debian.gz",
            "/usr/share/doc/libmd0/changelog.gz",
            "/usr/share/doc/libmd0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libmount1@2.38.1-5+deb12u3",
          "Name": "libmount1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libmount1@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "1c28517f3a673db4"
          },
          "Version": "2.38.1",
          "Release": "5+deb12u3",
          "Arch": "amd64",
          "SrcName": "util-linux",
          "SrcVersion": "2.38.1",
          "SrcRelease": "5+deb12u3",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "public-domain",
            "BSD-4-Clause",
            "MIT",
            "BSD-3-Clause",
            "BSLA",
            "LGPL-2.0-or-later",
            "LGPL-2.1-or-later",
            "LGPL-3.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "util-linux packagers \u003cutil-linux@packages.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libblkid1@2.38.1-5+deb12u3",
            "libc6@2.36-9+deb12u14",
            "libselinux1@3.4-1+b6"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libmount.so.1.1.0",
            "/usr/share/doc/libmount1/changelog.Debian.gz",
            "/usr/share/doc/libmount1/changelog.gz",
            "/usr/share/doc/libmount1/copyright",
            "/usr/share/lintian/overrides/libmount1"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libnettle8@3.8.1-2",
          "Name": "libnettle8",
          "Identifier": {
            "PURL": "pkg:deb/debian/libnettle8@3.8.1-2?arch=amd64\u0026distro=debian-12.15",
            "UID": "da2b60df99ec436c"
          },
          "Version": "3.8.1",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "nettle",
          "SrcVersion": "3.8.1",
          "SrcRelease": "2",
          "Licenses": [
            "LGPL-3.0-or-later",
            "GPL-2.0-or-later",
            "LGPL-2.0-or-later",
            "LGPL-2.0-only",
            "MIT",
            "GPL-3.0-or-later",
            "GPL-3.0-with-autoconf-exception+",
            "public-domain",
            "GPL-2.0-only",
            "GAP"
          ],
          "Maintainer": "Magnus Holmgren \u003cholmgren@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libnettle.so.8.6",
            "/usr/share/doc/libnettle8/NEWS.gz",
            "/usr/share/doc/libnettle8/README",
            "/usr/share/doc/libnettle8/changelog.Debian.gz",
            "/usr/share/doc/libnettle8/changelog.gz",
            "/usr/share/doc/libnettle8/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libp11-kit0@0.24.1-2",
          "Name": "libp11-kit0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libp11-kit0@0.24.1-2?arch=amd64\u0026distro=debian-12.15",
            "UID": "8ad8fe8135cab155"
          },
          "Version": "0.24.1",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "p11-kit",
          "SrcVersion": "0.24.1",
          "SrcRelease": "2",
          "Licenses": [
            "BSD-3-Clause",
            "permissive-like-automake-output",
            "ISC",
            "ISC+IBM",
            "LGPL-2.1-or-later",
            "Apache-2.0",
            "same-as-rest-of-p11kit",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Debian GnuTLS Maintainers \u003cpkg-gnutls-maint@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14",
            "libffi8@3.4.4-1"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libp11-kit.so.0.3.0",
            "/usr/share/doc/libp11-kit0/changelog.Debian.gz",
            "/usr/share/doc/libp11-kit0/changelog.gz",
            "/usr/share/doc/libp11-kit0/copyright",
            "/usr/share/doc/libp11-kit0/examples/pkcs11.conf.example"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpam-modules@1.5.2-6+deb12u2",
          "Name": "libpam-modules",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpam-modules@1.5.2-6%2Bdeb12u2?arch=amd64\u0026distro=debian-12.15",
            "UID": "1c34e641d558b279"
          },
          "Version": "1.5.2",
          "Release": "6+deb12u2",
          "Arch": "amd64",
          "SrcName": "pam",
          "SrcVersion": "1.5.2",
          "SrcRelease": "6+deb12u2",
          "Licenses": [
            "BSD-3-Clause",
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-only",
            "GPL-3+ with Bison exception",
            "BSD-tcp_wrappers",
            "LGPL-2.0-or-later",
            "LGPL-2.0-only",
            "public-domain",
            "Beerware"
          ],
          "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/x86_64-linux-gnu/security/pam_access.so",
            "/lib/x86_64-linux-gnu/security/pam_debug.so",
            "/lib/x86_64-linux-gnu/security/pam_deny.so",
            "/lib/x86_64-linux-gnu/security/pam_echo.so",
            "/lib/x86_64-linux-gnu/security/pam_env.so",
            "/lib/x86_64-linux-gnu/security/pam_exec.so",
            "/lib/x86_64-linux-gnu/security/pam_faildelay.so",
            "/lib/x86_64-linux-gnu/security/pam_faillock.so",
            "/lib/x86_64-linux-gnu/security/pam_filter.so",
            "/lib/x86_64-linux-gnu/security/pam_ftp.so",
            "/lib/x86_64-linux-gnu/security/pam_group.so",
            "/lib/x86_64-linux-gnu/security/pam_issue.so",
            "/lib/x86_64-linux-gnu/security/pam_keyinit.so",
            "/lib/x86_64-linux-gnu/security/pam_lastlog.so",
            "/lib/x86_64-linux-gnu/security/pam_limits.so",
            "/lib/x86_64-linux-gnu/security/pam_listfile.so",
            "/lib/x86_64-linux-gnu/security/pam_localuser.so",
            "/lib/x86_64-linux-gnu/security/pam_loginuid.so",
            "/lib/x86_64-linux-gnu/security/pam_mail.so",
            "/lib/x86_64-linux-gnu/security/pam_mkhomedir.so",
            "/lib/x86_64-linux-gnu/security/pam_motd.so",
            "/lib/x86_64-linux-gnu/security/pam_namespace.so",
            "/lib/x86_64-linux-gnu/security/pam_nologin.so",
            "/lib/x86_64-linux-gnu/security/pam_permit.so",
            "/lib/x86_64-linux-gnu/security/pam_pwhistory.so",
            "/lib/x86_64-linux-gnu/security/pam_rhosts.so",
            "/lib/x86_64-linux-gnu/security/pam_rootok.so",
            "/lib/x86_64-linux-gnu/security/pam_securetty.so",
            "/lib/x86_64-linux-gnu/security/pam_selinux.so",
            "/lib/x86_64-linux-gnu/security/pam_sepermit.so",
            "/lib/x86_64-linux-gnu/security/pam_setquota.so",
            "/lib/x86_64-linux-gnu/security/pam_shells.so",
            "/lib/x86_64-linux-gnu/security/pam_stress.so",
            "/lib/x86_64-linux-gnu/security/pam_succeed_if.so",
            "/lib/x86_64-linux-gnu/security/pam_time.so",
            "/lib/x86_64-linux-gnu/security/pam_timestamp.so",
            "/lib/x86_64-linux-gnu/security/pam_tty_audit.so",
            "/lib/x86_64-linux-gnu/security/pam_umask.so",
            "/lib/x86_64-linux-gnu/security/pam_unix.so",
            "/lib/x86_64-linux-gnu/security/pam_userdb.so",
            "/lib/x86_64-linux-gnu/security/pam_usertype.so",
            "/lib/x86_64-linux-gnu/security/pam_warn.so",
            "/lib/x86_64-linux-gnu/security/pam_wheel.so",
            "/lib/x86_64-linux-gnu/security/pam_xauth.so",
            "/usr/share/doc/libpam-modules/NEWS.Debian.gz",
            "/usr/share/doc/libpam-modules/changelog.Debian.gz",
            "/usr/share/doc/libpam-modules/changelog.gz",
            "/usr/share/doc/libpam-modules/copyright",
            "/usr/share/doc/libpam-modules/examples/upperLOWER.c",
            "/usr/share/lintian/overrides/libpam-modules",
            "/usr/share/man/man5/access.conf.5.gz",
            "/usr/share/man/man5/faillock.conf.5.gz",
            "/usr/share/man/man5/group.conf.5.gz",
            "/usr/share/man/man5/limits.conf.5.gz",
            "/usr/share/man/man5/namespace.conf.5.gz",
            "/usr/share/man/man5/pam_env.conf.5.gz",
            "/usr/share/man/man5/sepermit.conf.5.gz",
            "/usr/share/man/man5/time.conf.5.gz",
            "/usr/share/man/man7/pam_env.7.gz",
            "/usr/share/man/man7/pam_selinux.7.gz",
            "/usr/share/man/man8/pam_access.8.gz",
            "/usr/share/man/man8/pam_debug.8.gz",
            "/usr/share/man/man8/pam_deny.8.gz",
            "/usr/share/man/man8/pam_echo.8.gz",
            "/usr/share/man/man8/pam_exec.8.gz",
            "/usr/share/man/man8/pam_faildelay.8.gz",
            "/usr/share/man/man8/pam_faillock.8.gz",
            "/usr/share/man/man8/pam_filter.8.gz",
            "/usr/share/man/man8/pam_ftp.8.gz",
            "/usr/share/man/man8/pam_group.8.gz",
            "/usr/share/man/man8/pam_issue.8.gz",
            "/usr/share/man/man8/pam_keyinit.8.gz",
            "/usr/share/man/man8/pam_lastlog.8.gz",
            "/usr/share/man/man8/pam_limits.8.gz",
            "/usr/share/man/man8/pam_listfile.8.gz",
            "/usr/share/man/man8/pam_localuser.8.gz",
            "/usr/share/man/man8/pam_loginuid.8.gz",
            "/usr/share/man/man8/pam_mail.8.gz",
            "/usr/share/man/man8/pam_mkhomedir.8.gz",
            "/usr/share/man/man8/pam_motd.8.gz",
            "/usr/share/man/man8/pam_namespace.8.gz",
            "/usr/share/man/man8/pam_nologin.8.gz",
            "/usr/share/man/man8/pam_permit.8.gz",
            "/usr/share/man/man8/pam_pwhistory.8.gz",
            "/usr/share/man/man8/pam_rhosts.8.gz",
            "/usr/share/man/man8/pam_rootok.8.gz",
            "/usr/share/man/man8/pam_securetty.8.gz",
            "/usr/share/man/man8/pam_sepermit.8.gz",
            "/usr/share/man/man8/pam_setquota.8.gz",
            "/usr/share/man/man8/pam_shells.8.gz",
            "/usr/share/man/man8/pam_stress.8.gz",
            "/usr/share/man/man8/pam_succeed_if.8.gz",
            "/usr/share/man/man8/pam_time.8.gz",
            "/usr/share/man/man8/pam_timestamp.8.gz",
            "/usr/share/man/man8/pam_tty_audit.8.gz",
            "/usr/share/man/man8/pam_umask.8.gz",
            "/usr/share/man/man8/pam_unix.8.gz",
            "/usr/share/man/man8/pam_userdb.8.gz",
            "/usr/share/man/man8/pam_usertype.8.gz",
            "/usr/share/man/man8/pam_warn.8.gz",
            "/usr/share/man/man8/pam_wheel.8.gz",
            "/usr/share/man/man8/pam_xauth.8.gz",
            "/usr/share/pam-configs/mkhomedir"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpam-modules-bin@1.5.2-6+deb12u2",
          "Name": "libpam-modules-bin",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpam-modules-bin@1.5.2-6%2Bdeb12u2?arch=amd64\u0026distro=debian-12.15",
            "UID": "9719a4713ae6c4fa"
          },
          "Version": "1.5.2",
          "Release": "6+deb12u2",
          "Arch": "amd64",
          "SrcName": "pam",
          "SrcVersion": "1.5.2",
          "SrcRelease": "6+deb12u2",
          "Licenses": [
            "BSD-3-Clause",
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-only",
            "GPL-3+ with Bison exception",
            "BSD-tcp_wrappers",
            "LGPL-2.0-or-later",
            "LGPL-2.0-only",
            "public-domain",
            "Beerware"
          ],
          "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libaudit1@1:3.0.9-1",
            "libc6@2.36-9+deb12u14",
            "libcrypt1@1:4.4.33-2",
            "libpam0g@1.5.2-6+deb12u2",
            "libselinux1@3.4-1+b6"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/sbin/mkhomedir_helper",
            "/sbin/pam_namespace_helper",
            "/sbin/pwhistory_helper",
            "/sbin/unix_chkpwd",
            "/sbin/unix_update",
            "/usr/lib/systemd/system/pam_namespace.service",
            "/usr/sbin/faillock",
            "/usr/sbin/pam_timestamp_check",
            "/usr/share/doc/libpam-modules-bin/NEWS.Debian.gz",
            "/usr/share/doc/libpam-modules-bin/changelog.Debian.gz",
            "/usr/share/doc/libpam-modules-bin/changelog.gz",
            "/usr/share/doc/libpam-modules-bin/copyright",
            "/usr/share/lintian/overrides/libpam-modules-bin",
            "/usr/share/man/man5/environment.5.gz",
            "/usr/share/man/man8/faillock.8.gz",
            "/usr/share/man/man8/mkhomedir_helper.8.gz",
            "/usr/share/man/man8/pam_namespace_helper.8.gz",
            "/usr/share/man/man8/pam_timestamp_check.8.gz",
            "/usr/share/man/man8/pwhistory_helper.8.gz",
            "/usr/share/man/man8/unix_chkpwd.8.gz",
            "/usr/share/man/man8/unix_update.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpam-runtime@1.5.2-6+deb12u2",
          "Name": "libpam-runtime",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpam-runtime@1.5.2-6%2Bdeb12u2?arch=all\u0026distro=debian-12.15",
            "UID": "47e594e0f52955ae"
          },
          "Version": "1.5.2",
          "Release": "6+deb12u2",
          "Arch": "all",
          "SrcName": "pam",
          "SrcVersion": "1.5.2",
          "SrcRelease": "6+deb12u2",
          "Licenses": [
            "BSD-3-Clause",
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-only",
            "GPL-3+ with Bison exception",
            "BSD-tcp_wrappers",
            "LGPL-2.0-or-later",
            "LGPL-2.0-only",
            "public-domain",
            "Beerware"
          ],
          "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "debconf@1.5.82",
            "libpam-modules@1.5.2-6+deb12u2"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/sbin/pam-auth-update",
            "/usr/sbin/pam_getenv",
            "/usr/share/doc/libpam-runtime/NEWS.Debian.gz",
            "/usr/share/doc/libpam-runtime/changelog.Debian.gz",
            "/usr/share/doc/libpam-runtime/changelog.gz",
            "/usr/share/doc/libpam-runtime/copyright",
            "/usr/share/lintian/overrides/libpam-runtime",
            "/usr/share/locale/af/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/am/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ar/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/as/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/az/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/be/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/bg/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/bn/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/bn_IN/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/bs/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ca/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/cs/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/cy/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/da/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/de/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/de_CH/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/el/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/eo/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/es/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/et/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/eu/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/fa/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/fi/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/fr/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ga/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/gl/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/gu/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/he/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/hi/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/hr/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/hu/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ia/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/id/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/is/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/it/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ja/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ka/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/kk/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/km/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/kn/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ko/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/kw_GB/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ky/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/lt/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/lv/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/mk/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ml/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/mn/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/mr/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ms/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/my/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/nb/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ne/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/nl/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/nn/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/or/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/pa/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/pl/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/pt/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ro/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ru/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/si/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/sk/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/sl/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/sq/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/sr/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/sr@latin/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/sv/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ta/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/te/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/tg/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/th/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/tr/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/uk/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/ur/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/vi/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/yo/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/zh_HK/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/locale/zu/LC_MESSAGES/Linux-PAM.mo",
            "/usr/share/man/man5/pam.conf.5.gz",
            "/usr/share/man/man7/PAM.7.gz",
            "/usr/share/man/man8/pam-auth-update.8.gz",
            "/usr/share/man/man8/pam_getenv.8.gz",
            "/usr/share/pam-configs/unix",
            "/usr/share/pam/common-account",
            "/usr/share/pam/common-account.md5sums",
            "/usr/share/pam/common-auth",
            "/usr/share/pam/common-auth.md5sums",
            "/usr/share/pam/common-password",
            "/usr/share/pam/common-password.md5sums",
            "/usr/share/pam/common-session",
            "/usr/share/pam/common-session-noninteractive",
            "/usr/share/pam/common-session-noninteractive.md5sums",
            "/usr/share/pam/common-session.md5sums"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpam0g@1.5.2-6+deb12u2",
          "Name": "libpam0g",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpam0g@1.5.2-6%2Bdeb12u2?arch=amd64\u0026distro=debian-12.15",
            "UID": "7ae56a42d59eaaac"
          },
          "Version": "1.5.2",
          "Release": "6+deb12u2",
          "Arch": "amd64",
          "SrcName": "pam",
          "SrcVersion": "1.5.2",
          "SrcRelease": "6+deb12u2",
          "Licenses": [
            "BSD-3-Clause",
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-only",
            "GPL-3+ with Bison exception",
            "BSD-tcp_wrappers",
            "LGPL-2.0-or-later",
            "LGPL-2.0-only",
            "public-domain",
            "Beerware"
          ],
          "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "debconf@1.5.82",
            "libaudit1@1:3.0.9-1",
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/x86_64-linux-gnu/libpam.so.0.85.1",
            "/lib/x86_64-linux-gnu/libpam_misc.so.0.82.1",
            "/lib/x86_64-linux-gnu/libpamc.so.0.82.1",
            "/usr/share/doc/libpam0g/Debian-PAM-MiniPolicy.gz",
            "/usr/share/doc/libpam0g/NEWS.Debian.gz",
            "/usr/share/doc/libpam0g/README",
            "/usr/share/doc/libpam0g/README.Debian",
            "/usr/share/doc/libpam0g/TODO.Debian",
            "/usr/share/doc/libpam0g/changelog.Debian.gz",
            "/usr/share/doc/libpam0g/changelog.gz",
            "/usr/share/doc/libpam0g/copyright",
            "/usr/share/lintian/overrides/libpam0g"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libpcre2-8-0@10.42-1+deb12u2",
          "Name": "libpcre2-8-0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libpcre2-8-0@10.42-1%2Bdeb12u2?arch=amd64\u0026distro=debian-12.15",
            "UID": "de65f9c8dc0b5f73"
          },
          "Version": "10.42",
          "Release": "1+deb12u2",
          "Arch": "amd64",
          "SrcName": "pcre2",
          "SrcVersion": "10.42",
          "SrcRelease": "1+deb12u2",
          "Licenses": [
            "BSD-3-clause-Cambridge with BINARY LIBRARY-LIKE PACKAGES exception",
            "BSD-3-Clause",
            "X11",
            "BSD-2-Clause",
            "public-domain"
          ],
          "Maintainer": "Matthew Vernon \u003cmatthew@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libpcre2-8.so.0.11.2",
            "/usr/share/doc/libpcre2-8-0/README.Debian",
            "/usr/share/doc/libpcre2-8-0/changelog.Debian.gz",
            "/usr/share/doc/libpcre2-8-0/changelog.gz",
            "/usr/share/doc/libpcre2-8-0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libseccomp2@2.5.4-1+deb12u1",
          "Name": "libseccomp2",
          "Identifier": {
            "PURL": "pkg:deb/debian/libseccomp2@2.5.4-1%2Bdeb12u1?arch=amd64\u0026distro=debian-12.15",
            "UID": "88ec7e73f2e0c3ca"
          },
          "Version": "2.5.4",
          "Release": "1+deb12u1",
          "Arch": "amd64",
          "SrcName": "libseccomp",
          "SrcVersion": "2.5.4",
          "SrcRelease": "1+deb12u1",
          "Licenses": [
            "LGPL-2.1-only"
          ],
          "Maintainer": "Kees Cook \u003ckees@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libseccomp.so.2.5.4",
            "/usr/share/doc/libseccomp2/changelog.Debian.gz",
            "/usr/share/doc/libseccomp2/changelog.gz",
            "/usr/share/doc/libseccomp2/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libselinux1@3.4-1+b6",
          "Name": "libselinux1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libselinux1@3.4-1%2Bb6?arch=amd64\u0026distro=debian-12.15",
            "UID": "8950abe5d140b0da"
          },
          "Version": "3.4",
          "Release": "1+b6",
          "Arch": "amd64",
          "SrcName": "libselinux",
          "SrcVersion": "3.4",
          "SrcRelease": "1",
          "Licenses": [
            "LGPL-2.1-only",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14",
            "libpcre2-8-0@10.42-1+deb12u2"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/x86_64-linux-gnu/libselinux.so.1",
            "/usr/share/doc/libselinux1/changelog.Debian.amd64.gz",
            "/usr/share/doc/libselinux1/changelog.Debian.gz",
            "/usr/share/doc/libselinux1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libsemanage-common@3.4-1",
          "Name": "libsemanage-common",
          "Identifier": {
            "PURL": "pkg:deb/debian/libsemanage-common@3.4-1?arch=all\u0026distro=debian-12.15",
            "UID": "92dad50d9f4fd095"
          },
          "Version": "3.4",
          "Release": "1",
          "Arch": "all",
          "SrcName": "libsemanage",
          "SrcVersion": "3.4",
          "SrcRelease": "1",
          "Licenses": [
            "LGPL-2.0-or-later",
            "GPL-2.0-or-later"
          ],
          "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/share/doc/libsemanage-common/changelog.Debian.gz",
            "/usr/share/doc/libsemanage-common/copyright",
            "/usr/share/man/man5/semanage.conf.5.gz",
            "/usr/share/man/ru/man5/semanage.conf.5.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libsemanage2@3.4-1+b5",
          "Name": "libsemanage2",
          "Identifier": {
            "PURL": "pkg:deb/debian/libsemanage2@3.4-1%2Bb5?arch=amd64\u0026distro=debian-12.15",
            "UID": "dbf1d8a820975a92"
          },
          "Version": "3.4",
          "Release": "1+b5",
          "Arch": "amd64",
          "SrcName": "libsemanage",
          "SrcVersion": "3.4",
          "SrcRelease": "1",
          "Licenses": [
            "LGPL-2.0-or-later",
            "GPL-2.0-or-later"
          ],
          "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libaudit1@1:3.0.9-1",
            "libbz2-1.0@1.0.8-5+b1",
            "libc6@2.36-9+deb12u14",
            "libselinux1@3.4-1+b6",
            "libsemanage-common@3.4-1",
            "libsepol2@3.4-2.1"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libsemanage.so.2",
            "/usr/share/doc/libsemanage2/changelog.Debian.amd64.gz",
            "/usr/share/doc/libsemanage2/changelog.Debian.gz",
            "/usr/share/doc/libsemanage2/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libsepol2@3.4-2.1",
          "Name": "libsepol2",
          "Identifier": {
            "PURL": "pkg:deb/debian/libsepol2@3.4-2.1?arch=amd64\u0026distro=debian-12.15",
            "UID": "ac408a49f94903ef"
          },
          "Version": "3.4",
          "Release": "2.1",
          "Arch": "amd64",
          "SrcName": "libsepol",
          "SrcVersion": "3.4",
          "SrcRelease": "2.1",
          "Licenses": [
            "LGPL-2.1-or-later",
            "LGPL-2.1-only",
            "Zlib",
            "GPL-2.0-only",
            "GPL-2.0-or-later"
          ],
          "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/x86_64-linux-gnu/libsepol.so.2",
            "/usr/share/doc/libsepol2/changelog.Debian.gz",
            "/usr/share/doc/libsepol2/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libsmartcols1@2.38.1-5+deb12u3",
          "Name": "libsmartcols1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libsmartcols1@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "5724e02241dee022"
          },
          "Version": "2.38.1",
          "Release": "5+deb12u3",
          "Arch": "amd64",
          "SrcName": "util-linux",
          "SrcVersion": "2.38.1",
          "SrcRelease": "5+deb12u3",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "public-domain",
            "BSD-4-Clause",
            "MIT",
            "BSD-3-Clause",
            "BSLA",
            "LGPL-2.0-or-later",
            "LGPL-2.1-or-later",
            "LGPL-3.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "util-linux packagers \u003cutil-linux@packages.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libsmartcols.so.1.1.0",
            "/usr/share/doc/libsmartcols1/changelog.Debian.gz",
            "/usr/share/doc/libsmartcols1/changelog.gz",
            "/usr/share/doc/libsmartcols1/copyright",
            "/usr/share/lintian/overrides/libsmartcols1"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libss2@1.47.0-2+b2",
          "Name": "libss2",
          "Identifier": {
            "PURL": "pkg:deb/debian/libss2@1.47.0-2%2Bb2?arch=amd64\u0026distro=debian-12.15",
            "UID": "ccae692f48632a09"
          },
          "Version": "1.47.0",
          "Release": "2+b2",
          "Arch": "amd64",
          "SrcName": "e2fsprogs",
          "SrcVersion": "1.47.0",
          "SrcRelease": "2",
          "Licenses": [
            "GPL-2.0-only",
            "LGPL-2.0-only",
            "BSD-3-Clause",
            "Apache-2.0",
            "ISC",
            "GPL-2.0-or-later",
            "MIT-US-export",
            "Kazlib",
            "Latex2e",
            "GPL-2+ with Texinfo exception"
          ],
          "Maintainer": "Theodore Y. Ts'o \u003ctytso@mit.edu\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14",
            "libcom-err2@1.47.0-2+b2"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/x86_64-linux-gnu/libss.so.2.0",
            "/usr/share/doc/libss2/changelog.Debian.amd64.gz",
            "/usr/share/doc/libss2/changelog.Debian.gz",
            "/usr/share/doc/libss2/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libssl3@3.0.22-1~deb12u1",
          "Name": "libssl3",
          "Identifier": {
            "PURL": "pkg:deb/debian/libssl3@3.0.22-1~deb12u1?arch=amd64\u0026distro=debian-12.15",
            "UID": "f7c3e0b0d7f2f89"
          },
          "Version": "3.0.22",
          "Release": "1~deb12u1",
          "Arch": "amd64",
          "SrcName": "openssl",
          "SrcVersion": "3.0.22",
          "SrcRelease": "1~deb12u1",
          "Licenses": [
            "Apache-2.0",
            "Artistic-2.0",
            "GPL-1.0-or-later",
            "GPL-1.0-only"
          ],
          "Maintainer": "Debian OpenSSL Team \u003cpkg-openssl-devel@alioth-lists.debian.net\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e2dee3fc233f0f0b260b1ff7b599106e4b770679efa2cf256598e400160aa3ed"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/engines-3/afalg.so",
            "/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so",
            "/usr/lib/x86_64-linux-gnu/engines-3/padlock.so",
            "/usr/lib/x86_64-linux-gnu/libcrypto.so.3",
            "/usr/lib/x86_64-linux-gnu/libssl.so.3",
            "/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so",
            "/usr/share/doc/libssl3/changelog.Debian.gz",
            "/usr/share/doc/libssl3/changelog.gz",
            "/usr/share/doc/libssl3/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libstdc++6@12.2.0-14+deb12u1",
          "Name": "libstdc++6",
          "Identifier": {
            "PURL": "pkg:deb/debian/libstdc%2B%2B6@12.2.0-14%2Bdeb12u1?arch=amd64\u0026distro=debian-12.15",
            "UID": "4d5941cb5d8b3963"
          },
          "Version": "12.2.0",
          "Release": "14+deb12u1",
          "Arch": "amd64",
          "SrcName": "gcc-12",
          "SrcVersion": "12.2.0",
          "SrcRelease": "14+deb12u1",
          "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "gcc-12-base@12.2.0-14+deb12u1",
            "libc6@2.36-9+deb12u14",
            "libgcc-s1@12.2.0-14+deb12u1"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.30",
            "/usr/share/gcc/python/libstdcxx/__init__.py",
            "/usr/share/gcc/python/libstdcxx/v6/__init__.py",
            "/usr/share/gcc/python/libstdcxx/v6/printers.py",
            "/usr/share/gcc/python/libstdcxx/v6/xmethods.py",
            "/usr/share/gdb/auto-load/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.30-gdb.py"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libsystemd0@252.39-1~deb12u2",
          "Name": "libsystemd0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libsystemd0@252.39-1~deb12u2?arch=amd64\u0026distro=debian-12.15",
            "UID": "b17b1605ea6e3b2c"
          },
          "Version": "252.39",
          "Release": "1~deb12u2",
          "Arch": "amd64",
          "SrcName": "systemd",
          "SrcVersion": "252.39",
          "SrcRelease": "1~deb12u2",
          "Licenses": [
            "LGPL-2.1-or-later",
            "CC0-1.0",
            "GPL-2 with Linux-syscall-note exception",
            "MIT",
            "public-domain",
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14",
            "libcap2@1:2.66-4+deb12u3+b1",
            "libgcrypt20@1.10.1-3+deb12u1",
            "liblz4-1@1.9.4-1",
            "liblzma5@5.4.1-1+deb12u2",
            "libzstd1@1.5.4+dfsg2-5"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libsystemd.so.0.35.0",
            "/usr/share/doc/libsystemd0/NEWS.Debian.gz",
            "/usr/share/doc/libsystemd0/changelog.Debian.gz",
            "/usr/share/doc/libsystemd0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libtasn1-6@4.19.0-2+deb12u1",
          "Name": "libtasn1-6",
          "Identifier": {
            "PURL": "pkg:deb/debian/libtasn1-6@4.19.0-2%2Bdeb12u1?arch=amd64\u0026distro=debian-12.15",
            "UID": "484c57438715f01f"
          },
          "Version": "4.19.0",
          "Release": "2+deb12u1",
          "Arch": "amd64",
          "SrcName": "libtasn1-6",
          "SrcVersion": "4.19.0",
          "SrcRelease": "2+deb12u1",
          "Licenses": [
            "LGPL-2.0-or-later",
            "LGPL-2.1-only",
            "GPL-3.0-only",
            "GFDL-1.3-only"
          ],
          "Maintainer": "Debian GnuTLS Maintainers \u003cpkg-gnutls-maint@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libtasn1.so.6.6.3",
            "/usr/share/doc/libtasn1-6/AUTHORS",
            "/usr/share/doc/libtasn1-6/README.md",
            "/usr/share/doc/libtasn1-6/THANKS",
            "/usr/share/doc/libtasn1-6/changelog.Debian.gz",
            "/usr/share/doc/libtasn1-6/changelog.gz",
            "/usr/share/doc/libtasn1-6/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libtinfo6@6.4-4",
          "Name": "libtinfo6",
          "Identifier": {
            "PURL": "pkg:deb/debian/libtinfo6@6.4-4?arch=amd64\u0026distro=debian-12.15",
            "UID": "35a440edb17e1ce3"
          },
          "Version": "6.4",
          "Release": "4",
          "Arch": "amd64",
          "SrcName": "ncurses",
          "SrcVersion": "6.4",
          "SrcRelease": "4",
          "Licenses": [
            "MIT/X11",
            "X11",
            "BSD-3-Clause"
          ],
          "Maintainer": "Craig Small \u003ccsmall@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/x86_64-linux-gnu/libtinfo.so.6.4",
            "/usr/lib/x86_64-linux-gnu/libtic.so.6.4",
            "/usr/share/doc/libtinfo6/changelog.Debian.gz",
            "/usr/share/doc/libtinfo6/changelog.gz",
            "/usr/share/doc/libtinfo6/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libudev1@252.39-1~deb12u2",
          "Name": "libudev1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libudev1@252.39-1~deb12u2?arch=amd64\u0026distro=debian-12.15",
            "UID": "3c4724c0041c8265"
          },
          "Version": "252.39",
          "Release": "1~deb12u2",
          "Arch": "amd64",
          "SrcName": "systemd",
          "SrcVersion": "252.39",
          "SrcRelease": "1~deb12u2",
          "Licenses": [
            "LGPL-2.1-or-later",
            "CC0-1.0",
            "GPL-2 with Linux-syscall-note exception",
            "MIT",
            "public-domain",
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "LGPL-2.1-only"
          ],
          "Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libudev.so.1.7.5",
            "/usr/share/doc/libudev1/NEWS.Debian.gz",
            "/usr/share/doc/libudev1/changelog.Debian.gz",
            "/usr/share/doc/libudev1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libunistring2@1.0-2",
          "Name": "libunistring2",
          "Identifier": {
            "PURL": "pkg:deb/debian/libunistring2@1.0-2?arch=amd64\u0026distro=debian-12.15",
            "UID": "70fad769e12ed4a0"
          },
          "Version": "1.0",
          "Release": "2",
          "Arch": "amd64",
          "SrcName": "libunistring",
          "SrcVersion": "1.0",
          "SrcRelease": "2",
          "Licenses": [
            "LGPL-3.0-or-later",
            "GPL-2.0-or-later",
            "FreeSoftware",
            "GPL-3.0-or-later",
            "GFDL-1.2-or-later",
            "GPL-2+ with distribution exception",
            "MIT",
            "LGPL-3.0-only",
            "GPL-3.0-only",
            "GPL-2.0-only",
            "GFDL-1.2-only"
          ],
          "Maintainer": "Jörg Frings-Fürst \u003cdebian@jff.email\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libunistring.so.2.2.0",
            "/usr/share/doc/libunistring2/changelog.Debian.gz",
            "/usr/share/doc/libunistring2/changelog.gz",
            "/usr/share/doc/libunistring2/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libuuid1@2.38.1-5+deb12u3",
          "Name": "libuuid1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libuuid1@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "d649adb64a1fff7d"
          },
          "Version": "2.38.1",
          "Release": "5+deb12u3",
          "Arch": "amd64",
          "SrcName": "util-linux",
          "SrcVersion": "2.38.1",
          "SrcRelease": "5+deb12u3",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "public-domain",
            "BSD-4-Clause",
            "MIT",
            "BSD-3-Clause",
            "BSLA",
            "LGPL-2.0-or-later",
            "LGPL-2.1-or-later",
            "LGPL-3.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "util-linux packagers \u003cutil-linux@packages.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libuuid.so.1.3.0",
            "/usr/share/doc/libuuid1/changelog.Debian.gz",
            "/usr/share/doc/libuuid1/changelog.gz",
            "/usr/share/doc/libuuid1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libxxhash0@0.8.1-1",
          "Name": "libxxhash0",
          "Identifier": {
            "PURL": "pkg:deb/debian/libxxhash0@0.8.1-1?arch=amd64\u0026distro=debian-12.15",
            "UID": "7a5128d9907c6eb3"
          },
          "Version": "0.8.1",
          "Release": "1",
          "Arch": "amd64",
          "SrcName": "xxhash",
          "SrcVersion": "0.8.1",
          "SrcRelease": "1",
          "Licenses": [
            "BSD-2-Clause",
            "GPL-2.0-only"
          ],
          "Maintainer": "Josue Ortega \u003cjosue@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libxxhash.so.0.8.1",
            "/usr/share/doc/libxxhash0/changelog.Debian.gz",
            "/usr/share/doc/libxxhash0/changelog.gz",
            "/usr/share/doc/libxxhash0/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "libzstd1@1.5.4+dfsg2-5",
          "Name": "libzstd1",
          "Identifier": {
            "PURL": "pkg:deb/debian/libzstd1@1.5.4%2Bdfsg2-5?arch=amd64\u0026distro=debian-12.15",
            "UID": "f58570fe4ab7b9f5"
          },
          "Version": "1.5.4+dfsg2",
          "Release": "5",
          "Arch": "amd64",
          "SrcName": "libzstd",
          "SrcVersion": "1.5.4+dfsg2",
          "SrcRelease": "5",
          "Licenses": [
            "BSD-3-Clause",
            "GPL-2.0-only",
            "Zlib",
            "MIT"
          ],
          "Maintainer": "RPM packaging team \u003cteam+pkg-rpm@tracker.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/lib/x86_64-linux-gnu/libzstd.so.1.5.4",
            "/usr/share/doc/libzstd1/changelog.Debian.gz",
            "/usr/share/doc/libzstd1/changelog.gz",
            "/usr/share/doc/libzstd1/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "login@1:4.13+dfsg1-1+deb12u2",
          "Name": "login",
          "Identifier": {
            "PURL": "pkg:deb/debian/login@4.13%2Bdfsg1-1%2Bdeb12u2?arch=amd64\u0026distro=debian-12.15\u0026epoch=1",
            "UID": "38a1786e5b20bfe2"
          },
          "Version": "4.13+dfsg1",
          "Release": "1+deb12u2",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "shadow",
          "SrcVersion": "4.13+dfsg1",
          "SrcRelease": "1+deb12u2",
          "SrcEpoch": 1,
          "Licenses": [
            "BSD-3-Clause",
            "GPL-1.0-only",
            "GPL-2.0-or-later",
            "public-domain",
            "GPL-2.0-only"
          ],
          "Maintainer": "Shadow package maintainers \u003cpkg-shadow-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/bin/login",
            "/usr/bin/faillog",
            "/usr/bin/lastlog",
            "/usr/bin/newgrp",
            "/usr/sbin/nologin",
            "/usr/share/doc/login/NEWS.Debian.gz",
            "/usr/share/doc/login/changelog.Debian.gz",
            "/usr/share/doc/login/changelog.gz",
            "/usr/share/doc/login/copyright",
            "/usr/share/lintian/overrides/login",
            "/usr/share/locale/bs/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/ca/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/cs/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/da/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/de/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/dz/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/el/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/es/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/eu/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/fi/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/fr/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/gl/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/he/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/hu/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/id/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/it/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/ja/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/ka/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/kk/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/km/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/ko/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/nb/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/ne/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/nl/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/nn/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/pl/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/pt/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/ro/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/ru/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/sk/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/sq/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/sv/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/tl/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/tr/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/uk/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/vi/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/shadow.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/shadow.mo",
            "/usr/share/man/cs/man5/faillog.5.gz",
            "/usr/share/man/cs/man8/faillog.8.gz",
            "/usr/share/man/cs/man8/lastlog.8.gz",
            "/usr/share/man/cs/man8/nologin.8.gz",
            "/usr/share/man/da/man1/newgrp.1.gz",
            "/usr/share/man/da/man1/sg.1.gz",
            "/usr/share/man/da/man8/nologin.8.gz",
            "/usr/share/man/de/man1/login.1.gz",
            "/usr/share/man/de/man1/newgrp.1.gz",
            "/usr/share/man/de/man1/sg.1.gz",
            "/usr/share/man/de/man5/faillog.5.gz",
            "/usr/share/man/de/man5/login.defs.5.gz",
            "/usr/share/man/de/man8/faillog.8.gz",
            "/usr/share/man/de/man8/lastlog.8.gz",
            "/usr/share/man/de/man8/nologin.8.gz",
            "/usr/share/man/fr/man1/login.1.gz",
            "/usr/share/man/fr/man1/newgrp.1.gz",
            "/usr/share/man/fr/man1/sg.1.gz",
            "/usr/share/man/fr/man5/faillog.5.gz",
            "/usr/share/man/fr/man5/login.defs.5.gz",
            "/usr/share/man/fr/man8/faillog.8.gz",
            "/usr/share/man/fr/man8/lastlog.8.gz",
            "/usr/share/man/fr/man8/nologin.8.gz",
            "/usr/share/man/hu/man1/login.1.gz",
            "/usr/share/man/hu/man1/newgrp.1.gz",
            "/usr/share/man/hu/man8/lastlog.8.gz",
            "/usr/share/man/id/man1/login.1.gz",
            "/usr/share/man/it/man1/login.1.gz",
            "/usr/share/man/it/man1/newgrp.1.gz",
            "/usr/share/man/it/man1/sg.1.gz",
            "/usr/share/man/it/man5/faillog.5.gz",
            "/usr/share/man/it/man5/login.defs.5.gz",
            "/usr/share/man/it/man8/faillog.8.gz",
            "/usr/share/man/it/man8/lastlog.8.gz",
            "/usr/share/man/it/man8/nologin.8.gz",
            "/usr/share/man/ja/man1/login.1.gz",
            "/usr/share/man/ja/man1/newgrp.1.gz",
            "/usr/share/man/ja/man5/faillog.5.gz",
            "/usr/share/man/ja/man5/login.defs.5.gz",
            "/usr/share/man/ja/man8/faillog.8.gz",
            "/usr/share/man/ja/man8/lastlog.8.gz",
            "/usr/share/man/ko/man1/login.1.gz",
            "/usr/share/man/man1/login.1.gz",
            "/usr/share/man/man1/newgrp.1.gz",
            "/usr/share/man/man1/sg.1.gz",
            "/usr/share/man/man5/faillog.5.gz",
            "/usr/share/man/man5/login.defs.5.gz",
            "/usr/share/man/man8/faillog.8.gz",
            "/usr/share/man/man8/lastlog.8.gz",
            "/usr/share/man/man8/nologin.8.gz",
            "/usr/share/man/pl/man1/newgrp.1.gz",
            "/usr/share/man/pl/man1/sg.1.gz",
            "/usr/share/man/pl/man5/faillog.5.gz",
            "/usr/share/man/pl/man8/faillog.8.gz",
            "/usr/share/man/pl/man8/lastlog.8.gz",
            "/usr/share/man/ru/man1/login.1.gz",
            "/usr/share/man/ru/man1/newgrp.1.gz",
            "/usr/share/man/ru/man1/sg.1.gz",
            "/usr/share/man/ru/man5/faillog.5.gz",
            "/usr/share/man/ru/man5/login.defs.5.gz",
            "/usr/share/man/ru/man8/faillog.8.gz",
            "/usr/share/man/ru/man8/lastlog.8.gz",
            "/usr/share/man/ru/man8/nologin.8.gz",
            "/usr/share/man/sv/man1/newgrp.1.gz",
            "/usr/share/man/sv/man1/sg.1.gz",
            "/usr/share/man/sv/man5/faillog.5.gz",
            "/usr/share/man/sv/man8/faillog.8.gz",
            "/usr/share/man/sv/man8/lastlog.8.gz",
            "/usr/share/man/sv/man8/nologin.8.gz",
            "/usr/share/man/tr/man1/login.1.gz",
            "/usr/share/man/uk/man1/login.1.gz",
            "/usr/share/man/uk/man1/newgrp.1.gz",
            "/usr/share/man/uk/man1/sg.1.gz",
            "/usr/share/man/uk/man5/faillog.5.gz",
            "/usr/share/man/uk/man5/login.defs.5.gz",
            "/usr/share/man/uk/man8/faillog.8.gz",
            "/usr/share/man/uk/man8/lastlog.8.gz",
            "/usr/share/man/uk/man8/nologin.8.gz",
            "/usr/share/man/zh_CN/man1/login.1.gz",
            "/usr/share/man/zh_CN/man1/newgrp.1.gz",
            "/usr/share/man/zh_CN/man1/sg.1.gz",
            "/usr/share/man/zh_CN/man5/faillog.5.gz",
            "/usr/share/man/zh_CN/man5/login.defs.5.gz",
            "/usr/share/man/zh_CN/man8/faillog.8.gz",
            "/usr/share/man/zh_CN/man8/lastlog.8.gz",
            "/usr/share/man/zh_CN/man8/nologin.8.gz",
            "/usr/share/man/zh_TW/man1/newgrp.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "logsave@1.47.0-2+b2",
          "Name": "logsave",
          "Identifier": {
            "PURL": "pkg:deb/debian/logsave@1.47.0-2%2Bb2?arch=amd64\u0026distro=debian-12.15",
            "UID": "5623730c4d6c3f45"
          },
          "Version": "1.47.0",
          "Release": "2+b2",
          "Arch": "amd64",
          "SrcName": "e2fsprogs",
          "SrcVersion": "1.47.0",
          "SrcRelease": "2",
          "Licenses": [
            "GPL-2.0-only",
            "LGPL-2.0-only",
            "BSD-3-Clause",
            "Apache-2.0",
            "ISC",
            "GPL-2.0-or-later",
            "MIT-US-export",
            "Kazlib",
            "Latex2e",
            "GPL-2+ with Texinfo exception"
          ],
          "Maintainer": "Theodore Y. Ts'o \u003ctytso@mit.edu\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/sbin/logsave",
            "/usr/share/doc/logsave/changelog.Debian.amd64.gz",
            "/usr/share/doc/logsave/changelog.Debian.gz",
            "/usr/share/doc/logsave/copyright",
            "/usr/share/man/man8/logsave.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "mawk@1.3.4.20200120-3.1",
          "Name": "mawk",
          "Identifier": {
            "PURL": "pkg:deb/debian/mawk@1.3.4.20200120-3.1?arch=amd64\u0026distro=debian-12.15",
            "UID": "d66b16acd7a3e504"
          },
          "Version": "1.3.4.20200120",
          "Release": "3.1",
          "Arch": "amd64",
          "SrcName": "mawk",
          "SrcVersion": "1.3.4.20200120",
          "SrcRelease": "3.1",
          "Licenses": [
            "GPL-2.0-only",
            "X11",
            "CC-BY-3.0"
          ],
          "Maintainer": "Boyuan Yang \u003cbyang@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/bin/mawk",
            "/usr/share/doc/mawk/ACKNOWLEDGMENT",
            "/usr/share/doc/mawk/README",
            "/usr/share/doc/mawk/changelog.Debian.gz",
            "/usr/share/doc/mawk/changelog.gz",
            "/usr/share/doc/mawk/copyright",
            "/usr/share/doc/mawk/examples/ct_length.awk",
            "/usr/share/doc/mawk/examples/decl.awk",
            "/usr/share/doc/mawk/examples/deps.awk",
            "/usr/share/doc/mawk/examples/eatc.awk",
            "/usr/share/doc/mawk/examples/gdecl.awk",
            "/usr/share/doc/mawk/examples/hcal",
            "/usr/share/doc/mawk/examples/hical",
            "/usr/share/doc/mawk/examples/nocomment.awk",
            "/usr/share/doc/mawk/examples/primes.awk",
            "/usr/share/doc/mawk/examples/qsort.awk",
            "/usr/share/man/man1/mawk.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "mount@2.38.1-5+deb12u3",
          "Name": "mount",
          "Identifier": {
            "PURL": "pkg:deb/debian/mount@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "db6b596e9b2c0272"
          },
          "Version": "2.38.1",
          "Release": "5+deb12u3",
          "Arch": "amd64",
          "SrcName": "util-linux",
          "SrcVersion": "2.38.1",
          "SrcRelease": "5+deb12u3",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "public-domain",
            "BSD-4-Clause",
            "MIT",
            "BSD-3-Clause",
            "BSLA",
            "LGPL-2.0-or-later",
            "LGPL-2.1-or-later",
            "LGPL-3.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "util-linux packagers \u003cutil-linux@packages.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/bin/mount",
            "/bin/umount",
            "/sbin/losetup",
            "/sbin/swapoff",
            "/sbin/swapon",
            "/usr/share/bash-completion/completions/losetup",
            "/usr/share/bash-completion/completions/mount",
            "/usr/share/bash-completion/completions/swapoff",
            "/usr/share/bash-completion/completions/swapon",
            "/usr/share/bash-completion/completions/umount",
            "/usr/share/doc/mount/changelog.Debian.gz",
            "/usr/share/doc/mount/changelog.gz",
            "/usr/share/doc/mount/copyright",
            "/usr/share/doc/mount/examples/filesystems",
            "/usr/share/doc/mount/examples/fstab",
            "/usr/share/doc/mount/examples/mount.fstab",
            "/usr/share/doc/mount/mount.txt",
            "/usr/share/lintian/overrides/mount",
            "/usr/share/man/man5/fstab.5.gz",
            "/usr/share/man/man8/losetup.8.gz",
            "/usr/share/man/man8/mount.8.gz",
            "/usr/share/man/man8/swapon.8.gz",
            "/usr/share/man/man8/umount.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "ncurses-base@6.4-4",
          "Name": "ncurses-base",
          "Identifier": {
            "PURL": "pkg:deb/debian/ncurses-base@6.4-4?arch=all\u0026distro=debian-12.15",
            "UID": "8e69deb4f19b17b3"
          },
          "Version": "6.4",
          "Release": "4",
          "Arch": "all",
          "SrcName": "ncurses",
          "SrcVersion": "6.4",
          "SrcRelease": "4",
          "Licenses": [
            "MIT/X11",
            "X11",
            "BSD-3-Clause"
          ],
          "Maintainer": "Craig Small \u003ccsmall@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/terminfo/E/Eterm",
            "/lib/terminfo/a/ansi",
            "/lib/terminfo/c/cons25",
            "/lib/terminfo/c/cons25-debian",
            "/lib/terminfo/c/cygwin",
            "/lib/terminfo/d/dumb",
            "/lib/terminfo/h/hurd",
            "/lib/terminfo/l/linux",
            "/lib/terminfo/m/mach",
            "/lib/terminfo/m/mach-bold",
            "/lib/terminfo/m/mach-color",
            "/lib/terminfo/m/mach-gnu",
            "/lib/terminfo/m/mach-gnu-color",
            "/lib/terminfo/p/pcansi",
            "/lib/terminfo/r/rxvt",
            "/lib/terminfo/r/rxvt-basic",
            "/lib/terminfo/r/rxvt-unicode",
            "/lib/terminfo/r/rxvt-unicode-256color",
            "/lib/terminfo/s/screen",
            "/lib/terminfo/s/screen-256color",
            "/lib/terminfo/s/screen-256color-bce",
            "/lib/terminfo/s/screen-bce",
            "/lib/terminfo/s/screen-s",
            "/lib/terminfo/s/screen-w",
            "/lib/terminfo/s/screen.xterm-256color",
            "/lib/terminfo/s/sun",
            "/lib/terminfo/t/tmux",
            "/lib/terminfo/t/tmux-256color",
            "/lib/terminfo/v/vt100",
            "/lib/terminfo/v/vt102",
            "/lib/terminfo/v/vt220",
            "/lib/terminfo/v/vt52",
            "/lib/terminfo/w/wsvt25",
            "/lib/terminfo/w/wsvt25m",
            "/lib/terminfo/x/xterm",
            "/lib/terminfo/x/xterm-256color",
            "/lib/terminfo/x/xterm-color",
            "/lib/terminfo/x/xterm-mono",
            "/lib/terminfo/x/xterm-r5",
            "/lib/terminfo/x/xterm-r6",
            "/lib/terminfo/x/xterm-vt220",
            "/lib/terminfo/x/xterm-xfree86",
            "/usr/share/doc/ncurses-base/FAQ",
            "/usr/share/doc/ncurses-base/TODO.Debian",
            "/usr/share/doc/ncurses-base/changelog.Debian.gz",
            "/usr/share/doc/ncurses-base/changelog.gz",
            "/usr/share/doc/ncurses-base/copyright",
            "/usr/share/lintian/overrides/ncurses-base",
            "/usr/share/tabset/std",
            "/usr/share/tabset/stdcrt",
            "/usr/share/tabset/vt100",
            "/usr/share/tabset/vt300"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "ncurses-bin@6.4-4",
          "Name": "ncurses-bin",
          "Identifier": {
            "PURL": "pkg:deb/debian/ncurses-bin@6.4-4?arch=amd64\u0026distro=debian-12.15",
            "UID": "e3f559220e0fbad1"
          },
          "Version": "6.4",
          "Release": "4",
          "Arch": "amd64",
          "SrcName": "ncurses",
          "SrcVersion": "6.4",
          "SrcRelease": "4",
          "Licenses": [
            "MIT/X11",
            "X11",
            "BSD-3-Clause"
          ],
          "Maintainer": "Craig Small \u003ccsmall@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/bin/clear",
            "/usr/bin/infocmp",
            "/usr/bin/tabs",
            "/usr/bin/tic",
            "/usr/bin/toe",
            "/usr/bin/tput",
            "/usr/bin/tset",
            "/usr/share/doc/ncurses-bin/changelog.Debian.gz",
            "/usr/share/doc/ncurses-bin/changelog.gz",
            "/usr/share/doc/ncurses-bin/copyright",
            "/usr/share/man/man1/captoinfo.1.gz",
            "/usr/share/man/man1/clear.1.gz",
            "/usr/share/man/man1/infocmp.1.gz",
            "/usr/share/man/man1/infotocap.1.gz",
            "/usr/share/man/man1/tabs.1.gz",
            "/usr/share/man/man1/tic.1.gz",
            "/usr/share/man/man1/toe.1.gz",
            "/usr/share/man/man1/tput.1.gz",
            "/usr/share/man/man1/tset.1.gz",
            "/usr/share/man/man5/scr_dump.5.gz",
            "/usr/share/man/man5/term.5.gz",
            "/usr/share/man/man5/terminfo.5.gz",
            "/usr/share/man/man5/user_caps.5.gz",
            "/usr/share/man/man7/term.7.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "openssl@3.0.22-1~deb12u1",
          "Name": "openssl",
          "Identifier": {
            "PURL": "pkg:deb/debian/openssl@3.0.22-1~deb12u1?arch=amd64\u0026distro=debian-12.15",
            "UID": "e275efa4b2407c8b"
          },
          "Version": "3.0.22",
          "Release": "1~deb12u1",
          "Arch": "amd64",
          "SrcName": "openssl",
          "SrcVersion": "3.0.22",
          "SrcRelease": "1~deb12u1",
          "Licenses": [
            "Apache-2.0",
            "Artistic-2.0",
            "GPL-1.0-or-later",
            "GPL-1.0-only"
          ],
          "Maintainer": "Debian OpenSSL Team \u003cpkg-openssl-devel@alioth-lists.debian.net\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14",
            "libssl3@3.0.22-1~deb12u1"
          ],
          "Layer": {
            "DiffID": "sha256:e2dee3fc233f0f0b260b1ff7b599106e4b770679efa2cf256598e400160aa3ed"
          },
          "InstalledFiles": [
            "/usr/bin/c_rehash",
            "/usr/bin/openssl",
            "/usr/lib/ssl/misc/CA.pl",
            "/usr/lib/ssl/misc/tsget.pl",
            "/usr/share/doc/openssl/HOWTO/certificates.txt.gz",
            "/usr/share/doc/openssl/HOWTO/keys.txt",
            "/usr/share/doc/openssl/NEWS.Debian.gz",
            "/usr/share/doc/openssl/NEWS.md.gz",
            "/usr/share/doc/openssl/README-ENGINES.md.gz",
            "/usr/share/doc/openssl/README.Debian",
            "/usr/share/doc/openssl/README.md.gz",
            "/usr/share/doc/openssl/README.optimization",
            "/usr/share/doc/openssl/changelog.Debian.gz",
            "/usr/share/doc/openssl/changelog.gz",
            "/usr/share/doc/openssl/copyright",
            "/usr/share/doc/openssl/fingerprints.txt",
            "/usr/share/lintian/overrides/openssl",
            "/usr/share/man/man1/CA.pl.1ssl.gz",
            "/usr/share/man/man1/openssl-asn1parse.1ssl.gz",
            "/usr/share/man/man1/openssl-ca.1ssl.gz",
            "/usr/share/man/man1/openssl-ciphers.1ssl.gz",
            "/usr/share/man/man1/openssl-cmds.1ssl.gz",
            "/usr/share/man/man1/openssl-cmp.1ssl.gz",
            "/usr/share/man/man1/openssl-cms.1ssl.gz",
            "/usr/share/man/man1/openssl-crl.1ssl.gz",
            "/usr/share/man/man1/openssl-crl2pkcs7.1ssl.gz",
            "/usr/share/man/man1/openssl-dgst.1ssl.gz",
            "/usr/share/man/man1/openssl-dhparam.1ssl.gz",
            "/usr/share/man/man1/openssl-dsa.1ssl.gz",
            "/usr/share/man/man1/openssl-dsaparam.1ssl.gz",
            "/usr/share/man/man1/openssl-ec.1ssl.gz",
            "/usr/share/man/man1/openssl-ecparam.1ssl.gz",
            "/usr/share/man/man1/openssl-enc.1ssl.gz",
            "/usr/share/man/man1/openssl-engine.1ssl.gz",
            "/usr/share/man/man1/openssl-errstr.1ssl.gz",
            "/usr/share/man/man1/openssl-fipsinstall.1ssl.gz",
            "/usr/share/man/man1/openssl-format-options.1ssl.gz",
            "/usr/share/man/man1/openssl-gendsa.1ssl.gz",
            "/usr/share/man/man1/openssl-genpkey.1ssl.gz",
            "/usr/share/man/man1/openssl-genrsa.1ssl.gz",
            "/usr/share/man/man1/openssl-info.1ssl.gz",
            "/usr/share/man/man1/openssl-kdf.1ssl.gz",
            "/usr/share/man/man1/openssl-list.1ssl.gz",
            "/usr/share/man/man1/openssl-mac.1ssl.gz",
            "/usr/share/man/man1/openssl-namedisplay-options.1ssl.gz",
            "/usr/share/man/man1/openssl-nseq.1ssl.gz",
            "/usr/share/man/man1/openssl-ocsp.1ssl.gz",
            "/usr/share/man/man1/openssl-passphrase-options.1ssl.gz",
            "/usr/share/man/man1/openssl-passwd.1ssl.gz",
            "/usr/share/man/man1/openssl-pkcs12.1ssl.gz",
            "/usr/share/man/man1/openssl-pkcs7.1ssl.gz",
            "/usr/share/man/man1/openssl-pkcs8.1ssl.gz",
            "/usr/share/man/man1/openssl-pkey.1ssl.gz",
            "/usr/share/man/man1/openssl-pkeyparam.1ssl.gz",
            "/usr/share/man/man1/openssl-pkeyutl.1ssl.gz",
            "/usr/share/man/man1/openssl-prime.1ssl.gz",
            "/usr/share/man/man1/openssl-rand.1ssl.gz",
            "/usr/share/man/man1/openssl-rehash.1ssl.gz",
            "/usr/share/man/man1/openssl-req.1ssl.gz",
            "/usr/share/man/man1/openssl-rsa.1ssl.gz",
            "/usr/share/man/man1/openssl-rsautl.1ssl.gz",
            "/usr/share/man/man1/openssl-s_client.1ssl.gz",
            "/usr/share/man/man1/openssl-s_server.1ssl.gz",
            "/usr/share/man/man1/openssl-s_time.1ssl.gz",
            "/usr/share/man/man1/openssl-sess_id.1ssl.gz",
            "/usr/share/man/man1/openssl-smime.1ssl.gz",
            "/usr/share/man/man1/openssl-speed.1ssl.gz",
            "/usr/share/man/man1/openssl-spkac.1ssl.gz",
            "/usr/share/man/man1/openssl-srp.1ssl.gz",
            "/usr/share/man/man1/openssl-storeutl.1ssl.gz",
            "/usr/share/man/man1/openssl-ts.1ssl.gz",
            "/usr/share/man/man1/openssl-verification-options.1ssl.gz",
            "/usr/share/man/man1/openssl-verify.1ssl.gz",
            "/usr/share/man/man1/openssl-version.1ssl.gz",
            "/usr/share/man/man1/openssl-x509.1ssl.gz",
            "/usr/share/man/man1/openssl.1ssl.gz",
            "/usr/share/man/man1/tsget.1ssl.gz",
            "/usr/share/man/man5/config.5ssl.gz",
            "/usr/share/man/man5/fips_config.5ssl.gz",
            "/usr/share/man/man5/x509v3_config.5ssl.gz",
            "/usr/share/man/man7/EVP_ASYM_CIPHER-RSA.7ssl.gz",
            "/usr/share/man/man7/EVP_ASYM_CIPHER-SM2.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-AES.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-ARIA.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-BLOWFISH.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-CAMELLIA.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-CAST.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-CHACHA.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-DES.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-IDEA.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-NULL.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-RC2.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-RC4.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-RC5.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-SEED.7ssl.gz",
            "/usr/share/man/man7/EVP_CIPHER-SM4.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-HKDF.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-KB.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-KRB5KDF.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-PBKDF1.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-PBKDF2.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-PKCS12KDF.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-SCRYPT.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-SS.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-SSHKDF.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-TLS13_KDF.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-TLS1_PRF.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-X942-ASN1.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-X942-CONCAT.7ssl.gz",
            "/usr/share/man/man7/EVP_KDF-X963.7ssl.gz",
            "/usr/share/man/man7/EVP_KEM-RSA.7ssl.gz",
            "/usr/share/man/man7/EVP_KEYEXCH-DH.7ssl.gz",
            "/usr/share/man/man7/EVP_KEYEXCH-ECDH.7ssl.gz",
            "/usr/share/man/man7/EVP_KEYEXCH-X25519.7ssl.gz",
            "/usr/share/man/man7/EVP_MAC-BLAKE2.7ssl.gz",
            "/usr/share/man/man7/EVP_MAC-CMAC.7ssl.gz",
            "/usr/share/man/man7/EVP_MAC-GMAC.7ssl.gz",
            "/usr/share/man/man7/EVP_MAC-HMAC.7ssl.gz",
            "/usr/share/man/man7/EVP_MAC-KMAC.7ssl.gz",
            "/usr/share/man/man7/EVP_MAC-Poly1305.7ssl.gz",
            "/usr/share/man/man7/EVP_MAC-Siphash.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-BLAKE2.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-MD2.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-MD4.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-MD5-SHA1.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-MD5.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-MDC2.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-NULL.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-RIPEMD160.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-SHA1.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-SHA2.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-SHA3.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-SHAKE.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-SM3.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-WHIRLPOOL.7ssl.gz",
            "/usr/share/man/man7/EVP_MD-common.7ssl.gz",
            "/usr/share/man/man7/EVP_PKEY-DH.7ssl.gz",
            "/usr/share/man/man7/EVP_PKEY-DSA.7ssl.gz",
            "/usr/share/man/man7/EVP_PKEY-EC.7ssl.gz",
            "/usr/share/man/man7/EVP_PKEY-FFC.7ssl.gz",
            "/usr/share/man/man7/EVP_PKEY-HMAC.7ssl.gz",
            "/usr/share/man/man7/EVP_PKEY-RSA.7ssl.gz",
            "/usr/share/man/man7/EVP_PKEY-SM2.7ssl.gz",
            "/usr/share/man/man7/EVP_PKEY-X25519.7ssl.gz",
            "/usr/share/man/man7/EVP_RAND-CTR-DRBG.7ssl.gz",
            "/usr/share/man/man7/EVP_RAND-HASH-DRBG.7ssl.gz",
            "/usr/share/man/man7/EVP_RAND-HMAC-DRBG.7ssl.gz",
            "/usr/share/man/man7/EVP_RAND-SEED-SRC.7ssl.gz",
            "/usr/share/man/man7/EVP_RAND-TEST-RAND.7ssl.gz",
            "/usr/share/man/man7/EVP_RAND.7ssl.gz",
            "/usr/share/man/man7/EVP_SIGNATURE-DSA.7ssl.gz",
            "/usr/share/man/man7/EVP_SIGNATURE-ECDSA.7ssl.gz",
            "/usr/share/man/man7/EVP_SIGNATURE-ED25519.7ssl.gz",
            "/usr/share/man/man7/EVP_SIGNATURE-HMAC.7ssl.gz",
            "/usr/share/man/man7/EVP_SIGNATURE-RSA.7ssl.gz",
            "/usr/share/man/man7/OSSL_PROVIDER-FIPS.7ssl.gz",
            "/usr/share/man/man7/OSSL_PROVIDER-base.7ssl.gz",
            "/usr/share/man/man7/OSSL_PROVIDER-default.7ssl.gz",
            "/usr/share/man/man7/OSSL_PROVIDER-legacy.7ssl.gz",
            "/usr/share/man/man7/OSSL_PROVIDER-null.7ssl.gz",
            "/usr/share/man/man7/RAND.7ssl.gz",
            "/usr/share/man/man7/RSA-PSS.7ssl.gz",
            "/usr/share/man/man7/X25519.7ssl.gz",
            "/usr/share/man/man7/bio.7ssl.gz",
            "/usr/share/man/man7/crypto.7ssl.gz",
            "/usr/share/man/man7/ct.7ssl.gz",
            "/usr/share/man/man7/des_modes.7ssl.gz",
            "/usr/share/man/man7/evp.7ssl.gz",
            "/usr/share/man/man7/fips_module.7ssl.gz",
            "/usr/share/man/man7/life_cycle-cipher.7ssl.gz",
            "/usr/share/man/man7/life_cycle-digest.7ssl.gz",
            "/usr/share/man/man7/life_cycle-kdf.7ssl.gz",
            "/usr/share/man/man7/life_cycle-mac.7ssl.gz",
            "/usr/share/man/man7/life_cycle-pkey.7ssl.gz",
            "/usr/share/man/man7/life_cycle-rand.7ssl.gz",
            "/usr/share/man/man7/migration_guide.7ssl.gz",
            "/usr/share/man/man7/openssl-core.h.7ssl.gz",
            "/usr/share/man/man7/openssl-core_dispatch.h.7ssl.gz",
            "/usr/share/man/man7/openssl-core_names.h.7ssl.gz",
            "/usr/share/man/man7/openssl-env.7ssl.gz",
            "/usr/share/man/man7/openssl-glossary.7ssl.gz",
            "/usr/share/man/man7/openssl-threads.7ssl.gz",
            "/usr/share/man/man7/openssl_user_macros.7ssl.gz",
            "/usr/share/man/man7/ossl_store-file.7ssl.gz",
            "/usr/share/man/man7/ossl_store.7ssl.gz",
            "/usr/share/man/man7/passphrase-encoding.7ssl.gz",
            "/usr/share/man/man7/property.7ssl.gz",
            "/usr/share/man/man7/provider-asym_cipher.7ssl.gz",
            "/usr/share/man/man7/provider-base.7ssl.gz",
            "/usr/share/man/man7/provider-cipher.7ssl.gz",
            "/usr/share/man/man7/provider-decoder.7ssl.gz",
            "/usr/share/man/man7/provider-digest.7ssl.gz",
            "/usr/share/man/man7/provider-encoder.7ssl.gz",
            "/usr/share/man/man7/provider-kdf.7ssl.gz",
            "/usr/share/man/man7/provider-kem.7ssl.gz",
            "/usr/share/man/man7/provider-keyexch.7ssl.gz",
            "/usr/share/man/man7/provider-keymgmt.7ssl.gz",
            "/usr/share/man/man7/provider-mac.7ssl.gz",
            "/usr/share/man/man7/provider-object.7ssl.gz",
            "/usr/share/man/man7/provider-rand.7ssl.gz",
            "/usr/share/man/man7/provider-signature.7ssl.gz",
            "/usr/share/man/man7/provider-storemgmt.7ssl.gz",
            "/usr/share/man/man7/provider.7ssl.gz",
            "/usr/share/man/man7/proxy-certificates.7ssl.gz",
            "/usr/share/man/man7/ssl.7ssl.gz",
            "/usr/share/man/man7/x509.7ssl.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "passwd@1:4.13+dfsg1-1+deb12u2",
          "Name": "passwd",
          "Identifier": {
            "PURL": "pkg:deb/debian/passwd@4.13%2Bdfsg1-1%2Bdeb12u2?arch=amd64\u0026distro=debian-12.15\u0026epoch=1",
            "UID": "8c2b119c05698e6a"
          },
          "Version": "4.13+dfsg1",
          "Release": "1+deb12u2",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "shadow",
          "SrcVersion": "4.13+dfsg1",
          "SrcRelease": "1+deb12u2",
          "SrcEpoch": 1,
          "Licenses": [
            "BSD-3-Clause",
            "GPL-1.0-only",
            "GPL-2.0-or-later",
            "public-domain",
            "GPL-2.0-only"
          ],
          "Maintainer": "Shadow package maintainers \u003cpkg-shadow-devel@lists.alioth.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libaudit1@1:3.0.9-1",
            "libc6@2.36-9+deb12u14",
            "libcrypt1@1:4.4.33-2",
            "libpam-modules@1.5.2-6+deb12u2",
            "libpam0g@1.5.2-6+deb12u2",
            "libselinux1@3.4-1+b6",
            "libsemanage2@3.4-1+b5"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/sbin/shadowconfig",
            "/usr/bin/chage",
            "/usr/bin/chfn",
            "/usr/bin/chsh",
            "/usr/bin/expiry",
            "/usr/bin/gpasswd",
            "/usr/bin/passwd",
            "/usr/lib/tmpfiles.d/passwd.conf",
            "/usr/sbin/chgpasswd",
            "/usr/sbin/chpasswd",
            "/usr/sbin/cppw",
            "/usr/sbin/groupadd",
            "/usr/sbin/groupdel",
            "/usr/sbin/groupmems",
            "/usr/sbin/groupmod",
            "/usr/sbin/grpck",
            "/usr/sbin/grpconv",
            "/usr/sbin/grpunconv",
            "/usr/sbin/newusers",
            "/usr/sbin/pwck",
            "/usr/sbin/pwconv",
            "/usr/sbin/pwunconv",
            "/usr/sbin/useradd",
            "/usr/sbin/userdel",
            "/usr/sbin/usermod",
            "/usr/sbin/vipw",
            "/usr/share/doc/passwd/NEWS.Debian.gz",
            "/usr/share/doc/passwd/README.Debian",
            "/usr/share/doc/passwd/TODO.Debian",
            "/usr/share/doc/passwd/changelog.Debian.gz",
            "/usr/share/doc/passwd/changelog.gz",
            "/usr/share/doc/passwd/copyright",
            "/usr/share/doc/passwd/examples/passwd.expire.cron",
            "/usr/share/lintian/overrides/passwd",
            "/usr/share/man/cs/man1/expiry.1.gz",
            "/usr/share/man/cs/man1/gpasswd.1.gz",
            "/usr/share/man/cs/man5/gshadow.5.gz",
            "/usr/share/man/cs/man5/passwd.5.gz",
            "/usr/share/man/cs/man5/shadow.5.gz",
            "/usr/share/man/cs/man8/groupadd.8.gz",
            "/usr/share/man/cs/man8/groupdel.8.gz",
            "/usr/share/man/cs/man8/groupmod.8.gz",
            "/usr/share/man/cs/man8/grpck.8.gz",
            "/usr/share/man/cs/man8/vipw.8.gz",
            "/usr/share/man/da/man1/chfn.1.gz",
            "/usr/share/man/da/man5/gshadow.5.gz",
            "/usr/share/man/da/man8/groupdel.8.gz",
            "/usr/share/man/da/man8/vipw.8.gz",
            "/usr/share/man/de/man1/chage.1.gz",
            "/usr/share/man/de/man1/chfn.1.gz",
            "/usr/share/man/de/man1/chsh.1.gz",
            "/usr/share/man/de/man1/expiry.1.gz",
            "/usr/share/man/de/man1/gpasswd.1.gz",
            "/usr/share/man/de/man1/passwd.1.gz",
            "/usr/share/man/de/man5/gshadow.5.gz",
            "/usr/share/man/de/man5/passwd.5.gz",
            "/usr/share/man/de/man5/shadow.5.gz",
            "/usr/share/man/de/man8/chgpasswd.8.gz",
            "/usr/share/man/de/man8/chpasswd.8.gz",
            "/usr/share/man/de/man8/groupadd.8.gz",
            "/usr/share/man/de/man8/groupdel.8.gz",
            "/usr/share/man/de/man8/groupmems.8.gz",
            "/usr/share/man/de/man8/groupmod.8.gz",
            "/usr/share/man/de/man8/grpck.8.gz",
            "/usr/share/man/de/man8/newusers.8.gz",
            "/usr/share/man/de/man8/pwck.8.gz",
            "/usr/share/man/de/man8/pwconv.8.gz",
            "/usr/share/man/de/man8/useradd.8.gz",
            "/usr/share/man/de/man8/userdel.8.gz",
            "/usr/share/man/de/man8/usermod.8.gz",
            "/usr/share/man/de/man8/vipw.8.gz",
            "/usr/share/man/fi/man1/chfn.1.gz",
            "/usr/share/man/fi/man1/chsh.1.gz",
            "/usr/share/man/fr/man1/chage.1.gz",
            "/usr/share/man/fr/man1/chfn.1.gz",
            "/usr/share/man/fr/man1/chsh.1.gz",
            "/usr/share/man/fr/man1/expiry.1.gz",
            "/usr/share/man/fr/man1/gpasswd.1.gz",
            "/usr/share/man/fr/man1/passwd.1.gz",
            "/usr/share/man/fr/man5/gshadow.5.gz",
            "/usr/share/man/fr/man5/passwd.5.gz",
            "/usr/share/man/fr/man5/shadow.5.gz",
            "/usr/share/man/fr/man5/subgid.5.gz",
            "/usr/share/man/fr/man5/subuid.5.gz",
            "/usr/share/man/fr/man8/chgpasswd.8.gz",
            "/usr/share/man/fr/man8/chpasswd.8.gz",
            "/usr/share/man/fr/man8/groupadd.8.gz",
            "/usr/share/man/fr/man8/groupdel.8.gz",
            "/usr/share/man/fr/man8/groupmems.8.gz",
            "/usr/share/man/fr/man8/groupmod.8.gz",
            "/usr/share/man/fr/man8/grpck.8.gz",
            "/usr/share/man/fr/man8/newusers.8.gz",
            "/usr/share/man/fr/man8/pwck.8.gz",
            "/usr/share/man/fr/man8/pwconv.8.gz",
            "/usr/share/man/fr/man8/useradd.8.gz",
            "/usr/share/man/fr/man8/userdel.8.gz",
            "/usr/share/man/fr/man8/usermod.8.gz",
            "/usr/share/man/fr/man8/vipw.8.gz",
            "/usr/share/man/hu/man1/chsh.1.gz",
            "/usr/share/man/hu/man1/gpasswd.1.gz",
            "/usr/share/man/hu/man1/passwd.1.gz",
            "/usr/share/man/hu/man5/passwd.5.gz",
            "/usr/share/man/id/man1/chsh.1.gz",
            "/usr/share/man/id/man8/useradd.8.gz",
            "/usr/share/man/it/man1/chage.1.gz",
            "/usr/share/man/it/man1/chfn.1.gz",
            "/usr/share/man/it/man1/chsh.1.gz",
            "/usr/share/man/it/man1/expiry.1.gz",
            "/usr/share/man/it/man1/gpasswd.1.gz",
            "/usr/share/man/it/man1/passwd.1.gz",
            "/usr/share/man/it/man5/gshadow.5.gz",
            "/usr/share/man/it/man5/passwd.5.gz",
            "/usr/share/man/it/man5/shadow.5.gz",
            "/usr/share/man/it/man8/chgpasswd.8.gz",
            "/usr/share/man/it/man8/chpasswd.8.gz",
            "/usr/share/man/it/man8/groupadd.8.gz",
            "/usr/share/man/it/man8/groupdel.8.gz",
            "/usr/share/man/it/man8/groupmems.8.gz",
            "/usr/share/man/it/man8/groupmod.8.gz",
            "/usr/share/man/it/man8/grpck.8.gz",
            "/usr/share/man/it/man8/newusers.8.gz",
            "/usr/share/man/it/man8/pwck.8.gz",
            "/usr/share/man/it/man8/pwconv.8.gz",
            "/usr/share/man/it/man8/useradd.8.gz",
            "/usr/share/man/it/man8/userdel.8.gz",
            "/usr/share/man/it/man8/usermod.8.gz",
            "/usr/share/man/it/man8/vipw.8.gz",
            "/usr/share/man/ja/man1/chage.1.gz",
            "/usr/share/man/ja/man1/chfn.1.gz",
            "/usr/share/man/ja/man1/chsh.1.gz",
            "/usr/share/man/ja/man1/expiry.1.gz",
            "/usr/share/man/ja/man1/gpasswd.1.gz",
            "/usr/share/man/ja/man1/passwd.1.gz",
            "/usr/share/man/ja/man5/passwd.5.gz",
            "/usr/share/man/ja/man5/shadow.5.gz",
            "/usr/share/man/ja/man8/chpasswd.8.gz",
            "/usr/share/man/ja/man8/groupadd.8.gz",
            "/usr/share/man/ja/man8/groupdel.8.gz",
            "/usr/share/man/ja/man8/groupmod.8.gz",
            "/usr/share/man/ja/man8/grpck.8.gz",
            "/usr/share/man/ja/man8/newusers.8.gz",
            "/usr/share/man/ja/man8/pwck.8.gz",
            "/usr/share/man/ja/man8/pwconv.8.gz",
            "/usr/share/man/ja/man8/useradd.8.gz",
            "/usr/share/man/ja/man8/userdel.8.gz",
            "/usr/share/man/ja/man8/usermod.8.gz",
            "/usr/share/man/ja/man8/vipw.8.gz",
            "/usr/share/man/ko/man1/chfn.1.gz",
            "/usr/share/man/ko/man1/chsh.1.gz",
            "/usr/share/man/ko/man5/passwd.5.gz",
            "/usr/share/man/ko/man8/vipw.8.gz",
            "/usr/share/man/man1/chage.1.gz",
            "/usr/share/man/man1/chfn.1.gz",
            "/usr/share/man/man1/chsh.1.gz",
            "/usr/share/man/man1/expiry.1.gz",
            "/usr/share/man/man1/gpasswd.1.gz",
            "/usr/share/man/man1/passwd.1.gz",
            "/usr/share/man/man5/gshadow.5.gz",
            "/usr/share/man/man5/passwd.5.gz",
            "/usr/share/man/man5/shadow.5.gz",
            "/usr/share/man/man5/subgid.5.gz",
            "/usr/share/man/man5/subuid.5.gz",
            "/usr/share/man/man8/chgpasswd.8.gz",
            "/usr/share/man/man8/chpasswd.8.gz",
            "/usr/share/man/man8/cppw.8.gz",
            "/usr/share/man/man8/groupadd.8.gz",
            "/usr/share/man/man8/groupdel.8.gz",
            "/usr/share/man/man8/groupmems.8.gz",
            "/usr/share/man/man8/groupmod.8.gz",
            "/usr/share/man/man8/grpck.8.gz",
            "/usr/share/man/man8/newusers.8.gz",
            "/usr/share/man/man8/pwck.8.gz",
            "/usr/share/man/man8/pwconv.8.gz",
            "/usr/share/man/man8/useradd.8.gz",
            "/usr/share/man/man8/userdel.8.gz",
            "/usr/share/man/man8/usermod.8.gz",
            "/usr/share/man/man8/vipw.8.gz",
            "/usr/share/man/pl/man1/chage.1.gz",
            "/usr/share/man/pl/man1/chsh.1.gz",
            "/usr/share/man/pl/man1/expiry.1.gz",
            "/usr/share/man/pl/man8/groupadd.8.gz",
            "/usr/share/man/pl/man8/groupdel.8.gz",
            "/usr/share/man/pl/man8/groupmems.8.gz",
            "/usr/share/man/pl/man8/groupmod.8.gz",
            "/usr/share/man/pl/man8/grpck.8.gz",
            "/usr/share/man/pl/man8/userdel.8.gz",
            "/usr/share/man/pl/man8/usermod.8.gz",
            "/usr/share/man/pl/man8/vipw.8.gz",
            "/usr/share/man/pt_BR/man1/gpasswd.1.gz",
            "/usr/share/man/pt_BR/man5/passwd.5.gz",
            "/usr/share/man/pt_BR/man5/shadow.5.gz",
            "/usr/share/man/pt_BR/man8/groupadd.8.gz",
            "/usr/share/man/pt_BR/man8/groupdel.8.gz",
            "/usr/share/man/pt_BR/man8/groupmod.8.gz",
            "/usr/share/man/ru/man1/chage.1.gz",
            "/usr/share/man/ru/man1/chfn.1.gz",
            "/usr/share/man/ru/man1/chsh.1.gz",
            "/usr/share/man/ru/man1/expiry.1.gz",
            "/usr/share/man/ru/man1/gpasswd.1.gz",
            "/usr/share/man/ru/man1/passwd.1.gz",
            "/usr/share/man/ru/man5/gshadow.5.gz",
            "/usr/share/man/ru/man5/passwd.5.gz",
            "/usr/share/man/ru/man5/shadow.5.gz",
            "/usr/share/man/ru/man8/chgpasswd.8.gz",
            "/usr/share/man/ru/man8/chpasswd.8.gz",
            "/usr/share/man/ru/man8/groupadd.8.gz",
            "/usr/share/man/ru/man8/groupdel.8.gz",
            "/usr/share/man/ru/man8/groupmems.8.gz",
            "/usr/share/man/ru/man8/groupmod.8.gz",
            "/usr/share/man/ru/man8/grpck.8.gz",
            "/usr/share/man/ru/man8/newusers.8.gz",
            "/usr/share/man/ru/man8/pwck.8.gz",
            "/usr/share/man/ru/man8/pwconv.8.gz",
            "/usr/share/man/ru/man8/useradd.8.gz",
            "/usr/share/man/ru/man8/userdel.8.gz",
            "/usr/share/man/ru/man8/usermod.8.gz",
            "/usr/share/man/ru/man8/vipw.8.gz",
            "/usr/share/man/sv/man1/chage.1.gz",
            "/usr/share/man/sv/man1/chsh.1.gz",
            "/usr/share/man/sv/man1/expiry.1.gz",
            "/usr/share/man/sv/man1/passwd.1.gz",
            "/usr/share/man/sv/man5/gshadow.5.gz",
            "/usr/share/man/sv/man5/passwd.5.gz",
            "/usr/share/man/sv/man8/groupadd.8.gz",
            "/usr/share/man/sv/man8/groupdel.8.gz",
            "/usr/share/man/sv/man8/groupmems.8.gz",
            "/usr/share/man/sv/man8/groupmod.8.gz",
            "/usr/share/man/sv/man8/grpck.8.gz",
            "/usr/share/man/sv/man8/pwck.8.gz",
            "/usr/share/man/sv/man8/userdel.8.gz",
            "/usr/share/man/sv/man8/vipw.8.gz",
            "/usr/share/man/tr/man1/chage.1.gz",
            "/usr/share/man/tr/man1/chfn.1.gz",
            "/usr/share/man/tr/man1/passwd.1.gz",
            "/usr/share/man/tr/man5/passwd.5.gz",
            "/usr/share/man/tr/man5/shadow.5.gz",
            "/usr/share/man/tr/man8/groupadd.8.gz",
            "/usr/share/man/tr/man8/groupdel.8.gz",
            "/usr/share/man/tr/man8/groupmod.8.gz",
            "/usr/share/man/tr/man8/useradd.8.gz",
            "/usr/share/man/tr/man8/userdel.8.gz",
            "/usr/share/man/tr/man8/usermod.8.gz",
            "/usr/share/man/uk/man1/chage.1.gz",
            "/usr/share/man/uk/man1/chfn.1.gz",
            "/usr/share/man/uk/man1/chsh.1.gz",
            "/usr/share/man/uk/man1/expiry.1.gz",
            "/usr/share/man/uk/man1/gpasswd.1.gz",
            "/usr/share/man/uk/man1/passwd.1.gz",
            "/usr/share/man/uk/man5/gshadow.5.gz",
            "/usr/share/man/uk/man5/passwd.5.gz",
            "/usr/share/man/uk/man5/shadow.5.gz",
            "/usr/share/man/uk/man8/chgpasswd.8.gz",
            "/usr/share/man/uk/man8/chpasswd.8.gz",
            "/usr/share/man/uk/man8/groupadd.8.gz",
            "/usr/share/man/uk/man8/groupdel.8.gz",
            "/usr/share/man/uk/man8/groupmems.8.gz",
            "/usr/share/man/uk/man8/groupmod.8.gz",
            "/usr/share/man/uk/man8/grpck.8.gz",
            "/usr/share/man/uk/man8/newusers.8.gz",
            "/usr/share/man/uk/man8/pwck.8.gz",
            "/usr/share/man/uk/man8/pwconv.8.gz",
            "/usr/share/man/uk/man8/useradd.8.gz",
            "/usr/share/man/uk/man8/userdel.8.gz",
            "/usr/share/man/uk/man8/usermod.8.gz",
            "/usr/share/man/uk/man8/vipw.8.gz",
            "/usr/share/man/zh_CN/man1/chage.1.gz",
            "/usr/share/man/zh_CN/man1/chfn.1.gz",
            "/usr/share/man/zh_CN/man1/chsh.1.gz",
            "/usr/share/man/zh_CN/man1/expiry.1.gz",
            "/usr/share/man/zh_CN/man1/gpasswd.1.gz",
            "/usr/share/man/zh_CN/man1/passwd.1.gz",
            "/usr/share/man/zh_CN/man5/gshadow.5.gz",
            "/usr/share/man/zh_CN/man5/passwd.5.gz",
            "/usr/share/man/zh_CN/man5/shadow.5.gz",
            "/usr/share/man/zh_CN/man8/chgpasswd.8.gz",
            "/usr/share/man/zh_CN/man8/chpasswd.8.gz",
            "/usr/share/man/zh_CN/man8/groupadd.8.gz",
            "/usr/share/man/zh_CN/man8/groupdel.8.gz",
            "/usr/share/man/zh_CN/man8/groupmems.8.gz",
            "/usr/share/man/zh_CN/man8/groupmod.8.gz",
            "/usr/share/man/zh_CN/man8/grpck.8.gz",
            "/usr/share/man/zh_CN/man8/newusers.8.gz",
            "/usr/share/man/zh_CN/man8/pwck.8.gz",
            "/usr/share/man/zh_CN/man8/pwconv.8.gz",
            "/usr/share/man/zh_CN/man8/useradd.8.gz",
            "/usr/share/man/zh_CN/man8/userdel.8.gz",
            "/usr/share/man/zh_CN/man8/usermod.8.gz",
            "/usr/share/man/zh_CN/man8/vipw.8.gz",
            "/usr/share/man/zh_TW/man1/chfn.1.gz",
            "/usr/share/man/zh_TW/man1/chsh.1.gz",
            "/usr/share/man/zh_TW/man5/passwd.5.gz",
            "/usr/share/man/zh_TW/man8/chpasswd.8.gz",
            "/usr/share/man/zh_TW/man8/groupadd.8.gz",
            "/usr/share/man/zh_TW/man8/groupdel.8.gz",
            "/usr/share/man/zh_TW/man8/groupmod.8.gz",
            "/usr/share/man/zh_TW/man8/useradd.8.gz",
            "/usr/share/man/zh_TW/man8/userdel.8.gz",
            "/usr/share/man/zh_TW/man8/usermod.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "perl-base@5.36.0-7+deb12u3",
          "Name": "perl-base",
          "Identifier": {
            "PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "4d96814618e564ec"
          },
          "Version": "5.36.0",
          "Release": "7+deb12u3",
          "Arch": "amd64",
          "SrcName": "perl",
          "SrcVersion": "5.36.0",
          "SrcRelease": "7+deb12u3",
          "Licenses": [
            "GPL-1.0-or-later",
            "Artistic-2.0",
            "MIT",
            "REGCOMP",
            "GPL-2.0-with-bison-exception+",
            "Unicode",
            "BZIP",
            "Zlib",
            "GPL-2.0-or-later",
            "RRA-KEEP-THIS-NOTICE",
            "BSD-3-clause-with-weird-numbering",
            "CC0-1.0",
            "TEXT-TABS",
            "BSD-4-clause-POWERDOG",
            "BSD-3-clause-GENERIC",
            "BSD-3-Clause",
            "SDBM-PUBLIC-DOMAIN",
            "DONT-CHANGE-THE-GPL",
            "Artistic-dist",
            "LGPL-2.1-only",
            "GPL-1.0-only",
            "GPL-2.0-only",
            "Artistic-2",
            "HSIEH-DERIVATIVE",
            "HSIEH-BSD"
          ],
          "Maintainer": "Niko Tyni \u003cntyni@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/bin/perl",
            "/usr/bin/perl5.36.0",
            "/usr/lib/x86_64-linux-gnu/perl-base/AutoLoader.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Carp.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Carp/Heavy.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Config.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Config_git.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/Config_heavy.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/Cwd.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/DynaLoader.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Errno.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Exporter.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Exporter/Heavy.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Fcntl.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/File/Basename.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/File/Glob.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/File/Path.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/File/Spec.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/File/Spec/Unix.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/File/Temp.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/FileHandle.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Getopt/Long.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Hash/Util.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IO.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IO/File.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IO/Handle.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IO/Pipe.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IO/Seekable.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IO/Select.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket/INET.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket/IP.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket/UNIX.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IPC/Open2.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/IPC/Open3.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/List/Util.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/POSIX.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Scalar/Util.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/SelectSaver.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Socket.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Symbol.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Text/ParseWords.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Text/Tabs.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Text/Wrap.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/Tie/Hash.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/XSLoader.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/attributes.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/auto/Cwd/Cwd.so",
            "/usr/lib/x86_64-linux-gnu/perl-base/auto/Fcntl/Fcntl.so",
            "/usr/lib/x86_64-linux-gnu/perl-base/auto/File/Glob/Glob.so",
            "/usr/lib/x86_64-linux-gnu/perl-base/auto/Hash/Util/Util.so",
            "/usr/lib/x86_64-linux-gnu/perl-base/auto/IO/IO.so",
            "/usr/lib/x86_64-linux-gnu/perl-base/auto/List/Util/Util.so",
            "/usr/lib/x86_64-linux-gnu/perl-base/auto/POSIX/POSIX.so",
            "/usr/lib/x86_64-linux-gnu/perl-base/auto/Socket/Socket.so",
            "/usr/lib/x86_64-linux-gnu/perl-base/auto/attributes/attributes.so",
            "/usr/lib/x86_64-linux-gnu/perl-base/auto/re/re.so",
            "/usr/lib/x86_64-linux-gnu/perl-base/base.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/builtin.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/bytes.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/bytes_heavy.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/constant.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/feature.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/fields.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/integer.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/lib.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/locale.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/overload.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/overloading.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/parent.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/re.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/strict.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Age.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bmg.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bpb.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bpt.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Cf.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Ea.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/EqUIdeo.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/GCB.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Gc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Hst.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Identif2.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Identifi.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/InPC.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/InSC.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Isc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Jg.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Jt.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Lb.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Lc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFCQC.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFDQC.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFKCCF.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFKCQC.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFKDQC.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Na1.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NameAlia.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Nt.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Nv.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/PerlDeci.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/SB.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Sc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Scx.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Tc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Uc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Vo.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/WB.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/_PerlLB.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/_PerlSCX.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/NA.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V100.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V11.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V110.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V120.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V130.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V140.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V20.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V30.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V31.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V32.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V40.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V41.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V50.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V51.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V52.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V60.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V61.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V70.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V80.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V90.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Alpha/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/AL.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/AN.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/B.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/BN.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/CS.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/EN.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/ES.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/ET.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/L.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/NSM.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/ON.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/R.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/WS.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/BidiC/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/BidiM/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Blk/NB.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bpt/C.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bpt/N.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bpt/O.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CE/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CI/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWCF/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWCM/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWKCF/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWL/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWT/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWU/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Cased/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/A.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/AL.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/AR.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/ATAR.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/B.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/BR.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/DB.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/NK.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/NR.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/OV.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/VR.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CompEx/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/DI/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dash/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dep/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dia/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Com.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Enc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Fin.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Font.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Init.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Iso.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Med.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Nar.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Nb.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/NonCanon.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Sqr.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Sub.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Sup.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Vert.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/EBase/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/EComp/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/EPres/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/A.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/H.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/N.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/Na.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/W.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Emoji/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ext/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/ExtPict/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/CN.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/EX.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/LV.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/LVT.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/PP.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/SM.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/XX.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/C.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Cf.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Cn.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/L.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/LC.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Ll.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Lm.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Lo.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Lu.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/M.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Mc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Me.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Mn.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/N.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Nd.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Nl.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/No.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/P.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pd.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pe.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pf.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pi.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Po.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Ps.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/S.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Sc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Sk.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Sm.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/So.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Z.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Zs.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GrBase/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GrExt/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Hex/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Hst/NA.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Hyphen/T.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IDC/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IDS/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdStatus/Allowed.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdStatus/Restrict.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/DefaultI.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Exclusio.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Inclusio.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/LimitedU.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/NotChara.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/NotNFKC.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/NotXID.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Obsolete.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Recommen.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Technica.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Uncommon.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ideo/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/10_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/11_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/12_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/12_1.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/13_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/14_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/2_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/2_1.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/3_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/3_1.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/3_2.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/4_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/4_1.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/5_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/5_1.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/5_2.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_1.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_2.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_3.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/7_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/8_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/9_0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Bottom.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/BottomAn.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Left.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/LeftAndR.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/NA.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Overstru.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Right.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Top.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndBo.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndL2.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndLe.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndRi.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/VisualOr.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Avagraha.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Bindu.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Cantilla.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona2.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona3.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona4.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona5.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona6.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona7.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona8.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consonan.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Invisibl.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Nukta.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Number.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Other.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/PureKill.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Syllable.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/ToneMark.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Virama.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Visarga.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Vowel.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/VowelDep.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/VowelInd.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Ain.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Alef.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Beh.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Dal.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/FarsiYeh.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Feh.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Gaf.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Hah.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/HanifiRo.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Kaf.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Lam.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/NoJoinin.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Noon.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Qaf.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Reh.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Sad.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Seen.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Tah.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Waw.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Yeh.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/C.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/D.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/L.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/R.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/T.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/U.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/AI.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/AL.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/BA.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/BB.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/CJ.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/CL.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/CM.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/EX.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/GL.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/ID.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/IN.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/IS.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/NS.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/NU.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/OP.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/PO.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/PR.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/QU.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/SA.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/XX.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lower/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Math/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFCQC/M.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFCQC/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFDQC/N.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFDQC/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKCQC/N.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKCQC/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKDQC/N.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKDQC/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nt/Di.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nt/None.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nt/Nu.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/0.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/10.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/100.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/10000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/100000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/11.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/12.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/13.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/14.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/15.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/16.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/17.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/18.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/19.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_16.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_2.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_3.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_4.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_6.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_8.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/2.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/20.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/200.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/2000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/20000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/2_3.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/30.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/300.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/30000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3_16.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3_4.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/4.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/40.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/400.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/4000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/40000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/5.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/50.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/500.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/5000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/50000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/6.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/60.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/600.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/6000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/60000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/7.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/70.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/700.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/7000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/70000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/8.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/80.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/800.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/8000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/80000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/9.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/90.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/900.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/9000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/90000.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/PCM/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/PatSyn/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Alnum.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Assigned.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Blank.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Graph.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/PerlWord.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/PosixPun.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Print.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/SpacePer.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Title.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Word.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/XPosixPu.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlAny.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlCh2.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlCha.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlFol.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlIDC.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlIDS.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlIsI.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlNch.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPat.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPr2.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPro.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlQuo.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/QMark/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/AT.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/CL.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/EX.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/FO.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/LE.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/LO.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/NU.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/SC.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/ST.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/Sp.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/UP.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/XX.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SD/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/STerm/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Arab.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Beng.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Cprt.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Cyrl.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Deva.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Dupl.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Geor.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Glag.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gong.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gonm.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gran.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Grek.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gujr.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Guru.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Han.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Hang.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Hira.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Kana.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Knda.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Latn.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Limb.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Linb.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Mlym.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Mong.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Mult.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Orya.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Sinh.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Syrc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Taml.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Telu.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Zinh.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Zyyy.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Adlm.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Arab.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Armn.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Beng.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Bhks.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Bopo.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cakm.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cham.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Copt.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cprt.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cyrl.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Deva.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Diak.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Dupl.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Ethi.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Geor.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Glag.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gong.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gonm.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gran.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Grek.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gujr.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Guru.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Han.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hang.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hebr.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hira.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hmng.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hmnp.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Kana.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Khar.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Khmr.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Khoj.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Knda.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Kthi.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Lana.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Lao.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Latn.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Limb.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Lina.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Linb.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mlym.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mong.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mult.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mymr.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Nand.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Nko.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Orya.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Phlp.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Rohg.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Shrd.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Sind.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Sinh.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Syrc.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tagb.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Takr.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Talu.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Taml.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tang.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Telu.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Thaa.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tibt.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tirh.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Vith.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Xsux.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Yezi.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Yi.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Zinh.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Zyyy.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Zzzz.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Term/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/UIdeo/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Upper/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/VS/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/R.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/Tr.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/Tu.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/U.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/EX.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/Extend.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/FO.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/HL.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/KA.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/LE.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/MB.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/ML.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/MN.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/NU.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/WSegSpac.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/XX.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/XIDC/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/XIDS/Y.pl",
            "/usr/lib/x86_64-linux-gnu/perl-base/utf8.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/vars.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/warnings.pm",
            "/usr/lib/x86_64-linux-gnu/perl-base/warnings/register.pm",
            "/usr/share/doc/perl-base/changelog.Debian.gz",
            "/usr/share/doc/perl-base/changelog.gz",
            "/usr/share/doc/perl-base/copyright",
            "/usr/share/doc/perl/AUTHORS.gz",
            "/usr/share/doc/perl/Documentation",
            "/usr/share/lintian/overrides/perl-base",
            "/usr/share/man/man1/perl.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "sed@4.9-1+deb12u1",
          "Name": "sed",
          "Identifier": {
            "PURL": "pkg:deb/debian/sed@4.9-1%2Bdeb12u1?arch=amd64\u0026distro=debian-12.15",
            "UID": "8308743a0f93fa9f"
          },
          "Version": "4.9",
          "Release": "1+deb12u1",
          "Arch": "amd64",
          "SrcName": "sed",
          "SrcVersion": "4.9",
          "SrcRelease": "1+deb12u1",
          "Licenses": [
            "GPL-3.0-or-later",
            "GPL-3.0-only",
            "X11",
            "GFDL-1.3-no-invariants-or-later",
            "GFDL-1.3-only",
            "ISC",
            "BSD-4-Clause-UC",
            "BSL-1",
            "pcre"
          ],
          "Maintainer": "Clint Adams \u003cclint@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/bin/sed",
            "/usr/share/doc/sed/AUTHORS",
            "/usr/share/doc/sed/BUGS.gz",
            "/usr/share/doc/sed/NEWS.gz",
            "/usr/share/doc/sed/README",
            "/usr/share/doc/sed/THANKS.gz",
            "/usr/share/doc/sed/changelog.Debian.gz",
            "/usr/share/doc/sed/changelog.gz",
            "/usr/share/doc/sed/copyright",
            "/usr/share/doc/sed/examples/dc.sed",
            "/usr/share/doc/sed/sedfaq.txt.gz",
            "/usr/share/info/sed.info.gz",
            "/usr/share/locale/af/LC_MESSAGES/sed.mo",
            "/usr/share/locale/ast/LC_MESSAGES/sed.mo",
            "/usr/share/locale/bg/LC_MESSAGES/sed.mo",
            "/usr/share/locale/ca/LC_MESSAGES/sed.mo",
            "/usr/share/locale/cs/LC_MESSAGES/sed.mo",
            "/usr/share/locale/da/LC_MESSAGES/sed.mo",
            "/usr/share/locale/de/LC_MESSAGES/sed.mo",
            "/usr/share/locale/el/LC_MESSAGES/sed.mo",
            "/usr/share/locale/eo/LC_MESSAGES/sed.mo",
            "/usr/share/locale/es/LC_MESSAGES/sed.mo",
            "/usr/share/locale/et/LC_MESSAGES/sed.mo",
            "/usr/share/locale/eu/LC_MESSAGES/sed.mo",
            "/usr/share/locale/fi/LC_MESSAGES/sed.mo",
            "/usr/share/locale/fr/LC_MESSAGES/sed.mo",
            "/usr/share/locale/ga/LC_MESSAGES/sed.mo",
            "/usr/share/locale/gl/LC_MESSAGES/sed.mo",
            "/usr/share/locale/he/LC_MESSAGES/sed.mo",
            "/usr/share/locale/hr/LC_MESSAGES/sed.mo",
            "/usr/share/locale/hu/LC_MESSAGES/sed.mo",
            "/usr/share/locale/id/LC_MESSAGES/sed.mo",
            "/usr/share/locale/it/LC_MESSAGES/sed.mo",
            "/usr/share/locale/ja/LC_MESSAGES/sed.mo",
            "/usr/share/locale/ka/LC_MESSAGES/sed.mo",
            "/usr/share/locale/ko/LC_MESSAGES/sed.mo",
            "/usr/share/locale/nb/LC_MESSAGES/sed.mo",
            "/usr/share/locale/nl/LC_MESSAGES/sed.mo",
            "/usr/share/locale/pl/LC_MESSAGES/sed.mo",
            "/usr/share/locale/pt/LC_MESSAGES/sed.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/sed.mo",
            "/usr/share/locale/ro/LC_MESSAGES/sed.mo",
            "/usr/share/locale/ru/LC_MESSAGES/sed.mo",
            "/usr/share/locale/sk/LC_MESSAGES/sed.mo",
            "/usr/share/locale/sl/LC_MESSAGES/sed.mo",
            "/usr/share/locale/sr/LC_MESSAGES/sed.mo",
            "/usr/share/locale/sv/LC_MESSAGES/sed.mo",
            "/usr/share/locale/tr/LC_MESSAGES/sed.mo",
            "/usr/share/locale/uk/LC_MESSAGES/sed.mo",
            "/usr/share/locale/vi/LC_MESSAGES/sed.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/sed.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/sed.mo",
            "/usr/share/man/man1/sed.1.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "sysvinit-utils@3.06-4",
          "Name": "sysvinit-utils",
          "Identifier": {
            "PURL": "pkg:deb/debian/sysvinit-utils@3.06-4?arch=amd64\u0026distro=debian-12.15",
            "UID": "490ed47f91a0290b"
          },
          "Version": "3.06",
          "Release": "4",
          "Arch": "amd64",
          "SrcName": "sysvinit",
          "SrcVersion": "3.06",
          "SrcRelease": "4",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-3.0-only",
            "GPL-2.0-only"
          ],
          "Maintainer": "Debian sysvinit maintainers \u003cdebian-init-diversity@chiark.greenend.org.uk\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/init/init-d-script",
            "/lib/init/vars.sh",
            "/lib/lsb/init-functions",
            "/lib/lsb/init-functions.d/00-verbose",
            "/sbin/fstab-decode",
            "/sbin/killall5",
            "/usr/share/doc/sysvinit-utils/changelog.Debian.gz",
            "/usr/share/doc/sysvinit-utils/copyright",
            "/usr/share/man/man5/init-d-script.5.gz",
            "/usr/share/man/man8/fstab-decode.8.gz",
            "/usr/share/man/man8/killall5.8.gz",
            "/usr/share/man/man8/pidof.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "tar@1.34+dfsg-1.2+deb12u1",
          "Name": "tar",
          "Identifier": {
            "PURL": "pkg:deb/debian/tar@1.34%2Bdfsg-1.2%2Bdeb12u1?arch=amd64\u0026distro=debian-12.15",
            "UID": "1d42a4168a18e3b2"
          },
          "Version": "1.34+dfsg",
          "Release": "1.2+deb12u1",
          "Arch": "amd64",
          "SrcName": "tar",
          "SrcVersion": "1.34+dfsg",
          "SrcRelease": "1.2+deb12u1",
          "Licenses": [
            "GPL-3.0-or-later",
            "GPL-3.0-only",
            "GPL-3+ with Bison exception",
            "LGPL-3.0-or-later",
            "LGPL-3.0-only",
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Janos Lenart \u003cocsi@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/bin/tar",
            "/usr/lib/mime/packages/tar",
            "/usr/sbin/rmt-tar",
            "/usr/sbin/tarcat",
            "/usr/share/doc/tar/AUTHORS",
            "/usr/share/doc/tar/NEWS.gz",
            "/usr/share/doc/tar/README.Debian",
            "/usr/share/doc/tar/THANKS.gz",
            "/usr/share/doc/tar/changelog.1.gz",
            "/usr/share/doc/tar/changelog.Debian.gz",
            "/usr/share/doc/tar/changelog.gz",
            "/usr/share/doc/tar/copyright",
            "/usr/share/locale/bg/LC_MESSAGES/tar.mo",
            "/usr/share/locale/ca/LC_MESSAGES/tar.mo",
            "/usr/share/locale/cs/LC_MESSAGES/tar.mo",
            "/usr/share/locale/da/LC_MESSAGES/tar.mo",
            "/usr/share/locale/de/LC_MESSAGES/tar.mo",
            "/usr/share/locale/el/LC_MESSAGES/tar.mo",
            "/usr/share/locale/eo/LC_MESSAGES/tar.mo",
            "/usr/share/locale/es/LC_MESSAGES/tar.mo",
            "/usr/share/locale/et/LC_MESSAGES/tar.mo",
            "/usr/share/locale/eu/LC_MESSAGES/tar.mo",
            "/usr/share/locale/fi/LC_MESSAGES/tar.mo",
            "/usr/share/locale/fr/LC_MESSAGES/tar.mo",
            "/usr/share/locale/ga/LC_MESSAGES/tar.mo",
            "/usr/share/locale/gl/LC_MESSAGES/tar.mo",
            "/usr/share/locale/hr/LC_MESSAGES/tar.mo",
            "/usr/share/locale/hu/LC_MESSAGES/tar.mo",
            "/usr/share/locale/id/LC_MESSAGES/tar.mo",
            "/usr/share/locale/it/LC_MESSAGES/tar.mo",
            "/usr/share/locale/ja/LC_MESSAGES/tar.mo",
            "/usr/share/locale/ko/LC_MESSAGES/tar.mo",
            "/usr/share/locale/ky/LC_MESSAGES/tar.mo",
            "/usr/share/locale/ms/LC_MESSAGES/tar.mo",
            "/usr/share/locale/nb/LC_MESSAGES/tar.mo",
            "/usr/share/locale/nl/LC_MESSAGES/tar.mo",
            "/usr/share/locale/pl/LC_MESSAGES/tar.mo",
            "/usr/share/locale/pt/LC_MESSAGES/tar.mo",
            "/usr/share/locale/pt_BR/LC_MESSAGES/tar.mo",
            "/usr/share/locale/ro/LC_MESSAGES/tar.mo",
            "/usr/share/locale/ru/LC_MESSAGES/tar.mo",
            "/usr/share/locale/sk/LC_MESSAGES/tar.mo",
            "/usr/share/locale/sl/LC_MESSAGES/tar.mo",
            "/usr/share/locale/sr/LC_MESSAGES/tar.mo",
            "/usr/share/locale/sv/LC_MESSAGES/tar.mo",
            "/usr/share/locale/tr/LC_MESSAGES/tar.mo",
            "/usr/share/locale/uk/LC_MESSAGES/tar.mo",
            "/usr/share/locale/vi/LC_MESSAGES/tar.mo",
            "/usr/share/locale/zh_CN/LC_MESSAGES/tar.mo",
            "/usr/share/locale/zh_TW/LC_MESSAGES/tar.mo",
            "/usr/share/man/man1/tar.1.gz",
            "/usr/share/man/man1/tarcat.1.gz",
            "/usr/share/man/man8/rmt-tar.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "tzdata@2026c-0+deb12u1",
          "Name": "tzdata",
          "Identifier": {
            "PURL": "pkg:deb/debian/tzdata@2026c-0%2Bdeb12u1?arch=all\u0026distro=debian-12.15",
            "UID": "e77f4fb792c088c5"
          },
          "Version": "2026c",
          "Release": "0+deb12u1",
          "Arch": "all",
          "SrcName": "tzdata",
          "SrcVersion": "2026c",
          "SrcRelease": "0+deb12u1",
          "Licenses": [
            "public-domain"
          ],
          "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "debconf@1.5.82"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/share/doc/tzdata/README.Debian",
            "/usr/share/doc/tzdata/changelog.Debian.gz",
            "/usr/share/doc/tzdata/changelog.gz",
            "/usr/share/doc/tzdata/copyright",
            "/usr/share/lintian/overrides/tzdata",
            "/usr/share/zoneinfo/Africa/Abidjan",
            "/usr/share/zoneinfo/Africa/Accra",
            "/usr/share/zoneinfo/Africa/Addis_Ababa",
            "/usr/share/zoneinfo/Africa/Algiers",
            "/usr/share/zoneinfo/Africa/Asmara",
            "/usr/share/zoneinfo/Africa/Bamako",
            "/usr/share/zoneinfo/Africa/Bangui",
            "/usr/share/zoneinfo/Africa/Banjul",
            "/usr/share/zoneinfo/Africa/Bissau",
            "/usr/share/zoneinfo/Africa/Blantyre",
            "/usr/share/zoneinfo/Africa/Brazzaville",
            "/usr/share/zoneinfo/Africa/Bujumbura",
            "/usr/share/zoneinfo/Africa/Cairo",
            "/usr/share/zoneinfo/Africa/Casablanca",
            "/usr/share/zoneinfo/Africa/Ceuta",
            "/usr/share/zoneinfo/Africa/Conakry",
            "/usr/share/zoneinfo/Africa/Dakar",
            "/usr/share/zoneinfo/Africa/Dar_es_Salaam",
            "/usr/share/zoneinfo/Africa/Djibouti",
            "/usr/share/zoneinfo/Africa/Douala",
            "/usr/share/zoneinfo/Africa/El_Aaiun",
            "/usr/share/zoneinfo/Africa/Freetown",
            "/usr/share/zoneinfo/Africa/Gaborone",
            "/usr/share/zoneinfo/Africa/Harare",
            "/usr/share/zoneinfo/Africa/Johannesburg",
            "/usr/share/zoneinfo/Africa/Juba",
            "/usr/share/zoneinfo/Africa/Kampala",
            "/usr/share/zoneinfo/Africa/Khartoum",
            "/usr/share/zoneinfo/Africa/Kigali",
            "/usr/share/zoneinfo/Africa/Kinshasa",
            "/usr/share/zoneinfo/Africa/Lagos",
            "/usr/share/zoneinfo/Africa/Libreville",
            "/usr/share/zoneinfo/Africa/Lome",
            "/usr/share/zoneinfo/Africa/Luanda",
            "/usr/share/zoneinfo/Africa/Lubumbashi",
            "/usr/share/zoneinfo/Africa/Lusaka",
            "/usr/share/zoneinfo/Africa/Malabo",
            "/usr/share/zoneinfo/Africa/Maputo",
            "/usr/share/zoneinfo/Africa/Maseru",
            "/usr/share/zoneinfo/Africa/Mbabane",
            "/usr/share/zoneinfo/Africa/Mogadishu",
            "/usr/share/zoneinfo/Africa/Monrovia",
            "/usr/share/zoneinfo/Africa/Nairobi",
            "/usr/share/zoneinfo/Africa/Ndjamena",
            "/usr/share/zoneinfo/Africa/Niamey",
            "/usr/share/zoneinfo/Africa/Nouakchott",
            "/usr/share/zoneinfo/Africa/Ouagadougou",
            "/usr/share/zoneinfo/Africa/Porto-Novo",
            "/usr/share/zoneinfo/Africa/Sao_Tome",
            "/usr/share/zoneinfo/Africa/Tripoli",
            "/usr/share/zoneinfo/Africa/Tunis",
            "/usr/share/zoneinfo/Africa/Windhoek",
            "/usr/share/zoneinfo/America/Adak",
            "/usr/share/zoneinfo/America/Anchorage",
            "/usr/share/zoneinfo/America/Anguilla",
            "/usr/share/zoneinfo/America/Antigua",
            "/usr/share/zoneinfo/America/Araguaina",
            "/usr/share/zoneinfo/America/Argentina/Buenos_Aires",
            "/usr/share/zoneinfo/America/Argentina/Catamarca",
            "/usr/share/zoneinfo/America/Argentina/Cordoba",
            "/usr/share/zoneinfo/America/Argentina/Jujuy",
            "/usr/share/zoneinfo/America/Argentina/La_Rioja",
            "/usr/share/zoneinfo/America/Argentina/Mendoza",
            "/usr/share/zoneinfo/America/Argentina/Rio_Gallegos",
            "/usr/share/zoneinfo/America/Argentina/Salta",
            "/usr/share/zoneinfo/America/Argentina/San_Juan",
            "/usr/share/zoneinfo/America/Argentina/San_Luis",
            "/usr/share/zoneinfo/America/Argentina/Tucuman",
            "/usr/share/zoneinfo/America/Argentina/Ushuaia",
            "/usr/share/zoneinfo/America/Aruba",
            "/usr/share/zoneinfo/America/Asuncion",
            "/usr/share/zoneinfo/America/Atikokan",
            "/usr/share/zoneinfo/America/Bahia",
            "/usr/share/zoneinfo/America/Bahia_Banderas",
            "/usr/share/zoneinfo/America/Barbados",
            "/usr/share/zoneinfo/America/Belem",
            "/usr/share/zoneinfo/America/Belize",
            "/usr/share/zoneinfo/America/Blanc-Sablon",
            "/usr/share/zoneinfo/America/Boa_Vista",
            "/usr/share/zoneinfo/America/Bogota",
            "/usr/share/zoneinfo/America/Boise",
            "/usr/share/zoneinfo/America/Cambridge_Bay",
            "/usr/share/zoneinfo/America/Campo_Grande",
            "/usr/share/zoneinfo/America/Cancun",
            "/usr/share/zoneinfo/America/Caracas",
            "/usr/share/zoneinfo/America/Cayenne",
            "/usr/share/zoneinfo/America/Cayman",
            "/usr/share/zoneinfo/America/Chicago",
            "/usr/share/zoneinfo/America/Chihuahua",
            "/usr/share/zoneinfo/America/Ciudad_Juarez",
            "/usr/share/zoneinfo/America/Costa_Rica",
            "/usr/share/zoneinfo/America/Coyhaique",
            "/usr/share/zoneinfo/America/Creston",
            "/usr/share/zoneinfo/America/Cuiaba",
            "/usr/share/zoneinfo/America/Curacao",
            "/usr/share/zoneinfo/America/Danmarkshavn",
            "/usr/share/zoneinfo/America/Dawson",
            "/usr/share/zoneinfo/America/Dawson_Creek",
            "/usr/share/zoneinfo/America/Denver",
            "/usr/share/zoneinfo/America/Detroit",
            "/usr/share/zoneinfo/America/Dominica",
            "/usr/share/zoneinfo/America/Edmonton",
            "/usr/share/zoneinfo/America/Eirunepe",
            "/usr/share/zoneinfo/America/El_Salvador",
            "/usr/share/zoneinfo/America/Fort_Nelson",
            "/usr/share/zoneinfo/America/Fortaleza",
            "/usr/share/zoneinfo/America/Glace_Bay",
            "/usr/share/zoneinfo/America/Goose_Bay",
            "/usr/share/zoneinfo/America/Grand_Turk",
            "/usr/share/zoneinfo/America/Grenada",
            "/usr/share/zoneinfo/America/Guadeloupe",
            "/usr/share/zoneinfo/America/Guatemala",
            "/usr/share/zoneinfo/America/Guayaquil",
            "/usr/share/zoneinfo/America/Guyana",
            "/usr/share/zoneinfo/America/Halifax",
            "/usr/share/zoneinfo/America/Havana",
            "/usr/share/zoneinfo/America/Hermosillo",
            "/usr/share/zoneinfo/America/Indiana/Indianapolis",
            "/usr/share/zoneinfo/America/Indiana/Knox",
            "/usr/share/zoneinfo/America/Indiana/Marengo",
            "/usr/share/zoneinfo/America/Indiana/Petersburg",
            "/usr/share/zoneinfo/America/Indiana/Tell_City",
            "/usr/share/zoneinfo/America/Indiana/Vevay",
            "/usr/share/zoneinfo/America/Indiana/Vincennes",
            "/usr/share/zoneinfo/America/Indiana/Winamac",
            "/usr/share/zoneinfo/America/Inuvik",
            "/usr/share/zoneinfo/America/Iqaluit",
            "/usr/share/zoneinfo/America/Jamaica",
            "/usr/share/zoneinfo/America/Juneau",
            "/usr/share/zoneinfo/America/Kentucky/Louisville",
            "/usr/share/zoneinfo/America/Kentucky/Monticello",
            "/usr/share/zoneinfo/America/La_Paz",
            "/usr/share/zoneinfo/America/Lima",
            "/usr/share/zoneinfo/America/Los_Angeles",
            "/usr/share/zoneinfo/America/Maceio",
            "/usr/share/zoneinfo/America/Managua",
            "/usr/share/zoneinfo/America/Manaus",
            "/usr/share/zoneinfo/America/Martinique",
            "/usr/share/zoneinfo/America/Matamoros",
            "/usr/share/zoneinfo/America/Mazatlan",
            "/usr/share/zoneinfo/America/Menominee",
            "/usr/share/zoneinfo/America/Merida",
            "/usr/share/zoneinfo/America/Metlakatla",
            "/usr/share/zoneinfo/America/Mexico_City",
            "/usr/share/zoneinfo/America/Miquelon",
            "/usr/share/zoneinfo/America/Moncton",
            "/usr/share/zoneinfo/America/Monterrey",
            "/usr/share/zoneinfo/America/Montevideo",
            "/usr/share/zoneinfo/America/Montserrat",
            "/usr/share/zoneinfo/America/Nassau",
            "/usr/share/zoneinfo/America/New_York",
            "/usr/share/zoneinfo/America/Nome",
            "/usr/share/zoneinfo/America/Noronha",
            "/usr/share/zoneinfo/America/North_Dakota/Beulah",
            "/usr/share/zoneinfo/America/North_Dakota/Center",
            "/usr/share/zoneinfo/America/North_Dakota/New_Salem",
            "/usr/share/zoneinfo/America/Nuuk",
            "/usr/share/zoneinfo/America/Ojinaga",
            "/usr/share/zoneinfo/America/Panama",
            "/usr/share/zoneinfo/America/Paramaribo",
            "/usr/share/zoneinfo/America/Phoenix",
            "/usr/share/zoneinfo/America/Port-au-Prince",
            "/usr/share/zoneinfo/America/Port_of_Spain",
            "/usr/share/zoneinfo/America/Porto_Velho",
            "/usr/share/zoneinfo/America/Puerto_Rico",
            "/usr/share/zoneinfo/America/Punta_Arenas",
            "/usr/share/zoneinfo/America/Rankin_Inlet",
            "/usr/share/zoneinfo/America/Recife",
            "/usr/share/zoneinfo/America/Regina",
            "/usr/share/zoneinfo/America/Resolute",
            "/usr/share/zoneinfo/America/Rio_Branco",
            "/usr/share/zoneinfo/America/Santarem",
            "/usr/share/zoneinfo/America/Santiago",
            "/usr/share/zoneinfo/America/Santo_Domingo",
            "/usr/share/zoneinfo/America/Sao_Paulo",
            "/usr/share/zoneinfo/America/Scoresbysund",
            "/usr/share/zoneinfo/America/Sitka",
            "/usr/share/zoneinfo/America/St_Johns",
            "/usr/share/zoneinfo/America/St_Kitts",
            "/usr/share/zoneinfo/America/St_Lucia",
            "/usr/share/zoneinfo/America/St_Thomas",
            "/usr/share/zoneinfo/America/St_Vincent",
            "/usr/share/zoneinfo/America/Swift_Current",
            "/usr/share/zoneinfo/America/Tegucigalpa",
            "/usr/share/zoneinfo/America/Thule",
            "/usr/share/zoneinfo/America/Tijuana",
            "/usr/share/zoneinfo/America/Toronto",
            "/usr/share/zoneinfo/America/Tortola",
            "/usr/share/zoneinfo/America/Vancouver",
            "/usr/share/zoneinfo/America/Whitehorse",
            "/usr/share/zoneinfo/America/Winnipeg",
            "/usr/share/zoneinfo/America/Yakutat",
            "/usr/share/zoneinfo/Antarctica/Casey",
            "/usr/share/zoneinfo/Antarctica/Davis",
            "/usr/share/zoneinfo/Antarctica/DumontDUrville",
            "/usr/share/zoneinfo/Antarctica/Macquarie",
            "/usr/share/zoneinfo/Antarctica/Mawson",
            "/usr/share/zoneinfo/Antarctica/McMurdo",
            "/usr/share/zoneinfo/Antarctica/Palmer",
            "/usr/share/zoneinfo/Antarctica/Rothera",
            "/usr/share/zoneinfo/Antarctica/Syowa",
            "/usr/share/zoneinfo/Antarctica/Troll",
            "/usr/share/zoneinfo/Antarctica/Vostok",
            "/usr/share/zoneinfo/Asia/Aden",
            "/usr/share/zoneinfo/Asia/Almaty",
            "/usr/share/zoneinfo/Asia/Amman",
            "/usr/share/zoneinfo/Asia/Anadyr",
            "/usr/share/zoneinfo/Asia/Aqtau",
            "/usr/share/zoneinfo/Asia/Aqtobe",
            "/usr/share/zoneinfo/Asia/Ashgabat",
            "/usr/share/zoneinfo/Asia/Atyrau",
            "/usr/share/zoneinfo/Asia/Baghdad",
            "/usr/share/zoneinfo/Asia/Bahrain",
            "/usr/share/zoneinfo/Asia/Baku",
            "/usr/share/zoneinfo/Asia/Bangkok",
            "/usr/share/zoneinfo/Asia/Barnaul",
            "/usr/share/zoneinfo/Asia/Beirut",
            "/usr/share/zoneinfo/Asia/Bishkek",
            "/usr/share/zoneinfo/Asia/Brunei",
            "/usr/share/zoneinfo/Asia/Chita",
            "/usr/share/zoneinfo/Asia/Colombo",
            "/usr/share/zoneinfo/Asia/Damascus",
            "/usr/share/zoneinfo/Asia/Dhaka",
            "/usr/share/zoneinfo/Asia/Dili",
            "/usr/share/zoneinfo/Asia/Dubai",
            "/usr/share/zoneinfo/Asia/Dushanbe",
            "/usr/share/zoneinfo/Asia/Famagusta",
            "/usr/share/zoneinfo/Asia/Gaza",
            "/usr/share/zoneinfo/Asia/Hebron",
            "/usr/share/zoneinfo/Asia/Ho_Chi_Minh",
            "/usr/share/zoneinfo/Asia/Hong_Kong",
            "/usr/share/zoneinfo/Asia/Hovd",
            "/usr/share/zoneinfo/Asia/Irkutsk",
            "/usr/share/zoneinfo/Asia/Jakarta",
            "/usr/share/zoneinfo/Asia/Jayapura",
            "/usr/share/zoneinfo/Asia/Jerusalem",
            "/usr/share/zoneinfo/Asia/Kabul",
            "/usr/share/zoneinfo/Asia/Kamchatka",
            "/usr/share/zoneinfo/Asia/Karachi",
            "/usr/share/zoneinfo/Asia/Kathmandu",
            "/usr/share/zoneinfo/Asia/Khandyga",
            "/usr/share/zoneinfo/Asia/Kolkata",
            "/usr/share/zoneinfo/Asia/Krasnoyarsk",
            "/usr/share/zoneinfo/Asia/Kuala_Lumpur",
            "/usr/share/zoneinfo/Asia/Kuching",
            "/usr/share/zoneinfo/Asia/Kuwait",
            "/usr/share/zoneinfo/Asia/Macau",
            "/usr/share/zoneinfo/Asia/Magadan",
            "/usr/share/zoneinfo/Asia/Makassar",
            "/usr/share/zoneinfo/Asia/Manila",
            "/usr/share/zoneinfo/Asia/Muscat",
            "/usr/share/zoneinfo/Asia/Nicosia",
            "/usr/share/zoneinfo/Asia/Novokuznetsk",
            "/usr/share/zoneinfo/Asia/Novosibirsk",
            "/usr/share/zoneinfo/Asia/Omsk",
            "/usr/share/zoneinfo/Asia/Oral",
            "/usr/share/zoneinfo/Asia/Phnom_Penh",
            "/usr/share/zoneinfo/Asia/Pontianak",
            "/usr/share/zoneinfo/Asia/Pyongyang",
            "/usr/share/zoneinfo/Asia/Qatar",
            "/usr/share/zoneinfo/Asia/Qostanay",
            "/usr/share/zoneinfo/Asia/Qyzylorda",
            "/usr/share/zoneinfo/Asia/Riyadh",
            "/usr/share/zoneinfo/Asia/Sakhalin",
            "/usr/share/zoneinfo/Asia/Samarkand",
            "/usr/share/zoneinfo/Asia/Seoul",
            "/usr/share/zoneinfo/Asia/Shanghai",
            "/usr/share/zoneinfo/Asia/Singapore",
            "/usr/share/zoneinfo/Asia/Srednekolymsk",
            "/usr/share/zoneinfo/Asia/Taipei",
            "/usr/share/zoneinfo/Asia/Tashkent",
            "/usr/share/zoneinfo/Asia/Tbilisi",
            "/usr/share/zoneinfo/Asia/Tehran",
            "/usr/share/zoneinfo/Asia/Thimphu",
            "/usr/share/zoneinfo/Asia/Tokyo",
            "/usr/share/zoneinfo/Asia/Tomsk",
            "/usr/share/zoneinfo/Asia/Ulaanbaatar",
            "/usr/share/zoneinfo/Asia/Urumqi",
            "/usr/share/zoneinfo/Asia/Ust-Nera",
            "/usr/share/zoneinfo/Asia/Vientiane",
            "/usr/share/zoneinfo/Asia/Vladivostok",
            "/usr/share/zoneinfo/Asia/Yakutsk",
            "/usr/share/zoneinfo/Asia/Yangon",
            "/usr/share/zoneinfo/Asia/Yekaterinburg",
            "/usr/share/zoneinfo/Asia/Yerevan",
            "/usr/share/zoneinfo/Atlantic/Azores",
            "/usr/share/zoneinfo/Atlantic/Bermuda",
            "/usr/share/zoneinfo/Atlantic/Canary",
            "/usr/share/zoneinfo/Atlantic/Cape_Verde",
            "/usr/share/zoneinfo/Atlantic/Faroe",
            "/usr/share/zoneinfo/Atlantic/Madeira",
            "/usr/share/zoneinfo/Atlantic/Reykjavik",
            "/usr/share/zoneinfo/Atlantic/South_Georgia",
            "/usr/share/zoneinfo/Atlantic/St_Helena",
            "/usr/share/zoneinfo/Atlantic/Stanley",
            "/usr/share/zoneinfo/Australia/Adelaide",
            "/usr/share/zoneinfo/Australia/Brisbane",
            "/usr/share/zoneinfo/Australia/Broken_Hill",
            "/usr/share/zoneinfo/Australia/Darwin",
            "/usr/share/zoneinfo/Australia/Eucla",
            "/usr/share/zoneinfo/Australia/Hobart",
            "/usr/share/zoneinfo/Australia/Lindeman",
            "/usr/share/zoneinfo/Australia/Lord_Howe",
            "/usr/share/zoneinfo/Australia/Melbourne",
            "/usr/share/zoneinfo/Australia/Perth",
            "/usr/share/zoneinfo/Australia/Sydney",
            "/usr/share/zoneinfo/CET",
            "/usr/share/zoneinfo/CST6CDT",
            "/usr/share/zoneinfo/EET",
            "/usr/share/zoneinfo/EST",
            "/usr/share/zoneinfo/EST5EDT",
            "/usr/share/zoneinfo/Etc/GMT",
            "/usr/share/zoneinfo/Etc/GMT+1",
            "/usr/share/zoneinfo/Etc/GMT+10",
            "/usr/share/zoneinfo/Etc/GMT+11",
            "/usr/share/zoneinfo/Etc/GMT+12",
            "/usr/share/zoneinfo/Etc/GMT+2",
            "/usr/share/zoneinfo/Etc/GMT+3",
            "/usr/share/zoneinfo/Etc/GMT+4",
            "/usr/share/zoneinfo/Etc/GMT+5",
            "/usr/share/zoneinfo/Etc/GMT+6",
            "/usr/share/zoneinfo/Etc/GMT+7",
            "/usr/share/zoneinfo/Etc/GMT+8",
            "/usr/share/zoneinfo/Etc/GMT+9",
            "/usr/share/zoneinfo/Etc/GMT-1",
            "/usr/share/zoneinfo/Etc/GMT-10",
            "/usr/share/zoneinfo/Etc/GMT-11",
            "/usr/share/zoneinfo/Etc/GMT-12",
            "/usr/share/zoneinfo/Etc/GMT-13",
            "/usr/share/zoneinfo/Etc/GMT-14",
            "/usr/share/zoneinfo/Etc/GMT-2",
            "/usr/share/zoneinfo/Etc/GMT-3",
            "/usr/share/zoneinfo/Etc/GMT-4",
            "/usr/share/zoneinfo/Etc/GMT-5",
            "/usr/share/zoneinfo/Etc/GMT-6",
            "/usr/share/zoneinfo/Etc/GMT-7",
            "/usr/share/zoneinfo/Etc/GMT-8",
            "/usr/share/zoneinfo/Etc/GMT-9",
            "/usr/share/zoneinfo/Etc/UTC",
            "/usr/share/zoneinfo/Europe/Amsterdam",
            "/usr/share/zoneinfo/Europe/Andorra",
            "/usr/share/zoneinfo/Europe/Astrakhan",
            "/usr/share/zoneinfo/Europe/Athens",
            "/usr/share/zoneinfo/Europe/Belgrade",
            "/usr/share/zoneinfo/Europe/Berlin",
            "/usr/share/zoneinfo/Europe/Brussels",
            "/usr/share/zoneinfo/Europe/Bucharest",
            "/usr/share/zoneinfo/Europe/Budapest",
            "/usr/share/zoneinfo/Europe/Chisinau",
            "/usr/share/zoneinfo/Europe/Copenhagen",
            "/usr/share/zoneinfo/Europe/Dublin",
            "/usr/share/zoneinfo/Europe/Gibraltar",
            "/usr/share/zoneinfo/Europe/Guernsey",
            "/usr/share/zoneinfo/Europe/Helsinki",
            "/usr/share/zoneinfo/Europe/Isle_of_Man",
            "/usr/share/zoneinfo/Europe/Istanbul",
            "/usr/share/zoneinfo/Europe/Jersey",
            "/usr/share/zoneinfo/Europe/Kaliningrad",
            "/usr/share/zoneinfo/Europe/Kirov",
            "/usr/share/zoneinfo/Europe/Kyiv",
            "/usr/share/zoneinfo/Europe/Lisbon",
            "/usr/share/zoneinfo/Europe/Ljubljana",
            "/usr/share/zoneinfo/Europe/London",
            "/usr/share/zoneinfo/Europe/Luxembourg",
            "/usr/share/zoneinfo/Europe/Madrid",
            "/usr/share/zoneinfo/Europe/Malta",
            "/usr/share/zoneinfo/Europe/Minsk",
            "/usr/share/zoneinfo/Europe/Monaco",
            "/usr/share/zoneinfo/Europe/Moscow",
            "/usr/share/zoneinfo/Europe/Oslo",
            "/usr/share/zoneinfo/Europe/Paris",
            "/usr/share/zoneinfo/Europe/Prague",
            "/usr/share/zoneinfo/Europe/Riga",
            "/usr/share/zoneinfo/Europe/Rome",
            "/usr/share/zoneinfo/Europe/Samara",
            "/usr/share/zoneinfo/Europe/Sarajevo",
            "/usr/share/zoneinfo/Europe/Saratov",
            "/usr/share/zoneinfo/Europe/Simferopol",
            "/usr/share/zoneinfo/Europe/Skopje",
            "/usr/share/zoneinfo/Europe/Sofia",
            "/usr/share/zoneinfo/Europe/Stockholm",
            "/usr/share/zoneinfo/Europe/Tallinn",
            "/usr/share/zoneinfo/Europe/Tirane",
            "/usr/share/zoneinfo/Europe/Ulyanovsk",
            "/usr/share/zoneinfo/Europe/Vaduz",
            "/usr/share/zoneinfo/Europe/Vienna",
            "/usr/share/zoneinfo/Europe/Vilnius",
            "/usr/share/zoneinfo/Europe/Volgograd",
            "/usr/share/zoneinfo/Europe/Warsaw",
            "/usr/share/zoneinfo/Europe/Zagreb",
            "/usr/share/zoneinfo/Europe/Zurich",
            "/usr/share/zoneinfo/Factory",
            "/usr/share/zoneinfo/HST",
            "/usr/share/zoneinfo/Indian/Antananarivo",
            "/usr/share/zoneinfo/Indian/Chagos",
            "/usr/share/zoneinfo/Indian/Christmas",
            "/usr/share/zoneinfo/Indian/Cocos",
            "/usr/share/zoneinfo/Indian/Comoro",
            "/usr/share/zoneinfo/Indian/Kerguelen",
            "/usr/share/zoneinfo/Indian/Mahe",
            "/usr/share/zoneinfo/Indian/Maldives",
            "/usr/share/zoneinfo/Indian/Mauritius",
            "/usr/share/zoneinfo/Indian/Mayotte",
            "/usr/share/zoneinfo/Indian/Reunion",
            "/usr/share/zoneinfo/MET",
            "/usr/share/zoneinfo/MST",
            "/usr/share/zoneinfo/MST7MDT",
            "/usr/share/zoneinfo/PST8PDT",
            "/usr/share/zoneinfo/Pacific/Apia",
            "/usr/share/zoneinfo/Pacific/Auckland",
            "/usr/share/zoneinfo/Pacific/Bougainville",
            "/usr/share/zoneinfo/Pacific/Chatham",
            "/usr/share/zoneinfo/Pacific/Chuuk",
            "/usr/share/zoneinfo/Pacific/Easter",
            "/usr/share/zoneinfo/Pacific/Efate",
            "/usr/share/zoneinfo/Pacific/Fakaofo",
            "/usr/share/zoneinfo/Pacific/Fiji",
            "/usr/share/zoneinfo/Pacific/Funafuti",
            "/usr/share/zoneinfo/Pacific/Galapagos",
            "/usr/share/zoneinfo/Pacific/Gambier",
            "/usr/share/zoneinfo/Pacific/Guadalcanal",
            "/usr/share/zoneinfo/Pacific/Guam",
            "/usr/share/zoneinfo/Pacific/Honolulu",
            "/usr/share/zoneinfo/Pacific/Kanton",
            "/usr/share/zoneinfo/Pacific/Kiritimati",
            "/usr/share/zoneinfo/Pacific/Kosrae",
            "/usr/share/zoneinfo/Pacific/Kwajalein",
            "/usr/share/zoneinfo/Pacific/Majuro",
            "/usr/share/zoneinfo/Pacific/Marquesas",
            "/usr/share/zoneinfo/Pacific/Midway",
            "/usr/share/zoneinfo/Pacific/Nauru",
            "/usr/share/zoneinfo/Pacific/Niue",
            "/usr/share/zoneinfo/Pacific/Norfolk",
            "/usr/share/zoneinfo/Pacific/Noumea",
            "/usr/share/zoneinfo/Pacific/Pago_Pago",
            "/usr/share/zoneinfo/Pacific/Palau",
            "/usr/share/zoneinfo/Pacific/Pitcairn",
            "/usr/share/zoneinfo/Pacific/Pohnpei",
            "/usr/share/zoneinfo/Pacific/Port_Moresby",
            "/usr/share/zoneinfo/Pacific/Rarotonga",
            "/usr/share/zoneinfo/Pacific/Saipan",
            "/usr/share/zoneinfo/Pacific/Tahiti",
            "/usr/share/zoneinfo/Pacific/Tarawa",
            "/usr/share/zoneinfo/Pacific/Tongatapu",
            "/usr/share/zoneinfo/Pacific/Wake",
            "/usr/share/zoneinfo/Pacific/Wallis",
            "/usr/share/zoneinfo/WET",
            "/usr/share/zoneinfo/iso3166.tab",
            "/usr/share/zoneinfo/leap-seconds.list",
            "/usr/share/zoneinfo/leapseconds",
            "/usr/share/zoneinfo/right/Africa/Abidjan",
            "/usr/share/zoneinfo/right/Africa/Accra",
            "/usr/share/zoneinfo/right/Africa/Addis_Ababa",
            "/usr/share/zoneinfo/right/Africa/Algiers",
            "/usr/share/zoneinfo/right/Africa/Asmara",
            "/usr/share/zoneinfo/right/Africa/Bamako",
            "/usr/share/zoneinfo/right/Africa/Bangui",
            "/usr/share/zoneinfo/right/Africa/Banjul",
            "/usr/share/zoneinfo/right/Africa/Bissau",
            "/usr/share/zoneinfo/right/Africa/Blantyre",
            "/usr/share/zoneinfo/right/Africa/Brazzaville",
            "/usr/share/zoneinfo/right/Africa/Bujumbura",
            "/usr/share/zoneinfo/right/Africa/Cairo",
            "/usr/share/zoneinfo/right/Africa/Casablanca",
            "/usr/share/zoneinfo/right/Africa/Ceuta",
            "/usr/share/zoneinfo/right/Africa/Conakry",
            "/usr/share/zoneinfo/right/Africa/Dakar",
            "/usr/share/zoneinfo/right/Africa/Dar_es_Salaam",
            "/usr/share/zoneinfo/right/Africa/Djibouti",
            "/usr/share/zoneinfo/right/Africa/Douala",
            "/usr/share/zoneinfo/right/Africa/El_Aaiun",
            "/usr/share/zoneinfo/right/Africa/Freetown",
            "/usr/share/zoneinfo/right/Africa/Gaborone",
            "/usr/share/zoneinfo/right/Africa/Harare",
            "/usr/share/zoneinfo/right/Africa/Johannesburg",
            "/usr/share/zoneinfo/right/Africa/Juba",
            "/usr/share/zoneinfo/right/Africa/Kampala",
            "/usr/share/zoneinfo/right/Africa/Khartoum",
            "/usr/share/zoneinfo/right/Africa/Kigali",
            "/usr/share/zoneinfo/right/Africa/Kinshasa",
            "/usr/share/zoneinfo/right/Africa/Lagos",
            "/usr/share/zoneinfo/right/Africa/Libreville",
            "/usr/share/zoneinfo/right/Africa/Lome",
            "/usr/share/zoneinfo/right/Africa/Luanda",
            "/usr/share/zoneinfo/right/Africa/Lubumbashi",
            "/usr/share/zoneinfo/right/Africa/Lusaka",
            "/usr/share/zoneinfo/right/Africa/Malabo",
            "/usr/share/zoneinfo/right/Africa/Maputo",
            "/usr/share/zoneinfo/right/Africa/Maseru",
            "/usr/share/zoneinfo/right/Africa/Mbabane",
            "/usr/share/zoneinfo/right/Africa/Mogadishu",
            "/usr/share/zoneinfo/right/Africa/Monrovia",
            "/usr/share/zoneinfo/right/Africa/Nairobi",
            "/usr/share/zoneinfo/right/Africa/Ndjamena",
            "/usr/share/zoneinfo/right/Africa/Niamey",
            "/usr/share/zoneinfo/right/Africa/Nouakchott",
            "/usr/share/zoneinfo/right/Africa/Ouagadougou",
            "/usr/share/zoneinfo/right/Africa/Porto-Novo",
            "/usr/share/zoneinfo/right/Africa/Sao_Tome",
            "/usr/share/zoneinfo/right/Africa/Tripoli",
            "/usr/share/zoneinfo/right/Africa/Tunis",
            "/usr/share/zoneinfo/right/Africa/Windhoek",
            "/usr/share/zoneinfo/right/America/Adak",
            "/usr/share/zoneinfo/right/America/Anchorage",
            "/usr/share/zoneinfo/right/America/Anguilla",
            "/usr/share/zoneinfo/right/America/Antigua",
            "/usr/share/zoneinfo/right/America/Araguaina",
            "/usr/share/zoneinfo/right/America/Argentina/Buenos_Aires",
            "/usr/share/zoneinfo/right/America/Argentina/Catamarca",
            "/usr/share/zoneinfo/right/America/Argentina/Cordoba",
            "/usr/share/zoneinfo/right/America/Argentina/Jujuy",
            "/usr/share/zoneinfo/right/America/Argentina/La_Rioja",
            "/usr/share/zoneinfo/right/America/Argentina/Mendoza",
            "/usr/share/zoneinfo/right/America/Argentina/Rio_Gallegos",
            "/usr/share/zoneinfo/right/America/Argentina/Salta",
            "/usr/share/zoneinfo/right/America/Argentina/San_Juan",
            "/usr/share/zoneinfo/right/America/Argentina/San_Luis",
            "/usr/share/zoneinfo/right/America/Argentina/Tucuman",
            "/usr/share/zoneinfo/right/America/Argentina/Ushuaia",
            "/usr/share/zoneinfo/right/America/Aruba",
            "/usr/share/zoneinfo/right/America/Asuncion",
            "/usr/share/zoneinfo/right/America/Atikokan",
            "/usr/share/zoneinfo/right/America/Bahia",
            "/usr/share/zoneinfo/right/America/Bahia_Banderas",
            "/usr/share/zoneinfo/right/America/Barbados",
            "/usr/share/zoneinfo/right/America/Belem",
            "/usr/share/zoneinfo/right/America/Belize",
            "/usr/share/zoneinfo/right/America/Blanc-Sablon",
            "/usr/share/zoneinfo/right/America/Boa_Vista",
            "/usr/share/zoneinfo/right/America/Bogota",
            "/usr/share/zoneinfo/right/America/Boise",
            "/usr/share/zoneinfo/right/America/Cambridge_Bay",
            "/usr/share/zoneinfo/right/America/Campo_Grande",
            "/usr/share/zoneinfo/right/America/Cancun",
            "/usr/share/zoneinfo/right/America/Caracas",
            "/usr/share/zoneinfo/right/America/Cayenne",
            "/usr/share/zoneinfo/right/America/Cayman",
            "/usr/share/zoneinfo/right/America/Chicago",
            "/usr/share/zoneinfo/right/America/Chihuahua",
            "/usr/share/zoneinfo/right/America/Ciudad_Juarez",
            "/usr/share/zoneinfo/right/America/Costa_Rica",
            "/usr/share/zoneinfo/right/America/Coyhaique",
            "/usr/share/zoneinfo/right/America/Creston",
            "/usr/share/zoneinfo/right/America/Cuiaba",
            "/usr/share/zoneinfo/right/America/Curacao",
            "/usr/share/zoneinfo/right/America/Danmarkshavn",
            "/usr/share/zoneinfo/right/America/Dawson",
            "/usr/share/zoneinfo/right/America/Dawson_Creek",
            "/usr/share/zoneinfo/right/America/Denver",
            "/usr/share/zoneinfo/right/America/Detroit",
            "/usr/share/zoneinfo/right/America/Dominica",
            "/usr/share/zoneinfo/right/America/Edmonton",
            "/usr/share/zoneinfo/right/America/Eirunepe",
            "/usr/share/zoneinfo/right/America/El_Salvador",
            "/usr/share/zoneinfo/right/America/Fort_Nelson",
            "/usr/share/zoneinfo/right/America/Fortaleza",
            "/usr/share/zoneinfo/right/America/Glace_Bay",
            "/usr/share/zoneinfo/right/America/Goose_Bay",
            "/usr/share/zoneinfo/right/America/Grand_Turk",
            "/usr/share/zoneinfo/right/America/Grenada",
            "/usr/share/zoneinfo/right/America/Guadeloupe",
            "/usr/share/zoneinfo/right/America/Guatemala",
            "/usr/share/zoneinfo/right/America/Guayaquil",
            "/usr/share/zoneinfo/right/America/Guyana",
            "/usr/share/zoneinfo/right/America/Halifax",
            "/usr/share/zoneinfo/right/America/Havana",
            "/usr/share/zoneinfo/right/America/Hermosillo",
            "/usr/share/zoneinfo/right/America/Indiana/Indianapolis",
            "/usr/share/zoneinfo/right/America/Indiana/Knox",
            "/usr/share/zoneinfo/right/America/Indiana/Marengo",
            "/usr/share/zoneinfo/right/America/Indiana/Petersburg",
            "/usr/share/zoneinfo/right/America/Indiana/Tell_City",
            "/usr/share/zoneinfo/right/America/Indiana/Vevay",
            "/usr/share/zoneinfo/right/America/Indiana/Vincennes",
            "/usr/share/zoneinfo/right/America/Indiana/Winamac",
            "/usr/share/zoneinfo/right/America/Inuvik",
            "/usr/share/zoneinfo/right/America/Iqaluit",
            "/usr/share/zoneinfo/right/America/Jamaica",
            "/usr/share/zoneinfo/right/America/Juneau",
            "/usr/share/zoneinfo/right/America/Kentucky/Louisville",
            "/usr/share/zoneinfo/right/America/Kentucky/Monticello",
            "/usr/share/zoneinfo/right/America/La_Paz",
            "/usr/share/zoneinfo/right/America/Lima",
            "/usr/share/zoneinfo/right/America/Los_Angeles",
            "/usr/share/zoneinfo/right/America/Maceio",
            "/usr/share/zoneinfo/right/America/Managua",
            "/usr/share/zoneinfo/right/America/Manaus",
            "/usr/share/zoneinfo/right/America/Martinique",
            "/usr/share/zoneinfo/right/America/Matamoros",
            "/usr/share/zoneinfo/right/America/Mazatlan",
            "/usr/share/zoneinfo/right/America/Menominee",
            "/usr/share/zoneinfo/right/America/Merida",
            "/usr/share/zoneinfo/right/America/Metlakatla",
            "/usr/share/zoneinfo/right/America/Mexico_City",
            "/usr/share/zoneinfo/right/America/Miquelon",
            "/usr/share/zoneinfo/right/America/Moncton",
            "/usr/share/zoneinfo/right/America/Monterrey",
            "/usr/share/zoneinfo/right/America/Montevideo",
            "/usr/share/zoneinfo/right/America/Montserrat",
            "/usr/share/zoneinfo/right/America/Nassau",
            "/usr/share/zoneinfo/right/America/New_York",
            "/usr/share/zoneinfo/right/America/Nome",
            "/usr/share/zoneinfo/right/America/Noronha",
            "/usr/share/zoneinfo/right/America/North_Dakota/Beulah",
            "/usr/share/zoneinfo/right/America/North_Dakota/Center",
            "/usr/share/zoneinfo/right/America/North_Dakota/New_Salem",
            "/usr/share/zoneinfo/right/America/Nuuk",
            "/usr/share/zoneinfo/right/America/Ojinaga",
            "/usr/share/zoneinfo/right/America/Panama",
            "/usr/share/zoneinfo/right/America/Paramaribo",
            "/usr/share/zoneinfo/right/America/Phoenix",
            "/usr/share/zoneinfo/right/America/Port-au-Prince",
            "/usr/share/zoneinfo/right/America/Port_of_Spain",
            "/usr/share/zoneinfo/right/America/Porto_Velho",
            "/usr/share/zoneinfo/right/America/Puerto_Rico",
            "/usr/share/zoneinfo/right/America/Punta_Arenas",
            "/usr/share/zoneinfo/right/America/Rankin_Inlet",
            "/usr/share/zoneinfo/right/America/Recife",
            "/usr/share/zoneinfo/right/America/Regina",
            "/usr/share/zoneinfo/right/America/Resolute",
            "/usr/share/zoneinfo/right/America/Rio_Branco",
            "/usr/share/zoneinfo/right/America/Santarem",
            "/usr/share/zoneinfo/right/America/Santiago",
            "/usr/share/zoneinfo/right/America/Santo_Domingo",
            "/usr/share/zoneinfo/right/America/Sao_Paulo",
            "/usr/share/zoneinfo/right/America/Scoresbysund",
            "/usr/share/zoneinfo/right/America/Sitka",
            "/usr/share/zoneinfo/right/America/St_Johns",
            "/usr/share/zoneinfo/right/America/St_Kitts",
            "/usr/share/zoneinfo/right/America/St_Lucia",
            "/usr/share/zoneinfo/right/America/St_Thomas",
            "/usr/share/zoneinfo/right/America/St_Vincent",
            "/usr/share/zoneinfo/right/America/Swift_Current",
            "/usr/share/zoneinfo/right/America/Tegucigalpa",
            "/usr/share/zoneinfo/right/America/Thule",
            "/usr/share/zoneinfo/right/America/Tijuana",
            "/usr/share/zoneinfo/right/America/Toronto",
            "/usr/share/zoneinfo/right/America/Tortola",
            "/usr/share/zoneinfo/right/America/Vancouver",
            "/usr/share/zoneinfo/right/America/Whitehorse",
            "/usr/share/zoneinfo/right/America/Winnipeg",
            "/usr/share/zoneinfo/right/America/Yakutat",
            "/usr/share/zoneinfo/right/Antarctica/Casey",
            "/usr/share/zoneinfo/right/Antarctica/Davis",
            "/usr/share/zoneinfo/right/Antarctica/DumontDUrville",
            "/usr/share/zoneinfo/right/Antarctica/Macquarie",
            "/usr/share/zoneinfo/right/Antarctica/Mawson",
            "/usr/share/zoneinfo/right/Antarctica/McMurdo",
            "/usr/share/zoneinfo/right/Antarctica/Palmer",
            "/usr/share/zoneinfo/right/Antarctica/Rothera",
            "/usr/share/zoneinfo/right/Antarctica/Syowa",
            "/usr/share/zoneinfo/right/Antarctica/Troll",
            "/usr/share/zoneinfo/right/Antarctica/Vostok",
            "/usr/share/zoneinfo/right/Asia/Aden",
            "/usr/share/zoneinfo/right/Asia/Almaty",
            "/usr/share/zoneinfo/right/Asia/Amman",
            "/usr/share/zoneinfo/right/Asia/Anadyr",
            "/usr/share/zoneinfo/right/Asia/Aqtau",
            "/usr/share/zoneinfo/right/Asia/Aqtobe",
            "/usr/share/zoneinfo/right/Asia/Ashgabat",
            "/usr/share/zoneinfo/right/Asia/Atyrau",
            "/usr/share/zoneinfo/right/Asia/Baghdad",
            "/usr/share/zoneinfo/right/Asia/Bahrain",
            "/usr/share/zoneinfo/right/Asia/Baku",
            "/usr/share/zoneinfo/right/Asia/Bangkok",
            "/usr/share/zoneinfo/right/Asia/Barnaul",
            "/usr/share/zoneinfo/right/Asia/Beirut",
            "/usr/share/zoneinfo/right/Asia/Bishkek",
            "/usr/share/zoneinfo/right/Asia/Brunei",
            "/usr/share/zoneinfo/right/Asia/Chita",
            "/usr/share/zoneinfo/right/Asia/Colombo",
            "/usr/share/zoneinfo/right/Asia/Damascus",
            "/usr/share/zoneinfo/right/Asia/Dhaka",
            "/usr/share/zoneinfo/right/Asia/Dili",
            "/usr/share/zoneinfo/right/Asia/Dubai",
            "/usr/share/zoneinfo/right/Asia/Dushanbe",
            "/usr/share/zoneinfo/right/Asia/Famagusta",
            "/usr/share/zoneinfo/right/Asia/Gaza",
            "/usr/share/zoneinfo/right/Asia/Hebron",
            "/usr/share/zoneinfo/right/Asia/Ho_Chi_Minh",
            "/usr/share/zoneinfo/right/Asia/Hong_Kong",
            "/usr/share/zoneinfo/right/Asia/Hovd",
            "/usr/share/zoneinfo/right/Asia/Irkutsk",
            "/usr/share/zoneinfo/right/Asia/Jakarta",
            "/usr/share/zoneinfo/right/Asia/Jayapura",
            "/usr/share/zoneinfo/right/Asia/Jerusalem",
            "/usr/share/zoneinfo/right/Asia/Kabul",
            "/usr/share/zoneinfo/right/Asia/Kamchatka",
            "/usr/share/zoneinfo/right/Asia/Karachi",
            "/usr/share/zoneinfo/right/Asia/Kathmandu",
            "/usr/share/zoneinfo/right/Asia/Khandyga",
            "/usr/share/zoneinfo/right/Asia/Kolkata",
            "/usr/share/zoneinfo/right/Asia/Krasnoyarsk",
            "/usr/share/zoneinfo/right/Asia/Kuala_Lumpur",
            "/usr/share/zoneinfo/right/Asia/Kuching",
            "/usr/share/zoneinfo/right/Asia/Kuwait",
            "/usr/share/zoneinfo/right/Asia/Macau",
            "/usr/share/zoneinfo/right/Asia/Magadan",
            "/usr/share/zoneinfo/right/Asia/Makassar",
            "/usr/share/zoneinfo/right/Asia/Manila",
            "/usr/share/zoneinfo/right/Asia/Muscat",
            "/usr/share/zoneinfo/right/Asia/Nicosia",
            "/usr/share/zoneinfo/right/Asia/Novokuznetsk",
            "/usr/share/zoneinfo/right/Asia/Novosibirsk",
            "/usr/share/zoneinfo/right/Asia/Omsk",
            "/usr/share/zoneinfo/right/Asia/Oral",
            "/usr/share/zoneinfo/right/Asia/Phnom_Penh",
            "/usr/share/zoneinfo/right/Asia/Pontianak",
            "/usr/share/zoneinfo/right/Asia/Pyongyang",
            "/usr/share/zoneinfo/right/Asia/Qatar",
            "/usr/share/zoneinfo/right/Asia/Qostanay",
            "/usr/share/zoneinfo/right/Asia/Qyzylorda",
            "/usr/share/zoneinfo/right/Asia/Riyadh",
            "/usr/share/zoneinfo/right/Asia/Sakhalin",
            "/usr/share/zoneinfo/right/Asia/Samarkand",
            "/usr/share/zoneinfo/right/Asia/Seoul",
            "/usr/share/zoneinfo/right/Asia/Shanghai",
            "/usr/share/zoneinfo/right/Asia/Singapore",
            "/usr/share/zoneinfo/right/Asia/Srednekolymsk",
            "/usr/share/zoneinfo/right/Asia/Taipei",
            "/usr/share/zoneinfo/right/Asia/Tashkent",
            "/usr/share/zoneinfo/right/Asia/Tbilisi",
            "/usr/share/zoneinfo/right/Asia/Tehran",
            "/usr/share/zoneinfo/right/Asia/Thimphu",
            "/usr/share/zoneinfo/right/Asia/Tokyo",
            "/usr/share/zoneinfo/right/Asia/Tomsk",
            "/usr/share/zoneinfo/right/Asia/Ulaanbaatar",
            "/usr/share/zoneinfo/right/Asia/Urumqi",
            "/usr/share/zoneinfo/right/Asia/Ust-Nera",
            "/usr/share/zoneinfo/right/Asia/Vientiane",
            "/usr/share/zoneinfo/right/Asia/Vladivostok",
            "/usr/share/zoneinfo/right/Asia/Yakutsk",
            "/usr/share/zoneinfo/right/Asia/Yangon",
            "/usr/share/zoneinfo/right/Asia/Yekaterinburg",
            "/usr/share/zoneinfo/right/Asia/Yerevan",
            "/usr/share/zoneinfo/right/Atlantic/Azores",
            "/usr/share/zoneinfo/right/Atlantic/Bermuda",
            "/usr/share/zoneinfo/right/Atlantic/Canary",
            "/usr/share/zoneinfo/right/Atlantic/Cape_Verde",
            "/usr/share/zoneinfo/right/Atlantic/Faroe",
            "/usr/share/zoneinfo/right/Atlantic/Madeira",
            "/usr/share/zoneinfo/right/Atlantic/Reykjavik",
            "/usr/share/zoneinfo/right/Atlantic/South_Georgia",
            "/usr/share/zoneinfo/right/Atlantic/St_Helena",
            "/usr/share/zoneinfo/right/Atlantic/Stanley",
            "/usr/share/zoneinfo/right/Australia/Adelaide",
            "/usr/share/zoneinfo/right/Australia/Brisbane",
            "/usr/share/zoneinfo/right/Australia/Broken_Hill",
            "/usr/share/zoneinfo/right/Australia/Darwin",
            "/usr/share/zoneinfo/right/Australia/Eucla",
            "/usr/share/zoneinfo/right/Australia/Hobart",
            "/usr/share/zoneinfo/right/Australia/Lindeman",
            "/usr/share/zoneinfo/right/Australia/Lord_Howe",
            "/usr/share/zoneinfo/right/Australia/Melbourne",
            "/usr/share/zoneinfo/right/Australia/Perth",
            "/usr/share/zoneinfo/right/Australia/Sydney",
            "/usr/share/zoneinfo/right/CET",
            "/usr/share/zoneinfo/right/CST6CDT",
            "/usr/share/zoneinfo/right/EET",
            "/usr/share/zoneinfo/right/EST",
            "/usr/share/zoneinfo/right/EST5EDT",
            "/usr/share/zoneinfo/right/Etc/GMT",
            "/usr/share/zoneinfo/right/Etc/GMT+1",
            "/usr/share/zoneinfo/right/Etc/GMT+10",
            "/usr/share/zoneinfo/right/Etc/GMT+11",
            "/usr/share/zoneinfo/right/Etc/GMT+12",
            "/usr/share/zoneinfo/right/Etc/GMT+2",
            "/usr/share/zoneinfo/right/Etc/GMT+3",
            "/usr/share/zoneinfo/right/Etc/GMT+4",
            "/usr/share/zoneinfo/right/Etc/GMT+5",
            "/usr/share/zoneinfo/right/Etc/GMT+6",
            "/usr/share/zoneinfo/right/Etc/GMT+7",
            "/usr/share/zoneinfo/right/Etc/GMT+8",
            "/usr/share/zoneinfo/right/Etc/GMT+9",
            "/usr/share/zoneinfo/right/Etc/GMT-1",
            "/usr/share/zoneinfo/right/Etc/GMT-10",
            "/usr/share/zoneinfo/right/Etc/GMT-11",
            "/usr/share/zoneinfo/right/Etc/GMT-12",
            "/usr/share/zoneinfo/right/Etc/GMT-13",
            "/usr/share/zoneinfo/right/Etc/GMT-14",
            "/usr/share/zoneinfo/right/Etc/GMT-2",
            "/usr/share/zoneinfo/right/Etc/GMT-3",
            "/usr/share/zoneinfo/right/Etc/GMT-4",
            "/usr/share/zoneinfo/right/Etc/GMT-5",
            "/usr/share/zoneinfo/right/Etc/GMT-6",
            "/usr/share/zoneinfo/right/Etc/GMT-7",
            "/usr/share/zoneinfo/right/Etc/GMT-8",
            "/usr/share/zoneinfo/right/Etc/GMT-9",
            "/usr/share/zoneinfo/right/Etc/UTC",
            "/usr/share/zoneinfo/right/Europe/Amsterdam",
            "/usr/share/zoneinfo/right/Europe/Andorra",
            "/usr/share/zoneinfo/right/Europe/Astrakhan",
            "/usr/share/zoneinfo/right/Europe/Athens",
            "/usr/share/zoneinfo/right/Europe/Belgrade",
            "/usr/share/zoneinfo/right/Europe/Berlin",
            "/usr/share/zoneinfo/right/Europe/Brussels",
            "/usr/share/zoneinfo/right/Europe/Bucharest",
            "/usr/share/zoneinfo/right/Europe/Budapest",
            "/usr/share/zoneinfo/right/Europe/Chisinau",
            "/usr/share/zoneinfo/right/Europe/Copenhagen",
            "/usr/share/zoneinfo/right/Europe/Dublin",
            "/usr/share/zoneinfo/right/Europe/Gibraltar",
            "/usr/share/zoneinfo/right/Europe/Guernsey",
            "/usr/share/zoneinfo/right/Europe/Helsinki",
            "/usr/share/zoneinfo/right/Europe/Isle_of_Man",
            "/usr/share/zoneinfo/right/Europe/Istanbul",
            "/usr/share/zoneinfo/right/Europe/Jersey",
            "/usr/share/zoneinfo/right/Europe/Kaliningrad",
            "/usr/share/zoneinfo/right/Europe/Kirov",
            "/usr/share/zoneinfo/right/Europe/Kyiv",
            "/usr/share/zoneinfo/right/Europe/Lisbon",
            "/usr/share/zoneinfo/right/Europe/Ljubljana",
            "/usr/share/zoneinfo/right/Europe/London",
            "/usr/share/zoneinfo/right/Europe/Luxembourg",
            "/usr/share/zoneinfo/right/Europe/Madrid",
            "/usr/share/zoneinfo/right/Europe/Malta",
            "/usr/share/zoneinfo/right/Europe/Minsk",
            "/usr/share/zoneinfo/right/Europe/Monaco",
            "/usr/share/zoneinfo/right/Europe/Moscow",
            "/usr/share/zoneinfo/right/Europe/Oslo",
            "/usr/share/zoneinfo/right/Europe/Paris",
            "/usr/share/zoneinfo/right/Europe/Prague",
            "/usr/share/zoneinfo/right/Europe/Riga",
            "/usr/share/zoneinfo/right/Europe/Rome",
            "/usr/share/zoneinfo/right/Europe/Samara",
            "/usr/share/zoneinfo/right/Europe/Sarajevo",
            "/usr/share/zoneinfo/right/Europe/Saratov",
            "/usr/share/zoneinfo/right/Europe/Simferopol",
            "/usr/share/zoneinfo/right/Europe/Skopje",
            "/usr/share/zoneinfo/right/Europe/Sofia",
            "/usr/share/zoneinfo/right/Europe/Stockholm",
            "/usr/share/zoneinfo/right/Europe/Tallinn",
            "/usr/share/zoneinfo/right/Europe/Tirane",
            "/usr/share/zoneinfo/right/Europe/Ulyanovsk",
            "/usr/share/zoneinfo/right/Europe/Vaduz",
            "/usr/share/zoneinfo/right/Europe/Vienna",
            "/usr/share/zoneinfo/right/Europe/Vilnius",
            "/usr/share/zoneinfo/right/Europe/Volgograd",
            "/usr/share/zoneinfo/right/Europe/Warsaw",
            "/usr/share/zoneinfo/right/Europe/Zagreb",
            "/usr/share/zoneinfo/right/Europe/Zurich",
            "/usr/share/zoneinfo/right/Factory",
            "/usr/share/zoneinfo/right/HST",
            "/usr/share/zoneinfo/right/Indian/Antananarivo",
            "/usr/share/zoneinfo/right/Indian/Chagos",
            "/usr/share/zoneinfo/right/Indian/Christmas",
            "/usr/share/zoneinfo/right/Indian/Cocos",
            "/usr/share/zoneinfo/right/Indian/Comoro",
            "/usr/share/zoneinfo/right/Indian/Kerguelen",
            "/usr/share/zoneinfo/right/Indian/Mahe",
            "/usr/share/zoneinfo/right/Indian/Maldives",
            "/usr/share/zoneinfo/right/Indian/Mauritius",
            "/usr/share/zoneinfo/right/Indian/Mayotte",
            "/usr/share/zoneinfo/right/Indian/Reunion",
            "/usr/share/zoneinfo/right/MET",
            "/usr/share/zoneinfo/right/MST",
            "/usr/share/zoneinfo/right/MST7MDT",
            "/usr/share/zoneinfo/right/PST8PDT",
            "/usr/share/zoneinfo/right/Pacific/Apia",
            "/usr/share/zoneinfo/right/Pacific/Auckland",
            "/usr/share/zoneinfo/right/Pacific/Bougainville",
            "/usr/share/zoneinfo/right/Pacific/Chatham",
            "/usr/share/zoneinfo/right/Pacific/Chuuk",
            "/usr/share/zoneinfo/right/Pacific/Easter",
            "/usr/share/zoneinfo/right/Pacific/Efate",
            "/usr/share/zoneinfo/right/Pacific/Fakaofo",
            "/usr/share/zoneinfo/right/Pacific/Fiji",
            "/usr/share/zoneinfo/right/Pacific/Funafuti",
            "/usr/share/zoneinfo/right/Pacific/Galapagos",
            "/usr/share/zoneinfo/right/Pacific/Gambier",
            "/usr/share/zoneinfo/right/Pacific/Guadalcanal",
            "/usr/share/zoneinfo/right/Pacific/Guam",
            "/usr/share/zoneinfo/right/Pacific/Honolulu",
            "/usr/share/zoneinfo/right/Pacific/Kanton",
            "/usr/share/zoneinfo/right/Pacific/Kiritimati",
            "/usr/share/zoneinfo/right/Pacific/Kosrae",
            "/usr/share/zoneinfo/right/Pacific/Kwajalein",
            "/usr/share/zoneinfo/right/Pacific/Majuro",
            "/usr/share/zoneinfo/right/Pacific/Marquesas",
            "/usr/share/zoneinfo/right/Pacific/Midway",
            "/usr/share/zoneinfo/right/Pacific/Nauru",
            "/usr/share/zoneinfo/right/Pacific/Niue",
            "/usr/share/zoneinfo/right/Pacific/Norfolk",
            "/usr/share/zoneinfo/right/Pacific/Noumea",
            "/usr/share/zoneinfo/right/Pacific/Pago_Pago",
            "/usr/share/zoneinfo/right/Pacific/Palau",
            "/usr/share/zoneinfo/right/Pacific/Pitcairn",
            "/usr/share/zoneinfo/right/Pacific/Pohnpei",
            "/usr/share/zoneinfo/right/Pacific/Port_Moresby",
            "/usr/share/zoneinfo/right/Pacific/Rarotonga",
            "/usr/share/zoneinfo/right/Pacific/Saipan",
            "/usr/share/zoneinfo/right/Pacific/Tahiti",
            "/usr/share/zoneinfo/right/Pacific/Tarawa",
            "/usr/share/zoneinfo/right/Pacific/Tongatapu",
            "/usr/share/zoneinfo/right/Pacific/Wake",
            "/usr/share/zoneinfo/right/Pacific/Wallis",
            "/usr/share/zoneinfo/right/WET",
            "/usr/share/zoneinfo/tzdata.zi",
            "/usr/share/zoneinfo/zone.tab",
            "/usr/share/zoneinfo/zone1970.tab"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "usr-is-merged@37~deb12u1",
          "Name": "usr-is-merged",
          "Identifier": {
            "PURL": "pkg:deb/debian/usr-is-merged@37~deb12u1?arch=all\u0026distro=debian-12.15",
            "UID": "e8bc76467481d3cd"
          },
          "Version": "37~deb12u1",
          "Arch": "all",
          "SrcName": "usrmerge",
          "SrcVersion": "37~deb12u1",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only"
          ],
          "Maintainer": "Marco d'Itri \u003cmd@linux.it\u003e",
          "Repository": {
            "Class": "official"
          },
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/usr/share/doc/usr-is-merged/changelog.gz",
            "/usr/share/doc/usr-is-merged/copyright"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "util-linux@2.38.1-5+deb12u3",
          "Name": "util-linux",
          "Identifier": {
            "PURL": "pkg:deb/debian/util-linux@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "c50a1829816b9d94"
          },
          "Version": "2.38.1",
          "Release": "5+deb12u3",
          "Arch": "amd64",
          "SrcName": "util-linux",
          "SrcVersion": "2.38.1",
          "SrcRelease": "5+deb12u3",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "public-domain",
            "BSD-4-Clause",
            "MIT",
            "BSD-3-Clause",
            "BSLA",
            "LGPL-2.0-or-later",
            "LGPL-2.1-or-later",
            "LGPL-3.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "util-linux packagers \u003cutil-linux@packages.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "util-linux-extra@2.38.1-5+deb12u3"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/bin/dmesg",
            "/bin/findmnt",
            "/bin/lsblk",
            "/bin/more",
            "/bin/mountpoint",
            "/bin/su",
            "/bin/wdctl",
            "/lib/systemd/system/fstrim.service",
            "/lib/systemd/system/fstrim.timer",
            "/sbin/agetty",
            "/sbin/blkdiscard",
            "/sbin/blkid",
            "/sbin/blkzone",
            "/sbin/blockdev",
            "/sbin/chcpu",
            "/sbin/ctrlaltdel",
            "/sbin/findfs",
            "/sbin/fsck",
            "/sbin/fsck.cramfs",
            "/sbin/fsck.minix",
            "/sbin/fsfreeze",
            "/sbin/fstrim",
            "/sbin/isosize",
            "/sbin/mkfs",
            "/sbin/mkfs.bfs",
            "/sbin/mkfs.cramfs",
            "/sbin/mkfs.minix",
            "/sbin/mkswap",
            "/sbin/pivot_root",
            "/sbin/runuser",
            "/sbin/sulogin",
            "/sbin/swaplabel",
            "/sbin/switch_root",
            "/sbin/wipefs",
            "/sbin/zramctl",
            "/usr/bin/addpart",
            "/usr/bin/choom",
            "/usr/bin/chrt",
            "/usr/bin/delpart",
            "/usr/bin/fallocate",
            "/usr/bin/flock",
            "/usr/bin/getopt",
            "/usr/bin/hardlink",
            "/usr/bin/ionice",
            "/usr/bin/ipcmk",
            "/usr/bin/ipcrm",
            "/usr/bin/ipcs",
            "/usr/bin/last",
            "/usr/bin/lscpu",
            "/usr/bin/lsipc",
            "/usr/bin/lslocks",
            "/usr/bin/lslogins",
            "/usr/bin/lsmem",
            "/usr/bin/lsns",
            "/usr/bin/mcookie",
            "/usr/bin/mesg",
            "/usr/bin/namei",
            "/usr/bin/nsenter",
            "/usr/bin/partx",
            "/usr/bin/prlimit",
            "/usr/bin/rename.ul",
            "/usr/bin/resizepart",
            "/usr/bin/rev",
            "/usr/bin/setarch",
            "/usr/bin/setpriv",
            "/usr/bin/setsid",
            "/usr/bin/setterm",
            "/usr/bin/taskset",
            "/usr/bin/uclampset",
            "/usr/bin/unshare",
            "/usr/bin/utmpdump",
            "/usr/bin/whereis",
            "/usr/lib/mime/packages/util-linux",
            "/usr/sbin/chmem",
            "/usr/sbin/ldattach",
            "/usr/sbin/readprofile",
            "/usr/sbin/rtcwake",
            "/usr/share/bash-completion/completions/addpart",
            "/usr/share/bash-completion/completions/blkdiscard",
            "/usr/share/bash-completion/completions/blkid",
            "/usr/share/bash-completion/completions/blkzone",
            "/usr/share/bash-completion/completions/blockdev",
            "/usr/share/bash-completion/completions/chcpu",
            "/usr/share/bash-completion/completions/chmem",
            "/usr/share/bash-completion/completions/chrt",
            "/usr/share/bash-completion/completions/ctrlaltdel",
            "/usr/share/bash-completion/completions/delpart",
            "/usr/share/bash-completion/completions/dmesg",
            "/usr/share/bash-completion/completions/fallocate",
            "/usr/share/bash-completion/completions/findfs",
            "/usr/share/bash-completion/completions/findmnt",
            "/usr/share/bash-completion/completions/flock",
            "/usr/share/bash-completion/completions/fsck",
            "/usr/share/bash-completion/completions/fsck.cramfs",
            "/usr/share/bash-completion/completions/fsck.minix",
            "/usr/share/bash-completion/completions/fsfreeze",
            "/usr/share/bash-completion/completions/fstrim",
            "/usr/share/bash-completion/completions/getopt",
            "/usr/share/bash-completion/completions/hardlink",
            "/usr/share/bash-completion/completions/ionice",
            "/usr/share/bash-completion/completions/ipcmk",
            "/usr/share/bash-completion/completions/ipcrm",
            "/usr/share/bash-completion/completions/ipcs",
            "/usr/share/bash-completion/completions/isosize",
            "/usr/share/bash-completion/completions/last",
            "/usr/share/bash-completion/completions/ldattach",
            "/usr/share/bash-completion/completions/lsblk",
            "/usr/share/bash-completion/completions/lscpu",
            "/usr/share/bash-completion/completions/lsipc",
            "/usr/share/bash-completion/completions/lslocks",
            "/usr/share/bash-completion/completions/lslogins",
            "/usr/share/bash-completion/completions/lsmem",
            "/usr/share/bash-completion/completions/lsns",
            "/usr/share/bash-completion/completions/mcookie",
            "/usr/share/bash-completion/completions/mesg",
            "/usr/share/bash-completion/completions/mkfs",
            "/usr/share/bash-completion/completions/mkfs.bfs",
            "/usr/share/bash-completion/completions/mkfs.cramfs",
            "/usr/share/bash-completion/completions/mkfs.minix",
            "/usr/share/bash-completion/completions/mkswap",
            "/usr/share/bash-completion/completions/more",
            "/usr/share/bash-completion/completions/mountpoint",
            "/usr/share/bash-completion/completions/namei",
            "/usr/share/bash-completion/completions/nsenter",
            "/usr/share/bash-completion/completions/partx",
            "/usr/share/bash-completion/completions/pivot_root",
            "/usr/share/bash-completion/completions/prlimit",
            "/usr/share/bash-completion/completions/readprofile",
            "/usr/share/bash-completion/completions/resizepart",
            "/usr/share/bash-completion/completions/rev",
            "/usr/share/bash-completion/completions/rtcwake",
            "/usr/share/bash-completion/completions/setarch",
            "/usr/share/bash-completion/completions/setpriv",
            "/usr/share/bash-completion/completions/setsid",
            "/usr/share/bash-completion/completions/setterm",
            "/usr/share/bash-completion/completions/su",
            "/usr/share/bash-completion/completions/swaplabel",
            "/usr/share/bash-completion/completions/taskset",
            "/usr/share/bash-completion/completions/uclampset",
            "/usr/share/bash-completion/completions/unshare",
            "/usr/share/bash-completion/completions/utmpdump",
            "/usr/share/bash-completion/completions/wdctl",
            "/usr/share/bash-completion/completions/whereis",
            "/usr/share/bash-completion/completions/wipefs",
            "/usr/share/bash-completion/completions/zramctl",
            "/usr/share/doc/util-linux/00-about-docs.txt",
            "/usr/share/doc/util-linux/AUTHORS.gz",
            "/usr/share/doc/util-linux/PAM-configuration.txt",
            "/usr/share/doc/util-linux/README.Debian",
            "/usr/share/doc/util-linux/blkid.txt",
            "/usr/share/doc/util-linux/cal.txt",
            "/usr/share/doc/util-linux/changelog.Debian.gz",
            "/usr/share/doc/util-linux/changelog.gz",
            "/usr/share/doc/util-linux/col.txt",
            "/usr/share/doc/util-linux/copyright",
            "/usr/share/doc/util-linux/deprecated.txt",
            "/usr/share/doc/util-linux/examples/getopt-example.bash",
            "/usr/share/doc/util-linux/examples/getopt-example.tcsh",
            "/usr/share/doc/util-linux/getopt.txt",
            "/usr/share/doc/util-linux/getopt_changelog.txt",
            "/usr/share/doc/util-linux/howto-build-sys.txt",
            "/usr/share/doc/util-linux/howto-compilation.txt",
            "/usr/share/doc/util-linux/howto-contribute.txt.gz",
            "/usr/share/doc/util-linux/howto-debug.txt",
            "/usr/share/doc/util-linux/howto-man-page.txt",
            "/usr/share/doc/util-linux/howto-pull-request.txt.gz",
            "/usr/share/doc/util-linux/howto-tests.txt",
            "/usr/share/doc/util-linux/howto-usage-function.txt.gz",
            "/usr/share/doc/util-linux/hwclock.txt",
            "/usr/share/doc/util-linux/modems-with-agetty.txt",
            "/usr/share/doc/util-linux/mount.txt",
            "/usr/share/doc/util-linux/parse-date.txt.gz",
            "/usr/share/doc/util-linux/pg.txt",
            "/usr/share/doc/util-linux/poeigl.txt.gz",
            "/usr/share/doc/util-linux/release-schedule.txt",
            "/usr/share/doc/util-linux/releases/v2.13-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.14-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.15-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.16-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.17-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.18-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.19-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.20-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.21-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.22-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.23-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.24-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.25-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.26-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.27-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.28-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.29-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.30-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.31-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.32-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.33-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.34-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.35-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.36-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.37-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.38-ReleaseNotes.gz",
            "/usr/share/doc/util-linux/releases/v2.38.1-ReleaseNotes.gz",
            "/usr/share/lintian/overrides/util-linux",
            "/usr/share/man/man1/choom.1.gz",
            "/usr/share/man/man1/chrt.1.gz",
            "/usr/share/man/man1/dmesg.1.gz",
            "/usr/share/man/man1/fallocate.1.gz",
            "/usr/share/man/man1/flock.1.gz",
            "/usr/share/man/man1/getopt.1.gz",
            "/usr/share/man/man1/hardlink.1.gz",
            "/usr/share/man/man1/ionice.1.gz",
            "/usr/share/man/man1/ipcmk.1.gz",
            "/usr/share/man/man1/ipcrm.1.gz",
            "/usr/share/man/man1/ipcs.1.gz",
            "/usr/share/man/man1/last.1.gz",
            "/usr/share/man/man1/lscpu.1.gz",
            "/usr/share/man/man1/lsipc.1.gz",
            "/usr/share/man/man1/lslogins.1.gz",
            "/usr/share/man/man1/lsmem.1.gz",
            "/usr/share/man/man1/mcookie.1.gz",
            "/usr/share/man/man1/mesg.1.gz",
            "/usr/share/man/man1/more.1.gz",
            "/usr/share/man/man1/mountpoint.1.gz",
            "/usr/share/man/man1/namei.1.gz",
            "/usr/share/man/man1/nsenter.1.gz",
            "/usr/share/man/man1/prlimit.1.gz",
            "/usr/share/man/man1/rename.ul.1.gz",
            "/usr/share/man/man1/rev.1.gz",
            "/usr/share/man/man1/runuser.1.gz",
            "/usr/share/man/man1/setpriv.1.gz",
            "/usr/share/man/man1/setsid.1.gz",
            "/usr/share/man/man1/setterm.1.gz",
            "/usr/share/man/man1/su.1.gz",
            "/usr/share/man/man1/taskset.1.gz",
            "/usr/share/man/man1/uclampset.1.gz",
            "/usr/share/man/man1/unshare.1.gz",
            "/usr/share/man/man1/utmpdump.1.gz",
            "/usr/share/man/man1/whereis.1.gz",
            "/usr/share/man/man5/adjtime_config.5.gz",
            "/usr/share/man/man5/terminal-colors.d.5.gz",
            "/usr/share/man/man8/addpart.8.gz",
            "/usr/share/man/man8/agetty.8.gz",
            "/usr/share/man/man8/blkdiscard.8.gz",
            "/usr/share/man/man8/blkid.8.gz",
            "/usr/share/man/man8/blkzone.8.gz",
            "/usr/share/man/man8/blockdev.8.gz",
            "/usr/share/man/man8/chcpu.8.gz",
            "/usr/share/man/man8/chmem.8.gz",
            "/usr/share/man/man8/ctrlaltdel.8.gz",
            "/usr/share/man/man8/delpart.8.gz",
            "/usr/share/man/man8/findfs.8.gz",
            "/usr/share/man/man8/findmnt.8.gz",
            "/usr/share/man/man8/fsck.8.gz",
            "/usr/share/man/man8/fsck.cramfs.8.gz",
            "/usr/share/man/man8/fsck.minix.8.gz",
            "/usr/share/man/man8/fsfreeze.8.gz",
            "/usr/share/man/man8/fstrim.8.gz",
            "/usr/share/man/man8/isosize.8.gz",
            "/usr/share/man/man8/ldattach.8.gz",
            "/usr/share/man/man8/lsblk.8.gz",
            "/usr/share/man/man8/lslocks.8.gz",
            "/usr/share/man/man8/lsns.8.gz",
            "/usr/share/man/man8/mkfs.8.gz",
            "/usr/share/man/man8/mkfs.bfs.8.gz",
            "/usr/share/man/man8/mkfs.cramfs.8.gz",
            "/usr/share/man/man8/mkfs.minix.8.gz",
            "/usr/share/man/man8/mkswap.8.gz",
            "/usr/share/man/man8/partx.8.gz",
            "/usr/share/man/man8/pivot_root.8.gz",
            "/usr/share/man/man8/readprofile.8.gz",
            "/usr/share/man/man8/resizepart.8.gz",
            "/usr/share/man/man8/rtcwake.8.gz",
            "/usr/share/man/man8/setarch.8.gz",
            "/usr/share/man/man8/sulogin.8.gz",
            "/usr/share/man/man8/swaplabel.8.gz",
            "/usr/share/man/man8/switch_root.8.gz",
            "/usr/share/man/man8/wdctl.8.gz",
            "/usr/share/man/man8/wipefs.8.gz",
            "/usr/share/man/man8/zramctl.8.gz",
            "/usr/share/util-linux/logcheck/ignore.d.server/util-linux"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "util-linux-extra@2.38.1-5+deb12u3",
          "Name": "util-linux-extra",
          "Identifier": {
            "PURL": "pkg:deb/debian/util-linux-extra@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "ec22fa64ac4832d8"
          },
          "Version": "2.38.1",
          "Release": "5+deb12u3",
          "Arch": "amd64",
          "SrcName": "util-linux",
          "SrcVersion": "2.38.1",
          "SrcRelease": "5+deb12u3",
          "Licenses": [
            "GPL-2.0-or-later",
            "GPL-2.0-only",
            "GPL-3.0-or-later",
            "public-domain",
            "BSD-4-Clause",
            "MIT",
            "BSD-3-Clause",
            "BSLA",
            "LGPL-2.0-or-later",
            "LGPL-2.1-or-later",
            "LGPL-3.0-or-later",
            "GPL-3.0-only",
            "LGPL-2.0-only",
            "LGPL-2.1-only",
            "LGPL-3.0-only"
          ],
          "Maintainer": "util-linux packagers \u003cutil-linux@packages.debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libaudit1@1:3.0.9-1",
            "libc6@2.36-9+deb12u14",
            "libsmartcols1@2.38.1-5+deb12u3"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/sbin/hwclock",
            "/usr/bin/fincore",
            "/usr/bin/lsfd",
            "/usr/bin/lsirq",
            "/usr/lib/udev/hwclock-set",
            "/usr/lib/udev/rules.d/85-hwclock.rules",
            "/usr/share/bash-completion/completions/fincore",
            "/usr/share/bash-completion/completions/hwclock",
            "/usr/share/bash-completion/completions/lsirq",
            "/usr/share/doc/util-linux-extra/changelog.Debian.gz",
            "/usr/share/doc/util-linux-extra/changelog.gz",
            "/usr/share/doc/util-linux-extra/copyright",
            "/usr/share/man/man1/fincore.1.gz",
            "/usr/share/man/man1/lsfd.1.gz",
            "/usr/share/man/man1/lsirq.1.gz",
            "/usr/share/man/man5/hwclock.5.gz",
            "/usr/share/man/man8/hwclock.8.gz"
          ],
          "AnalyzedBy": "dpkg"
        },
        {
          "ID": "zlib1g@1:1.2.13.dfsg-1",
          "Name": "zlib1g",
          "Identifier": {
            "PURL": "pkg:deb/debian/zlib1g@1.2.13.dfsg-1?arch=amd64\u0026distro=debian-12.15\u0026epoch=1",
            "UID": "c3a50d0cd388a7b8"
          },
          "Version": "1.2.13.dfsg",
          "Release": "1",
          "Epoch": 1,
          "Arch": "amd64",
          "SrcName": "zlib",
          "SrcVersion": "1.2.13.dfsg",
          "SrcRelease": "1",
          "SrcEpoch": 1,
          "Licenses": [
            "Zlib"
          ],
          "Maintainer": "Mark Brown \u003cbroonie@debian.org\u003e",
          "Repository": {
            "Class": "official"
          },
          "DependsOn": [
            "libc6@2.36-9+deb12u14"
          ],
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "InstalledFiles": [
            "/lib/x86_64-linux-gnu/libz.so.1.2.13",
            "/usr/share/doc/zlib1g/changelog.Debian.gz",
            "/usr/share/doc/zlib1g/changelog.gz",
            "/usr/share/doc/zlib1g/copyright"
          ],
          "AnalyzedBy": "dpkg"
        }
      ],
      "Vulnerabilities": [
        {
          "VulnerabilityID": "CVE-2026-109518",
          "VendorIDs": [
            "DLA-4880-1"
          ],
          "PkgID": "apt@2.6.1",
          "PkgName": "apt",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/apt@2.6.1?arch=amd64\u0026distro=debian-12.15",
            "UID": "48017cded9d6e9b5"
          },
          "InstalledVersion": "2.6.1",
          "FixedVersion": "2.6.2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109518",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:92bdd4b8c1ae0e3d5bbafb5c23977ebc2ad09ff0fe2d1b5ab844f4035a7c2a82",
          "Title": "apt: apt: Remote code execution via hard link reuse during package download retries",
          "Description": "On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified package and achieve remote code execution with root privileges.\n\n\n\nThe vulnerability is caused by the reuse of hard links and requires the client to follow redirects and retry the download of package files. It requires the client to have a non-zero Acquire::Retries configuration setting; the value 3 is the default starting with Debian 12 (bookworm) and Ubuntu 22.04 LTS (Jammy Jellyfish), so older releases are unaffected in a default configuration",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-62",
            "CWE-367"
          ],
          "VendorSeverity": {
            "redhat": 3,
            "ubuntu": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 8.1
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/11/04/12",
            "https://access.redhat.com/security/cve/CVE-2026-109518",
            "https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html",
            "https://lists.debian.org/debian-security-announce/2026/msg00526.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109518",
            "https://ubuntu.com/blog/apt-vulnerability-fixes-available",
            "https://ubuntu.com/security/notices/USN-8996-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-109518"
          ],
          "PublishedDate": "2026-11-04T16:17:33.01Z",
          "LastModifiedDate": "2026-11-05T05:18:19.033Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53613",
          "PkgID": "bsdutils@1:2.38.1-5+deb12u3",
          "PkgName": "bsdutils",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/bsdutils@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15\u0026epoch=1",
            "UID": "af5a434542493ff"
          },
          "InstalledVersion": "1:2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:7cf90be963df1d86c4267d4f3b55a063b5d637b04748902e8d7a05dc8e9c7892",
          "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path",
          "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-53613",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2",
            "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0",
            "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8",
            "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4",
            "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec",
            "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9",
            "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78",
            "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5",
            "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9",
            "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2",
            "https://github.com/util-linux/util-linux/releases/tag/v2.41.5",
            "https://github.com/util-linux/util-linux/releases/tag/v2.42.2",
            "https://github.com/util-linux/util-linux/releases/tag/v2.42.4",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g",
            "https://linux.oracle.com/cve/CVE-2026-53613.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53613",
            "https://ubuntu.com/security/notices/USN-8702-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53613"
          ],
          "PublishedDate": "2026-10-14T15:17:20.41Z",
          "LastModifiedDate": "2026-10-16T16:00:33.533Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53615",
          "PkgID": "bsdutils@1:2.38.1-5+deb12u3",
          "PkgName": "bsdutils",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/bsdutils@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15\u0026epoch=1",
            "UID": "af5a434542493ff"
          },
          "InstalledVersion": "1:2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:c441cd496e9628ad17372eb0a4917202008b855330b70ae2b07155419c943aaa",
          "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser",
          "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-190"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
              "V3Score": 8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-53615",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623",
            "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31",
            "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af",
            "https://github.com/util-linux/util-linux/releases/tag/v2.41.4",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5",
            "https://linux.oracle.com/cve/CVE-2026-53615.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53615",
            "https://ubuntu.com/security/notices/USN-8702-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53615"
          ],
          "PublishedDate": "2026-10-14T16:17:46.07Z",
          "LastModifiedDate": "2026-10-16T16:00:33.533Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78410",
          "PkgID": "bsdutils@1:2.38.1-5+deb12u3",
          "PkgName": "bsdutils",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/bsdutils@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15\u0026epoch=1",
            "UID": "af5a434542493ff"
          },
          "InstalledVersion": "1:2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:1092ef59e1e18b14aff8f0447eccba476579ef8281494d654c87ffcf0aab457c",
          "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection",
          "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78410",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m",
            "https://linux.oracle.com/cve/CVE-2026-78410.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78410",
            "https://www.cve.org/CVERecord?id=CVE-2026-78410"
          ],
          "PublishedDate": "2026-09-02T16:17:23.983Z",
          "LastModifiedDate": "2026-11-05T03:17:33.15Z"
        },
        {
          "VulnerabilityID": "CVE-2026-41992",
          "PkgID": "gzip@1.12-1",
          "PkgName": "gzip",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/gzip@1.12-1?arch=amd64\u0026distro=debian-12.15",
            "UID": "e6df36a0bee4727c"
          },
          "InstalledVersion": "1.12-1",
          "Status": "fix_deferred",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-41992",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:dfc1a7603bb23ee876a5921caf93ad63bd84b35e7ad85748ad0b06d90f943837",
          "Title": "gzip: gzip: Information disclosure via global buffer overflow in LZH decompression",
          "Description": "GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression routines and is not reinitialized between files processed in the same invocation.\nBy decompressing a specially crafted LZW file followed by a specially crafted LZH file in a single gzip -d command, an attacker can poison the shared global state and subsequently trigger an out‑of‑bounds read in the LZH decoder. The LZH decompression logic follows stale values left in the shared array, causing reads past the end of the allocated global buffer.\n\nThis issue has been fixed in commits 63dbf6b3b9e6e781df1a6a64e609b10e23969681 and e7378c2d421be6a286922374425680bbe9ad8b7d.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-126"
          ],
          "VendorSeverity": {
            "alma": 2,
            "azure": 2,
            "julia": 2,
            "nvd": 3,
            "oracle-oval": 2,
            "photon": 3,
            "redhat": 1,
            "rocky": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
              "V3Score": 7.5,
              "V40Score": 6.9
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L",
              "V3Score": 3.6
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/08/23/1",
            "http://www.openwall.com/lists/oss-security/2026/08/25/1",
            "http://www.openwall.com/lists/oss-security/2026/08/27/2",
            "https://access.redhat.com/errata/RHSA-2026:61623",
            "https://access.redhat.com/security/cve/CVE-2026-41992",
            "https://bugzilla.redhat.com/2494158",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494158",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494159",
            "https://cert.pl/en/posts/2026/04/CVE-2026-41991",
            "https://cert.pl/en/posts/2026/04/CVE-2026-41991/",
            "https://cgit.git.savannah.gnu.org/cgit/gzip.git/commit/?id=63dbf6b3b9e6e781df1a6a64e609b10e23969681",
            "https://cgit.git.savannah.gnu.org/cgit/gzip.git/commit/?id=e7378c2d421be6a286922374425680bbe9ad8b7d",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41991",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41992",
            "https://errata.almalinux.org/9/ALSA-2026-61623.html",
            "https://errata.rockylinux.org/RLSA-2026:61623",
            "https://github.com/advisories/GHSA-qxh4-rprf-2mmj",
            "https://linux.oracle.com/cve/CVE-2026-41992.html",
            "https://linux.oracle.com/errata/ELSA-2026-65998-0.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-41992",
            "https://ubuntu.com/security/notices/USN-8512-1",
            "https://ubuntu.com/security/notices/USN-8733-1",
            "https://ubuntu.com/security/notices/USN-8733-2",
            "https://www.cve.org/CVERecord?id=CVE-2026-41992",
            "https://www.gnu.org/software/gzip",
            "https://www.gnu.org/software/gzip/"
          ],
          "PublishedDate": "2026-06-29T12:16:29.94Z",
          "LastModifiedDate": "2026-10-25T21:10:00.77Z"
        },
        {
          "VulnerabilityID": "CVE-2026-54369",
          "PkgID": "libacl1@2.3.1-3",
          "PkgName": "libacl1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libacl1@2.3.1-3?arch=amd64\u0026distro=debian-12.15",
            "UID": "7231f68d66ac38b5"
          },
          "InstalledVersion": "2.3.1-3",
          "Status": "fix_deferred",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54369",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:637661d67dbaa3d733bd661e65c4c84541642c11b20992a604c5dcad240a7eae",
          "Title": "acl: Symlink traversal privilege escalation via libacl functions",
          "Description": "acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-59"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "oracle-oval": 3,
            "photon": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
              "V3Score": 7.1
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:34351",
            "https://access.redhat.com/errata/RHSA-2026:42736",
            "https://access.redhat.com/errata/RHSA-2026:42739",
            "https://access.redhat.com/errata/RHSA-2026:43420",
            "https://access.redhat.com/errata/RHSA-2026:44481",
            "https://access.redhat.com/errata/RHSA-2026:46836",
            "https://access.redhat.com/errata/RHSA-2026:50205",
            "https://access.redhat.com/errata/RHSA-2026:53371",
            "https://access.redhat.com/errata/RHSA-2026:54769",
            "https://access.redhat.com/errata/RHSA-2026:58981",
            "https://access.redhat.com/errata/RHSA-2026:64805",
            "https://access.redhat.com/errata/RHSA-2026:67140",
            "https://access.redhat.com/errata/RHSA-2026:67142",
            "https://access.redhat.com/errata/RHSA-2026:67144",
            "https://access.redhat.com/security/cve/CVE-2026-54369",
            "https://bugzilla.redhat.com/2490277",
            "https://bugzilla.redhat.com/2490279",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2490277",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2490279",
            "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5",
            "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54369",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54370",
            "https://errata.almalinux.org/9/ALSA-2026-42736.html",
            "https://errata.rockylinux.org/RLSA-2026:42736",
            "https://linux.oracle.com/cve/CVE-2026-54369.html",
            "https://linux.oracle.com/errata/ELSA-2026-43420.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-54369",
            "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json",
            "https://www.cve.org/CVERecord?id=CVE-2026-54369",
            "https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions"
          ],
          "PublishedDate": "2026-06-29T14:16:57.487Z",
          "LastModifiedDate": "2026-10-25T21:10:00.77Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109518",
          "VendorIDs": [
            "DLA-4880-1"
          ],
          "PkgID": "libapt-pkg6.0@2.6.1",
          "PkgName": "libapt-pkg6.0",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libapt-pkg6.0@2.6.1?arch=amd64\u0026distro=debian-12.15",
            "UID": "43df2d940f387e5b"
          },
          "InstalledVersion": "2.6.1",
          "FixedVersion": "2.6.2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109518",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:0012d93386492c8cab71dbe06c2c78f40368a483e5e0faffb876cd9060a825c6",
          "Title": "apt: apt: Remote code execution via hard link reuse during package download retries",
          "Description": "On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified package and achieve remote code execution with root privileges.\n\n\n\nThe vulnerability is caused by the reuse of hard links and requires the client to follow redirects and retry the download of package files. It requires the client to have a non-zero Acquire::Retries configuration setting; the value 3 is the default starting with Debian 12 (bookworm) and Ubuntu 22.04 LTS (Jammy Jellyfish), so older releases are unaffected in a default configuration",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-62",
            "CWE-367"
          ],
          "VendorSeverity": {
            "redhat": 3,
            "ubuntu": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 8.1
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/11/04/12",
            "https://access.redhat.com/security/cve/CVE-2026-109518",
            "https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html",
            "https://lists.debian.org/debian-security-announce/2026/msg00526.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109518",
            "https://ubuntu.com/blog/apt-vulnerability-fixes-available",
            "https://ubuntu.com/security/notices/USN-8996-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-109518"
          ],
          "PublishedDate": "2026-11-04T16:17:33.01Z",
          "LastModifiedDate": "2026-11-05T05:18:19.033Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53613",
          "PkgID": "libblkid1@2.38.1-5+deb12u3",
          "PkgName": "libblkid1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libblkid1@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "ef2ef32fd8f1c6bb"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:68cb170aa014f4a4572ea5d3cce08ddf217b03374e76a78e051e2a39ad64e035",
          "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path",
          "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-53613",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2",
            "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0",
            "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8",
            "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4",
            "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec",
            "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9",
            "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78",
            "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5",
            "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9",
            "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2",
            "https://github.com/util-linux/util-linux/releases/tag/v2.41.5",
            "https://github.com/util-linux/util-linux/releases/tag/v2.42.2",
            "https://github.com/util-linux/util-linux/releases/tag/v2.42.4",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g",
            "https://linux.oracle.com/cve/CVE-2026-53613.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53613",
            "https://ubuntu.com/security/notices/USN-8702-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53613"
          ],
          "PublishedDate": "2026-10-14T15:17:20.41Z",
          "LastModifiedDate": "2026-10-16T16:00:33.533Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53615",
          "PkgID": "libblkid1@2.38.1-5+deb12u3",
          "PkgName": "libblkid1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libblkid1@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "ef2ef32fd8f1c6bb"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:d90e1b72ea17a220444bda6ca37772a006e7bf32fed345f91f7d8314856ee5fb",
          "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser",
          "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-190"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
              "V3Score": 8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-53615",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623",
            "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31",
            "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af",
            "https://github.com/util-linux/util-linux/releases/tag/v2.41.4",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5",
            "https://linux.oracle.com/cve/CVE-2026-53615.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53615",
            "https://ubuntu.com/security/notices/USN-8702-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53615"
          ],
          "PublishedDate": "2026-10-14T16:17:46.07Z",
          "LastModifiedDate": "2026-10-16T16:00:33.533Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78410",
          "PkgID": "libblkid1@2.38.1-5+deb12u3",
          "PkgName": "libblkid1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libblkid1@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "ef2ef32fd8f1c6bb"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:0fec882707aaeab332e4a02c8b73cf17f7a1eb473707124aa7cffb683bbb35a8",
          "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection",
          "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78410",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m",
            "https://linux.oracle.com/cve/CVE-2026-78410.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78410",
            "https://www.cve.org/CVERecord?id=CVE-2026-78410"
          ],
          "PublishedDate": "2026-09-02T16:17:23.983Z",
          "LastModifiedDate": "2026-11-05T03:17:33.15Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53613",
          "PkgID": "libmount1@2.38.1-5+deb12u3",
          "PkgName": "libmount1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmount1@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "1c28517f3a673db4"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:1f2f6005e8b6ed5d0d44a2d2c91c7fb2b719f2edc06365f0d43b0889527e17db",
          "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path",
          "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-53613",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2",
            "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0",
            "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8",
            "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4",
            "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec",
            "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9",
            "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78",
            "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5",
            "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9",
            "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2",
            "https://github.com/util-linux/util-linux/releases/tag/v2.41.5",
            "https://github.com/util-linux/util-linux/releases/tag/v2.42.2",
            "https://github.com/util-linux/util-linux/releases/tag/v2.42.4",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g",
            "https://linux.oracle.com/cve/CVE-2026-53613.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53613",
            "https://ubuntu.com/security/notices/USN-8702-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53613"
          ],
          "PublishedDate": "2026-10-14T15:17:20.41Z",
          "LastModifiedDate": "2026-10-16T16:00:33.533Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53615",
          "PkgID": "libmount1@2.38.1-5+deb12u3",
          "PkgName": "libmount1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmount1@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "1c28517f3a673db4"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:1c056ebd65f1f12accfa7079aa777454ff92bbb65da9030a0dc8f09621ca2c15",
          "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser",
          "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-190"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
              "V3Score": 8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-53615",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623",
            "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31",
            "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af",
            "https://github.com/util-linux/util-linux/releases/tag/v2.41.4",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5",
            "https://linux.oracle.com/cve/CVE-2026-53615.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53615",
            "https://ubuntu.com/security/notices/USN-8702-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53615"
          ],
          "PublishedDate": "2026-10-14T16:17:46.07Z",
          "LastModifiedDate": "2026-10-16T16:00:33.533Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78410",
          "PkgID": "libmount1@2.38.1-5+deb12u3",
          "PkgName": "libmount1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libmount1@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "1c28517f3a673db4"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:a5d96642f58e523091233ee627194bf40b2cc2e2a7404b9c4fe42c902fa3995b",
          "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection",
          "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78410",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m",
            "https://linux.oracle.com/cve/CVE-2026-78410.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78410",
            "https://www.cve.org/CVERecord?id=CVE-2026-78410"
          ],
          "PublishedDate": "2026-09-02T16:17:23.983Z",
          "LastModifiedDate": "2026-11-05T03:17:33.15Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53613",
          "PkgID": "libsmartcols1@2.38.1-5+deb12u3",
          "PkgName": "libsmartcols1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libsmartcols1@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "5724e02241dee022"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:846ff5060cbca95d9510997124f4b112868fac9024e640729e7737da84f8824c",
          "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path",
          "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-53613",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2",
            "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0",
            "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8",
            "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4",
            "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec",
            "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9",
            "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78",
            "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5",
            "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9",
            "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2",
            "https://github.com/util-linux/util-linux/releases/tag/v2.41.5",
            "https://github.com/util-linux/util-linux/releases/tag/v2.42.2",
            "https://github.com/util-linux/util-linux/releases/tag/v2.42.4",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g",
            "https://linux.oracle.com/cve/CVE-2026-53613.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53613",
            "https://ubuntu.com/security/notices/USN-8702-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53613"
          ],
          "PublishedDate": "2026-10-14T15:17:20.41Z",
          "LastModifiedDate": "2026-10-16T16:00:33.533Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53615",
          "PkgID": "libsmartcols1@2.38.1-5+deb12u3",
          "PkgName": "libsmartcols1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libsmartcols1@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "5724e02241dee022"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:e3310175f6f52918e9b36bde70344928143d5fd498ae7875f29752b2f6998c86",
          "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser",
          "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-190"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
              "V3Score": 8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-53615",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623",
            "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31",
            "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af",
            "https://github.com/util-linux/util-linux/releases/tag/v2.41.4",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5",
            "https://linux.oracle.com/cve/CVE-2026-53615.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53615",
            "https://ubuntu.com/security/notices/USN-8702-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53615"
          ],
          "PublishedDate": "2026-10-14T16:17:46.07Z",
          "LastModifiedDate": "2026-10-16T16:00:33.533Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78410",
          "PkgID": "libsmartcols1@2.38.1-5+deb12u3",
          "PkgName": "libsmartcols1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libsmartcols1@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "5724e02241dee022"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:c246dd450d3f17ba1475f3ef4ce2fcecd7eab209a761087f02e374edccfc08c8",
          "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection",
          "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78410",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m",
            "https://linux.oracle.com/cve/CVE-2026-78410.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78410",
            "https://www.cve.org/CVERecord?id=CVE-2026-78410"
          ],
          "PublishedDate": "2026-09-02T16:17:23.983Z",
          "LastModifiedDate": "2026-11-05T03:17:33.15Z"
        },
        {
          "VulnerabilityID": "CVE-2026-84782",
          "VendorIDs": [
            "DLA-4859-1"
          ],
          "PkgID": "libssl3@3.0.22-1~deb12u1",
          "PkgName": "libssl3",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libssl3@3.0.22-1~deb12u1?arch=amd64\u0026distro=debian-12.15",
            "UID": "f7c3e0b0d7f2f89"
          },
          "InstalledVersion": "3.0.22-1~deb12u1",
          "FixedVersion": "3.0.22-1~deb12u2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:e2dee3fc233f0f0b260b1ff7b599106e4b770679efa2cf256598e400160aa3ed"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-84782",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:7492343687d040d73f5190c53a59e8f69543f2cef4b90895ab50106f422655b5",
          "Title": "openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission",
          "Description": "Issue summary: The DTLS retransmission logic does not correctly handle\na handshake message write that is suspended part-way through.\nThe retransmitted message can be read past the message buffer and\nthe retransmission overwrites the internal state the suspended write\nneeds to resume correctly.\n\nImpact summary: The retransmitted message can disclose a heap memory\nto the peer as plaintext handshake data or cause a crash and a Denial\nof Service when the read reaches an unmapped memory region.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: DTLS handshake messages can be written out in multiple\nfragments, and a write can suspend mid-message (returning WANT_WRITE)\nif the underlying transport temporarily cannot accept more data. While\nsuch a write is suspended, the DTLS retransmission timer may\nindependently fire and ask the retransmission logic to resend an\nearlier, already-acknowledged-as-sent message from its retransmit\nqueue.\n\nThe retransmission logic reused the same internal buffer and position\ntracking as the message that was still being written, without\nresetting the position back to the start of the message being\nretransmitted. As a result the retransmission was read starting from\nwherever the suspended write had left off, producing a mislabelled\nmessage whose body was leftover bytes from the other, larger message\nstill in flight - content that was never meant to be sent at that\npoint, and which could run past the end of the allocated buffer.\n\nSeparately, even when the retransmission is positioned correctly,\nallowing it to run to completion while another write is suspended\noverwrites the same shared bookkeeping that the suspended write\ndepends on to resume. When the application later resumes the\nsuspended write (via a subsequent SSL_read(), SSL_write(),\nSSL_accept(), or SSL_connect() call), it finds that bookkeeping in a\nstate inconsistent with the message and aborts the process in\na debugging build.\n\nThe fix resets the retransmission's read position to the start of the\nmessage before resending, and skips retransmission entirely whenever a\nhandshake write is still suspended, deferring to the next call that\nresumes it instead.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-125"
          ],
          "VendorSeverity": {
            "alma": 2,
            "amazon": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
              "V3Score": 7.4
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:77396",
            "https://access.redhat.com/errata/RHSA-2026:80514",
            "https://access.redhat.com/security/cve/CVE-2026-84782",
            "https://bugzilla.redhat.com/2517560",
            "https://bugzilla.redhat.com/2537080",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2537080",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84782",
            "https://errata.almalinux.org/9/ALSA-2026-80514.html",
            "https://errata.rockylinux.org/RLSA-2026:77396",
            "https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943",
            "https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628",
            "https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58",
            "https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c",
            "https://linux.oracle.com/cve/CVE-2026-84782.html",
            "https://linux.oracle.com/errata/ELSA-2026-85968.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-84782",
            "https://openssl-library.org/news/secadv/20260929.txt",
            "https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782",
            "https://ubuntu.com/security/notices/USN-8847-1",
            "https://ubuntu.com/security/notices/USN-8847-2",
            "https://www.cve.org/CVERecord?id=CVE-2026-84782"
          ],
          "PublishedDate": "2026-09-29T16:17:12.5Z",
          "LastModifiedDate": "2026-10-08T01:20:56.003Z"
        },
        {
          "VulnerabilityID": "CVE-2026-16742",
          "PkgID": "libsystemd0@252.39-1~deb12u2",
          "PkgName": "libsystemd0",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libsystemd0@252.39-1~deb12u2?arch=amd64\u0026distro=debian-12.15",
            "UID": "b17b1605ea6e3b2c"
          },
          "InstalledVersion": "252.39-1~deb12u2",
          "Status": "fix_deferred",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-16742",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:eb140355ebebe48d260f23c8596e1475fa1a6d9f6b29455ea42f3af4487a3f3e",
          "Title": "systemd: systemd-homed: Local privilege escalation via missing home-record signature verification",
          "Description": "systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-269",
            "CWE-347"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "azure": 2,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
              "V3Score": 8.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-16742",
            "https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-16742",
            "https://ubuntu.com/security/notices/USN-8626-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-16742"
          ],
          "PublishedDate": "2026-08-10T14:17:21.277Z",
          "LastModifiedDate": "2026-10-23T20:10:00.16Z"
        },
        {
          "VulnerabilityID": "CVE-2025-69720",
          "PkgID": "libtinfo6@6.4-4",
          "PkgName": "libtinfo6",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libtinfo6@6.4-4?arch=amd64\u0026distro=debian-12.15",
            "UID": "35a440edb17e1ce3"
          },
          "InstalledVersion": "6.4-4",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:f2ae57a65e8ebc2ddda9be36798e47a49a5a285ab343cf84affd3aac998e4bb3",
          "Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.",
          "Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-121",
            "CWE-120"
          ],
          "VendorSeverity": {
            "alma": 2,
            "azure": 4,
            "cbl-mariner": 4,
            "julia": 3,
            "nvd": 3,
            "oracle-oval": 2,
            "photon": 3,
            "redhat": 2,
            "rocky": 2,
            "ubuntu": 1
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:5913",
            "https://access.redhat.com/security/cve/CVE-2025-69720",
            "https://bugzilla.redhat.com/2449037",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2449037",
            "https://cert-portal.siemens.com/productcert/html/ssa-253495.html",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720",
            "https://errata.almalinux.org/10/ALSA-2026-5913.html",
            "https://errata.rockylinux.org/RLSA-2026:5913",
            "https://github.com/Cao-Wuhui/CVE-2025-69720",
            "https://github.com/advisories/GHSA-9952-mrqj-h4jh",
            "https://invisible-island.net/archives/ncurses/6.5",
            "https://invisible-island.net/archives/ncurses/6.5/",
            "https://invisible-island.net/ncurses",
            "https://invisible-island.net/ncurses/",
            "https://linux.oracle.com/cve/CVE-2025-69720.html",
            "https://linux.oracle.com/errata/ELSA-2026-5913.html",
            "https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2",
            "https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2",
            "https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-69720",
            "https://ubuntu.com/security/notices/USN-8503-1",
            "https://www.cve.org/CVERecord?id=CVE-2025-69720"
          ],
          "PublishedDate": "2026-03-19T15:16:21.293Z",
          "LastModifiedDate": "2026-06-17T10:00:50.423Z"
        },
        {
          "VulnerabilityID": "CVE-2026-16742",
          "PkgID": "libudev1@252.39-1~deb12u2",
          "PkgName": "libudev1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libudev1@252.39-1~deb12u2?arch=amd64\u0026distro=debian-12.15",
            "UID": "3c4724c0041c8265"
          },
          "InstalledVersion": "252.39-1~deb12u2",
          "Status": "fix_deferred",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-16742",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:ee0417d8779d6e4fd6eaaf99c3d6e8912f0cf21c999c46e410300216d0eab3fa",
          "Title": "systemd: systemd-homed: Local privilege escalation via missing home-record signature verification",
          "Description": "systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-269",
            "CWE-347"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "azure": 2,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
              "V3Score": 8.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-16742",
            "https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-16742",
            "https://ubuntu.com/security/notices/USN-8626-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-16742"
          ],
          "PublishedDate": "2026-08-10T14:17:21.277Z",
          "LastModifiedDate": "2026-10-23T20:10:00.16Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53613",
          "PkgID": "libuuid1@2.38.1-5+deb12u3",
          "PkgName": "libuuid1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libuuid1@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "d649adb64a1fff7d"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:795a1669bda12a5c122a9e1143e8d41add14b5b4910ea2437f8b500064287caf",
          "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path",
          "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-53613",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2",
            "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0",
            "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8",
            "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4",
            "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec",
            "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9",
            "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78",
            "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5",
            "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9",
            "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2",
            "https://github.com/util-linux/util-linux/releases/tag/v2.41.5",
            "https://github.com/util-linux/util-linux/releases/tag/v2.42.2",
            "https://github.com/util-linux/util-linux/releases/tag/v2.42.4",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g",
            "https://linux.oracle.com/cve/CVE-2026-53613.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53613",
            "https://ubuntu.com/security/notices/USN-8702-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53613"
          ],
          "PublishedDate": "2026-10-14T15:17:20.41Z",
          "LastModifiedDate": "2026-10-16T16:00:33.533Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53615",
          "PkgID": "libuuid1@2.38.1-5+deb12u3",
          "PkgName": "libuuid1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libuuid1@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "d649adb64a1fff7d"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:8a83e271971dcbddf8c5b3e6a235863c79f882ccc82a74afe4f3ea378e21a063",
          "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser",
          "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-190"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
              "V3Score": 8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-53615",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623",
            "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31",
            "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af",
            "https://github.com/util-linux/util-linux/releases/tag/v2.41.4",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5",
            "https://linux.oracle.com/cve/CVE-2026-53615.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53615",
            "https://ubuntu.com/security/notices/USN-8702-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53615"
          ],
          "PublishedDate": "2026-10-14T16:17:46.07Z",
          "LastModifiedDate": "2026-10-16T16:00:33.533Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78410",
          "PkgID": "libuuid1@2.38.1-5+deb12u3",
          "PkgName": "libuuid1",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/libuuid1@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "d649adb64a1fff7d"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:450ba100f2d7923b89f1bd68bde7eadc2f479f4817ef08e520220b5c90baaf15",
          "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection",
          "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78410",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m",
            "https://linux.oracle.com/cve/CVE-2026-78410.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78410",
            "https://www.cve.org/CVERecord?id=CVE-2026-78410"
          ],
          "PublishedDate": "2026-09-02T16:17:23.983Z",
          "LastModifiedDate": "2026-11-05T03:17:33.15Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53613",
          "PkgID": "mount@2.38.1-5+deb12u3",
          "PkgName": "mount",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/mount@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "db6b596e9b2c0272"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:f0eefd2e1f363a98bdac8e0abd3d18ca975eb88f7fb03220ee7894cec43c9dc6",
          "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path",
          "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-53613",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2",
            "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0",
            "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8",
            "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4",
            "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec",
            "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9",
            "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78",
            "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5",
            "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9",
            "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2",
            "https://github.com/util-linux/util-linux/releases/tag/v2.41.5",
            "https://github.com/util-linux/util-linux/releases/tag/v2.42.2",
            "https://github.com/util-linux/util-linux/releases/tag/v2.42.4",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g",
            "https://linux.oracle.com/cve/CVE-2026-53613.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53613",
            "https://ubuntu.com/security/notices/USN-8702-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53613"
          ],
          "PublishedDate": "2026-10-14T15:17:20.41Z",
          "LastModifiedDate": "2026-10-16T16:00:33.533Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53615",
          "PkgID": "mount@2.38.1-5+deb12u3",
          "PkgName": "mount",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/mount@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "db6b596e9b2c0272"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:6d8604cecda3e79507a84fd4baedbcb5c22b96230d353796ce5d0f82439df58c",
          "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser",
          "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-190"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
              "V3Score": 8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-53615",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623",
            "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31",
            "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af",
            "https://github.com/util-linux/util-linux/releases/tag/v2.41.4",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5",
            "https://linux.oracle.com/cve/CVE-2026-53615.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53615",
            "https://ubuntu.com/security/notices/USN-8702-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53615"
          ],
          "PublishedDate": "2026-10-14T16:17:46.07Z",
          "LastModifiedDate": "2026-10-16T16:00:33.533Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78410",
          "PkgID": "mount@2.38.1-5+deb12u3",
          "PkgName": "mount",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/mount@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "db6b596e9b2c0272"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:e5964faa874a55feeae8a18dc1f3902dffe273b07c41c39b96f544b680212b3e",
          "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection",
          "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78410",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m",
            "https://linux.oracle.com/cve/CVE-2026-78410.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78410",
            "https://www.cve.org/CVERecord?id=CVE-2026-78410"
          ],
          "PublishedDate": "2026-09-02T16:17:23.983Z",
          "LastModifiedDate": "2026-11-05T03:17:33.15Z"
        },
        {
          "VulnerabilityID": "CVE-2025-69720",
          "PkgID": "ncurses-base@6.4-4",
          "PkgName": "ncurses-base",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/ncurses-base@6.4-4?arch=all\u0026distro=debian-12.15",
            "UID": "8e69deb4f19b17b3"
          },
          "InstalledVersion": "6.4-4",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:92f2ab9d728d1ed55019ffd6a8eff71ad9bc372f10a9907e06ebd0056d07d043",
          "Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.",
          "Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-121",
            "CWE-120"
          ],
          "VendorSeverity": {
            "alma": 2,
            "azure": 4,
            "cbl-mariner": 4,
            "julia": 3,
            "nvd": 3,
            "oracle-oval": 2,
            "photon": 3,
            "redhat": 2,
            "rocky": 2,
            "ubuntu": 1
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:5913",
            "https://access.redhat.com/security/cve/CVE-2025-69720",
            "https://bugzilla.redhat.com/2449037",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2449037",
            "https://cert-portal.siemens.com/productcert/html/ssa-253495.html",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720",
            "https://errata.almalinux.org/10/ALSA-2026-5913.html",
            "https://errata.rockylinux.org/RLSA-2026:5913",
            "https://github.com/Cao-Wuhui/CVE-2025-69720",
            "https://github.com/advisories/GHSA-9952-mrqj-h4jh",
            "https://invisible-island.net/archives/ncurses/6.5",
            "https://invisible-island.net/archives/ncurses/6.5/",
            "https://invisible-island.net/ncurses",
            "https://invisible-island.net/ncurses/",
            "https://linux.oracle.com/cve/CVE-2025-69720.html",
            "https://linux.oracle.com/errata/ELSA-2026-5913.html",
            "https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2",
            "https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2",
            "https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-69720",
            "https://ubuntu.com/security/notices/USN-8503-1",
            "https://www.cve.org/CVERecord?id=CVE-2025-69720"
          ],
          "PublishedDate": "2026-03-19T15:16:21.293Z",
          "LastModifiedDate": "2026-06-17T10:00:50.423Z"
        },
        {
          "VulnerabilityID": "CVE-2025-69720",
          "PkgID": "ncurses-bin@6.4-4",
          "PkgName": "ncurses-bin",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/ncurses-bin@6.4-4?arch=amd64\u0026distro=debian-12.15",
            "UID": "e3f559220e0fbad1"
          },
          "InstalledVersion": "6.4-4",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:edc89e111bdb6338d37b41ddf440c50c8e1d4bc0c4d0a36f15fd47351cf77c5d",
          "Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.",
          "Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-121",
            "CWE-120"
          ],
          "VendorSeverity": {
            "alma": 2,
            "azure": 4,
            "cbl-mariner": 4,
            "julia": 3,
            "nvd": 3,
            "oracle-oval": 2,
            "photon": 3,
            "redhat": 2,
            "rocky": 2,
            "ubuntu": 1
          },
          "CVSS": {
            "julia": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:5913",
            "https://access.redhat.com/security/cve/CVE-2025-69720",
            "https://bugzilla.redhat.com/2449037",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2449037",
            "https://cert-portal.siemens.com/productcert/html/ssa-253495.html",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720",
            "https://errata.almalinux.org/10/ALSA-2026-5913.html",
            "https://errata.rockylinux.org/RLSA-2026:5913",
            "https://github.com/Cao-Wuhui/CVE-2025-69720",
            "https://github.com/advisories/GHSA-9952-mrqj-h4jh",
            "https://invisible-island.net/archives/ncurses/6.5",
            "https://invisible-island.net/archives/ncurses/6.5/",
            "https://invisible-island.net/ncurses",
            "https://invisible-island.net/ncurses/",
            "https://linux.oracle.com/cve/CVE-2025-69720.html",
            "https://linux.oracle.com/errata/ELSA-2026-5913.html",
            "https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2",
            "https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2",
            "https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2",
            "https://nvd.nist.gov/vuln/detail/CVE-2025-69720",
            "https://ubuntu.com/security/notices/USN-8503-1",
            "https://www.cve.org/CVERecord?id=CVE-2025-69720"
          ],
          "PublishedDate": "2026-03-19T15:16:21.293Z",
          "LastModifiedDate": "2026-06-17T10:00:50.423Z"
        },
        {
          "VulnerabilityID": "CVE-2026-84782",
          "VendorIDs": [
            "DLA-4859-1"
          ],
          "PkgID": "openssl@3.0.22-1~deb12u1",
          "PkgName": "openssl",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/openssl@3.0.22-1~deb12u1?arch=amd64\u0026distro=debian-12.15",
            "UID": "e275efa4b2407c8b"
          },
          "InstalledVersion": "3.0.22-1~deb12u1",
          "FixedVersion": "3.0.22-1~deb12u2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:e2dee3fc233f0f0b260b1ff7b599106e4b770679efa2cf256598e400160aa3ed"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-84782",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:382864565e9920994d31af892f97f0151821f56ab295299b234d74dd219184cb",
          "Title": "openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission",
          "Description": "Issue summary: The DTLS retransmission logic does not correctly handle\na handshake message write that is suspended part-way through.\nThe retransmitted message can be read past the message buffer and\nthe retransmission overwrites the internal state the suspended write\nneeds to resume correctly.\n\nImpact summary: The retransmitted message can disclose a heap memory\nto the peer as plaintext handshake data or cause a crash and a Denial\nof Service when the read reaches an unmapped memory region.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: DTLS handshake messages can be written out in multiple\nfragments, and a write can suspend mid-message (returning WANT_WRITE)\nif the underlying transport temporarily cannot accept more data. While\nsuch a write is suspended, the DTLS retransmission timer may\nindependently fire and ask the retransmission logic to resend an\nearlier, already-acknowledged-as-sent message from its retransmit\nqueue.\n\nThe retransmission logic reused the same internal buffer and position\ntracking as the message that was still being written, without\nresetting the position back to the start of the message being\nretransmitted. As a result the retransmission was read starting from\nwherever the suspended write had left off, producing a mislabelled\nmessage whose body was leftover bytes from the other, larger message\nstill in flight - content that was never meant to be sent at that\npoint, and which could run past the end of the allocated buffer.\n\nSeparately, even when the retransmission is positioned correctly,\nallowing it to run to completion while another write is suspended\noverwrites the same shared bookkeeping that the suspended write\ndepends on to resume. When the application later resumes the\nsuspended write (via a subsequent SSL_read(), SSL_write(),\nSSL_accept(), or SSL_connect() call), it finds that bookkeeping in a\nstate inconsistent with the message and aborts the process in\na debugging build.\n\nThe fix resets the retransmission's read position to the start of the\nmessage before resending, and skips retransmission entirely whenever a\nhandshake write is still suspended, deferring to the next call that\nresumes it instead.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-125"
          ],
          "VendorSeverity": {
            "alma": 2,
            "amazon": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
              "V3Score": 7.4
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:77396",
            "https://access.redhat.com/errata/RHSA-2026:80514",
            "https://access.redhat.com/security/cve/CVE-2026-84782",
            "https://bugzilla.redhat.com/2517560",
            "https://bugzilla.redhat.com/2537080",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2537080",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84782",
            "https://errata.almalinux.org/9/ALSA-2026-80514.html",
            "https://errata.rockylinux.org/RLSA-2026:77396",
            "https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943",
            "https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628",
            "https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58",
            "https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c",
            "https://linux.oracle.com/cve/CVE-2026-84782.html",
            "https://linux.oracle.com/errata/ELSA-2026-85968.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-84782",
            "https://openssl-library.org/news/secadv/20260929.txt",
            "https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782",
            "https://ubuntu.com/security/notices/USN-8847-1",
            "https://ubuntu.com/security/notices/USN-8847-2",
            "https://www.cve.org/CVERecord?id=CVE-2026-84782"
          ],
          "PublishedDate": "2026-09-29T16:17:12.5Z",
          "LastModifiedDate": "2026-10-08T01:20:56.003Z"
        },
        {
          "VulnerabilityID": "CVE-2026-13221",
          "VendorIDs": [
            "DLA-4821-1"
          ],
          "PkgID": "perl-base@5.36.0-7+deb12u3",
          "PkgName": "perl-base",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "4d96814618e564ec"
          },
          "InstalledVersion": "5.36.0-7+deb12u3",
          "FixedVersion": "5.36.0-7+deb12u4",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13221",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:03479cd1ffd94e9441a06ef7c72a682d574a7a7d1363c7b3243fdf2caacadeb8",
          "Title": "perl: Perl: Incorrect regular expression processing via large regular expressions",
          "Description": "Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk.\n\nWhen such branches are combined into a trie, the delta between the first branch and the shared tail is stored in a 16-bit field. A branch count above 65535 overflows the field, and the trie's match decision table is truncated with no warning or error.\n\nA pattern of this shape produces false positive matches (matching strings it should not) and false negative matches (failing to match strings it should). When such a pattern gates an access or filtering decision, the result is wrong.",
          "Severity": "CRITICAL",
          "CweIDs": [
            "CWE-190"
          ],
          "VendorSeverity": {
            "alma": 2,
            "amazon": 2,
            "azure": 2,
            "nvd": 4,
            "oracle-oval": 2,
            "photon": 4,
            "redhat": 2,
            "rocky": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
              "V3Score": 9.1
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N",
              "V3Score": 5.9
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/07/13/5",
            "https://access.redhat.com/errata/RHSA-2026:67155",
            "https://access.redhat.com/security/cve/CVE-2026-13221",
            "https://bugzilla.redhat.com/2499727",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2499727",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13221",
            "https://errata.almalinux.org/9/ALSA-2026-67155.html",
            "https://errata.rockylinux.org/RLSA-2026:67155",
            "https://github.com/Perl/perl5/commit/03f74bbbd3a68350d926ee93d56ee4808c28c4c7.patch",
            "https://github.com/Perl/perl5/issues/23388",
            "https://linux.oracle.com/cve/CVE-2026-13221.html",
            "https://linux.oracle.com/errata/ELSA-2026-67278-0.html",
            "https://lists.security.metacpan.org/cve-announce/msg/41780104/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-13221",
            "https://ubuntu.com/security/notices/USN-8675-1",
            "https://ubuntu.com/security/notices/USN-8675-2",
            "https://ubuntu.com/security/notices/USN-8684-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-13221"
          ],
          "PublishedDate": "2026-07-13T17:16:48.923Z",
          "LastModifiedDate": "2026-10-24T22:10:00.21Z"
        },
        {
          "VulnerabilityID": "CVE-2026-42496",
          "VendorIDs": [
            "DLA-4821-1"
          ],
          "PkgID": "perl-base@5.36.0-7+deb12u3",
          "PkgName": "perl-base",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "4d96814618e564ec"
          },
          "InstalledVersion": "5.36.0-7+deb12u3",
          "FixedVersion": "5.36.0-7+deb12u4",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42496",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:9538c59db34254cdc6d9add56ba23ce652f6d2662ba4234f9dc20c08a1703e95",
          "Title": "perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access",
          "Description": "Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory.\n\n_make_special_file() passes the tar header's linkname to symlink() without validating it against absolute paths or .. segments. The secure-extract mode check that guards regular file extraction does not cover the symlink target.\n\nA subsequent open through the extracted name reads or writes the attacker chosen path.",
          "Severity": "CRITICAL",
          "CweIDs": [
            "CWE-59",
            "CWE-22"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "nvd": 4,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "V3Score": 9.1
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
              "V3Score": 8.2
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:30851",
            "https://access.redhat.com/errata/RHSA-2026:30852",
            "https://access.redhat.com/errata/RHSA-2026:30856",
            "https://access.redhat.com/errata/RHSA-2026:30857",
            "https://access.redhat.com/security/cve/CVE-2026-42496",
            "https://bugzilla.redhat.com/2481314",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2481314",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42496",
            "https://errata.almalinux.org/9/ALSA-2026-30856.html",
            "https://errata.rockylinux.org/RLSA-2026:30856",
            "https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2cccd5a9158.patch",
            "https://linux.oracle.com/cve/CVE-2026-42496.html",
            "https://linux.oracle.com/errata/ELSA-2026-30857.html",
            "https://lists.security.metacpan.org/cve-announce/msg/40396459/",
            "https://metacpan.org/release/BINGOS/Archive-Tar-3.08/changes",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-42496",
            "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42496.json",
            "https://ubuntu.com/security/notices/USN-8467-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-42496",
            "https://www.cve.org/CVERecord?id=CVE-2026-42497"
          ],
          "PublishedDate": "2026-05-26T02:16:40.13Z",
          "LastModifiedDate": "2026-07-24T10:10:00.197Z"
        },
        {
          "VulnerabilityID": "CVE-2026-8376",
          "VendorIDs": [
            "DLA-4821-1"
          ],
          "PkgID": "perl-base@5.36.0-7+deb12u3",
          "PkgName": "perl-base",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "4d96814618e564ec"
          },
          "InstalledVersion": "5.36.0-7+deb12u3",
          "FixedVersion": "5.36.0-7+deb12u4",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-8376",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:be1711b5fb6b7f410d0a46126f0297bdd1b4cafb215a1a9466213878855e4b98",
          "Title": "perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds",
          "Description": "Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds.\n\nPerl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters rather than bytes. For a quantified fixed substring with a large minimum count, the byte length mincount * l could overflow SSize_t, producing an undersized SvGROW allocation; the subsequent copy writes past the end of the buffer.\n\nA caller that compiles an attacker-controlled regular expression on a 32-bit perl build triggers a heap buffer overflow at compile time.",
          "Severity": "CRITICAL",
          "CweIDs": [
            "CWE-680"
          ],
          "VendorSeverity": {
            "amazon": 2,
            "azure": 2,
            "nvd": 4,
            "photon": 4,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 9.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
              "V3Score": 5.7
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/05/26/1",
            "https://access.redhat.com/security/cve/CVE-2026-8376",
            "https://github.com/Perl/perl5/commit/5e7f119eb2bb1181be908701f22bf7068e722f1c.patch",
            "https://github.com/Perl/perl5/pull/24433",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-8376",
            "https://ubuntu.com/security/notices/USN-8467-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-8376"
          ],
          "PublishedDate": "2026-05-26T00:16:57.15Z",
          "LastModifiedDate": "2026-09-08T22:19:18.373Z"
        },
        {
          "VulnerabilityID": "CVE-2026-42497",
          "VendorIDs": [
            "DLA-4821-1"
          ],
          "PkgID": "perl-base@5.36.0-7+deb12u3",
          "PkgName": "perl-base",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "4d96814618e564ec"
          },
          "InstalledVersion": "5.36.0-7+deb12u3",
          "FixedVersion": "5.36.0-7+deb12u4",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42497",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:5178f8169e39eb20eaaa338e6295d090a09374815766bb1169bc25eadfa2c065",
          "Title": "perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction",
          "Description": "Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory.\n\n_make_special_file() passes the tar header's linkname to link() without validating it against absolute paths or .. segments, creating a hardlink that shares the victim file's inode.\n\nA subsequent write through the extracted name modifies the victim file, and the post-extraction chmod, chown, and utime block in _extract_file() (guarded only against symlinks via -l) applies the tar header's mode, owner, and timestamps to the shared inode during extraction alone.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-59",
            "CWE-732"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "azure": 2,
            "nvd": 3,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H",
              "V3Score": 6.8
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-42497",
            "https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2cccd5a9158.patch",
            "https://lists.security.metacpan.org/cve-announce/msg/40396457/",
            "https://metacpan.org/release/BINGOS/Archive-Tar-3.08/changes",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-42497",
            "https://www.cve.org/CVERecord?id=CVE-2026-42496",
            "https://www.cve.org/CVERecord?id=CVE-2026-42497"
          ],
          "PublishedDate": "2026-05-26T02:16:40.25Z",
          "LastModifiedDate": "2026-07-24T11:10:00.17Z"
        },
        {
          "VulnerabilityID": "CVE-2026-48962",
          "VendorIDs": [
            "DLA-4821-1"
          ],
          "PkgID": "perl-base@5.36.0-7+deb12u3",
          "PkgName": "perl-base",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "4d96814618e564ec"
          },
          "InstalledVersion": "5.36.0-7+deb12u3",
          "FixedVersion": "5.36.0-7+deb12u4",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48962",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:9ea3f0d5facbc2c3a3361572d861de593218761820fd2280e4ebd9690d2def4f",
          "Title": "perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob",
          "Description": "IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.\n\n_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.\n\nArbitrary Perl in the output glob executes at the calling process's privilege.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-95",
            "CWE-94"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/05/27/4",
            "https://access.redhat.com/errata/RHSA-2026:29182",
            "https://access.redhat.com/errata/RHSA-2026:29210",
            "https://access.redhat.com/errata/RHSA-2026:29867",
            "https://access.redhat.com/errata/RHSA-2026:29941",
            "https://access.redhat.com/errata/RHSA-2026:30085",
            "https://access.redhat.com/errata/RHSA-2026:30086",
            "https://access.redhat.com/errata/RHSA-2026:30115",
            "https://access.redhat.com/errata/RHSA-2026:30843",
            "https://access.redhat.com/errata/RHSA-2026:30851",
            "https://access.redhat.com/errata/RHSA-2026:30858",
            "https://access.redhat.com/errata/RHSA-2026:30859",
            "https://access.redhat.com/errata/RHSA-2026:30860",
            "https://access.redhat.com/errata/RHSA-2026:50262",
            "https://access.redhat.com/security/cve/CVE-2026-48962",
            "https://bugzilla.redhat.com/2481767",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2481767",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48962",
            "https://errata.almalinux.org/9/ALSA-2026-30859.html",
            "https://errata.rockylinux.org/RLSA-2026:30859",
            "https://github.com/pmqs/IO-Compress/commit/f2db247bf90d4cc7ee2710be384946081f3b4610.patch",
            "https://linux.oracle.com/cve/CVE-2026-48962.html",
            "https://linux.oracle.com/errata/ELSA-2026-30860.html",
            "https://lists.security.metacpan.org/cve-announce/msg/40434385/",
            "https://metacpan.org/release/PMQS/IO-Compress-2.220/changes",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-48962",
            "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48962.json",
            "https://ubuntu.com/security/notices/USN-8684-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-48962"
          ],
          "PublishedDate": "2026-05-27T04:16:31.333Z",
          "LastModifiedDate": "2026-08-05T13:23:22.46Z"
        },
        {
          "VulnerabilityID": "CVE-2026-57432",
          "VendorIDs": [
            "DLA-4821-1"
          ],
          "PkgID": "perl-base@5.36.0-7+deb12u3",
          "PkgName": "perl-base",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "4d96814618e564ec"
          },
          "InstalledVersion": "5.36.0-7+deb12u3",
          "FixedVersion": "5.36.0-7+deb12u4",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-57432",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:99ccda8c8234a418a5b6f9513765337958a477ca3cf550a89e72a9424e618916",
          "Title": "perl: Perl: Information disclosure via integer overflow in pack/unpack operations",
          "Description": "Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack.\n\nS_measure_struct adds each item's size times its repeat count to a running total with no overflow check, so a large repeat count in a pack or unpack template wraps the signed SSize_t total negative. The @, X, and x position codes then guard their moves with a signed length comparison that passes when the length is negative, advancing the buffer pointer out of bounds.\n\nA template derived from untrusted input can read heap memory past the buffer and return it to the caller.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-125",
            "CWE-190"
          ],
          "VendorSeverity": {
            "amazon": 2,
            "azure": 3,
            "nvd": 3,
            "photon": 3,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 8.4
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
              "V3Score": 5
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/07/13/6",
            "https://access.redhat.com/security/cve/CVE-2026-57432",
            "https://github.com/Perl/perl5/commit/40754edc72dd3e513d758153c0e2f0215897740e.patch",
            "https://github.com/Perl/perl5/commit/5f7eb6bbbe0510964e3fb1d6bb691e5445913e55.patch",
            "https://lists.security.metacpan.org/cve-announce/msg/41780102/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-57432",
            "https://ubuntu.com/security/notices/USN-8675-1",
            "https://ubuntu.com/security/notices/USN-8675-2",
            "https://ubuntu.com/security/notices/USN-8684-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-57432"
          ],
          "PublishedDate": "2026-07-13T17:17:55.67Z",
          "LastModifiedDate": "2026-10-24T22:10:00.21Z"
        },
        {
          "VulnerabilityID": "CVE-2026-57433",
          "VendorIDs": [
            "DLA-4821-1"
          ],
          "PkgID": "perl-base@5.36.0-7+deb12u3",
          "PkgName": "perl-base",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "4d96814618e564ec"
          },
          "InstalledVersion": "5.36.0-7+deb12u3",
          "FixedVersion": "5.36.0-7+deb12u4",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-57433",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:25e11ace3be79fd7b1d3291d492d864548eb917f59cef84ad8dcaaa2492e50a9",
          "Title": "Storable: Storable: Denial of Service via signed integer overflow in deserialization",
          "Description": "Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record.\n\nretrieve_hook_common reads a signed 32-bit item count from an SX_HOOK record and calls av_extend with that count plus one. A count of I32_MAX wraps the addition to a negative value.\n\nA crafted blob passed to thaw or retrieve triggers the overflow; av_extend receives the negative count and dies with a panic, terminating the deserialization.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-190"
          ],
          "VendorSeverity": {
            "amazon": 2,
            "azure": 4,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/07/13/7",
            "https://access.redhat.com/security/cve/CVE-2026-57433",
            "https://github.com/Perl/perl5/commit/e4f681784bcdeaa91ff02a2fa4cdcae5c46779d7.patch",
            "https://lists.security.metacpan.org/cve-announce/msg/41780100/",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-57433",
            "https://ubuntu.com/security/notices/USN-8675-1",
            "https://ubuntu.com/security/notices/USN-8675-2",
            "https://ubuntu.com/security/notices/USN-8684-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-57433"
          ],
          "PublishedDate": "2026-07-13T17:17:55.783Z",
          "LastModifiedDate": "2026-10-24T22:10:00.21Z"
        },
        {
          "VulnerabilityID": "CVE-2026-9538",
          "PkgID": "perl-base@5.36.0-7+deb12u3",
          "PkgName": "perl-base",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "4d96814618e564ec"
          },
          "InstalledVersion": "5.36.0-7+deb12u3",
          "Status": "fix_deferred",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-9538",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:ae43f7655a12ecbff95db90537d488946754650446df0f3b8f8a6ca32662af8e",
          "Title": "perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size",
          "Description": "Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.\n\n_read_tar() reads each entry's payload with $handle-\u003eread($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value.\n\nA crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-789"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "nvd": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2026/05/26/4",
            "https://access.redhat.com/errata/RHSA-2026:49525",
            "https://access.redhat.com/security/cve/CVE-2026-9538",
            "https://bugzilla.redhat.com/2481315",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2481315",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9538",
            "https://errata.almalinux.org/9/ALSA-2026-49525.html",
            "https://errata.rockylinux.org/RLSA-2026:49525",
            "https://github.com/jib/archive-tar-new/commit/f9af01426038e29d9578825a0cd3626946ab08c7.patch",
            "https://linux.oracle.com/cve/CVE-2026-9538.html",
            "https://linux.oracle.com/errata/ELSA-2026-49525.html",
            "https://lists.security.metacpan.org/cve-announce/msg/40396448/",
            "https://metacpan.org/release/BINGOS/Archive-Tar-3.10/changes",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-9538",
            "https://ubuntu.com/security/notices/USN-8684-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-9538"
          ],
          "PublishedDate": "2026-05-26T02:16:41.15Z",
          "LastModifiedDate": "2026-07-23T11:10:00.12Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53613",
          "PkgID": "util-linux@2.38.1-5+deb12u3",
          "PkgName": "util-linux",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/util-linux@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "c50a1829816b9d94"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:615892fd06813c2e71919b1bed53bcc8694c03e560e0d4275f8a55e5eaeaa768",
          "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path",
          "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-53613",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2",
            "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0",
            "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8",
            "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4",
            "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec",
            "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9",
            "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78",
            "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5",
            "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9",
            "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2",
            "https://github.com/util-linux/util-linux/releases/tag/v2.41.5",
            "https://github.com/util-linux/util-linux/releases/tag/v2.42.2",
            "https://github.com/util-linux/util-linux/releases/tag/v2.42.4",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g",
            "https://linux.oracle.com/cve/CVE-2026-53613.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53613",
            "https://ubuntu.com/security/notices/USN-8702-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53613"
          ],
          "PublishedDate": "2026-10-14T15:17:20.41Z",
          "LastModifiedDate": "2026-10-16T16:00:33.533Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53615",
          "PkgID": "util-linux@2.38.1-5+deb12u3",
          "PkgName": "util-linux",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/util-linux@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "c50a1829816b9d94"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:3f2607115d1196098719510132fa74b60f9f0c9f5c8a782a459b3f65077bc597",
          "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser",
          "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-190"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
              "V3Score": 8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-53615",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623",
            "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31",
            "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af",
            "https://github.com/util-linux/util-linux/releases/tag/v2.41.4",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5",
            "https://linux.oracle.com/cve/CVE-2026-53615.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53615",
            "https://ubuntu.com/security/notices/USN-8702-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53615"
          ],
          "PublishedDate": "2026-10-14T16:17:46.07Z",
          "LastModifiedDate": "2026-10-16T16:00:33.533Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78410",
          "PkgID": "util-linux@2.38.1-5+deb12u3",
          "PkgName": "util-linux",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/util-linux@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "c50a1829816b9d94"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:e29119e998cd1642178fd1ca53ded8871b38830d1acd0b64cc5508de7024ebb0",
          "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection",
          "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78410",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m",
            "https://linux.oracle.com/cve/CVE-2026-78410.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78410",
            "https://www.cve.org/CVERecord?id=CVE-2026-78410"
          ],
          "PublishedDate": "2026-09-02T16:17:23.983Z",
          "LastModifiedDate": "2026-11-05T03:17:33.15Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53613",
          "PkgID": "util-linux-extra@2.38.1-5+deb12u3",
          "PkgName": "util-linux-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/util-linux-extra@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "ec22fa64ac4832d8"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:d64d86cd9bd97b219d348f0911bb538f0d1143471e4cc26278c85b1796f9162c",
          "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path",
          "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-53613",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2",
            "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0",
            "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8",
            "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4",
            "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec",
            "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9",
            "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78",
            "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5",
            "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9",
            "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2",
            "https://github.com/util-linux/util-linux/releases/tag/v2.41.5",
            "https://github.com/util-linux/util-linux/releases/tag/v2.42.2",
            "https://github.com/util-linux/util-linux/releases/tag/v2.42.4",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g",
            "https://linux.oracle.com/cve/CVE-2026-53613.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53613",
            "https://ubuntu.com/security/notices/USN-8702-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53613"
          ],
          "PublishedDate": "2026-10-14T15:17:20.41Z",
          "LastModifiedDate": "2026-10-16T16:00:33.533Z"
        },
        {
          "VulnerabilityID": "CVE-2026-53615",
          "PkgID": "util-linux-extra@2.38.1-5+deb12u3",
          "PkgName": "util-linux-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/util-linux-extra@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "ec22fa64ac4832d8"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:63d105b06cf021f16524779e469b8e0a15ecf7473a4214df9fd4b1dae956606f",
          "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser",
          "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-190"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
              "V3Score": 8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/security/cve/CVE-2026-53615",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623",
            "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31",
            "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af",
            "https://github.com/util-linux/util-linux/releases/tag/v2.41.4",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5",
            "https://linux.oracle.com/cve/CVE-2026-53615.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-53615",
            "https://ubuntu.com/security/notices/USN-8702-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-53615"
          ],
          "PublishedDate": "2026-10-14T16:17:46.07Z",
          "LastModifiedDate": "2026-10-16T16:00:33.533Z"
        },
        {
          "VulnerabilityID": "CVE-2026-78410",
          "PkgID": "util-linux-extra@2.38.1-5+deb12u3",
          "PkgName": "util-linux-extra",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/util-linux-extra@2.38.1-5%2Bdeb12u3?arch=amd64\u0026distro=debian-12.15",
            "UID": "ec22fa64ac4832d8"
          },
          "InstalledVersion": "2.38.1-5+deb12u3",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:1881b69f79d00b504aafed97c0e8f4e9244f085940ca8d179a59f0c85fe4e83f",
          "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection",
          "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-367"
          ],
          "VendorSeverity": {
            "alma": 3,
            "azure": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 7.8
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:63162",
            "https://access.redhat.com/errata/RHSA-2026:93461",
            "https://access.redhat.com/errata/RHSA-2026:95365",
            "https://access.redhat.com/security/cve/CVE-2026-78410",
            "https://bugzilla.redhat.com/2454956",
            "https://bugzilla.redhat.com/2494101",
            "https://bugzilla.redhat.com/2519646",
            "https://bugzilla.redhat.com/2519647",
            "https://bugzilla.redhat.com/2519648",
            "https://bugzilla.redhat.com/2521999",
            "https://bugzilla.redhat.com/2522497",
            "https://bugzilla.redhat.com/2522684",
            "https://bugzilla.redhat.com/2552551",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2454956",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519646",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519647",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2519648",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2521999",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522497",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2522684",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2552551",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410",
            "https://errata.almalinux.org/10/ALSA-2026-93461.html",
            "https://errata.rockylinux.org/RLSA-2026:93461",
            "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m",
            "https://linux.oracle.com/cve/CVE-2026-78410.html",
            "https://linux.oracle.com/errata/ELSA-2026-93461.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-78410",
            "https://www.cve.org/CVERecord?id=CVE-2026-78410"
          ],
          "PublishedDate": "2026-09-02T16:17:23.983Z",
          "LastModifiedDate": "2026-11-05T03:17:33.15Z"
        },
        {
          "VulnerabilityID": "CVE-2023-45853",
          "PkgID": "zlib1g@1:1.2.13.dfsg-1",
          "PkgName": "zlib1g",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/zlib1g@1.2.13.dfsg-1?arch=amd64\u0026distro=debian-12.15\u0026epoch=1",
            "UID": "c3a50d0cd388a7b8"
          },
          "InstalledVersion": "1:1.2.13.dfsg-1",
          "Status": "will_not_fix",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "SeveritySource": "nvd",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-45853",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:e491517228d6f0433fea9f4f8c9ce8e8a3763e3d97e6899a3bc6269e642c230a",
          "Title": "zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6",
          "Description": "MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.",
          "Severity": "CRITICAL",
          "CweIDs": [
            "CWE-190"
          ],
          "VendorSeverity": {
            "amazon": 2,
            "azure": 3,
            "cbl-mariner": 4,
            "ghsa": 4,
            "julia": 4,
            "nvd": 4,
            "photon": 4,
            "redhat": 2,
            "ubuntu": 2
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 9.8
            },
            "julia": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 9.8
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 9.8
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
              "V3Score": 5.3
            }
          },
          "References": [
            "http://www.openwall.com/lists/oss-security/2023/10/20/9",
            "http://www.openwall.com/lists/oss-security/2024/01/24/10",
            "https://access.redhat.com/security/cve/CVE-2023-45853",
            "https://cert-portal.siemens.com/productcert/html/ssa-398330.html",
            "https://cert-portal.siemens.com/productcert/html/ssa-470355.html",
            "https://cert-portal.siemens.com/productcert/html/ssa-769027.html",
            "https://chromium.googlesource.com/chromium/src/+/d709fb23806858847131027da95ef4c548813356",
            "https://chromium.googlesource.com/chromium/src/+/de29dd6c7151d3cd37cb4cf0036800ddfb1d8b61",
            "https://github.com/madler/zlib/blob/ac8f12c97d1afd9bafa9c710f827d40a407d3266/contrib/README.contrib#L1-L4",
            "https://github.com/madler/zlib/commit/73331a6a0481067628f065ffe87bb1d8f787d10c",
            "https://github.com/madler/zlib/pull/843",
            "https://github.com/smihica/pyminizip",
            "https://github.com/smihica/pyminizip/blob/master/zlib-1.2.11/contrib/minizip/zip.c",
            "https://lists.debian.org/debian-lts-announce/2023/11/msg00026.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2023-45853",
            "https://pypi.org/project/pyminizip/#history",
            "https://security.gentoo.org/glsa/202401-18",
            "https://security.netapp.com/advisory/ntap-20231130-0009",
            "https://security.netapp.com/advisory/ntap-20231130-0009/",
            "https://ubuntu.com/security/notices/USN-7107-1",
            "https://www.cve.org/CVERecord?id=CVE-2023-45853",
            "https://www.winimage.com/zLibDll/minizip.html"
          ],
          "PublishedDate": "2023-10-14T02:15:09.323Z",
          "LastModifiedDate": "2026-10-15T00:16:39.75Z"
        },
        {
          "VulnerabilityID": "CVE-2026-76844",
          "PkgID": "zlib1g@1:1.2.13.dfsg-1",
          "PkgName": "zlib1g",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/zlib1g@1.2.13.dfsg-1?arch=amd64\u0026distro=debian-12.15\u0026epoch=1",
            "UID": "c3a50d0cd388a7b8"
          },
          "InstalledVersion": "1:1.2.13.dfsg-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76844",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:492175b8cf0ceff18a6b87e4ef5fd2a09fcb1130821a934147b4a4964ea8621a",
          "Title": "webpack-dev-middleware: webpack-dev-middleware: Information Disclosure via Path Traversal",
          "Description": "zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the caller's buffer. A later gz* write call then derives a position from the stale pointer and writes past a heap allocation; any write() failure reaches it, including EPIPE on a blocking descriptor, and in versions before 1.3.1.2 the failed write must be followed by a gzclearerr() call.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-787"
          ],
          "VendorSeverity": {
            "azure": 2,
            "ghsa": 3,
            "redhat": 3
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
              "V3Score": 7.4
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
              "V3Score": 8.6
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-76844",
            "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490",
            "https://github.com/advisories/GHSA-wr3j-pwj9-hqq6",
            "https://github.com/madler/zlib",
            "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393",
            "https://github.com/madler/zlib/commit/df84af25dc1942490e1d1c899a07619152a46148",
            "https://github.com/webpack/webpack-dev-middleware",
            "https://github.com/webpack/webpack-dev-middleware/blob/v8.1.1/src/middleware.js",
            "https://github.com/webpack/webpack-dev-middleware/commit/13344e78b26d88fe9b7c8381a3860e248a52359b",
            "https://github.com/webpack/webpack-dev-middleware/commit/cefccbac330c29052fc6dffe85fd292ea2ac782b",
            "https://github.com/webpack/webpack-dev-middleware/pull/2404",
            "https://github.com/webpack/webpack-dev-middleware/releases/tag/v7.4.6",
            "https://github.com/webpack/webpack-dev-middleware/releases/tag/v8.3.0",
            "https://github.com/webpack/webpack-dev-middleware/security/advisories/GHSA-g84c-rxfj-3j2c",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-76844",
            "https://www.cve.org/CVERecord?id=CVE-2026-76844",
            "https://www.vulncheck.com/advisories/webpack-dev-middleware-path-traversal-via-offset-slice-on-a-non-slash-terminated-publicpath",
            "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"
          ],
          "PublishedDate": "2026-08-24T14:17:02.25Z",
          "LastModifiedDate": "2026-10-12T17:10:00.163Z"
        },
        {
          "VulnerabilityID": "CVE-2026-85091",
          "PkgID": "zlib1g@1:1.2.13.dfsg-1",
          "PkgName": "zlib1g",
          "PkgIdentifier": {
            "PURL": "pkg:deb/debian/zlib1g@1.2.13.dfsg-1?arch=amd64\u0026distro=debian-12.15\u0026epoch=1",
            "UID": "c3a50d0cd388a7b8"
          },
          "InstalledVersion": "1:1.2.13.dfsg-1",
          "Status": "affected",
          "Layer": {
            "DiffID": "sha256:e58989146fcec76699871403b9897b5c014af1ccd85f5a9300a215e7975525d7"
          },
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-85091",
          "DataSource": {
            "ID": "debian",
            "Name": "Debian Security Tracker",
            "URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
          },
          "Fingerprint": "sha256:ef23c2fe11098d7d029f23afebcfbce3c049f8b6d0f218d5d6b596f23be3b5b3",
          "Title": "zlib: zlib: Heap buffer overflow in gz_vacate() allows arbitrary code execution",
          "Description": "zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-787"
          ],
          "VendorSeverity": {
            "azure": 3,
            "redhat": 3,
            "ubuntu": 2
          },
          "CVSS": {
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 8.1
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-85091",
            "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490",
            "https://github.com/madler/zlib",
            "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-85091",
            "https://ubuntu.com/security/notices/USN-8954-1",
            "https://www.cve.org/CVERecord?id=CVE-2026-85091",
            "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"
          ],
          "PublishedDate": "2026-09-03T13:06:20.573Z",
          "LastModifiedDate": "2026-09-09T20:41:07.123Z"
        }
      ]
    },
    {
      "Target": "Node.js",
      "Class": "lang-pkgs",
      "Type": "node-pkg",
      "Packages": [
        {
          "ID": "@edge-runtime/cookies@6.0.0",
          "Name": "@edge-runtime/cookies",
          "Identifier": {
            "PURL": "pkg:npm/%40edge-runtime/cookies@6.0.0",
            "UID": "3bd6a072c21f51df"
          },
          "Version": "6.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/next/dist/compiled/@edge-runtime/cookies/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@edge-runtime/ponyfill@4.0.0",
          "Name": "@edge-runtime/ponyfill",
          "Identifier": {
            "PURL": "pkg:npm/%40edge-runtime/ponyfill@4.0.0",
            "UID": "66ddb0c0f92d14a3"
          },
          "Version": "4.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/next/dist/compiled/@edge-runtime/ponyfill/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@edge-runtime/primitives@6.0.0",
          "Name": "@edge-runtime/primitives",
          "Identifier": {
            "PURL": "pkg:npm/%40edge-runtime/primitives@6.0.0",
            "UID": "8dedc9922d84041a"
          },
          "Version": "6.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/next/dist/compiled/@edge-runtime/primitives/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@fastify/otel@0.16.0",
          "Name": "@fastify/otel",
          "Identifier": {
            "PURL": "pkg:npm/%40fastify/otel@0.16.0",
            "UID": "85407815427d9c0e"
          },
          "Version": "0.16.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@fastify/otel/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@gar/promise-retry@1.0.3",
          "Name": "@gar/promise-retry",
          "Identifier": {
            "PURL": "pkg:npm/%40gar/promise-retry@1.0.3",
            "UID": "8e0b76d34126019b"
          },
          "Version": "1.0.3",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@gar/promise-retry/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@img/colour@1.0.0",
          "Name": "@img/colour",
          "Identifier": {
            "PURL": "pkg:npm/%40img/colour@1.0.0",
            "UID": "5bbe02a9775670f3"
          },
          "Version": "1.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@img/colour/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@img/sharp-libvips-linux-x64@1.2.3",
          "Name": "@img/sharp-libvips-linux-x64",
          "Identifier": {
            "PURL": "pkg:npm/%40img/sharp-libvips-linux-x64@1.2.3",
            "UID": "17df3cb7d5d4f42b"
          },
          "Version": "1.2.3",
          "Licenses": [
            "LGPL-3.0-or-later"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@img/sharp-libvips-linux-x64/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@img/sharp-libvips-linux-x64@1.2.4",
          "Name": "@img/sharp-libvips-linux-x64",
          "Identifier": {
            "PURL": "pkg:npm/%40img/sharp-libvips-linux-x64@1.2.4",
            "UID": "9bf31451cd9098c4"
          },
          "Version": "1.2.4",
          "Licenses": [
            "LGPL-3.0-or-later"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/next/node_modules/sharp/node_modules/@img/sharp-libvips-linux-x64/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@img/sharp-libvips-linuxmusl-x64@1.2.3",
          "Name": "@img/sharp-libvips-linuxmusl-x64",
          "Identifier": {
            "PURL": "pkg:npm/%40img/sharp-libvips-linuxmusl-x64@1.2.3",
            "UID": "8aff96872fa36184"
          },
          "Version": "1.2.3",
          "Licenses": [
            "LGPL-3.0-or-later"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@img/sharp-libvips-linuxmusl-x64/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@img/sharp-libvips-linuxmusl-x64@1.2.4",
          "Name": "@img/sharp-libvips-linuxmusl-x64",
          "Identifier": {
            "PURL": "pkg:npm/%40img/sharp-libvips-linuxmusl-x64@1.2.4",
            "UID": "392f457ed58d04a0"
          },
          "Version": "1.2.4",
          "Licenses": [
            "LGPL-3.0-or-later"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/next/node_modules/sharp/node_modules/@img/sharp-libvips-linuxmusl-x64/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@img/sharp-linux-x64@0.34.4",
          "Name": "@img/sharp-linux-x64",
          "Identifier": {
            "PURL": "pkg:npm/%40img/sharp-linux-x64@0.34.4",
            "UID": "fe7622c7f156dc83"
          },
          "Version": "0.34.4",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@img/sharp-linux-x64/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@img/sharp-linux-x64@0.34.5",
          "Name": "@img/sharp-linux-x64",
          "Identifier": {
            "PURL": "pkg:npm/%40img/sharp-linux-x64@0.34.5",
            "UID": "c3a9d470fdd551b4"
          },
          "Version": "0.34.5",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/next/node_modules/sharp/node_modules/@img/sharp-linux-x64/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@img/sharp-linuxmusl-x64@0.34.4",
          "Name": "@img/sharp-linuxmusl-x64",
          "Identifier": {
            "PURL": "pkg:npm/%40img/sharp-linuxmusl-x64@0.34.4",
            "UID": "ff53d35eb754d614"
          },
          "Version": "0.34.4",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@img/sharp-linuxmusl-x64/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@img/sharp-linuxmusl-x64@0.34.5",
          "Name": "@img/sharp-linuxmusl-x64",
          "Identifier": {
            "PURL": "pkg:npm/%40img/sharp-linuxmusl-x64@0.34.5",
            "UID": "a229ae1bfd284580"
          },
          "Version": "0.34.5",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/next/node_modules/sharp/node_modules/@img/sharp-linuxmusl-x64/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@isaacs/fs-minipass@4.0.1",
          "Name": "@isaacs/fs-minipass",
          "Identifier": {
            "PURL": "pkg:npm/%40isaacs/fs-minipass@4.0.1",
            "UID": "a243149143caa5d3"
          },
          "Version": "4.0.1",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@isaacs/fs-minipass/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@isaacs/string-locale-compare@1.1.0",
          "Name": "@isaacs/string-locale-compare",
          "Identifier": {
            "PURL": "pkg:npm/%40isaacs/string-locale-compare@1.1.0",
            "UID": "4b7c47e3454f8345"
          },
          "Version": "1.1.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@isaacs/string-locale-compare/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@next/env@16.2.9",
          "Name": "@next/env",
          "Identifier": {
            "PURL": "pkg:npm/%40next/env@16.2.9",
            "UID": "a168a1a40b493f14"
          },
          "Version": "16.2.9",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@next/env/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@npmcli/agent@4.0.2",
          "Name": "@npmcli/agent",
          "Identifier": {
            "PURL": "pkg:npm/%40npmcli/agent@4.0.2",
            "UID": "3fa7699fb2a76a9a"
          },
          "Version": "4.0.2",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/agent/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@npmcli/arborist@9.9.1",
          "Name": "@npmcli/arborist",
          "Identifier": {
            "PURL": "pkg:npm/%40npmcli/arborist@9.9.1",
            "UID": "85504a0269f62d8d"
          },
          "Version": "9.9.1",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/arborist/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@npmcli/config@10.12.0",
          "Name": "@npmcli/config",
          "Identifier": {
            "PURL": "pkg:npm/%40npmcli/config@10.12.0",
            "UID": "cffcf31a2130c4e3"
          },
          "Version": "10.12.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/config/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@npmcli/fs@5.0.0",
          "Name": "@npmcli/fs",
          "Identifier": {
            "PURL": "pkg:npm/%40npmcli/fs@5.0.0",
            "UID": "c8117500576f6ced"
          },
          "Version": "5.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/fs/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@npmcli/git@7.0.2",
          "Name": "@npmcli/git",
          "Identifier": {
            "PURL": "pkg:npm/%40npmcli/git@7.0.2",
            "UID": "1dbf0a5690695b0"
          },
          "Version": "7.0.2",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/git/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@npmcli/installed-package-contents@4.0.0",
          "Name": "@npmcli/installed-package-contents",
          "Identifier": {
            "PURL": "pkg:npm/%40npmcli/installed-package-contents@4.0.0",
            "UID": "f8b7211aeeb626eb"
          },
          "Version": "4.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/installed-package-contents/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@npmcli/map-workspaces@5.0.3",
          "Name": "@npmcli/map-workspaces",
          "Identifier": {
            "PURL": "pkg:npm/%40npmcli/map-workspaces@5.0.3",
            "UID": "16ac0fb6ae1a33f4"
          },
          "Version": "5.0.3",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/map-workspaces/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@npmcli/metavuln-calculator@9.0.3",
          "Name": "@npmcli/metavuln-calculator",
          "Identifier": {
            "PURL": "pkg:npm/%40npmcli/metavuln-calculator@9.0.3",
            "UID": "3a23b7833b0b5f20"
          },
          "Version": "9.0.3",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/metavuln-calculator/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@npmcli/name-from-folder@4.0.0",
          "Name": "@npmcli/name-from-folder",
          "Identifier": {
            "PURL": "pkg:npm/%40npmcli/name-from-folder@4.0.0",
            "UID": "d27c720e3ae2edc6"
          },
          "Version": "4.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/name-from-folder/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@npmcli/node-gyp@5.0.0",
          "Name": "@npmcli/node-gyp",
          "Identifier": {
            "PURL": "pkg:npm/%40npmcli/node-gyp@5.0.0",
            "UID": "698db9fa08ba9b90"
          },
          "Version": "5.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/node-gyp/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@npmcli/package-json@7.0.5",
          "Name": "@npmcli/package-json",
          "Identifier": {
            "PURL": "pkg:npm/%40npmcli/package-json@7.0.5",
            "UID": "4c5a1c7780f4f4cc"
          },
          "Version": "7.0.5",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/package-json/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@npmcli/promise-spawn@9.0.1",
          "Name": "@npmcli/promise-spawn",
          "Identifier": {
            "PURL": "pkg:npm/%40npmcli/promise-spawn@9.0.1",
            "UID": "a88c373a1e8ab1ac"
          },
          "Version": "9.0.1",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/promise-spawn/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@npmcli/query@5.0.0",
          "Name": "@npmcli/query",
          "Identifier": {
            "PURL": "pkg:npm/%40npmcli/query@5.0.0",
            "UID": "f3a974e2dfc105ee"
          },
          "Version": "5.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/query/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@npmcli/redact@4.0.0",
          "Name": "@npmcli/redact",
          "Identifier": {
            "PURL": "pkg:npm/%40npmcli/redact@4.0.0",
            "UID": "c0e751bc9297c412"
          },
          "Version": "4.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/redact/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@npmcli/run-script@10.0.4",
          "Name": "@npmcli/run-script",
          "Identifier": {
            "PURL": "pkg:npm/%40npmcli/run-script@10.0.4",
            "UID": "a36824b9bd7c7f1c"
          },
          "Version": "10.0.4",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/run-script/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/api@1.9.0",
          "Name": "@opentelemetry/api",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/api@1.9.0",
            "UID": "b725308a7a3847a1"
          },
          "Version": "1.9.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/api/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/api-logs@0.207.0",
          "Name": "@opentelemetry/api-logs",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/api-logs@0.207.0",
            "UID": "9a1840e615318499"
          },
          "Version": "0.207.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@prisma/instrumentation/node_modules/@opentelemetry/instrumentation/node_modules/@opentelemetry/api-logs/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/api-logs@0.208.0",
          "Name": "@opentelemetry/api-logs",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/api-logs@0.208.0",
            "UID": "1ed2c6ffcbd82be9"
          },
          "Version": "0.208.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@fastify/otel/node_modules/@opentelemetry/instrumentation/node_modules/@opentelemetry/api-logs/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/api-logs@0.211.0",
          "Name": "@opentelemetry/api-logs",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/api-logs@0.211.0",
            "UID": "cca702811d1df42c"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/api-logs/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/api-logs@0.217.0",
          "Name": "@opentelemetry/api-logs",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/api-logs@0.217.0",
            "UID": "6c57cee3264c97fd"
          },
          "Version": "0.217.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation/node_modules/@opentelemetry/api-logs/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/context-async-hooks@2.7.1",
          "Name": "@opentelemetry/context-async-hooks",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/context-async-hooks@2.7.1",
            "UID": "afc2be79090c97e8"
          },
          "Version": "2.7.1",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/context-async-hooks/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/core@2.2.0",
          "Name": "@opentelemetry/core",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/core@2.2.0",
            "UID": "5ffeb1846b88b56c"
          },
          "Version": "2.2.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/sql-common/node_modules/@opentelemetry/core/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/core@2.5.0",
          "Name": "@opentelemetry/core",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/core@2.5.0",
            "UID": "d7bbfe02289765ad"
          },
          "Version": "2.5.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/core/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/core@2.6.0",
          "Name": "@opentelemetry/core",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/core@2.6.0",
            "UID": "dc12a42f25609421"
          },
          "Version": "2.6.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@fastify/otel/node_modules/@opentelemetry/core/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/core@2.6.0",
          "Name": "@opentelemetry/core",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/core@2.6.0",
            "UID": "7fffc47119c7bd0b"
          },
          "Version": "2.6.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-amqplib/node_modules/@opentelemetry/core/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/core@2.6.0",
          "Name": "@opentelemetry/core",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/core@2.6.0",
            "UID": "db08c12a29f2dacc"
          },
          "Version": "2.6.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-connect/node_modules/@opentelemetry/core/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/core@2.6.0",
          "Name": "@opentelemetry/core",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/core@2.6.0",
            "UID": "86876a73ccc359a9"
          },
          "Version": "2.6.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-express/node_modules/@opentelemetry/core/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/core@2.6.0",
          "Name": "@opentelemetry/core",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/core@2.6.0",
            "UID": "49cd3e258004ef38"
          },
          "Version": "2.6.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-fs/node_modules/@opentelemetry/core/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/core@2.6.0",
          "Name": "@opentelemetry/core",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/core@2.6.0",
            "UID": "54a050285deee65e"
          },
          "Version": "2.6.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-hapi/node_modules/@opentelemetry/core/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/core@2.6.0",
          "Name": "@opentelemetry/core",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/core@2.6.0",
            "UID": "9cf1fac2f4c457c4"
          },
          "Version": "2.6.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-koa/node_modules/@opentelemetry/core/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/core@2.6.0",
          "Name": "@opentelemetry/core",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/core@2.6.0",
            "UID": "b17e430c41e3d458"
          },
          "Version": "2.6.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-mongoose/node_modules/@opentelemetry/core/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/core@2.6.0",
          "Name": "@opentelemetry/core",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/core@2.6.0",
            "UID": "4e2e722b82bf305c"
          },
          "Version": "2.6.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-pg/node_modules/@opentelemetry/core/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/core@2.6.0",
          "Name": "@opentelemetry/core",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/core@2.6.0",
            "UID": "f1f0b942860bd304"
          },
          "Version": "2.6.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-undici/node_modules/@opentelemetry/core/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/core@2.6.0",
          "Name": "@opentelemetry/core",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/core@2.6.0",
            "UID": "6ecd2af1e585ace1"
          },
          "Version": "2.6.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@sentry/node/node_modules/@opentelemetry/core/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/core@2.7.1",
          "Name": "@opentelemetry/core",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/core@2.7.1",
            "UID": "828ae1d0717f3340"
          },
          "Version": "2.7.1",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/resources/node_modules/@opentelemetry/core/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/core@2.7.1",
          "Name": "@opentelemetry/core",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/core@2.7.1",
            "UID": "9c94ae84a16e1b56"
          },
          "Version": "2.7.1",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/sdk-trace-base/node_modules/@opentelemetry/core/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.207.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.207.0",
            "UID": "3b06fbd723731049"
          },
          "Version": "0.207.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@prisma/instrumentation/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.208.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.208.0",
            "UID": "83054ec0d715a27d"
          },
          "Version": "0.208.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@fastify/otel/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "9c703ba0eaae3f2e"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-amqplib/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "d9721fa2396c1888"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-connect/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "a2968cfc82443832"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-dataloader/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "91029dfc35734752"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-express/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "84c2eec876144f9"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-fs/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "769e09092d97b624"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-generic-pool/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "3c2c11cd398de3e0"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-graphql/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "a36215277ab69cb1"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-hapi/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "3d9eb555b76c5143"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-http/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "559874f8e7610a3e"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-ioredis/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "57809b503358462d"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-kafkajs/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "b6006ca2b11c83ca"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-knex/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "a2b6bde92b35b7c3"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-koa/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "1613a3f02370a9fe"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-lru-memoizer/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "8fcaf5d95207a00c"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-mongodb/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "fd489bc90e666310"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-mongoose/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "c0dc3c7212930ee3"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-mysql/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "121eb78054569743"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-mysql2/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "9d5d4d30b58f3156"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-pg/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "54fcabdbd90d259f"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-redis/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "fd8b8a55259aff2f"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-tedious/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "a0ff6049fa667e51"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-undici/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.211.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.211.0",
            "UID": "55ae0f712c9c73e0"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@sentry/node/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation@0.217.0",
          "Name": "@opentelemetry/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation@0.217.0",
            "UID": "812dd12130d158"
          },
          "Version": "0.217.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-amqplib@0.58.0",
          "Name": "@opentelemetry/instrumentation-amqplib",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-amqplib@0.58.0",
            "UID": "5375713d9d7c7f1e"
          },
          "Version": "0.58.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-amqplib/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-connect@0.54.0",
          "Name": "@opentelemetry/instrumentation-connect",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-connect@0.54.0",
            "UID": "8a930ae1d97715fe"
          },
          "Version": "0.54.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-connect/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-dataloader@0.28.0",
          "Name": "@opentelemetry/instrumentation-dataloader",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-dataloader@0.28.0",
            "UID": "f1f62e1713cb74f8"
          },
          "Version": "0.28.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-dataloader/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-express@0.59.0",
          "Name": "@opentelemetry/instrumentation-express",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-express@0.59.0",
            "UID": "2912d9ea33fc07ec"
          },
          "Version": "0.59.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-express/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-fs@0.30.0",
          "Name": "@opentelemetry/instrumentation-fs",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-fs@0.30.0",
            "UID": "e9c150f16d48cf49"
          },
          "Version": "0.30.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-fs/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-generic-pool@0.54.0",
          "Name": "@opentelemetry/instrumentation-generic-pool",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-generic-pool@0.54.0",
            "UID": "a2011fde9caf49a8"
          },
          "Version": "0.54.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-generic-pool/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-graphql@0.58.0",
          "Name": "@opentelemetry/instrumentation-graphql",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-graphql@0.58.0",
            "UID": "9b11bbdbd3215940"
          },
          "Version": "0.58.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-graphql/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-hapi@0.57.0",
          "Name": "@opentelemetry/instrumentation-hapi",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-hapi@0.57.0",
            "UID": "c99ad1dddb1618ad"
          },
          "Version": "0.57.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-hapi/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-http@0.211.0",
          "Name": "@opentelemetry/instrumentation-http",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-http@0.211.0",
            "UID": "a438385b53c098ca"
          },
          "Version": "0.211.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-http/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-ioredis@0.59.0",
          "Name": "@opentelemetry/instrumentation-ioredis",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-ioredis@0.59.0",
            "UID": "e23206f6575ff018"
          },
          "Version": "0.59.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-ioredis/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-kafkajs@0.20.0",
          "Name": "@opentelemetry/instrumentation-kafkajs",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-kafkajs@0.20.0",
            "UID": "925fa73b6e2f3c00"
          },
          "Version": "0.20.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-kafkajs/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-knex@0.55.0",
          "Name": "@opentelemetry/instrumentation-knex",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-knex@0.55.0",
            "UID": "9d79ece3ad932ed2"
          },
          "Version": "0.55.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-knex/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-koa@0.59.0",
          "Name": "@opentelemetry/instrumentation-koa",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-koa@0.59.0",
            "UID": "4560221ab9fd0fe3"
          },
          "Version": "0.59.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-koa/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-lru-memoizer@0.55.0",
          "Name": "@opentelemetry/instrumentation-lru-memoizer",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-lru-memoizer@0.55.0",
            "UID": "ef3a4adf1300adf0"
          },
          "Version": "0.55.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-lru-memoizer/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-mongodb@0.64.0",
          "Name": "@opentelemetry/instrumentation-mongodb",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-mongodb@0.64.0",
            "UID": "1b2000048974b591"
          },
          "Version": "0.64.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-mongodb/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-mongoose@0.57.0",
          "Name": "@opentelemetry/instrumentation-mongoose",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-mongoose@0.57.0",
            "UID": "af2894aaaf9e3c5f"
          },
          "Version": "0.57.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-mongoose/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-mysql@0.57.0",
          "Name": "@opentelemetry/instrumentation-mysql",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-mysql@0.57.0",
            "UID": "e57266e22f448be5"
          },
          "Version": "0.57.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-mysql/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-mysql2@0.57.0",
          "Name": "@opentelemetry/instrumentation-mysql2",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-mysql2@0.57.0",
            "UID": "eaed5a6d0895fa02"
          },
          "Version": "0.57.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-mysql2/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-pg@0.63.0",
          "Name": "@opentelemetry/instrumentation-pg",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-pg@0.63.0",
            "UID": "ab6175147ddb4ada"
          },
          "Version": "0.63.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-pg/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-redis@0.59.0",
          "Name": "@opentelemetry/instrumentation-redis",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-redis@0.59.0",
            "UID": "cdce48e86ce4face"
          },
          "Version": "0.59.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-redis/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-tedious@0.30.0",
          "Name": "@opentelemetry/instrumentation-tedious",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-tedious@0.30.0",
            "UID": "d112ff1a619152d"
          },
          "Version": "0.30.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-tedious/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/instrumentation-undici@0.21.0",
          "Name": "@opentelemetry/instrumentation-undici",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/instrumentation-undici@0.21.0",
            "UID": "453de2f7b6fde446"
          },
          "Version": "0.21.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation-undici/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/redis-common@0.38.2",
          "Name": "@opentelemetry/redis-common",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/redis-common@0.38.2",
            "UID": "9e98ccaea28bead7"
          },
          "Version": "0.38.2",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/redis-common/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/resources@2.6.0",
          "Name": "@opentelemetry/resources",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/resources@2.6.0",
            "UID": "6bdc00438b65a3ed"
          },
          "Version": "2.6.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@sentry/node/node_modules/@opentelemetry/resources/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/resources@2.7.1",
          "Name": "@opentelemetry/resources",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/resources@2.7.1",
            "UID": "e0bb6138669006af"
          },
          "Version": "2.7.1",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/resources/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/sdk-trace-base@2.6.0",
          "Name": "@opentelemetry/sdk-trace-base",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/sdk-trace-base@2.6.0",
            "UID": "5ee5caea3a37180d"
          },
          "Version": "2.6.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@sentry/node/node_modules/@opentelemetry/sdk-trace-base/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/sdk-trace-base@2.7.1",
          "Name": "@opentelemetry/sdk-trace-base",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/sdk-trace-base@2.7.1",
            "UID": "f67b2dd3c4bf17f4"
          },
          "Version": "2.7.1",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/sdk-trace-base/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/semantic-conventions@1.38.0",
          "Name": "@opentelemetry/semantic-conventions",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/semantic-conventions@1.38.0",
            "UID": "588534199fc141f1"
          },
          "Version": "1.38.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/core/node_modules/@opentelemetry/semantic-conventions/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/semantic-conventions@1.38.0",
          "Name": "@opentelemetry/semantic-conventions",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/semantic-conventions@1.38.0",
            "UID": "3362b5c19b07ad01"
          },
          "Version": "1.38.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/sql-common/node_modules/@opentelemetry/core/node_modules/@opentelemetry/semantic-conventions/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/semantic-conventions@1.38.0",
          "Name": "@opentelemetry/semantic-conventions",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/semantic-conventions@1.38.0",
            "UID": "d3284f76d94a8a88"
          },
          "Version": "1.38.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@sentry/nextjs/node_modules/@opentelemetry/semantic-conventions/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/semantic-conventions@1.38.0",
          "Name": "@opentelemetry/semantic-conventions",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/semantic-conventions@1.38.0",
            "UID": "6bc26890b775607e"
          },
          "Version": "1.38.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@sentry/node/node_modules/@opentelemetry/resources/node_modules/@opentelemetry/semantic-conventions/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/semantic-conventions@1.40.0",
          "Name": "@opentelemetry/semantic-conventions",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/semantic-conventions@1.40.0",
            "UID": "35d9e3b55a680a8"
          },
          "Version": "1.40.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/semantic-conventions/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@opentelemetry/sql-common@0.41.2",
          "Name": "@opentelemetry/sql-common",
          "Identifier": {
            "PURL": "pkg:npm/%40opentelemetry/sql-common@0.41.2",
            "UID": "920e9d51a00eefa6"
          },
          "Version": "0.41.2",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/sql-common/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@planetscale/database@1.19.0",
          "Name": "@planetscale/database",
          "Identifier": {
            "PURL": "pkg:npm/%40planetscale/database@1.19.0",
            "UID": "41b4aa5bbc8a8134"
          },
          "Version": "1.19.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@planetscale/database/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@prisma/adapter-pg@7.4.0",
          "Name": "@prisma/adapter-pg",
          "Identifier": {
            "PURL": "pkg:npm/%40prisma/adapter-pg@7.4.0",
            "UID": "f318d419eac8862c"
          },
          "Version": "7.4.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@prisma/adapter-pg/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@prisma/adapter-planetscale@7.4.0",
          "Name": "@prisma/adapter-planetscale",
          "Identifier": {
            "PURL": "pkg:npm/%40prisma/adapter-planetscale@7.4.0",
            "UID": "5bd0df6573b1e5a2"
          },
          "Version": "7.4.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@prisma/adapter-planetscale/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@prisma/client@7.4.0",
          "Name": "@prisma/client",
          "Identifier": {
            "PURL": "pkg:npm/%40prisma/client@7.4.0",
            "UID": "62fbcc760ddecbe6"
          },
          "Version": "7.4.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@prisma/client/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@prisma/client-runtime-utils@7.4.0",
          "Name": "@prisma/client-runtime-utils",
          "Identifier": {
            "PURL": "pkg:npm/%40prisma/client-runtime-utils@7.4.0",
            "UID": "f4fa3e624686045e"
          },
          "Version": "7.4.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@prisma/client-runtime-utils/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@prisma/debug@7.4.0",
          "Name": "@prisma/debug",
          "Identifier": {
            "PURL": "pkg:npm/%40prisma/debug@7.4.0",
            "UID": "5ae180b8f2918b37"
          },
          "Version": "7.4.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@prisma/driver-adapter-utils/node_modules/@prisma/debug/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@prisma/debug@7.4.2",
          "Name": "@prisma/debug",
          "Identifier": {
            "PURL": "pkg:npm/%40prisma/debug@7.4.2",
            "UID": "5506bbe1345b832e"
          },
          "Version": "7.4.2",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@prisma/debug/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@prisma/driver-adapter-utils@7.4.0",
          "Name": "@prisma/driver-adapter-utils",
          "Identifier": {
            "PURL": "pkg:npm/%40prisma/driver-adapter-utils@7.4.0",
            "UID": "6246330b456b3b0b"
          },
          "Version": "7.4.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@prisma/driver-adapter-utils/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@prisma/instrumentation@7.2.0",
          "Name": "@prisma/instrumentation",
          "Identifier": {
            "PURL": "pkg:npm/%40prisma/instrumentation@7.2.0",
            "UID": "b17d978fd2cec2f2"
          },
          "Version": "7.2.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@prisma/instrumentation/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@sentry/core@10.43.0",
          "Name": "@sentry/core",
          "Identifier": {
            "PURL": "pkg:npm/%40sentry/core@10.43.0",
            "UID": "ddd9c131c193e925"
          },
          "Version": "10.43.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@sentry/core/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@sentry/nextjs@10.43.0",
          "Name": "@sentry/nextjs",
          "Identifier": {
            "PURL": "pkg:npm/%40sentry/nextjs@10.43.0",
            "UID": "9212cdc1643d59c0"
          },
          "Version": "10.43.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@sentry/nextjs/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@sentry/node@10.43.0",
          "Name": "@sentry/node",
          "Identifier": {
            "PURL": "pkg:npm/%40sentry/node@10.43.0",
            "UID": "dde04aeca4ce366f"
          },
          "Version": "10.43.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@sentry/node/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@sentry/node-core@10.43.0",
          "Name": "@sentry/node-core",
          "Identifier": {
            "PURL": "pkg:npm/%40sentry/node-core@10.43.0",
            "UID": "6c8bcf7674cebb0d"
          },
          "Version": "10.43.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@sentry/node-core/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@sentry/opentelemetry@10.43.0",
          "Name": "@sentry/opentelemetry",
          "Identifier": {
            "PURL": "pkg:npm/%40sentry/opentelemetry@10.43.0",
            "UID": "1384b8452a1dc67f"
          },
          "Version": "10.43.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@sentry/opentelemetry/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@sigstore/bundle@4.0.0",
          "Name": "@sigstore/bundle",
          "Identifier": {
            "PURL": "pkg:npm/%40sigstore/bundle@4.0.0",
            "UID": "4768290514d54a7e"
          },
          "Version": "4.0.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/bundle/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@sigstore/core@3.2.1",
          "Name": "@sigstore/core",
          "Identifier": {
            "PURL": "pkg:npm/%40sigstore/core@3.2.1",
            "UID": "2459cff4fcada873"
          },
          "Version": "3.2.1",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/core/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@sigstore/protobuf-specs@0.5.1",
          "Name": "@sigstore/protobuf-specs",
          "Identifier": {
            "PURL": "pkg:npm/%40sigstore/protobuf-specs@0.5.1",
            "UID": "718c51160885db1d"
          },
          "Version": "0.5.1",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/protobuf-specs/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@sigstore/sign@4.1.1",
          "Name": "@sigstore/sign",
          "Identifier": {
            "PURL": "pkg:npm/%40sigstore/sign@4.1.1",
            "UID": "8cde9abb0aa0ae81"
          },
          "Version": "4.1.1",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/sign/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@sigstore/tuf@4.0.2",
          "Name": "@sigstore/tuf",
          "Identifier": {
            "PURL": "pkg:npm/%40sigstore/tuf@4.0.2",
            "UID": "ffa89c0092633c39"
          },
          "Version": "4.0.2",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/tuf/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@sigstore/verify@3.1.1",
          "Name": "@sigstore/verify",
          "Identifier": {
            "PURL": "pkg:npm/%40sigstore/verify@3.1.1",
            "UID": "905d81304c08e5c8"
          },
          "Version": "3.1.1",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/verify/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@swc/helpers@0.5.15",
          "Name": "@swc/helpers",
          "Identifier": {
            "PURL": "pkg:npm/%40swc/helpers@0.5.15",
            "UID": "498612c409258958"
          },
          "Version": "0.5.15",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@swc/helpers/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@t3-oss/env-core@0.13.10",
          "Name": "@t3-oss/env-core",
          "Identifier": {
            "PURL": "pkg:npm/%40t3-oss/env-core@0.13.10",
            "UID": "3cc1da62ee7e21b"
          },
          "Version": "0.13.10",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@t3-oss/env-core/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@t3-oss/env-nextjs@0.13.10",
          "Name": "@t3-oss/env-nextjs",
          "Identifier": {
            "PURL": "pkg:npm/%40t3-oss/env-nextjs@0.13.10",
            "UID": "e8dca24d7fdbbbd7"
          },
          "Version": "0.13.10",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@t3-oss/env-nextjs/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@tufjs/canonical-json@2.0.0",
          "Name": "@tufjs/canonical-json",
          "Identifier": {
            "PURL": "pkg:npm/%40tufjs/canonical-json@2.0.0",
            "UID": "c9bd83d46147e58a"
          },
          "Version": "2.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@tufjs/canonical-json/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "@tufjs/models@4.1.0",
          "Name": "@tufjs/models",
          "Identifier": {
            "PURL": "pkg:npm/%40tufjs/models@4.1.0",
            "UID": "98a1e2a0a0d02abb"
          },
          "Version": "4.1.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/@tufjs/models/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "abbrev@4.0.0",
          "Name": "abbrev",
          "Identifier": {
            "PURL": "pkg:npm/abbrev@4.0.0",
            "UID": "8d8e13cc8f0eb11f"
          },
          "Version": "4.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/abbrev/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "agent-base@7.1.4",
          "Name": "agent-base",
          "Identifier": {
            "PURL": "pkg:npm/agent-base@7.1.4",
            "UID": "a29114964ca5cb1"
          },
          "Version": "7.1.4",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/agent-base/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "ansi-styles@4.3.0",
          "Name": "ansi-styles",
          "Identifier": {
            "PURL": "pkg:npm/ansi-styles@4.3.0",
            "UID": "eea7bd34ab76df42"
          },
          "Version": "4.3.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:22c300853e0b2357d534de838629aa8a04c1980e2e0a342e6b9c9b5a931e96f9"
          },
          "FilePath": "app/node_modules/ansi-styles/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "aproba@2.1.0",
          "Name": "aproba",
          "Identifier": {
            "PURL": "pkg:npm/aproba@2.1.0",
            "UID": "65b5d298c3c834d"
          },
          "Version": "2.1.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/aproba/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "archy@1.0.0",
          "Name": "archy",
          "Identifier": {
            "PURL": "pkg:npm/archy@1.0.0",
            "UID": "c6f97df2c6bd73cd"
          },
          "Version": "1.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/archy/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "async-mutex@0.5.0",
          "Name": "async-mutex",
          "Identifier": {
            "PURL": "pkg:npm/async-mutex@0.5.0",
            "UID": "cf16b67758b8509f"
          },
          "Version": "0.5.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/async-mutex/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "balanced-match@4.0.3",
          "Name": "balanced-match",
          "Identifier": {
            "PURL": "pkg:npm/balanced-match@4.0.3",
            "UID": "d3227f02e937450d"
          },
          "Version": "4.0.3",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/balanced-match/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "balanced-match@4.0.4",
          "Name": "balanced-match",
          "Identifier": {
            "PURL": "pkg:npm/balanced-match@4.0.4",
            "UID": "c3116dd1e0a6c249"
          },
          "Version": "4.0.4",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@fastify/otel/node_modules/minimatch/node_modules/brace-expansion/node_modules/balanced-match/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "balanced-match@4.0.4",
          "Name": "balanced-match",
          "Identifier": {
            "PURL": "pkg:npm/balanced-match@4.0.4",
            "UID": "130610ebd0a80b54"
          },
          "Version": "4.0.4",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/balanced-match/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "bin-links@6.0.2",
          "Name": "bin-links",
          "Identifier": {
            "PURL": "pkg:npm/bin-links@6.0.2",
            "UID": "b514fce0680ac539"
          },
          "Version": "6.0.2",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/bin-links/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "binary-extensions@3.1.0",
          "Name": "binary-extensions",
          "Identifier": {
            "PURL": "pkg:npm/binary-extensions@3.1.0",
            "UID": "ea5ef4874c55097a"
          },
          "Version": "3.1.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/binary-extensions/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "brace-expansion@5.0.4",
          "Name": "brace-expansion",
          "Identifier": {
            "PURL": "pkg:npm/brace-expansion@5.0.4",
            "UID": "507e8c4626f5499"
          },
          "Version": "5.0.4",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@fastify/otel/node_modules/minimatch/node_modules/brace-expansion/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "brace-expansion@5.0.6",
          "Name": "brace-expansion",
          "Identifier": {
            "PURL": "pkg:npm/brace-expansion@5.0.6",
            "UID": "c7fa20b78f38b6c8"
          },
          "Version": "5.0.6",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/brace-expansion/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "brace-expansion@5.0.9",
          "Name": "brace-expansion",
          "Identifier": {
            "PURL": "pkg:npm/brace-expansion@5.0.9",
            "UID": "868042afe866f0f9"
          },
          "Version": "5.0.9",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "cacache@20.0.4",
          "Name": "cacache",
          "Identifier": {
            "PURL": "pkg:npm/cacache@20.0.4",
            "UID": "d2b15bdfb2c81564"
          },
          "Version": "20.0.4",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/cacache/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "chalk@4.1.2",
          "Name": "chalk",
          "Identifier": {
            "PURL": "pkg:npm/chalk@4.1.2",
            "UID": "d8afdbaaa1426ed0"
          },
          "Version": "4.1.2",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:22c300853e0b2357d534de838629aa8a04c1980e2e0a342e6b9c9b5a931e96f9"
          },
          "FilePath": "app/node_modules/chalk/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "chalk@5.6.2",
          "Name": "chalk",
          "Identifier": {
            "PURL": "pkg:npm/chalk@5.6.2",
            "UID": "1f19bd2e420a59a6"
          },
          "Version": "5.6.2",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/chalk/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "chownr@3.0.0",
          "Name": "chownr",
          "Identifier": {
            "PURL": "pkg:npm/chownr@3.0.0",
            "UID": "c2446e59cf4aad08"
          },
          "Version": "3.0.0",
          "Licenses": [
            "BlueOak-1.0.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/chownr/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "ci-info@4.4.0",
          "Name": "ci-info",
          "Identifier": {
            "PURL": "pkg:npm/ci-info@4.4.0",
            "UID": "ec9c48df6b096b3a"
          },
          "Version": "4.4.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/ci-info/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "cidr-regex@5.0.5",
          "Name": "cidr-regex",
          "Identifier": {
            "PURL": "pkg:npm/cidr-regex@5.0.5",
            "UID": "d9b626fe74a2c8a1"
          },
          "Version": "5.0.5",
          "Licenses": [
            "BSD-2-Clause"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/cidr-regex/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "client-only@0.0.1",
          "Name": "client-only",
          "Identifier": {
            "PURL": "pkg:npm/client-only@0.0.1",
            "UID": "5878e3cf522a10c2"
          },
          "Version": "0.0.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/client-only/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "cmd-shim@8.0.0",
          "Name": "cmd-shim",
          "Identifier": {
            "PURL": "pkg:npm/cmd-shim@8.0.0",
            "UID": "dc4dbb1907ad1cac"
          },
          "Version": "8.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/cmd-shim/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "color-convert@2.0.1",
          "Name": "color-convert",
          "Identifier": {
            "PURL": "pkg:npm/color-convert@2.0.1",
            "UID": "53f53a05810a0c4f"
          },
          "Version": "2.0.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:22c300853e0b2357d534de838629aa8a04c1980e2e0a342e6b9c9b5a931e96f9"
          },
          "FilePath": "app/node_modules/color-convert/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "color-name@1.1.4",
          "Name": "color-name",
          "Identifier": {
            "PURL": "pkg:npm/color-name@1.1.4",
            "UID": "a8d1ab0198f379c0"
          },
          "Version": "1.1.4",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:22c300853e0b2357d534de838629aa8a04c1980e2e0a342e6b9c9b5a931e96f9"
          },
          "FilePath": "app/node_modules/color-name/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "common-ancestor-path@2.0.0",
          "Name": "common-ancestor-path",
          "Identifier": {
            "PURL": "pkg:npm/common-ancestor-path@2.0.0",
            "UID": "5b6474ba7f3d4e57"
          },
          "Version": "2.0.0",
          "Licenses": [
            "BlueOak-1.0.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/common-ancestor-path/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "corepack@0.36.0",
          "Name": "corepack",
          "Identifier": {
            "PURL": "pkg:npm/corepack@0.36.0",
            "UID": "f8e0e53a2f75561c"
          },
          "Version": "0.36.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/corepack/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "cssesc@3.0.0",
          "Name": "cssesc",
          "Identifier": {
            "PURL": "pkg:npm/cssesc@3.0.0",
            "UID": "7f5523593daaa2d6"
          },
          "Version": "3.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/cssesc/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "debug@4.4.1",
          "Name": "debug",
          "Identifier": {
            "PURL": "pkg:npm/debug@4.4.1",
            "UID": "403a1a4018782674"
          },
          "Version": "4.4.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/debug/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "debug@4.4.3",
          "Name": "debug",
          "Identifier": {
            "PURL": "pkg:npm/debug@4.4.3",
            "UID": "cbfc08d5e097ff06"
          },
          "Version": "4.4.3",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/debug/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "detect-libc@2.1.2",
          "Name": "detect-libc",
          "Identifier": {
            "PURL": "pkg:npm/detect-libc@2.1.2",
            "UID": "ddf1cba2a5b1bd8"
          },
          "Version": "2.1.2",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/detect-libc/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "diff@8.0.4",
          "Name": "diff",
          "Identifier": {
            "PURL": "pkg:npm/diff@8.0.4",
            "UID": "65ff059d673f8358"
          },
          "Version": "8.0.4",
          "Licenses": [
            "BSD-3-Clause"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/diff/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "env-paths@2.2.1",
          "Name": "env-paths",
          "Identifier": {
            "PURL": "pkg:npm/env-paths@2.2.1",
            "UID": "4d5f9228dca262ad"
          },
          "Version": "2.2.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/env-paths/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "exponential-backoff@3.1.3",
          "Name": "exponential-backoff",
          "Identifier": {
            "PURL": "pkg:npm/exponential-backoff@3.1.3",
            "UID": "1b8f0088b2ee45c2"
          },
          "Version": "3.1.3",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/exponential-backoff/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "fastest-levenshtein@1.0.16",
          "Name": "fastest-levenshtein",
          "Identifier": {
            "PURL": "pkg:npm/fastest-levenshtein@1.0.16",
            "UID": "c2930316b43e3802"
          },
          "Version": "1.0.16",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/fastest-levenshtein/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "fdir@6.5.0",
          "Name": "fdir",
          "Identifier": {
            "PURL": "pkg:npm/fdir@6.5.0",
            "UID": "803b6232542f97ca"
          },
          "Version": "6.5.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/tinyglobby/node_modules/fdir/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "forwarded-parse@2.1.2",
          "Name": "forwarded-parse",
          "Identifier": {
            "PURL": "pkg:npm/forwarded-parse@2.1.2",
            "UID": "e7a301f9b3d3702e"
          },
          "Version": "2.1.2",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/forwarded-parse/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "fs-minipass@3.0.3",
          "Name": "fs-minipass",
          "Identifier": {
            "PURL": "pkg:npm/fs-minipass@3.0.3",
            "UID": "fcead9aef62eff18"
          },
          "Version": "3.0.3",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/fs-minipass/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "glob@13.0.6",
          "Name": "glob",
          "Identifier": {
            "PURL": "pkg:npm/glob@13.0.6",
            "UID": "172563f1159147e8"
          },
          "Version": "13.0.6",
          "Licenses": [
            "BlueOak-1.0.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/glob/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "graceful-fs@4.2.11",
          "Name": "graceful-fs",
          "Identifier": {
            "PURL": "pkg:npm/graceful-fs@4.2.11",
            "UID": "48999ee23c560636"
          },
          "Version": "4.2.11",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/graceful-fs/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "has-flag@4.0.0",
          "Name": "has-flag",
          "Identifier": {
            "PURL": "pkg:npm/has-flag@4.0.0",
            "UID": "af04e585b6437cc7"
          },
          "Version": "4.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/has-flag/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "hosted-git-info@9.0.3",
          "Name": "hosted-git-info",
          "Identifier": {
            "PURL": "pkg:npm/hosted-git-info@9.0.3",
            "UID": "955c795a2266a14"
          },
          "Version": "9.0.3",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/hosted-git-info/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "http-cache-semantics@4.2.0",
          "Name": "http-cache-semantics",
          "Identifier": {
            "PURL": "pkg:npm/http-cache-semantics@4.2.0",
            "UID": "f7b0a7c67def6ec7"
          },
          "Version": "4.2.0",
          "Licenses": [
            "BSD-2-Clause"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/http-cache-semantics/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "http-proxy-agent@7.0.2",
          "Name": "http-proxy-agent",
          "Identifier": {
            "PURL": "pkg:npm/http-proxy-agent@7.0.2",
            "UID": "b03040e191aa89aa"
          },
          "Version": "7.0.2",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/http-proxy-agent/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "https-proxy-agent@7.0.6",
          "Name": "https-proxy-agent",
          "Identifier": {
            "PURL": "pkg:npm/https-proxy-agent@7.0.6",
            "UID": "e351f3713548ce82"
          },
          "Version": "7.0.6",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/https-proxy-agent/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "iconv-lite@0.7.2",
          "Name": "iconv-lite",
          "Identifier": {
            "PURL": "pkg:npm/iconv-lite@0.7.2",
            "UID": "fd5861248059c4c6"
          },
          "Version": "0.7.2",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/iconv-lite/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "ignore-walk@8.0.0",
          "Name": "ignore-walk",
          "Identifier": {
            "PURL": "pkg:npm/ignore-walk@8.0.0",
            "UID": "a266cd064d64a8f9"
          },
          "Version": "8.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/ignore-walk/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "import-in-the-middle@2.0.0",
          "Name": "import-in-the-middle",
          "Identifier": {
            "PURL": "pkg:npm/import-in-the-middle@2.0.0",
            "UID": "13b38d3e98a06f05"
          },
          "Version": "2.0.0",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@fastify/otel/node_modules/@opentelemetry/instrumentation/node_modules/import-in-the-middle/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "import-in-the-middle@2.0.6",
          "Name": "import-in-the-middle",
          "Identifier": {
            "PURL": "pkg:npm/import-in-the-middle@2.0.6",
            "UID": "311cc2b763d82220"
          },
          "Version": "2.0.6",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/import-in-the-middle/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "import-in-the-middle@3.0.1",
          "Name": "import-in-the-middle",
          "Identifier": {
            "PURL": "pkg:npm/import-in-the-middle@3.0.1",
            "UID": "1153c8b21a0aba6d"
          },
          "Version": "3.0.1",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@opentelemetry/instrumentation/node_modules/import-in-the-middle/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "ini@6.0.0",
          "Name": "ini",
          "Identifier": {
            "PURL": "pkg:npm/ini@6.0.0",
            "UID": "f005920fa3606b13"
          },
          "Version": "6.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/ini/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "init-package-json@8.2.5",
          "Name": "init-package-json",
          "Identifier": {
            "PURL": "pkg:npm/init-package-json@8.2.5",
            "UID": "3f8b377ec7565070"
          },
          "Version": "8.2.5",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/init-package-json/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "ip-address@10.5.0",
          "Name": "ip-address",
          "Identifier": {
            "PURL": "pkg:npm/ip-address@10.5.0",
            "UID": "c0bf6846f3271c23"
          },
          "Version": "10.5.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/ip-address/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "is-cidr@6.0.4",
          "Name": "is-cidr",
          "Identifier": {
            "PURL": "pkg:npm/is-cidr@6.0.4",
            "UID": "4d71ad1f3f6a859a"
          },
          "Version": "6.0.4",
          "Licenses": [
            "BSD-2-Clause"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/is-cidr/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "isexe@4.0.0",
          "Name": "isexe",
          "Identifier": {
            "PURL": "pkg:npm/isexe@4.0.0",
            "UID": "bf53a631dc9c831"
          },
          "Version": "4.0.0",
          "Licenses": [
            "BlueOak-1.0.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/isexe/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "isolated-vm@6.1.2",
          "Name": "isolated-vm",
          "Identifier": {
            "PURL": "pkg:npm/isolated-vm@6.1.2",
            "UID": "e529703bf8748a3f"
          },
          "Version": "6.1.2",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/isolated-vm/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "json-parse-even-better-errors@5.0.0",
          "Name": "json-parse-even-better-errors",
          "Identifier": {
            "PURL": "pkg:npm/json-parse-even-better-errors@5.0.0",
            "UID": "caf28ac402e028fa"
          },
          "Version": "5.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/json-parse-even-better-errors/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "json-stringify-nice@1.1.4",
          "Name": "json-stringify-nice",
          "Identifier": {
            "PURL": "pkg:npm/json-stringify-nice@1.1.4",
            "UID": "c5c27ed2359935d9"
          },
          "Version": "1.1.4",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/json-stringify-nice/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "jsonparse@1.3.1",
          "Name": "jsonparse",
          "Identifier": {
            "PURL": "pkg:npm/jsonparse@1.3.1",
            "UID": "6d24ba846346e57e"
          },
          "Version": "1.3.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/jsonparse/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "just-diff@6.0.2",
          "Name": "just-diff",
          "Identifier": {
            "PURL": "pkg:npm/just-diff@6.0.2",
            "UID": "c6c2fd84314937b7"
          },
          "Version": "6.0.2",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/just-diff/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "just-diff-apply@5.5.0",
          "Name": "just-diff-apply",
          "Identifier": {
            "PURL": "pkg:npm/just-diff-apply@5.5.0",
            "UID": "f52effebae09b036"
          },
          "Version": "5.5.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/just-diff-apply/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "libnpmaccess@10.0.3",
          "Name": "libnpmaccess",
          "Identifier": {
            "PURL": "pkg:npm/libnpmaccess@10.0.3",
            "UID": "56a696973189118e"
          },
          "Version": "10.0.3",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmaccess/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "libnpmdiff@8.1.12",
          "Name": "libnpmdiff",
          "Identifier": {
            "PURL": "pkg:npm/libnpmdiff@8.1.12",
            "UID": "ac1ef02da491284a"
          },
          "Version": "8.1.12",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmdiff/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "libnpmexec@10.3.2",
          "Name": "libnpmexec",
          "Identifier": {
            "PURL": "pkg:npm/libnpmexec@10.3.2",
            "UID": "79ad1abe8fe2bc7c"
          },
          "Version": "10.3.2",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmexec/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "libnpmfund@7.0.26",
          "Name": "libnpmfund",
          "Identifier": {
            "PURL": "pkg:npm/libnpmfund@7.0.26",
            "UID": "92fa7b7c1730d98a"
          },
          "Version": "7.0.26",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmfund/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "libnpmorg@8.0.1",
          "Name": "libnpmorg",
          "Identifier": {
            "PURL": "pkg:npm/libnpmorg@8.0.1",
            "UID": "3a1e54c9b0191383"
          },
          "Version": "8.0.1",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmorg/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "libnpmpack@9.1.13",
          "Name": "libnpmpack",
          "Identifier": {
            "PURL": "pkg:npm/libnpmpack@9.1.13",
            "UID": "96e2cc51d2d8e957"
          },
          "Version": "9.1.13",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmpack/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "libnpmpublish@11.2.0",
          "Name": "libnpmpublish",
          "Identifier": {
            "PURL": "pkg:npm/libnpmpublish@11.2.0",
            "UID": "53ea952e92b7fe56"
          },
          "Version": "11.2.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmpublish/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "libnpmsearch@9.0.1",
          "Name": "libnpmsearch",
          "Identifier": {
            "PURL": "pkg:npm/libnpmsearch@9.0.1",
            "UID": "9e31ad9b20de8711"
          },
          "Version": "9.0.1",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmsearch/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "libnpmteam@8.0.2",
          "Name": "libnpmteam",
          "Identifier": {
            "PURL": "pkg:npm/libnpmteam@8.0.2",
            "UID": "71eccb7f85b7085c"
          },
          "Version": "8.0.2",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmteam/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "libnpmversion@8.0.4",
          "Name": "libnpmversion",
          "Identifier": {
            "PURL": "pkg:npm/libnpmversion@8.0.4",
            "UID": "dd4ad49426954b86"
          },
          "Version": "8.0.4",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmversion/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "lru-cache@11.5.1",
          "Name": "lru-cache",
          "Identifier": {
            "PURL": "pkg:npm/lru-cache@11.5.1",
            "UID": "9d6613a6bf625136"
          },
          "Version": "11.5.1",
          "Licenses": [
            "BlueOak-1.0.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/lru-cache/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "make-fetch-happen@15.0.6",
          "Name": "make-fetch-happen",
          "Identifier": {
            "PURL": "pkg:npm/make-fetch-happen@15.0.6",
            "UID": "df3f4cc3ab8ef469"
          },
          "Version": "15.0.6",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/make-fetch-happen/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "minimatch@10.2.4",
          "Name": "minimatch",
          "Identifier": {
            "PURL": "pkg:npm/minimatch@10.2.4",
            "UID": "84c7fb4108da9a9b"
          },
          "Version": "10.2.4",
          "Licenses": [
            "BlueOak-1.0.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@fastify/otel/node_modules/minimatch/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "minimatch@10.2.5",
          "Name": "minimatch",
          "Identifier": {
            "PURL": "pkg:npm/minimatch@10.2.5",
            "UID": "f2476574676f2194"
          },
          "Version": "10.2.5",
          "Licenses": [
            "BlueOak-1.0.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/minimatch/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "minimatch@10.2.5",
          "Name": "minimatch",
          "Identifier": {
            "PURL": "pkg:npm/minimatch@10.2.5",
            "UID": "864a32484f674d54"
          },
          "Version": "10.2.5",
          "Licenses": [
            "BlueOak-1.0.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/minimatch/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "minipass@3.3.6",
          "Name": "minipass",
          "Identifier": {
            "PURL": "pkg:npm/minipass@3.3.6",
            "UID": "b7ce61ea2292da41"
          },
          "Version": "3.3.6",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-pipeline/node_modules/minipass/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "minipass@7.1.3",
          "Name": "minipass",
          "Identifier": {
            "PURL": "pkg:npm/minipass@7.1.3",
            "UID": "4051bad8dec024d1"
          },
          "Version": "7.1.3",
          "Licenses": [
            "BlueOak-1.0.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "minipass-collect@2.0.1",
          "Name": "minipass-collect",
          "Identifier": {
            "PURL": "pkg:npm/minipass-collect@2.0.1",
            "UID": "c5f716d9c0ec4b92"
          },
          "Version": "2.0.1",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-collect/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "minipass-fetch@5.0.2",
          "Name": "minipass-fetch",
          "Identifier": {
            "PURL": "pkg:npm/minipass-fetch@5.0.2",
            "UID": "127b714d1e52aa15"
          },
          "Version": "5.0.2",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-fetch/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "minipass-flush@1.0.6",
          "Name": "minipass-flush",
          "Identifier": {
            "PURL": "pkg:npm/minipass-flush@1.0.6",
            "UID": "8916edb862d539fd"
          },
          "Version": "1.0.6",
          "Licenses": [
            "BlueOak-1.0.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-flush/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "minipass-pipeline@1.2.4",
          "Name": "minipass-pipeline",
          "Identifier": {
            "PURL": "pkg:npm/minipass-pipeline@1.2.4",
            "UID": "f9ca1e5f3449b3dc"
          },
          "Version": "1.2.4",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-pipeline/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "minipass-sized@2.0.0",
          "Name": "minipass-sized",
          "Identifier": {
            "PURL": "pkg:npm/minipass-sized@2.0.0",
            "UID": "148942e5c7dd1a67"
          },
          "Version": "2.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-sized/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "minizlib@3.1.0",
          "Name": "minizlib",
          "Identifier": {
            "PURL": "pkg:npm/minizlib@3.1.0",
            "UID": "c55f100e28b906b"
          },
          "Version": "3.1.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/minizlib/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "module-details-from-path@1.0.4",
          "Name": "module-details-from-path",
          "Identifier": {
            "PURL": "pkg:npm/module-details-from-path@1.0.4",
            "UID": "21bf6a1634db1fe1"
          },
          "Version": "1.0.4",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/module-details-from-path/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "ms@2.1.3",
          "Name": "ms",
          "Identifier": {
            "PURL": "pkg:npm/ms@2.1.3",
            "UID": "a36154e477f52d2f"
          },
          "Version": "2.1.3",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/ms/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "ms@2.1.3",
          "Name": "ms",
          "Identifier": {
            "PURL": "pkg:npm/ms@2.1.3",
            "UID": "50a140c9d554dc56"
          },
          "Version": "2.1.3",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/ms/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "mute-stream@3.0.0",
          "Name": "mute-stream",
          "Identifier": {
            "PURL": "pkg:npm/mute-stream@3.0.0",
            "UID": "b845f193cc4b6309"
          },
          "Version": "3.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/mute-stream/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "negotiator@1.0.0",
          "Name": "negotiator",
          "Identifier": {
            "PURL": "pkg:npm/negotiator@1.0.0",
            "UID": "28c19cc3e361ce6c"
          },
          "Version": "1.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/negotiator/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "next@16.2.9",
          "Name": "next",
          "Identifier": {
            "PURL": "pkg:npm/next@16.2.9",
            "UID": "df672ea1294e8fbd"
          },
          "Version": "16.2.9",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/next/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "next-runtime-env@1.6.2",
          "Name": "next-runtime-env",
          "Identifier": {
            "PURL": "pkg:npm/next-runtime-env@1.6.2",
            "UID": "3df4e1f762c989ab"
          },
          "Version": "1.6.2",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:22c300853e0b2357d534de838629aa8a04c1980e2e0a342e6b9c9b5a931e96f9"
          },
          "FilePath": "app/node_modules/next-runtime-env/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "node-gyp@12.4.0",
          "Name": "node-gyp",
          "Identifier": {
            "PURL": "pkg:npm/node-gyp@12.4.0",
            "UID": "4e4eac31ca0d87bc"
          },
          "Version": "12.4.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/node-gyp/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "node-gyp-build@4.8.4",
          "Name": "node-gyp-build",
          "Identifier": {
            "PURL": "pkg:npm/node-gyp-build@4.8.4",
            "UID": "8f4d51b8fa61545e"
          },
          "Version": "4.8.4",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/node-gyp-build/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "nopt@9.0.0",
          "Name": "nopt",
          "Identifier": {
            "PURL": "pkg:npm/nopt@9.0.0",
            "UID": "a0dcc3fd49da4deb"
          },
          "Version": "9.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/nopt/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "npm@11.19.1",
          "Name": "npm",
          "Identifier": {
            "PURL": "pkg:npm/npm@11.19.1",
            "UID": "9e1e1f18cba1f0d1"
          },
          "Version": "11.19.1",
          "Licenses": [
            "Artistic-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "npm-audit-report@7.0.0",
          "Name": "npm-audit-report",
          "Identifier": {
            "PURL": "pkg:npm/npm-audit-report@7.0.0",
            "UID": "a904c3123854995b"
          },
          "Version": "7.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-audit-report/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "npm-bundled@5.0.0",
          "Name": "npm-bundled",
          "Identifier": {
            "PURL": "pkg:npm/npm-bundled@5.0.0",
            "UID": "dd3b54d7737b6bb4"
          },
          "Version": "5.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-bundled/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "npm-install-checks@8.0.0",
          "Name": "npm-install-checks",
          "Identifier": {
            "PURL": "pkg:npm/npm-install-checks@8.0.0",
            "UID": "341ab23c4124b244"
          },
          "Version": "8.0.0",
          "Licenses": [
            "BSD-2-Clause"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-install-checks/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "npm-normalize-package-bin@5.0.0",
          "Name": "npm-normalize-package-bin",
          "Identifier": {
            "PURL": "pkg:npm/npm-normalize-package-bin@5.0.0",
            "UID": "a32c3aa151337c66"
          },
          "Version": "5.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-normalize-package-bin/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "npm-package-arg@13.0.2",
          "Name": "npm-package-arg",
          "Identifier": {
            "PURL": "pkg:npm/npm-package-arg@13.0.2",
            "UID": "68d9460fcb7c259b"
          },
          "Version": "13.0.2",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-package-arg/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "npm-packlist@10.0.4",
          "Name": "npm-packlist",
          "Identifier": {
            "PURL": "pkg:npm/npm-packlist@10.0.4",
            "UID": "e39e77db95896865"
          },
          "Version": "10.0.4",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-packlist/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "npm-pick-manifest@11.0.3",
          "Name": "npm-pick-manifest",
          "Identifier": {
            "PURL": "pkg:npm/npm-pick-manifest@11.0.3",
            "UID": "363c2920d8231c7b"
          },
          "Version": "11.0.3",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-pick-manifest/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "npm-profile@12.0.2",
          "Name": "npm-profile",
          "Identifier": {
            "PURL": "pkg:npm/npm-profile@12.0.2",
            "UID": "82e0c376c0a7e957"
          },
          "Version": "12.0.2",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-profile/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "npm-registry-fetch@19.1.1",
          "Name": "npm-registry-fetch",
          "Identifier": {
            "PURL": "pkg:npm/npm-registry-fetch@19.1.1",
            "UID": "acba36c78be68712"
          },
          "Version": "19.1.1",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-registry-fetch/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "npm-user-validate@4.0.0",
          "Name": "npm-user-validate",
          "Identifier": {
            "PURL": "pkg:npm/npm-user-validate@4.0.0",
            "UID": "1d42085a5251bbea"
          },
          "Version": "4.0.0",
          "Licenses": [
            "BSD-2-Clause"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-user-validate/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "p-map@7.0.4",
          "Name": "p-map",
          "Identifier": {
            "PURL": "pkg:npm/p-map@7.0.4",
            "UID": "7de5ffb924393231"
          },
          "Version": "7.0.4",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/p-map/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "pacote@21.5.1",
          "Name": "pacote",
          "Identifier": {
            "PURL": "pkg:npm/pacote@21.5.1",
            "UID": "c47695f72b3e695d"
          },
          "Version": "21.5.1",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/pacote/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "parse-conflict-json@5.0.1",
          "Name": "parse-conflict-json",
          "Identifier": {
            "PURL": "pkg:npm/parse-conflict-json@5.0.1",
            "UID": "b7220d28f68b757a"
          },
          "Version": "5.0.1",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/parse-conflict-json/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "path-scurry@2.0.2",
          "Name": "path-scurry",
          "Identifier": {
            "PURL": "pkg:npm/path-scurry@2.0.2",
            "UID": "ed6a2a1491a16f6e"
          },
          "Version": "2.0.2",
          "Licenses": [
            "BlueOak-1.0.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/path-scurry/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "pg@8.16.3",
          "Name": "pg",
          "Identifier": {
            "PURL": "pkg:npm/pg@8.16.3",
            "UID": "7b38ea4e6b589505"
          },
          "Version": "8.16.3",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/pg/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "pg-cloudflare@1.2.7",
          "Name": "pg-cloudflare",
          "Identifier": {
            "PURL": "pkg:npm/pg-cloudflare@1.2.7",
            "UID": "cbd49c4a58771325"
          },
          "Version": "1.2.7",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/pg-cloudflare/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "pg-connection-string@2.11.0",
          "Name": "pg-connection-string",
          "Identifier": {
            "PURL": "pkg:npm/pg-connection-string@2.11.0",
            "UID": "f2ee06ebc097def8"
          },
          "Version": "2.11.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/pg-connection-string/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "pg-connection-string@2.9.1",
          "Name": "pg-connection-string",
          "Identifier": {
            "PURL": "pkg:npm/pg-connection-string@2.9.1",
            "UID": "2e66bbd1ecbe0d1d"
          },
          "Version": "2.9.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/pg/node_modules/pg-connection-string/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "pg-int8@1.0.1",
          "Name": "pg-int8",
          "Identifier": {
            "PURL": "pkg:npm/pg-int8@1.0.1",
            "UID": "27388dde39fc4004"
          },
          "Version": "1.0.1",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/pg-int8/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "pg-pool@3.10.1",
          "Name": "pg-pool",
          "Identifier": {
            "PURL": "pkg:npm/pg-pool@3.10.1",
            "UID": "1a11215dd08bee7e"
          },
          "Version": "3.10.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/pg/node_modules/pg-pool/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "pg-pool@3.13.0",
          "Name": "pg-pool",
          "Identifier": {
            "PURL": "pkg:npm/pg-pool@3.13.0",
            "UID": "b8c79a9f8fdba92d"
          },
          "Version": "3.13.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/pg-pool/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "pg-protocol@1.10.3",
          "Name": "pg-protocol",
          "Identifier": {
            "PURL": "pkg:npm/pg-protocol@1.10.3",
            "UID": "148dbfeb88281004"
          },
          "Version": "1.10.3",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/pg-protocol/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "pg-types@2.2.0",
          "Name": "pg-types",
          "Identifier": {
            "PURL": "pkg:npm/pg-types@2.2.0",
            "UID": "18b3a3fef3ace4a6"
          },
          "Version": "2.2.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/pg/node_modules/pg-types/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "pg-types@4.1.0",
          "Name": "pg-types",
          "Identifier": {
            "PURL": "pkg:npm/pg-types@4.1.0",
            "UID": "e3a1586bd23d403b"
          },
          "Version": "4.1.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/pg-types/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "pgpass@1.0.5",
          "Name": "pgpass",
          "Identifier": {
            "PURL": "pkg:npm/pgpass@1.0.5",
            "UID": "5458420b83e9dc8e"
          },
          "Version": "1.0.5",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/pgpass/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "picomatch@4.0.4",
          "Name": "picomatch",
          "Identifier": {
            "PURL": "pkg:npm/picomatch@4.0.4",
            "UID": "33c5334805cbffab"
          },
          "Version": "4.0.4",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/tinyglobby/node_modules/picomatch/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "postcss-selector-parser@7.1.4",
          "Name": "postcss-selector-parser",
          "Identifier": {
            "PURL": "pkg:npm/postcss-selector-parser@7.1.4",
            "UID": "2630291d022c3549"
          },
          "Version": "7.1.4",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/postcss-selector-parser/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "postgres-array@2.0.0",
          "Name": "postgres-array",
          "Identifier": {
            "PURL": "pkg:npm/postgres-array@2.0.0",
            "UID": "a6075a3074d74291"
          },
          "Version": "2.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/pg/node_modules/pg-types/node_modules/postgres-array/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "postgres-array@3.0.4",
          "Name": "postgres-array",
          "Identifier": {
            "PURL": "pkg:npm/postgres-array@3.0.4",
            "UID": "14a37a7f81d2d937"
          },
          "Version": "3.0.4",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/postgres-array/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "postgres-bytea@1.0.0",
          "Name": "postgres-bytea",
          "Identifier": {
            "PURL": "pkg:npm/postgres-bytea@1.0.0",
            "UID": "939bf8088aac82b1"
          },
          "Version": "1.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/pg/node_modules/pg-types/node_modules/postgres-bytea/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "postgres-bytea@3.0.0",
          "Name": "postgres-bytea",
          "Identifier": {
            "PURL": "pkg:npm/postgres-bytea@3.0.0",
            "UID": "6a758dfcfebf091e"
          },
          "Version": "3.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/postgres-bytea/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "postgres-date@1.0.7",
          "Name": "postgres-date",
          "Identifier": {
            "PURL": "pkg:npm/postgres-date@1.0.7",
            "UID": "26813657245d548"
          },
          "Version": "1.0.7",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/pg/node_modules/pg-types/node_modules/postgres-date/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "postgres-date@2.1.0",
          "Name": "postgres-date",
          "Identifier": {
            "PURL": "pkg:npm/postgres-date@2.1.0",
            "UID": "466d40f35002692"
          },
          "Version": "2.1.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/postgres-date/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "postgres-interval@1.2.0",
          "Name": "postgres-interval",
          "Identifier": {
            "PURL": "pkg:npm/postgres-interval@1.2.0",
            "UID": "1121d0cbc1a9c66b"
          },
          "Version": "1.2.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/pg/node_modules/pg-types/node_modules/postgres-interval/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "postgres-interval@3.0.0",
          "Name": "postgres-interval",
          "Identifier": {
            "PURL": "pkg:npm/postgres-interval@3.0.0",
            "UID": "129498c18f631af6"
          },
          "Version": "3.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/postgres-interval/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "prettier@3.6.2",
          "Name": "prettier",
          "Identifier": {
            "PURL": "pkg:npm/prettier@3.6.2",
            "UID": "9df62595c64addcd"
          },
          "Version": "3.6.2",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/@react-email/render/node_modules/prettier/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "prisma-client-f62725a01ad74eb9f300c7e59afe869cdcc840b8c0ead095353a9843267c6a7a@7.4.0",
          "Name": "prisma-client-f62725a01ad74eb9f300c7e59afe869cdcc840b8c0ead095353a9843267c6a7a",
          "Identifier": {
            "PURL": "pkg:npm/prisma-client-f62725a01ad74eb9f300c7e59afe869cdcc840b8c0ead095353a9843267c6a7a@7.4.0",
            "UID": "582fccde0f04bb7d"
          },
          "Version": "7.4.0",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/.prisma/client/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "proc-log@6.1.0",
          "Name": "proc-log",
          "Identifier": {
            "PURL": "pkg:npm/proc-log@6.1.0",
            "UID": "a426910986567598"
          },
          "Version": "6.1.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/proc-log/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "proggy@4.0.0",
          "Name": "proggy",
          "Identifier": {
            "PURL": "pkg:npm/proggy@4.0.0",
            "UID": "b9c829fb91367db8"
          },
          "Version": "4.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/proggy/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "promise-all-reject-late@1.0.1",
          "Name": "promise-all-reject-late",
          "Identifier": {
            "PURL": "pkg:npm/promise-all-reject-late@1.0.1",
            "UID": "759c5c0dfe22841e"
          },
          "Version": "1.0.1",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/promise-all-reject-late/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "promise-call-limit@3.0.2",
          "Name": "promise-call-limit",
          "Identifier": {
            "PURL": "pkg:npm/promise-call-limit@3.0.2",
            "UID": "d3e52c24867edbc5"
          },
          "Version": "3.0.2",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/promise-call-limit/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "promzard@3.0.1",
          "Name": "promzard",
          "Identifier": {
            "PURL": "pkg:npm/promzard@3.0.1",
            "UID": "5df1e06ffd94fafc"
          },
          "Version": "3.0.1",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/promzard/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "qrcode-terminal@0.12.0",
          "Name": "qrcode-terminal",
          "Identifier": {
            "PURL": "pkg:npm/qrcode-terminal@0.12.0",
            "UID": "b17a7c2ec3321961"
          },
          "Version": "0.12.0",
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/qrcode-terminal/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "react@19.2.4",
          "Name": "react",
          "Identifier": {
            "PURL": "pkg:npm/react@19.2.4",
            "UID": "bc2876269bd84d82"
          },
          "Version": "19.2.4",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/react/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "react-dom@19.2.4",
          "Name": "react-dom",
          "Identifier": {
            "PURL": "pkg:npm/react-dom@19.2.4",
            "UID": "c64b1448ec32c49a"
          },
          "Version": "19.2.4",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/react-dom/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "react-is@19.3.0-canary-3f0b9e61-20260317",
          "Name": "react-is",
          "Identifier": {
            "PURL": "pkg:npm/react-is@19.3.0-canary-3f0b9e61-20260317",
            "UID": "9894532fb3e8eb3c"
          },
          "Version": "19.3.0-canary-3f0b9e61-20260317",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/next/dist/compiled/react-is/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "read@5.0.1",
          "Name": "read",
          "Identifier": {
            "PURL": "pkg:npm/read@5.0.1",
            "UID": "a1c68d2ab17afe68"
          },
          "Version": "5.0.1",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/read/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "read-cmd-shim@6.0.0",
          "Name": "read-cmd-shim",
          "Identifier": {
            "PURL": "pkg:npm/read-cmd-shim@6.0.0",
            "UID": "59d39b9ba7aec7ef"
          },
          "Version": "6.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/read-cmd-shim/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "regenerator-runtime@0.13.4",
          "Name": "regenerator-runtime",
          "Identifier": {
            "PURL": "pkg:npm/regenerator-runtime@0.13.4",
            "UID": "ba36186d6b86e698"
          },
          "Version": "0.13.4",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/next/dist/compiled/regenerator-runtime/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "require-in-the-middle@8.0.1",
          "Name": "require-in-the-middle",
          "Identifier": {
            "PURL": "pkg:npm/require-in-the-middle@8.0.1",
            "UID": "6a3ac0645252694f"
          },
          "Version": "8.0.1",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/require-in-the-middle/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "safer-buffer@2.1.2",
          "Name": "safer-buffer",
          "Identifier": {
            "PURL": "pkg:npm/safer-buffer@2.1.2",
            "UID": "c91f6999c7debfda"
          },
          "Version": "2.1.2",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/safer-buffer/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "semver@7.7.3",
          "Name": "semver",
          "Identifier": {
            "PURL": "pkg:npm/semver@7.7.3",
            "UID": "a960d2a69138c315"
          },
          "Version": "7.7.3",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/next/node_modules/sharp/node_modules/semver/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "semver@7.8.5",
          "Name": "semver",
          "Identifier": {
            "PURL": "pkg:npm/semver@7.8.5",
            "UID": "4c91a0ec6a9d4a03"
          },
          "Version": "7.8.5",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/semver/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "sharp@0.34.4",
          "Name": "sharp",
          "Identifier": {
            "PURL": "pkg:npm/sharp@0.34.4",
            "UID": "40a2f012af4ea2fa"
          },
          "Version": "0.34.4",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/sharp/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "sharp@0.34.5",
          "Name": "sharp",
          "Identifier": {
            "PURL": "pkg:npm/sharp@0.34.5",
            "UID": "9eb47d820a8782ee"
          },
          "Version": "0.34.5",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/next/node_modules/sharp/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "signal-exit@4.1.0",
          "Name": "signal-exit",
          "Identifier": {
            "PURL": "pkg:npm/signal-exit@4.1.0",
            "UID": "883b84195e986f6a"
          },
          "Version": "4.1.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/signal-exit/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "sigstore@4.1.1",
          "Name": "sigstore",
          "Identifier": {
            "PURL": "pkg:npm/sigstore@4.1.1",
            "UID": "8d17e691c88ae318"
          },
          "Version": "4.1.1",
          "Licenses": [
            "Apache-2.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/sigstore/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "smart-buffer@4.2.0",
          "Name": "smart-buffer",
          "Identifier": {
            "PURL": "pkg:npm/smart-buffer@4.2.0",
            "UID": "f0c5ee9f68d6fddf"
          },
          "Version": "4.2.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/smart-buffer/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "socks@2.8.9",
          "Name": "socks",
          "Identifier": {
            "PURL": "pkg:npm/socks@2.8.9",
            "UID": "824623918d130be7"
          },
          "Version": "2.8.9",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/socks/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "socks-proxy-agent@8.0.5",
          "Name": "socks-proxy-agent",
          "Identifier": {
            "PURL": "pkg:npm/socks-proxy-agent@8.0.5",
            "UID": "e2e974b7f8f572c4"
          },
          "Version": "8.0.5",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/socks-proxy-agent/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "spdx-exceptions@2.5.0",
          "Name": "spdx-exceptions",
          "Identifier": {
            "PURL": "pkg:npm/spdx-exceptions@2.5.0",
            "UID": "3602fef2070203cf"
          },
          "Version": "2.5.0",
          "Licenses": [
            "CC-BY-3.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/spdx-exceptions/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "spdx-expression-parse@4.0.0",
          "Name": "spdx-expression-parse",
          "Identifier": {
            "PURL": "pkg:npm/spdx-expression-parse@4.0.0",
            "UID": "951d3251ced005b"
          },
          "Version": "4.0.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/spdx-expression-parse/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "spdx-license-ids@3.0.23",
          "Name": "spdx-license-ids",
          "Identifier": {
            "PURL": "pkg:npm/spdx-license-ids@3.0.23",
            "UID": "565aca18fc1c1d30"
          },
          "Version": "3.0.23",
          "Licenses": [
            "CC0-1.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/spdx-license-ids/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "split2@4.2.0",
          "Name": "split2",
          "Identifier": {
            "PURL": "pkg:npm/split2@4.2.0",
            "UID": "97a75e29c99fc565"
          },
          "Version": "4.2.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/split2/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "ssri@13.0.1",
          "Name": "ssri",
          "Identifier": {
            "PURL": "pkg:npm/ssri@13.0.1",
            "UID": "97f9e00e517d319"
          },
          "Version": "13.0.1",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/ssri/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "stacktrace-parser@0.1.11",
          "Name": "stacktrace-parser",
          "Identifier": {
            "PURL": "pkg:npm/stacktrace-parser@0.1.11",
            "UID": "11dee26a2d3c6103"
          },
          "Version": "0.1.11",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/stacktrace-parser/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "styled-jsx@5.1.6",
          "Name": "styled-jsx",
          "Identifier": {
            "PURL": "pkg:npm/styled-jsx@5.1.6",
            "UID": "84f39344c086e847"
          },
          "Version": "5.1.6",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/styled-jsx/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "supports-color@10.2.2",
          "Name": "supports-color",
          "Identifier": {
            "PURL": "pkg:npm/supports-color@10.2.2",
            "UID": "fb4aab93961faeee"
          },
          "Version": "10.2.2",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/supports-color/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "supports-color@7.2.0",
          "Name": "supports-color",
          "Identifier": {
            "PURL": "pkg:npm/supports-color@7.2.0",
            "UID": "938ac22dea5f6a0f"
          },
          "Version": "7.2.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/supports-color/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "tar@7.5.22",
          "Name": "tar",
          "Identifier": {
            "PURL": "pkg:npm/tar@7.5.22",
            "UID": "6f7608956607843"
          },
          "Version": "7.5.22",
          "Licenses": [
            "BlueOak-1.0.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/tar/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "text-table@0.2.0",
          "Name": "text-table",
          "Identifier": {
            "PURL": "pkg:npm/text-table@0.2.0",
            "UID": "db9d37c2491d4eb4"
          },
          "Version": "0.2.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/text-table/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "tiny-relative-date@2.0.2",
          "Name": "tiny-relative-date",
          "Identifier": {
            "PURL": "pkg:npm/tiny-relative-date@2.0.2",
            "UID": "22fdc115cb62172a"
          },
          "Version": "2.0.2",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/tiny-relative-date/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "tinyglobby@0.2.17",
          "Name": "tinyglobby",
          "Identifier": {
            "PURL": "pkg:npm/tinyglobby@0.2.17",
            "UID": "36ba4fbf566d3386"
          },
          "Version": "0.2.17",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/tinyglobby/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "treeverse@3.0.0",
          "Name": "treeverse",
          "Identifier": {
            "PURL": "pkg:npm/treeverse@3.0.0",
            "UID": "815f9702b2f3013d"
          },
          "Version": "3.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/treeverse/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "tuf-js@4.1.0",
          "Name": "tuf-js",
          "Identifier": {
            "PURL": "pkg:npm/tuf-js@4.1.0",
            "UID": "18ebde3c72f3838e"
          },
          "Version": "4.1.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/tuf-js/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "undici@6.28.0",
          "Name": "undici",
          "Identifier": {
            "PURL": "pkg:npm/undici@6.28.0",
            "UID": "ce334dba36b60cab"
          },
          "Version": "6.28.0",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/undici/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "util-deprecate@1.0.2",
          "Name": "util-deprecate",
          "Identifier": {
            "PURL": "pkg:npm/util-deprecate@1.0.2",
            "UID": "f9c0b05c435e4f77"
          },
          "Version": "1.0.2",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/util-deprecate/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "validate-npm-package-name@7.0.2",
          "Name": "validate-npm-package-name",
          "Identifier": {
            "PURL": "pkg:npm/validate-npm-package-name@7.0.2",
            "UID": "d41f44524c8124aa"
          },
          "Version": "7.0.2",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/validate-npm-package-name/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "walk-up-path@4.0.0",
          "Name": "walk-up-path",
          "Identifier": {
            "PURL": "pkg:npm/walk-up-path@4.0.0",
            "UID": "f8908523d3316267"
          },
          "Version": "4.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/walk-up-path/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "which@6.0.1",
          "Name": "which",
          "Identifier": {
            "PURL": "pkg:npm/which@6.0.1",
            "UID": "5058743222eeb3a3"
          },
          "Version": "6.0.1",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/which/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "write-file-atomic@7.0.1",
          "Name": "write-file-atomic",
          "Identifier": {
            "PURL": "pkg:npm/write-file-atomic@7.0.1",
            "UID": "6ff83d76dff09459"
          },
          "Version": "7.0.1",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/write-file-atomic/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "xtend@4.0.2",
          "Name": "xtend",
          "Identifier": {
            "PURL": "pkg:npm/xtend@4.0.2",
            "UID": "3df69a11c2e804c2"
          },
          "Version": "4.0.2",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/xtend/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "yallist@4.0.0",
          "Name": "yallist",
          "Identifier": {
            "PURL": "pkg:npm/yallist@4.0.0",
            "UID": "f844828a67933457"
          },
          "Version": "4.0.0",
          "Licenses": [
            "ISC"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-pipeline/node_modules/yallist/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "yallist@5.0.0",
          "Name": "yallist",
          "Identifier": {
            "PURL": "pkg:npm/yallist@5.0.0",
            "UID": "54aace8c0fad3070"
          },
          "Version": "5.0.0",
          "Licenses": [
            "BlueOak-1.0.0"
          ],
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "FilePath": "usr/local/lib/node_modules/npm/node_modules/yallist/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "yarn@1.22.22",
          "Name": "yarn",
          "Identifier": {
            "PURL": "pkg:npm/yarn@1.22.22",
            "UID": "a475ae636b391b4"
          },
          "Version": "1.22.22",
          "Licenses": [
            "BSD-2-Clause"
          ],
          "Layer": {
            "DiffID": "sha256:992664ed29448f28bcd1ca52f64e3d6e28894cc53078f8ed765ecc82e837b4e1"
          },
          "FilePath": "opt/yarn-v1.22.22/package.json",
          "AnalyzedBy": "node-pkg"
        },
        {
          "ID": "zod@4.6.7",
          "Name": "zod",
          "Identifier": {
            "PURL": "pkg:npm/zod@4.6.7",
            "UID": "1565b9f96f7a4574"
          },
          "Version": "4.6.7",
          "Licenses": [
            "MIT"
          ],
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "FilePath": "app/node_modules/zod/package.json",
          "AnalyzedBy": "node-pkg"
        }
      ],
      "Vulnerabilities": [
        {
          "VulnerabilityID": "CVE-2026-114139",
          "VendorIDs": [
            "GHSA-mchm-gjx6-7h55"
          ],
          "PkgID": "@sentry/nextjs@10.43.0",
          "PkgName": "@sentry/nextjs",
          "PkgPath": "app/node_modules/@sentry/nextjs/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/%40sentry/nextjs@10.43.0",
            "UID": "9212cdc1643d59c0"
          },
          "InstalledVersion": "10.43.0",
          "FixedVersion": "9.47.2, 10.75.2, 11.0.0-rc.1",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-114139",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:126508c391724618ea3bf39d78bd526f38324f6e1152bbcd0cbcab1eb2c856d0",
          "Title": "Sentry-Javascript: Middleware Bypass when using Tunnel route",
          "Description": "Sentry-Javascript is an official Sentry SDKs for JavaScript. From 9.36.0 until 9.47.2, 10.75.2, and 11.0.0-rc.1, the webpack integration for @sentry/nextjs skips application middleware for every request path under a configured tunnelRoute, while the tunnel rewrite serves only the exact tunnel path with valid o and p query parameters. When an application route directly collides with the tunnel path or a root dynamic segment resolves under it, an unauthenticated request can reach that route without middleware authorization. Exploitation requires tunnelRoute, a webpack build, a colliding route, and middleware being the only authorization control. This issue is fixed in versions 9.47.2, 10.75.2, and 11.0.0-rc.1.",
          "Severity": "CRITICAL",
          "CweIDs": [
            "CWE-693"
          ],
          "VendorSeverity": {
            "ghsa": 4
          },
          "CVSS": {
            "ghsa": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
              "V40Score": 9.1
            }
          },
          "References": [
            "https://advisory.echohq.com/cve/CVE-2026-114139",
            "https://github.com/getsentry/sentry-javascript",
            "https://github.com/getsentry/sentry-javascript/commit/878b685c85dc12045e47e1932c96f5381d7ac532",
            "https://github.com/getsentry/sentry-javascript/commit/c122aac4f29541eb6da494296822c91eab3cf5ae",
            "https://github.com/getsentry/sentry-javascript/commit/d525a2f6015b47384bc139c30d58e0d5435d52e5",
            "https://github.com/getsentry/sentry-javascript/pull/24499",
            "https://github.com/getsentry/sentry-javascript/pull/24565",
            "https://github.com/getsentry/sentry-javascript/pull/24760",
            "https://github.com/getsentry/sentry-javascript/releases/tag/10.75.2",
            "https://github.com/getsentry/sentry-javascript/releases/tag/11.0.0-rc.1",
            "https://github.com/getsentry/sentry-javascript/releases/tag/9.47.2",
            "https://github.com/getsentry/sentry-javascript/security/advisories/GHSA-mchm-gjx6-7h55",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-114139"
          ],
          "PublishedDate": "2026-10-21T21:17:56.353Z",
          "LastModifiedDate": "2026-10-28T02:17:05.363Z"
        },
        {
          "VulnerabilityID": "CVE-2026-102276",
          "VendorIDs": [
            "GHSA-6j4f-fj2g-mc7p"
          ],
          "PkgID": "brace-expansion@5.0.4",
          "PkgName": "brace-expansion",
          "PkgPath": "app/node_modules/@fastify/otel/node_modules/minimatch/node_modules/brace-expansion/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/brace-expansion@5.0.4",
            "UID": "507e8c4626f5499"
          },
          "InstalledVersion": "5.0.4",
          "FixedVersion": "5.0.10, 3.0.7, 2.1.5, 1.1.19",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102276",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:4a7f2befff87a9bdcbc202864581236e32597e91a29578c3ae0d05534f676723",
          "Title": "brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns",
          "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per brace group and uses push.apply to pass every element of a very large comma-part array as a function argument. Patterns containing many comma-separated brace groups trigger the recursive path, while the large array triggers the argument-array path without deep recursion. These paths cause recursive and argument-array native stack exhaustion before max or maxLength can limit output, potentially terminating the Node.js process in a process-terminating denial of service. This issue is fixed in versions 1.1.19, 2.1.5, 3.0.7, and 5.0.10.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-674"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "ghsa": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:92378",
            "https://access.redhat.com/security/cve/CVE-2026-102276",
            "https://advisory.echohq.com/cve/CVE-2026-102276",
            "https://bugzilla.redhat.com/2542596",
            "https://bugzilla.redhat.com/2542700",
            "https://bugzilla.redhat.com/2542706",
            "https://bugzilla.redhat.com/2542707",
            "https://bugzilla.redhat.com/2558973",
            "https://bugzilla.redhat.com/2559870",
            "https://bugzilla.redhat.com/2559873",
            "https://bugzilla.redhat.com/2559875",
            "https://bugzilla.redhat.com/2560016",
            "https://bugzilla.redhat.com/2560018",
            "https://bugzilla.redhat.com/2560019",
            "https://bugzilla.redhat.com/2560021",
            "https://bugzilla.redhat.com/2560022",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542596",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542700",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542706",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542707",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2558973",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2559870",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2559873",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2559875",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560016",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560018",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560019",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560021",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560022",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101911",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102276",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102277",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102278",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105481",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105482",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105483",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106069",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106071",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106072",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106073",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106074",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497",
            "https://errata.almalinux.org/9/ALSA-2026-92378.html",
            "https://errata.rockylinux.org/RLSA-2026:92378",
            "https://github.com/juliangruber/brace-expansion",
            "https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc",
            "https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c",
            "https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc",
            "https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3",
            "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p",
            "https://linux.oracle.com/cve/CVE-2026-102276.html",
            "https://linux.oracle.com/errata/ELSA-2026-92378.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-102276",
            "https://www.cve.org/CVERecord?id=CVE-2026-102276"
          ],
          "PublishedDate": "2026-09-28T21:17:16.033Z",
          "LastModifiedDate": "2026-09-30T19:57:08.043Z"
        },
        {
          "VulnerabilityID": "CVE-2026-102278",
          "VendorIDs": [
            "GHSA-qhr7-859c-m2p7"
          ],
          "PkgID": "brace-expansion@5.0.4",
          "PkgName": "brace-expansion",
          "PkgPath": "app/node_modules/@fastify/otel/node_modules/minimatch/node_modules/brace-expansion/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/brace-expansion@5.0.4",
            "UID": "507e8c4626f5499"
          },
          "InstalledVersion": "5.0.4",
          "FixedVersion": "5.0.11, 3.0.8, 2.1.6, 1.1.20",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102278",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:3f9cb2c8441febfc6597003aa2af0433cdd7f2653d820670a8aa30c596bedd9e",
          "Title": "brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns",
          "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand_() to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before output limits can apply and potentially terminating the Node.js process. expand_ performs uncontrolled recursion for nested brace alternatives and single-part sets. deeply nested brace groups supplied as an untrusted pattern. expand_ is affected. expand is affected. Comma members is affected. Single set is affected. native stack exhaustion during nested sub-expansion. process-terminating denial of service. This issue is fixed in versions 1.1.20, 2.1.6, 3.0.8, and 5.0.11.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-674"
          ],
          "VendorSeverity": {
            "alma": 3,
            "ghsa": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "V3Score": 6.5
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:92378",
            "https://access.redhat.com/security/cve/CVE-2026-102278",
            "https://advisory.echohq.com/cve/CVE-2026-102278",
            "https://bugzilla.redhat.com/2542596",
            "https://bugzilla.redhat.com/2542700",
            "https://bugzilla.redhat.com/2542706",
            "https://bugzilla.redhat.com/2542707",
            "https://bugzilla.redhat.com/2558973",
            "https://bugzilla.redhat.com/2559870",
            "https://bugzilla.redhat.com/2559873",
            "https://bugzilla.redhat.com/2559875",
            "https://bugzilla.redhat.com/2560016",
            "https://bugzilla.redhat.com/2560018",
            "https://bugzilla.redhat.com/2560019",
            "https://bugzilla.redhat.com/2560021",
            "https://bugzilla.redhat.com/2560022",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542596",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542700",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542706",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542707",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2558973",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2559870",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2559873",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2559875",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560016",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560018",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560019",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560021",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560022",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101911",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102276",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102277",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102278",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105481",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105482",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105483",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106069",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106071",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106072",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106073",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106074",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497",
            "https://errata.almalinux.org/9/ALSA-2026-92378.html",
            "https://errata.rockylinux.org/RLSA-2026:92378",
            "https://github.com/juliangruber/brace-expansion",
            "https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b",
            "https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c",
            "https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db",
            "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7",
            "https://linux.oracle.com/cve/CVE-2026-102278.html",
            "https://linux.oracle.com/errata/ELSA-2026-92378.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-102278",
            "https://www.cve.org/CVERecord?id=CVE-2026-102278"
          ],
          "PublishedDate": "2026-09-28T21:17:16.517Z",
          "LastModifiedDate": "2026-10-01T15:17:25.593Z"
        },
        {
          "VulnerabilityID": "CVE-2026-13149",
          "VendorIDs": [
            "GHSA-3jxr-9vmj-r5cp"
          ],
          "PkgID": "brace-expansion@5.0.4",
          "PkgName": "brace-expansion",
          "PkgPath": "app/node_modules/@fastify/otel/node_modules/minimatch/node_modules/brace-expansion/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/brace-expansion@5.0.4",
            "UID": "507e8c4626f5499"
          },
          "InstalledVersion": "5.0.4",
          "FixedVersion": "5.0.7, 1.1.16, 2.1.2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13149",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:a3c105fff1ff2c0c081c5ae7320177e3f39957a66d7955fa7d2fc1178095eb26",
          "Title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
          "Description": "brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-407"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "ghsa": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:U/V:D/RE:M/U:Amber",
              "V3Score": 5.3,
              "V40Score": 7.7
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:47058",
            "https://access.redhat.com/security/cve/CVE-2026-13149",
            "https://advisory.echohq.com/cve/CVE-2026-13149",
            "https://bugzilla.redhat.com/2494813",
            "https://bugzilla.redhat.com/2498116",
            "https://bugzilla.redhat.com/2498120",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494813",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2498116",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2498120",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13149",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59873",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59874",
            "https://errata.almalinux.org/9/ALSA-2026-47058.html",
            "https://errata.rockylinux.org/RLSA-2026:47058",
            "https://github.com/juliangruber/brace-expansion",
            "https://github.com/juliangruber/brace-expansion/commit/835d6be91201122d9adffb0c0c8c094189ace265",
            "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
            "https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95",
            "https://github.com/juliangruber/brace-expansion/pull/122",
            "https://github.com/juliangruber/brace-expansion/pull/123",
            "https://github.com/juliangruber/brace-expansion/releases/tag/v1.1.16",
            "https://github.com/juliangruber/brace-expansion/releases/tag/v2.1.2",
            "https://github.com/juliangruber/brace-expansion/releases/tag/v5.0.7",
            "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-3jxr-9vmj-r5cp",
            "https://linux.oracle.com/cve/CVE-2026-13149.html",
            "https://linux.oracle.com/errata/ELSA-2026-48034.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
            "https://www.cve.org/CVERecord?id=CVE-2026-13149",
            "https://www.npmjs.com/package/brace-expansion"
          ],
          "PublishedDate": "2026-06-30T10:16:34.56Z",
          "LastModifiedDate": "2026-10-25T21:10:00.77Z"
        },
        {
          "VulnerabilityID": "CVE-2026-14257",
          "VendorIDs": [
            "GHSA-mh99-v99m-4gvg"
          ],
          "PkgID": "brace-expansion@5.0.4",
          "PkgName": "brace-expansion",
          "PkgPath": "app/node_modules/@fastify/otel/node_modules/minimatch/node_modules/brace-expansion/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/brace-expansion@5.0.4",
            "UID": "507e8c4626f5499"
          },
          "InstalledVersion": "5.0.4",
          "FixedVersion": "5.0.8, 3.0.3, 2.1.3, 1.1.17",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14257",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:daee51146fafcdd3b8c9356e84f642719b7efb9b765ca9ff45134afc9f1cc307",
          "Title": "brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function",
          "Description": "brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but does not bound the length of each result string. By chaining multiple brace groups, an attacker keeps the result count under the limit while making each result progressively longer, so total memory scales with both count and string length until the process hits a fatal, uncatchable out-of-memory error. About 7.5 KB of input ('{a,b}'.repeat(1500)) crashes a default Node.js process. Any application that passes attacker-influenced strings to brace-expansion.expand() - directly or transitively via minimatch / glob brace patterns - can be crashed by a small request. Fixed in 5.0.8 by adding a maxLength option (default 4,000,000) that bounds accumulated output and intermediate arrays.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-770"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "ghsa": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:55603",
            "https://access.redhat.com/security/cve/CVE-2026-14257",
            "https://advisory.echohq.com/cve/CVE-2026-14257",
            "https://bugzilla.redhat.com/2506433",
            "https://bugzilla.redhat.com/2507593",
            "https://bugzilla.redhat.com/2510722",
            "https://bugzilla.redhat.com/2510801",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2487258",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2487269",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2506433",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507593",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2510722",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2510801",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14257",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54272",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69152",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69192",
            "https://errata.almalinux.org/9/ALSA-2026-55603.html",
            "https://errata.rockylinux.org/RLSA-2026:55603",
            "https://github.com/advisories/GHSA-mh99-v99m-4gvg",
            "https://github.com/juliangruber/brace-expansion",
            "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d",
            "https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5",
            "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031",
            "https://github.com/juliangruber/brace-expansion/commit/d13ff455a58b0d56704f0111e3c2a0b16ceb06eb",
            "https://github.com/juliangruber/brace-expansion/pull/129",
            "https://github.com/juliangruber/brace-expansion/pull/130",
            "https://github.com/juliangruber/brace-expansion/pull/136",
            "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-mh99-v99m-4gvg",
            "https://linux.oracle.com/cve/CVE-2026-14257.html",
            "https://linux.oracle.com/errata/ELSA-2026-58819.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-14257",
            "https://www.cve.org/CVERecord?id=CVE-2026-14257",
            "https://www.npmjs.com/package/brace-expansion"
          ],
          "PublishedDate": "2026-07-23T14:17:00.25Z",
          "LastModifiedDate": "2026-10-24T13:10:00.147Z"
        },
        {
          "VulnerabilityID": "CVE-2026-69152",
          "VendorIDs": [
            "GHSA-rgw5-rvv9-x895"
          ],
          "PkgID": "brace-expansion@5.0.4",
          "PkgName": "brace-expansion",
          "PkgPath": "app/node_modules/@fastify/otel/node_modules/minimatch/node_modules/brace-expansion/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/brace-expansion@5.0.4",
            "UID": "507e8c4626f5499"
          },
          "InstalledVersion": "5.0.4",
          "FixedVersion": "1.1.18, 2.1.4, 3.0.6, 5.0.9",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-69152",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:ce5175fffbb775327d2e34ee3a67b32f544b2a9482afc452f231959d3eb79058",
          "Title": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation",
          "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop. The fix for CVE-2026-14257 is bypassed by the vulnerability. This issue is fixed in versions 1.1.18, 2.1.4, 3.0.6, and 5.0.9.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-770"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "ghsa": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:55603",
            "https://access.redhat.com/security/cve/CVE-2026-69152",
            "https://advisory.echohq.com/cve/CVE-2026-69152",
            "https://bugzilla.redhat.com/2506433",
            "https://bugzilla.redhat.com/2507593",
            "https://bugzilla.redhat.com/2510722",
            "https://bugzilla.redhat.com/2510801",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2487258",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2487269",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2506433",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507593",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2510722",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2510801",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14257",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54272",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69152",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69192",
            "https://errata.almalinux.org/9/ALSA-2026-55603.html",
            "https://errata.rockylinux.org/RLSA-2026:55603",
            "https://github.com/juliangruber/brace-expansion",
            "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d",
            "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac",
            "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf",
            "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031",
            "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895",
            "https://linux.oracle.com/cve/CVE-2026-69152.html",
            "https://linux.oracle.com/errata/ELSA-2026-58819.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-69152",
            "https://www.cve.org/CVERecord?id=CVE-2026-69152"
          ],
          "PublishedDate": "2026-08-03T17:16:45.953Z",
          "LastModifiedDate": "2026-10-23T21:10:00.157Z"
        },
        {
          "VulnerabilityID": "CVE-2026-102276",
          "VendorIDs": [
            "GHSA-6j4f-fj2g-mc7p"
          ],
          "PkgID": "brace-expansion@5.0.6",
          "PkgName": "brace-expansion",
          "PkgPath": "app/node_modules/brace-expansion/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/brace-expansion@5.0.6",
            "UID": "c7fa20b78f38b6c8"
          },
          "InstalledVersion": "5.0.6",
          "FixedVersion": "5.0.10, 3.0.7, 2.1.5, 1.1.19",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102276",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:fbbb32f57c9d737258c545980e76f7d9655c191948dccf9813352ad5739371a3",
          "Title": "brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns",
          "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per brace group and uses push.apply to pass every element of a very large comma-part array as a function argument. Patterns containing many comma-separated brace groups trigger the recursive path, while the large array triggers the argument-array path without deep recursion. These paths cause recursive and argument-array native stack exhaustion before max or maxLength can limit output, potentially terminating the Node.js process in a process-terminating denial of service. This issue is fixed in versions 1.1.19, 2.1.5, 3.0.7, and 5.0.10.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-674"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "ghsa": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:92378",
            "https://access.redhat.com/security/cve/CVE-2026-102276",
            "https://advisory.echohq.com/cve/CVE-2026-102276",
            "https://bugzilla.redhat.com/2542596",
            "https://bugzilla.redhat.com/2542700",
            "https://bugzilla.redhat.com/2542706",
            "https://bugzilla.redhat.com/2542707",
            "https://bugzilla.redhat.com/2558973",
            "https://bugzilla.redhat.com/2559870",
            "https://bugzilla.redhat.com/2559873",
            "https://bugzilla.redhat.com/2559875",
            "https://bugzilla.redhat.com/2560016",
            "https://bugzilla.redhat.com/2560018",
            "https://bugzilla.redhat.com/2560019",
            "https://bugzilla.redhat.com/2560021",
            "https://bugzilla.redhat.com/2560022",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542596",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542700",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542706",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542707",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2558973",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2559870",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2559873",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2559875",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560016",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560018",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560019",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560021",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560022",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101911",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102276",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102277",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102278",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105481",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105482",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105483",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106069",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106071",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106072",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106073",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106074",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497",
            "https://errata.almalinux.org/9/ALSA-2026-92378.html",
            "https://errata.rockylinux.org/RLSA-2026:92378",
            "https://github.com/juliangruber/brace-expansion",
            "https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc",
            "https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c",
            "https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc",
            "https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3",
            "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p",
            "https://linux.oracle.com/cve/CVE-2026-102276.html",
            "https://linux.oracle.com/errata/ELSA-2026-92378.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-102276",
            "https://www.cve.org/CVERecord?id=CVE-2026-102276"
          ],
          "PublishedDate": "2026-09-28T21:17:16.033Z",
          "LastModifiedDate": "2026-09-30T19:57:08.043Z"
        },
        {
          "VulnerabilityID": "CVE-2026-102278",
          "VendorIDs": [
            "GHSA-qhr7-859c-m2p7"
          ],
          "PkgID": "brace-expansion@5.0.6",
          "PkgName": "brace-expansion",
          "PkgPath": "app/node_modules/brace-expansion/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/brace-expansion@5.0.6",
            "UID": "c7fa20b78f38b6c8"
          },
          "InstalledVersion": "5.0.6",
          "FixedVersion": "5.0.11, 3.0.8, 2.1.6, 1.1.20",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102278",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:f606ab38d5bb2243eb0e48a8e54aaa4be8ac5f3325234befcdd725d8177fd608",
          "Title": "brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns",
          "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand_() to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before output limits can apply and potentially terminating the Node.js process. expand_ performs uncontrolled recursion for nested brace alternatives and single-part sets. deeply nested brace groups supplied as an untrusted pattern. expand_ is affected. expand is affected. Comma members is affected. Single set is affected. native stack exhaustion during nested sub-expansion. process-terminating denial of service. This issue is fixed in versions 1.1.20, 2.1.6, 3.0.8, and 5.0.11.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-674"
          ],
          "VendorSeverity": {
            "alma": 3,
            "ghsa": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "V3Score": 6.5
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:92378",
            "https://access.redhat.com/security/cve/CVE-2026-102278",
            "https://advisory.echohq.com/cve/CVE-2026-102278",
            "https://bugzilla.redhat.com/2542596",
            "https://bugzilla.redhat.com/2542700",
            "https://bugzilla.redhat.com/2542706",
            "https://bugzilla.redhat.com/2542707",
            "https://bugzilla.redhat.com/2558973",
            "https://bugzilla.redhat.com/2559870",
            "https://bugzilla.redhat.com/2559873",
            "https://bugzilla.redhat.com/2559875",
            "https://bugzilla.redhat.com/2560016",
            "https://bugzilla.redhat.com/2560018",
            "https://bugzilla.redhat.com/2560019",
            "https://bugzilla.redhat.com/2560021",
            "https://bugzilla.redhat.com/2560022",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542596",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542700",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542706",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542707",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2558973",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2559870",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2559873",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2559875",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560016",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560018",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560019",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560021",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560022",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101911",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102276",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102277",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102278",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105481",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105482",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105483",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106069",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106071",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106072",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106073",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106074",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497",
            "https://errata.almalinux.org/9/ALSA-2026-92378.html",
            "https://errata.rockylinux.org/RLSA-2026:92378",
            "https://github.com/juliangruber/brace-expansion",
            "https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b",
            "https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c",
            "https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db",
            "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7",
            "https://linux.oracle.com/cve/CVE-2026-102278.html",
            "https://linux.oracle.com/errata/ELSA-2026-92378.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-102278",
            "https://www.cve.org/CVERecord?id=CVE-2026-102278"
          ],
          "PublishedDate": "2026-09-28T21:17:16.517Z",
          "LastModifiedDate": "2026-10-01T15:17:25.593Z"
        },
        {
          "VulnerabilityID": "CVE-2026-13149",
          "VendorIDs": [
            "GHSA-3jxr-9vmj-r5cp"
          ],
          "PkgID": "brace-expansion@5.0.6",
          "PkgName": "brace-expansion",
          "PkgPath": "app/node_modules/brace-expansion/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/brace-expansion@5.0.6",
            "UID": "c7fa20b78f38b6c8"
          },
          "InstalledVersion": "5.0.6",
          "FixedVersion": "5.0.7, 1.1.16, 2.1.2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13149",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:80aae438f705a4cd954687a1de717672ede50bb29299acb15aef27f3aae39368",
          "Title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
          "Description": "brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-407"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "ghsa": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:U/V:D/RE:M/U:Amber",
              "V3Score": 5.3,
              "V40Score": 7.7
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:47058",
            "https://access.redhat.com/security/cve/CVE-2026-13149",
            "https://advisory.echohq.com/cve/CVE-2026-13149",
            "https://bugzilla.redhat.com/2494813",
            "https://bugzilla.redhat.com/2498116",
            "https://bugzilla.redhat.com/2498120",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2494813",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2498116",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2498120",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13149",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59873",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59874",
            "https://errata.almalinux.org/9/ALSA-2026-47058.html",
            "https://errata.rockylinux.org/RLSA-2026:47058",
            "https://github.com/juliangruber/brace-expansion",
            "https://github.com/juliangruber/brace-expansion/commit/835d6be91201122d9adffb0c0c8c094189ace265",
            "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
            "https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95",
            "https://github.com/juliangruber/brace-expansion/pull/122",
            "https://github.com/juliangruber/brace-expansion/pull/123",
            "https://github.com/juliangruber/brace-expansion/releases/tag/v1.1.16",
            "https://github.com/juliangruber/brace-expansion/releases/tag/v2.1.2",
            "https://github.com/juliangruber/brace-expansion/releases/tag/v5.0.7",
            "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-3jxr-9vmj-r5cp",
            "https://linux.oracle.com/cve/CVE-2026-13149.html",
            "https://linux.oracle.com/errata/ELSA-2026-48034.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
            "https://www.cve.org/CVERecord?id=CVE-2026-13149",
            "https://www.npmjs.com/package/brace-expansion"
          ],
          "PublishedDate": "2026-06-30T10:16:34.56Z",
          "LastModifiedDate": "2026-10-25T21:10:00.77Z"
        },
        {
          "VulnerabilityID": "CVE-2026-14257",
          "VendorIDs": [
            "GHSA-mh99-v99m-4gvg"
          ],
          "PkgID": "brace-expansion@5.0.6",
          "PkgName": "brace-expansion",
          "PkgPath": "app/node_modules/brace-expansion/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/brace-expansion@5.0.6",
            "UID": "c7fa20b78f38b6c8"
          },
          "InstalledVersion": "5.0.6",
          "FixedVersion": "5.0.8, 3.0.3, 2.1.3, 1.1.17",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14257",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:ee48c4e893340af9c1acdfb2a8b7e64193cbf26f2637d87586b2ce08d5626405",
          "Title": "brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function",
          "Description": "brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but does not bound the length of each result string. By chaining multiple brace groups, an attacker keeps the result count under the limit while making each result progressively longer, so total memory scales with both count and string length until the process hits a fatal, uncatchable out-of-memory error. About 7.5 KB of input ('{a,b}'.repeat(1500)) crashes a default Node.js process. Any application that passes attacker-influenced strings to brace-expansion.expand() - directly or transitively via minimatch / glob brace patterns - can be crashed by a small request. Fixed in 5.0.8 by adding a maxLength option (default 4,000,000) that bounds accumulated output and intermediate arrays.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-770"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "ghsa": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:55603",
            "https://access.redhat.com/security/cve/CVE-2026-14257",
            "https://advisory.echohq.com/cve/CVE-2026-14257",
            "https://bugzilla.redhat.com/2506433",
            "https://bugzilla.redhat.com/2507593",
            "https://bugzilla.redhat.com/2510722",
            "https://bugzilla.redhat.com/2510801",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2487258",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2487269",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2506433",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507593",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2510722",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2510801",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14257",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54272",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69152",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69192",
            "https://errata.almalinux.org/9/ALSA-2026-55603.html",
            "https://errata.rockylinux.org/RLSA-2026:55603",
            "https://github.com/advisories/GHSA-mh99-v99m-4gvg",
            "https://github.com/juliangruber/brace-expansion",
            "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d",
            "https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5",
            "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031",
            "https://github.com/juliangruber/brace-expansion/commit/d13ff455a58b0d56704f0111e3c2a0b16ceb06eb",
            "https://github.com/juliangruber/brace-expansion/pull/129",
            "https://github.com/juliangruber/brace-expansion/pull/130",
            "https://github.com/juliangruber/brace-expansion/pull/136",
            "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-mh99-v99m-4gvg",
            "https://linux.oracle.com/cve/CVE-2026-14257.html",
            "https://linux.oracle.com/errata/ELSA-2026-58819.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-14257",
            "https://www.cve.org/CVERecord?id=CVE-2026-14257",
            "https://www.npmjs.com/package/brace-expansion"
          ],
          "PublishedDate": "2026-07-23T14:17:00.25Z",
          "LastModifiedDate": "2026-10-24T13:10:00.147Z"
        },
        {
          "VulnerabilityID": "CVE-2026-69152",
          "VendorIDs": [
            "GHSA-rgw5-rvv9-x895"
          ],
          "PkgID": "brace-expansion@5.0.6",
          "PkgName": "brace-expansion",
          "PkgPath": "app/node_modules/brace-expansion/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/brace-expansion@5.0.6",
            "UID": "c7fa20b78f38b6c8"
          },
          "InstalledVersion": "5.0.6",
          "FixedVersion": "1.1.18, 2.1.4, 3.0.6, 5.0.9",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-69152",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:0dbb4cfb53a8ced573d98086a9f3b62309ebed1f5eacddc977f5421285b1b827",
          "Title": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation",
          "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop. The fix for CVE-2026-14257 is bypassed by the vulnerability. This issue is fixed in versions 1.1.18, 2.1.4, 3.0.6, and 5.0.9.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-770"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "ghsa": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:55603",
            "https://access.redhat.com/security/cve/CVE-2026-69152",
            "https://advisory.echohq.com/cve/CVE-2026-69152",
            "https://bugzilla.redhat.com/2506433",
            "https://bugzilla.redhat.com/2507593",
            "https://bugzilla.redhat.com/2510722",
            "https://bugzilla.redhat.com/2510801",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2487258",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2487269",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2506433",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2507593",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2510722",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2510801",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14257",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54272",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69152",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69192",
            "https://errata.almalinux.org/9/ALSA-2026-55603.html",
            "https://errata.rockylinux.org/RLSA-2026:55603",
            "https://github.com/juliangruber/brace-expansion",
            "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d",
            "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac",
            "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf",
            "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031",
            "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895",
            "https://linux.oracle.com/cve/CVE-2026-69152.html",
            "https://linux.oracle.com/errata/ELSA-2026-58819.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-69152",
            "https://www.cve.org/CVERecord?id=CVE-2026-69152"
          ],
          "PublishedDate": "2026-08-03T17:16:45.953Z",
          "LastModifiedDate": "2026-10-23T21:10:00.157Z"
        },
        {
          "VulnerabilityID": "CVE-2026-102276",
          "VendorIDs": [
            "GHSA-6j4f-fj2g-mc7p"
          ],
          "PkgID": "brace-expansion@5.0.9",
          "PkgName": "brace-expansion",
          "PkgPath": "usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/brace-expansion@5.0.9",
            "UID": "868042afe866f0f9"
          },
          "InstalledVersion": "5.0.9",
          "FixedVersion": "5.0.10, 3.0.7, 2.1.5, 1.1.19",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102276",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:e4955b2606282a0ecead742582c62a568db768424580b1de7f6ee55bc8b51db0",
          "Title": "brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns",
          "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per brace group and uses push.apply to pass every element of a very large comma-part array as a function argument. Patterns containing many comma-separated brace groups trigger the recursive path, while the large array triggers the argument-array path without deep recursion. These paths cause recursive and argument-array native stack exhaustion before max or maxLength can limit output, potentially terminating the Node.js process in a process-terminating denial of service. This issue is fixed in versions 1.1.19, 2.1.5, 3.0.7, and 5.0.10.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-674"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "ghsa": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:92378",
            "https://access.redhat.com/security/cve/CVE-2026-102276",
            "https://advisory.echohq.com/cve/CVE-2026-102276",
            "https://bugzilla.redhat.com/2542596",
            "https://bugzilla.redhat.com/2542700",
            "https://bugzilla.redhat.com/2542706",
            "https://bugzilla.redhat.com/2542707",
            "https://bugzilla.redhat.com/2558973",
            "https://bugzilla.redhat.com/2559870",
            "https://bugzilla.redhat.com/2559873",
            "https://bugzilla.redhat.com/2559875",
            "https://bugzilla.redhat.com/2560016",
            "https://bugzilla.redhat.com/2560018",
            "https://bugzilla.redhat.com/2560019",
            "https://bugzilla.redhat.com/2560021",
            "https://bugzilla.redhat.com/2560022",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542596",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542700",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542706",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542707",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2558973",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2559870",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2559873",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2559875",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560016",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560018",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560019",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560021",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560022",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101911",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102276",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102277",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102278",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105481",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105482",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105483",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106069",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106071",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106072",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106073",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106074",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497",
            "https://errata.almalinux.org/9/ALSA-2026-92378.html",
            "https://errata.rockylinux.org/RLSA-2026:92378",
            "https://github.com/juliangruber/brace-expansion",
            "https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc",
            "https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c",
            "https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc",
            "https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3",
            "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p",
            "https://linux.oracle.com/cve/CVE-2026-102276.html",
            "https://linux.oracle.com/errata/ELSA-2026-92378.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-102276",
            "https://www.cve.org/CVERecord?id=CVE-2026-102276"
          ],
          "PublishedDate": "2026-09-28T21:17:16.033Z",
          "LastModifiedDate": "2026-09-30T19:57:08.043Z"
        },
        {
          "VulnerabilityID": "CVE-2026-102278",
          "VendorIDs": [
            "GHSA-qhr7-859c-m2p7"
          ],
          "PkgID": "brace-expansion@5.0.9",
          "PkgName": "brace-expansion",
          "PkgPath": "usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/brace-expansion@5.0.9",
            "UID": "868042afe866f0f9"
          },
          "InstalledVersion": "5.0.9",
          "FixedVersion": "5.0.11, 3.0.8, 2.1.6, 1.1.20",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102278",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:f634d4291d8ed97522b3e2fa1afb777e24a122b12e6f69f4bbba036ffc3fe997",
          "Title": "brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns",
          "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand_() to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before output limits can apply and potentially terminating the Node.js process. expand_ performs uncontrolled recursion for nested brace alternatives and single-part sets. deeply nested brace groups supplied as an untrusted pattern. expand_ is affected. expand is affected. Comma members is affected. Single set is affected. native stack exhaustion during nested sub-expansion. process-terminating denial of service. This issue is fixed in versions 1.1.20, 2.1.6, 3.0.8, and 5.0.11.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-400",
            "CWE-674"
          ],
          "VendorSeverity": {
            "alma": 3,
            "ghsa": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "V3Score": 6.5
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:92378",
            "https://access.redhat.com/security/cve/CVE-2026-102278",
            "https://advisory.echohq.com/cve/CVE-2026-102278",
            "https://bugzilla.redhat.com/2542596",
            "https://bugzilla.redhat.com/2542700",
            "https://bugzilla.redhat.com/2542706",
            "https://bugzilla.redhat.com/2542707",
            "https://bugzilla.redhat.com/2558973",
            "https://bugzilla.redhat.com/2559870",
            "https://bugzilla.redhat.com/2559873",
            "https://bugzilla.redhat.com/2559875",
            "https://bugzilla.redhat.com/2560016",
            "https://bugzilla.redhat.com/2560018",
            "https://bugzilla.redhat.com/2560019",
            "https://bugzilla.redhat.com/2560021",
            "https://bugzilla.redhat.com/2560022",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542596",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542700",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542706",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2542707",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2558973",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2559870",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2559873",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2559875",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560016",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560018",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560019",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560021",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2560022",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101911",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102276",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102277",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102278",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105481",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105482",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105483",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106069",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106071",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106072",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106073",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106074",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497",
            "https://errata.almalinux.org/9/ALSA-2026-92378.html",
            "https://errata.rockylinux.org/RLSA-2026:92378",
            "https://github.com/juliangruber/brace-expansion",
            "https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b",
            "https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c",
            "https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db",
            "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7",
            "https://linux.oracle.com/cve/CVE-2026-102278.html",
            "https://linux.oracle.com/errata/ELSA-2026-92378.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-102278",
            "https://www.cve.org/CVERecord?id=CVE-2026-102278"
          ],
          "PublishedDate": "2026-09-28T21:17:16.517Z",
          "LastModifiedDate": "2026-10-01T15:17:25.593Z"
        },
        {
          "VulnerabilityID": "CVE-2026-75604",
          "VendorIDs": [
            "GHSA-p293-qw3h-jr36"
          ],
          "PkgID": "next@16.2.9",
          "PkgName": "next",
          "PkgPath": "app/node_modules/next/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/next@16.2.9",
            "UID": "df672ea1294e8fbd"
          },
          "InstalledVersion": "16.2.9",
          "FixedVersion": "15.5.24, 16.3.3",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75604",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:d81ed7f7c318bab993449a6f7defbd647aaf86c1be5cdf47e38b4fde3119a0af",
          "Title": "next: Next.js: Unauthenticated Remote Code Execution on windows-hosted servers",
          "Description": "Next.js is a React framework for building full-stack web applications. From 13.4.0 until 15.5.24 and 16.3.3, Next.js applications using Pages Router or App Router without Cache Components on Windows-hosted servers do not consistently escape backslashes in route segments before constructing incremental-cache paths. In packages/next/src/shared/lib/router/utils/escape-path-delimiters.ts and packages/next/src/server/lib/incremental-cache/file-system-cache.ts, a remote request can supply encoded Windows path separators that traverse outside the intended cache root and expose private build data, including the server-reference-manifest encryption key. Disclosure of that key can enable remote code execution in the affected application. This issue is fixed in versions 15.5.24 and 16.3.3.",
          "Severity": "CRITICAL",
          "CweIDs": [
            "CWE-22"
          ],
          "VendorSeverity": {
            "ghsa": 4,
            "redhat": 4
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
              "V3Score": 9.1
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "V3Score": 8.1
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-75604",
            "https://advisory.echohq.com/cve/CVE-2026-75604",
            "https://github.com/vercel/next.js",
            "https://github.com/vercel/next.js/commit/968b9fcb26bdeb8e0a861a9df05361474666d51b",
            "https://github.com/vercel/next.js/commit/b0f3460a92b955d3ca41fccff9a525a2b910fbf3",
            "https://github.com/vercel/next.js/releases/tag/v15.5.24",
            "https://github.com/vercel/next.js/releases/tag/v16.3.3",
            "https://github.com/vercel/next.js/security/advisories/GHSA-p293-qw3h-jr36",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-75604",
            "https://www.cve.org/CVERecord?id=CVE-2026-75604"
          ],
          "PublishedDate": "2026-09-01T22:17:12.697Z",
          "LastModifiedDate": "2026-09-09T21:09:13.08Z"
        },
        {
          "VulnerabilityID": "GHSA-2464-fhr4-w9xw",
          "PkgID": "next@16.2.9",
          "PkgName": "next",
          "PkgPath": "app/node_modules/next/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/next@16.2.9",
            "UID": "df672ea1294e8fbd"
          },
          "InstalledVersion": "16.2.9",
          "FixedVersion": "15.5.28, 16.4.1",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://github.com/advisories/GHSA-2464-fhr4-w9xw",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:e02243e37733fd311583ba01fd4ea49b76a8de8bc2a00e09537d0759e248896c",
          "Title": "Next.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used",
          "Description": "## Impact\n\nA memory-related vulnerability has been discovered in an upstream library used for Image Optimization can lead to possible remote code execution (RCE) when Next.js runs on glibc-based Linux.\n\n## Workaround\n\nEnsure the version of `sharp` used by Next.js is greater than or equal to `0.35.5`. Fresh installs automatically get a fixed version of `sharp`.\nUpgrading Next.js to the patched versions will ensure package managers automatically provide a fixed version of `sharp` to Next.js.",
          "Severity": "CRITICAL",
          "VendorSeverity": {
            "ghsa": 4
          },
          "CVSS": {
            "ghsa": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
              "V40Score": 9.5
            }
          },
          "References": [
            "https://advisory.echohq.com/cve/GHSA-2464-fhr4-w9xw",
            "https://github.com/advisories/GHSA-2464-fhr4-w9xw",
            "https://github.com/vercel/next.js",
            "https://github.com/vercel/next.js/commit/5e3b687b5edb868b064bdc058d768a7021e7f6ad",
            "https://github.com/vercel/next.js/commit/9571ec899f063df6533351bec390ccb2cc0af6a3",
            "https://github.com/vercel/next.js/releases/tag/v15.5.28",
            "https://github.com/vercel/next.js/releases/tag/v16.4.1",
            "https://github.com/vercel/next.js/security/advisories/GHSA-2464-fhr4-w9xw",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-96889"
          ],
          "PublishedDate": "2026-10-22T15:52:53Z",
          "LastModifiedDate": "2026-10-22T15:52:53Z"
        },
        {
          "VulnerabilityID": "GHSA-2xp9-vwfh-vxw4",
          "PkgID": "next@16.2.9",
          "PkgName": "next",
          "PkgPath": "app/node_modules/next/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/next@16.2.9",
            "UID": "df672ea1294e8fbd"
          },
          "InstalledVersion": "16.2.9",
          "FixedVersion": "15.5.24, 16.3.3",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://github.com/advisories/GHSA-2xp9-vwfh-vxw4",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:5825ec3b7146bcbd13c9ea9293c9b18e21e47b5ae3f2823d2d8e108c33118bee",
          "Title": "Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used",
          "Description": "A vulnerability in the underlying `libheif` library used by `sharp` which Next.js uses for image optimization can lead to remote code execution when AVIF files are optimized.\n\nUntil a fix has propagated, optimization of AVIF files is disabled.",
          "Severity": "CRITICAL",
          "VendorSeverity": {
            "ghsa": 4
          },
          "CVSS": {
            "ghsa": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
              "V40Score": 9.5
            }
          },
          "References": [
            "https://advisory.echohq.com/cve/GHSA-2xp9-vwfh-vxw4",
            "https://github.com/advisories/GHSA-2xp9-vwfh-vxw4",
            "https://github.com/strukturag/libheif/security/advisories/GHSA-g89c-p67h-r497",
            "https://github.com/vercel/next.js",
            "https://github.com/vercel/next.js/commit/3a15b4ac6ac8e70b1a9b18ecc18e8434462899b3",
            "https://github.com/vercel/next.js/commit/409772ec807def20132d251ad48fd8d8ad4c73c2",
            "https://github.com/vercel/next.js/commit/7a5937a8ab20b89d0a961f75eabb11577f5d5998",
            "https://github.com/vercel/next.js/pull/97875",
            "https://github.com/vercel/next.js/pull/97931",
            "https://github.com/vercel/next.js/releases/tag/v15.5.24",
            "https://github.com/vercel/next.js/releases/tag/v16.3.3",
            "https://github.com/vercel/next.js/security/advisories/GHSA-2xp9-vwfh-vxw4"
          ],
          "PublishedDate": "2026-09-08T21:21:12Z",
          "LastModifiedDate": "2026-09-08T21:21:12Z"
        },
        {
          "VulnerabilityID": "GHSA-673q-mjm6-r5xr",
          "PkgID": "next@16.2.9",
          "PkgName": "next",
          "PkgPath": "app/node_modules/next/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/next@16.2.9",
            "UID": "df672ea1294e8fbd"
          },
          "InstalledVersion": "16.2.9",
          "FixedVersion": "16.4.1",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://github.com/advisories/GHSA-673q-mjm6-r5xr",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:2d1de25e37ffbbfe46855b44f057183bdb99dba175e6b5c45ae2d2cf9811f5ee",
          "Title": "Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays",
          "Description": "## Impact\n\nA vulnerability in applications using App router with Cache Component can lead to remote code execution. The application needs to have a `use cache` function that returns multiple typed arrays.\n\n## Workaround\n\nThere is no known workaround for affected applications with such `use cache` functions. You should upgrade immediately even if your application does not have similar functions.",
          "Severity": "CRITICAL",
          "VendorSeverity": {
            "ghsa": 4
          },
          "CVSS": {
            "ghsa": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:N",
              "V40Score": 9.5
            }
          },
          "References": [
            "https://advisory.echohq.com/cve/GHSA-673q-mjm6-r5xr",
            "https://github.com/advisories/GHSA-673q-mjm6-r5xr",
            "https://github.com/vercel/next.js",
            "https://github.com/vercel/next.js/commit/a4cea6aec5da89d116b8960e113189cf51745d2f",
            "https://github.com/vercel/next.js/releases/tag/v16.4.1",
            "https://github.com/vercel/next.js/security/advisories/GHSA-673q-mjm6-r5xr"
          ],
          "PublishedDate": "2026-10-22T16:42:31Z",
          "LastModifiedDate": "2026-10-22T16:42:32Z"
        },
        {
          "VulnerabilityID": "GHSA-vcvr-r3jv-pc5j",
          "PkgID": "next@16.2.9",
          "PkgName": "next",
          "PkgPath": "app/node_modules/next/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/next@16.2.9",
            "UID": "df672ea1294e8fbd"
          },
          "InstalledVersion": "16.2.9",
          "FixedVersion": "16.3.6",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://github.com/advisories/GHSA-vcvr-r3jv-pc5j",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:ecf70cb857427880d0c9841b1d5acc782ad1befb95a0aa134cfe3781c714965e",
          "Title": "Next.js: Remote Code Execution in next/og ImageResponse",
          "Description": "## Impact\n\nThe Node.js `ImageResponse` implementation from `next/og` is affected by an upstream vulnerability. This can lead to remote code execution.\n\nAffected applications pass attacker-controlled values into SVG content, attributes, or styles during image generation:\n\n```tsx\nimport { ImageResponse } from 'next/og'\n\nexport async function GET(request: Request) {\n  const value = new URL(request.url).searchParams.get('value') ?? ''\n\n  return new ImageResponse(\n    \u003csvg width=\"1200\" height=\"630\"\u003e\n      \u003ctitle\u003e{value}\u003c/title\u003e\n    \u003c/svg\u003e\n  )\n}\n```\n\nApplications using the Edge `ImageResponse` implementation, or applications that do not pass attacker-controlled values into SVG content, attributes, or styles, are not affected.\n\n## Workaround\n\nIf upgrading is not immediately possible, do not pass attacker-controlled values into SVG content, attributes, or styles rendered by the Node.js `ImageResponse` implementation from `next/og`.",
          "Severity": "CRITICAL",
          "VendorSeverity": {
            "ghsa": 4
          },
          "CVSS": {
            "ghsa": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
              "V40Score": 9.5
            }
          },
          "References": [
            "https://advisory.echohq.com/cve/GHSA-vcvr-r3jv-pc5j",
            "https://github.com/advisories/GHSA-vcvr-r3jv-pc5j",
            "https://github.com/vercel/next.js",
            "https://github.com/vercel/next.js/commit/868fad38690d72088868f299fa2bef339b26838e",
            "https://github.com/vercel/next.js/releases/tag/v16.3.6",
            "https://github.com/vercel/next.js/security/advisories/GHSA-vcvr-r3jv-pc5j",
            "https://github.com/vercel/satori/security/advisories/GHSA-wx4j-mvgx-mqwp"
          ],
          "PublishedDate": "2026-09-30T14:48:30Z",
          "LastModifiedDate": "2026-09-30T14:48:30Z"
        },
        {
          "VulnerabilityID": "CVE-2026-64641",
          "VendorIDs": [
            "GHSA-m99w-x7hq-7vfj"
          ],
          "PkgID": "next@16.2.9",
          "PkgName": "next",
          "PkgPath": "app/node_modules/next/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/next@16.2.9",
            "UID": "df672ea1294e8fbd"
          },
          "InstalledVersion": "16.2.9",
          "FixedVersion": "15.5.21, 16.2.11",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64641",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:1d132ca00827126ac255a3bb9e4e61501917cd008315015e6a8da0bbf11c141c",
          "Title": "next: Next.js: Denial of Service via crafted requests to App Router with Server Actions",
          "Description": "Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive CPU usage blocking processing of further requests in the same process. This issue has been fixed in versions 15.5.21 and 16.2.11.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-834"
          ],
          "VendorSeverity": {
            "ghsa": 3,
            "nvd": 3,
            "redhat": 3
          },
          "CVSS": {
            "ghsa": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
              "V40Score": 8.2
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-64641",
            "https://advisory.echohq.com/cve/CVE-2026-64641",
            "https://github.com/vercel/next.js",
            "https://github.com/vercel/next.js/commit/019628571641dec57aaf349ba0c360e3964e6f12",
            "https://github.com/vercel/next.js/pull/96013",
            "https://github.com/vercel/next.js/releases/tag/v15.5.21",
            "https://github.com/vercel/next.js/releases/tag/v16.2.11",
            "https://github.com/vercel/next.js/security/advisories/GHSA-m99w-x7hq-7vfj",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-64641",
            "https://www.cve.org/CVERecord?id=CVE-2026-64641"
          ],
          "PublishedDate": "2026-07-27T18:16:58.85Z",
          "LastModifiedDate": "2026-10-24T13:10:00.147Z"
        },
        {
          "VulnerabilityID": "CVE-2026-64642",
          "VendorIDs": [
            "GHSA-6gpp-xcg3-4w24"
          ],
          "PkgID": "next@16.2.9",
          "PkgName": "next",
          "PkgPath": "app/node_modules/next/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/next@16.2.9",
            "UID": "df672ea1294e8fbd"
          },
          "InstalledVersion": "16.2.9",
          "FixedVersion": "16.2.11",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64642",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:61a5522b8083c638c245e0d94ebe879e3fe56e5064324c97f9df38e8256659d8",
          "Title": "next: Next.js: Authentication bypass leading to unauthorized access",
          "Description": "Next.js is a React framework for building full-stack web applications. In versions 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/proxy based authentication. This issue has been fixed in version 16.2.11.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-285"
          ],
          "VendorSeverity": {
            "ghsa": 3,
            "nvd": 3,
            "redhat": 3
          },
          "CVSS": {
            "ghsa": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N",
              "V40Score": 8.3
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
              "V3Score": 8.2
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
              "V3Score": 8.2
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-64642",
            "https://advisory.echohq.com/cve/CVE-2026-64642",
            "https://github.com/vercel/next.js",
            "https://github.com/vercel/next.js/commit/6bf4df14508ad6c0cd46af50c6051ee42f2d9151",
            "https://github.com/vercel/next.js/pull/96014",
            "https://github.com/vercel/next.js/releases/tag/v16.2.11",
            "https://github.com/vercel/next.js/security/advisories/GHSA-6gpp-xcg3-4w24",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-64642",
            "https://www.cve.org/CVERecord?id=CVE-2026-64642"
          ],
          "PublishedDate": "2026-07-27T18:16:59.01Z",
          "LastModifiedDate": "2026-10-24T13:10:00.147Z"
        },
        {
          "VulnerabilityID": "CVE-2026-64645",
          "VendorIDs": [
            "GHSA-p9j2-gv94-2wf4"
          ],
          "PkgID": "next@16.2.9",
          "PkgName": "next",
          "PkgPath": "app/node_modules/next/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/next@16.2.9",
            "UID": "df672ea1294e8fbd"
          },
          "InstalledVersion": "16.2.9",
          "FixedVersion": "15.5.21, 16.2.11",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64645",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:4a2a8d116e75acdc5a4d17b75125d99b6ee5010e3bef4edb0bca0b4555703281",
          "Title": "next: Next.js: Server-Side Request Forgery vulnerability",
          "Description": "Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a\n rewrites() or redirects() rule that builds its external destination hostname from request-controlled input can be pointed at an arbitrary hostname, regardless of the rule's hostname suffix. For a rewrite, Next.js proxies the request to that arbitrary host and serves the response from the application's origin, leading to Server-Side Request forgery. A redirects() rule configured this way is vulnerable to an Open Redirect. This issue has been fixed in versions 15.5.21 and 16.2.11.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-601",
            "CWE-918"
          ],
          "VendorSeverity": {
            "ghsa": 3,
            "nvd": 2,
            "redhat": 3
          },
          "CVSS": {
            "ghsa": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N",
              "V40Score": 8.3
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "V3Score": 6.1
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
              "V3Score": 8.2
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-64645",
            "https://advisory.echohq.com/cve/CVE-2026-64645",
            "https://github.com/vercel/next.js",
            "https://github.com/vercel/next.js/commit/35f501357e9b0fe7c950b0d6aa8fcf5343f707e9",
            "https://github.com/vercel/next.js/commit/d3033266c6dff23f7be71e19341fe3a8c6e2c599",
            "https://github.com/vercel/next.js/releases/tag/v15.5.21",
            "https://github.com/vercel/next.js/releases/tag/v16.2.11",
            "https://github.com/vercel/next.js/security/advisories/GHSA-p9j2-gv94-2wf4",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-64645",
            "https://www.cve.org/CVERecord?id=CVE-2026-64645"
          ],
          "PublishedDate": "2026-07-27T18:16:59.453Z",
          "LastModifiedDate": "2026-10-24T13:10:00.147Z"
        },
        {
          "VulnerabilityID": "CVE-2026-64649",
          "VendorIDs": [
            "GHSA-89xv-2m56-2m9x"
          ],
          "PkgID": "next@16.2.9",
          "PkgName": "next",
          "PkgPath": "app/node_modules/next/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/next@16.2.9",
            "UID": "df672ea1294e8fbd"
          },
          "InstalledVersion": "16.2.9",
          "FixedVersion": "15.5.21, 16.2.11",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64649",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:e0ff3087cf9cc95ab78eb0d4fde5211c11c02e4d22609f54dd3917dc378a45e6",
          "Title": "next: Next.js: Server-Side Request Forgery via malicious host redirection in Server Actions",
          "Description": "Next.js is a React framework for building full-stack web applications. In versions 14.1.1 through 15.5.20 and 16.0.0 through 16.2.10, when a Server Action forwards or redirects a request, an attacker can cause the server to send that outbound request to a malicious host (Server-Side Request Forgery). This requires the attacker's request to control Host-associated headers. In some configurations, it's also possible to obtain internal values that weaken middleware/proxy authorization. Applications that use Server Actions are affected when the incoming host header is not fixed to a trusted value. This typically occurs on custom servers, or on deployments not behind a proxy that pins the host. Managed hosting pins the host upstream and is not affected; next start and standalone output do the same from version 14.2 onward. This issue has been fixed in versions 15.5.21 and 16.2.11.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-918"
          ],
          "VendorSeverity": {
            "ghsa": 3,
            "nvd": 2,
            "redhat": 3
          },
          "CVSS": {
            "ghsa": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N",
              "V40Score": 8.3
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
              "V3Score": 6.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
              "V3Score": 8.2
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-64649",
            "https://advisory.echohq.com/cve/CVE-2026-64649",
            "https://github.com/vercel/next.js",
            "https://github.com/vercel/next.js/commit/b51206321854193208c0805ba42acc49287f942b",
            "https://github.com/vercel/next.js/commit/e3e5666ccead3a15162793d697af5e48b7cc0498",
            "https://github.com/vercel/next.js/releases/tag/v15.5.21",
            "https://github.com/vercel/next.js/releases/tag/v16.2.11",
            "https://github.com/vercel/next.js/security/advisories/GHSA-89xv-2m56-2m9x",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-64649",
            "https://www.cve.org/CVERecord?id=CVE-2026-64649"
          ],
          "PublishedDate": "2026-07-27T20:16:40.703Z",
          "LastModifiedDate": "2026-10-24T13:10:00.147Z"
        },
        {
          "VulnerabilityID": "CVE-2026-94482",
          "VendorIDs": [
            "GHSA-p3m5-59mp-jv5r"
          ],
          "PkgID": "next@16.2.9",
          "PkgName": "next",
          "PkgPath": "app/node_modules/next/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/next@16.2.9",
            "UID": "df672ea1294e8fbd"
          },
          "InstalledVersion": "16.2.9",
          "FixedVersion": "15.5.28, 16.4.1",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-94482",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:0faf6efbbb0c3074d60d2b90216ec226a4b3c475dac045536a65264025abd09f",
          "Title": "next: Next.js: Denial of Service via crafted requests targeting Server Actions",
          "Description": "Next.js is a React framework for building full-stack web applications. From 13.0.0 until 15.5.28 and 16.4.1, crafted requests targeting App Router applications with at least one Server Action can cause excessive CPU consumption and block processing of further requests in the same process. Applications using the Pages Router and App Router applications without Server Actions are not affected. This issue is fixed in versions 15.5.28 and 16.4.1.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-770"
          ],
          "VendorSeverity": {
            "ghsa": 3,
            "redhat": 3
          },
          "CVSS": {
            "ghsa": {
              "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
              "V40Score": 8.2
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-94482",
            "https://advisory.echohq.com/cve/CVE-2026-94482",
            "https://github.com/vercel/next.js",
            "https://github.com/vercel/next.js/releases/tag/v15.5.28",
            "https://github.com/vercel/next.js/releases/tag/v16.4.1",
            "https://github.com/vercel/next.js/security/advisories/GHSA-p3m5-59mp-jv5r",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-94482",
            "https://www.cve.org/CVERecord?id=CVE-2026-94482"
          ],
          "PublishedDate": "2026-10-22T16:19:16.72Z",
          "LastModifiedDate": "2026-10-30T19:20:19.39Z"
        },
        {
          "VulnerabilityID": "CVE-2026-94483",
          "VendorIDs": [
            "GHSA-cjq9-62q9-8jv4"
          ],
          "PkgID": "next@16.2.9",
          "PkgName": "next",
          "PkgPath": "app/node_modules/next/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/next@16.2.9",
            "UID": "df672ea1294e8fbd"
          },
          "InstalledVersion": "16.2.9",
          "FixedVersion": "16.3.8",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-94483",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:c3861727d6a3d291742847364c48c7fa15a59e51c5f7b76c8170782e9858edff",
          "Title": "next: Next.js: Information disclosure via SSRF in Image Optimization",
          "Description": "Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolution for a remote URL that matches images.remotePatterns, allowing the optimized image fetch to reach private IP addresses after the URL passes the allow-list check. Applications without images.remotePatterns are not affected. Administrators unable to upgrade should audit allow-listed hosts and avoid entries whose DNS records are not trusted. This issue is fixed in version 16.3.8.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-918"
          ],
          "VendorSeverity": {
            "ghsa": 3,
            "nvd": 2,
            "redhat": 1
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
              "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N",
              "V3Score": 6.5,
              "V40Score": 8.3
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
              "V3Score": 6.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
              "V3Score": 3.7
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-94483",
            "https://advisory.echohq.com/cve/CVE-2026-94483",
            "https://github.com/advisories/GHSA-cjq9-62q9-8jv4",
            "https://github.com/vercel/next.js",
            "https://github.com/vercel/next.js/commit/e002ad68bd676bb0ed0c87bb22e3590304763e0b",
            "https://github.com/vercel/next.js/releases/tag/v16.3.8",
            "https://github.com/vercel/next.js/security/advisories/GHSA-cjq9-62q9-8jv4",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-94483",
            "https://www.cve.org/CVERecord?id=CVE-2026-94483"
          ],
          "PublishedDate": "2026-10-02T16:16:51.473Z",
          "LastModifiedDate": "2026-10-06T17:17:27.837Z"
        },
        {
          "VulnerabilityID": "GHSA-f88m-g3jw-g9cj",
          "PkgID": "sharp@0.34.4",
          "PkgName": "sharp",
          "PkgPath": "app/node_modules/sharp/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/sharp@0.34.4",
            "UID": "40a2f012af4ea2fa"
          },
          "InstalledVersion": "0.34.4",
          "FixedVersion": "0.35.0",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://github.com/advisories/GHSA-f88m-g3jw-g9cj",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:21a26b7c5463e40686c666f635607f0942b446586d717a2940a729316747f732",
          "Title": "sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591",
          "Description": "### Impact\n\nA number of vulnerabilities, two rated as \"High\" severity using CVSSv4, have been discovered and fixed in the upstream libvips dependency.\n\nThose processing untrusted input with versions of sharp prior to 0.35.0 are affected.\n\n### Patches\n\n#### Using prebuilt binaries provided by sharp?\n\nMost people rely on the prebuilt binaries provided by sharp.\n\nPlease upgrade sharp to the latest version, currently 0.35.3, which provides libvips 8.18.3.\n\n#### Using a globally-installed libvips?\n\nPlease ensure you are using the latest libvips 8.18.3.\n\n### Workarounds\nAdd the following to your code to prevent sharp from decoding GIF, TIFF and VIPS images.\n```js\nsharp.block({ operation: [\"VipsForeignLoadNsgif\", \"VipsForeignLoadTiff\", \"VipsForeignLoadVips\"] });\n```",
          "Severity": "HIGH",
          "VendorSeverity": {
            "ghsa": 3
          },
          "CVSS": {
            "ghsa": {
              "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N",
              "V40Score": 7
            }
          },
          "References": [
            "https://advisory.echohq.com/cve/GHSA-f88m-g3jw-g9cj",
            "https://github.com/advisories/GHSA-f88m-g3jw-g9cj",
            "https://github.com/libvips/libvips/security/advisories/GHSA-2fcj-gj27-279x",
            "https://github.com/libvips/libvips/security/advisories/GHSA-523x-vhfw-6r76",
            "https://github.com/libvips/libvips/security/advisories/GHSA-jmwm-wc68-mhwm",
            "https://github.com/libvips/libvips/security/advisories/GHSA-r98w-4fp7-m9c7",
            "https://github.com/lovell/sharp",
            "https://github.com/lovell/sharp/security/advisories/GHSA-f88m-g3jw-g9cj"
          ],
          "PublishedDate": "2026-07-21T22:07:17Z",
          "LastModifiedDate": "2026-07-21T22:07:17Z"
        },
        {
          "VulnerabilityID": "GHSA-rgj7-g3m4-5g8c",
          "PkgID": "sharp@0.34.4",
          "PkgName": "sharp",
          "PkgPath": "app/node_modules/sharp/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/sharp@0.34.4",
            "UID": "40a2f012af4ea2fa"
          },
          "InstalledVersion": "0.34.4",
          "FixedVersion": "0.35.4",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://github.com/advisories/GHSA-rgj7-g3m4-5g8c",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:6556058959fcec1611ce8474e146eb7f5cd74e67ab38e772ad73c687e828ca7b",
          "Title": "sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545",
          "Description": "### Impact\nA number of vulnerabilities, two rated as \"Critical\" severity using CVSSv3, have been discovered and fixed in the upstream libheif dependency. These can lead to possible remote code execution (RCE) on glibc-based Linux when run under certain conditions.\n\nThe attack vector for these claims to be \"network\" however sharp does not provide any networking features so this vulnerability is down-rated to a \"High\" severity using CVSSv4 but please note its Subsequent System Impact.\n\nThose processing untrusted input with versions of sharp prior to 0.35.4 are affected.\n\n### Patches\n\n#### Using prebuilt binaries provided by sharp?\n\nMost people rely on the prebuilt binaries provided by sharp.\n\nPlease upgrade sharp to the latest version, currently 0.35.4, which provides libheif 1.23.2.\n\n#### Using a globally-installed libheif?\n\nPlease ensure you are using the latest libheif 1.23.2.\n\n### Workarounds\nAdd the following to your code to prevent sharp from decoding AVIF images.\n```js\nsharp.block({ operation: [\"VipsForeignLoadHeif\"] });\n```\n\nEnsure you are using a `node` executable binary compiled as a Position Independent Executable (PIE). Most Linux package managers already do this for protection against RCE however be warned that the \"official\" Node.js binaries do not.\n\n### References\n- [CVE-2026-84383](https://github.com/strukturag/libheif/security/advisories/GHSA-g89c-p67h-r497)\n- https://github.com/strukturag/libheif/security/advisories/GHSA-2jg2-4ch7-h545",
          "Severity": "HIGH",
          "VendorSeverity": {
            "ghsa": 3
          },
          "CVSS": {
            "ghsa": {
              "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
              "V40Score": 8.9
            }
          },
          "References": [
            "https://advisory.echohq.com/cve/GHSA-rgj7-g3m4-5g8c",
            "https://github.com/advisories/GHSA-rgj7-g3m4-5g8c",
            "https://github.com/lovell/sharp",
            "https://github.com/lovell/sharp/releases/tag/v0.35.4",
            "https://github.com/lovell/sharp/security/advisories/GHSA-rgj7-g3m4-5g8c",
            "https://github.com/strukturag/libheif/security/advisories/GHSA-2jg2-4ch7-h545",
            "https://github.com/strukturag/libheif/security/advisories/GHSA-g89c-p67h-r497"
          ],
          "PublishedDate": "2026-09-08T21:25:11Z",
          "LastModifiedDate": "2026-09-08T21:25:11Z"
        },
        {
          "VulnerabilityID": "GHSA-wq5f-xc86-pv6w",
          "PkgID": "sharp@0.34.4",
          "PkgName": "sharp",
          "PkgPath": "app/node_modules/sharp/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/sharp@0.34.4",
            "UID": "40a2f012af4ea2fa"
          },
          "InstalledVersion": "0.34.4",
          "FixedVersion": "0.35.5",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://github.com/advisories/GHSA-wq5f-xc86-pv6w",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:83382ecbda184ed38aa4d2929df0b9b90ef4ee614366fe1ebd0d5d7eb37af6fb",
          "Title": "sharp : Vulnerability in librsvg dependency CVE-2026-96889",
          "Description": "### Impact\n\nA memory-related vulnerability has been discovered and fixed in the upstream librsvg dependency. When certain runtime-specific conditions apply, this vulnerability can lead to possible remote code execution (RCE) on glibc-based Linux.\n\n### Patches\n\n#### Using prebuilt binaries provided by sharp?\n\nMost people rely on the prebuilt binaries provided by sharp.\n\nPlease upgrade sharp to the latest version, currently 0.35.5, which provides librsvg 2.63.2.\n\n#### Using a globally-installed librsvg?\n\nPlease ensure you are using the latest librsvg 2.63.2.\n\n### Workarounds\n\nAdd the following to your code to prevent sharp from decoding SVG images.\n```js\nsharp.block({ operation: [\"VipsForeignLoadSvg\"] });\n```\n\nTo avoid RCE, ensure you are using a `node` executable binary compiled as a Position Independent Executable (PIE). Most Linux package managers already use this security-hardening feature however be warned that the \"official\" Node.js binaries do not.\n1",
          "Severity": "HIGH",
          "VendorSeverity": {
            "ghsa": 3
          },
          "CVSS": {
            "ghsa": {
              "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
              "V40Score": 8.9
            }
          },
          "References": [
            "https://advisory.echohq.com/cve/GHSA-wq5f-xc86-pv6w",
            "https://github.com/advisories/GHSA-wq5f-xc86-pv6w",
            "https://github.com/lovell/sharp",
            "https://github.com/lovell/sharp/commit/96de105d9d36ab04c76c2b78b97255171630d236",
            "https://github.com/lovell/sharp/releases/tag/v0.35.5",
            "https://github.com/lovell/sharp/security/advisories/GHSA-wq5f-xc86-pv6w",
            "https://gitlab.gnome.org/GNOME/librsvg/-/work_items/1241",
            "https://www.cve.org/CVERecord?id=CVE-2026-96889"
          ],
          "PublishedDate": "2026-10-06T13:43:57Z",
          "LastModifiedDate": "2026-10-06T13:43:57Z"
        },
        {
          "VulnerabilityID": "GHSA-f88m-g3jw-g9cj",
          "PkgID": "sharp@0.34.5",
          "PkgName": "sharp",
          "PkgPath": "app/node_modules/next/node_modules/sharp/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/sharp@0.34.5",
            "UID": "9eb47d820a8782ee"
          },
          "InstalledVersion": "0.34.5",
          "FixedVersion": "0.35.0",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://github.com/advisories/GHSA-f88m-g3jw-g9cj",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:64d27e2bf55d07747e72c9313875b356f5fbd6fc952993af9c99e9bd7873e7ee",
          "Title": "sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591",
          "Description": "### Impact\n\nA number of vulnerabilities, two rated as \"High\" severity using CVSSv4, have been discovered and fixed in the upstream libvips dependency.\n\nThose processing untrusted input with versions of sharp prior to 0.35.0 are affected.\n\n### Patches\n\n#### Using prebuilt binaries provided by sharp?\n\nMost people rely on the prebuilt binaries provided by sharp.\n\nPlease upgrade sharp to the latest version, currently 0.35.3, which provides libvips 8.18.3.\n\n#### Using a globally-installed libvips?\n\nPlease ensure you are using the latest libvips 8.18.3.\n\n### Workarounds\nAdd the following to your code to prevent sharp from decoding GIF, TIFF and VIPS images.\n```js\nsharp.block({ operation: [\"VipsForeignLoadNsgif\", \"VipsForeignLoadTiff\", \"VipsForeignLoadVips\"] });\n```",
          "Severity": "HIGH",
          "VendorSeverity": {
            "ghsa": 3
          },
          "CVSS": {
            "ghsa": {
              "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N",
              "V40Score": 7
            }
          },
          "References": [
            "https://advisory.echohq.com/cve/GHSA-f88m-g3jw-g9cj",
            "https://github.com/advisories/GHSA-f88m-g3jw-g9cj",
            "https://github.com/libvips/libvips/security/advisories/GHSA-2fcj-gj27-279x",
            "https://github.com/libvips/libvips/security/advisories/GHSA-523x-vhfw-6r76",
            "https://github.com/libvips/libvips/security/advisories/GHSA-jmwm-wc68-mhwm",
            "https://github.com/libvips/libvips/security/advisories/GHSA-r98w-4fp7-m9c7",
            "https://github.com/lovell/sharp",
            "https://github.com/lovell/sharp/security/advisories/GHSA-f88m-g3jw-g9cj"
          ],
          "PublishedDate": "2026-07-21T22:07:17Z",
          "LastModifiedDate": "2026-07-21T22:07:17Z"
        },
        {
          "VulnerabilityID": "GHSA-rgj7-g3m4-5g8c",
          "PkgID": "sharp@0.34.5",
          "PkgName": "sharp",
          "PkgPath": "app/node_modules/next/node_modules/sharp/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/sharp@0.34.5",
            "UID": "9eb47d820a8782ee"
          },
          "InstalledVersion": "0.34.5",
          "FixedVersion": "0.35.4",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://github.com/advisories/GHSA-rgj7-g3m4-5g8c",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:a94b366f7ebef36f188b582c30314ee6e4a84e3edfa3778a549e7fd19c696181",
          "Title": "sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545",
          "Description": "### Impact\nA number of vulnerabilities, two rated as \"Critical\" severity using CVSSv3, have been discovered and fixed in the upstream libheif dependency. These can lead to possible remote code execution (RCE) on glibc-based Linux when run under certain conditions.\n\nThe attack vector for these claims to be \"network\" however sharp does not provide any networking features so this vulnerability is down-rated to a \"High\" severity using CVSSv4 but please note its Subsequent System Impact.\n\nThose processing untrusted input with versions of sharp prior to 0.35.4 are affected.\n\n### Patches\n\n#### Using prebuilt binaries provided by sharp?\n\nMost people rely on the prebuilt binaries provided by sharp.\n\nPlease upgrade sharp to the latest version, currently 0.35.4, which provides libheif 1.23.2.\n\n#### Using a globally-installed libheif?\n\nPlease ensure you are using the latest libheif 1.23.2.\n\n### Workarounds\nAdd the following to your code to prevent sharp from decoding AVIF images.\n```js\nsharp.block({ operation: [\"VipsForeignLoadHeif\"] });\n```\n\nEnsure you are using a `node` executable binary compiled as a Position Independent Executable (PIE). Most Linux package managers already do this for protection against RCE however be warned that the \"official\" Node.js binaries do not.\n\n### References\n- [CVE-2026-84383](https://github.com/strukturag/libheif/security/advisories/GHSA-g89c-p67h-r497)\n- https://github.com/strukturag/libheif/security/advisories/GHSA-2jg2-4ch7-h545",
          "Severity": "HIGH",
          "VendorSeverity": {
            "ghsa": 3
          },
          "CVSS": {
            "ghsa": {
              "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
              "V40Score": 8.9
            }
          },
          "References": [
            "https://advisory.echohq.com/cve/GHSA-rgj7-g3m4-5g8c",
            "https://github.com/advisories/GHSA-rgj7-g3m4-5g8c",
            "https://github.com/lovell/sharp",
            "https://github.com/lovell/sharp/releases/tag/v0.35.4",
            "https://github.com/lovell/sharp/security/advisories/GHSA-rgj7-g3m4-5g8c",
            "https://github.com/strukturag/libheif/security/advisories/GHSA-2jg2-4ch7-h545",
            "https://github.com/strukturag/libheif/security/advisories/GHSA-g89c-p67h-r497"
          ],
          "PublishedDate": "2026-09-08T21:25:11Z",
          "LastModifiedDate": "2026-09-08T21:25:11Z"
        },
        {
          "VulnerabilityID": "GHSA-wq5f-xc86-pv6w",
          "PkgID": "sharp@0.34.5",
          "PkgName": "sharp",
          "PkgPath": "app/node_modules/next/node_modules/sharp/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/sharp@0.34.5",
            "UID": "9eb47d820a8782ee"
          },
          "InstalledVersion": "0.34.5",
          "FixedVersion": "0.35.5",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:aa8655963e843a69da9122c0dfb3ac8fe8f6f4fa261c8183df36b6f34f0b8471"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://github.com/advisories/GHSA-wq5f-xc86-pv6w",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:65b78d5e49dd6c3963e8fbd1d226f08995412488c53d904f527299763176ce13",
          "Title": "sharp : Vulnerability in librsvg dependency CVE-2026-96889",
          "Description": "### Impact\n\nA memory-related vulnerability has been discovered and fixed in the upstream librsvg dependency. When certain runtime-specific conditions apply, this vulnerability can lead to possible remote code execution (RCE) on glibc-based Linux.\n\n### Patches\n\n#### Using prebuilt binaries provided by sharp?\n\nMost people rely on the prebuilt binaries provided by sharp.\n\nPlease upgrade sharp to the latest version, currently 0.35.5, which provides librsvg 2.63.2.\n\n#### Using a globally-installed librsvg?\n\nPlease ensure you are using the latest librsvg 2.63.2.\n\n### Workarounds\n\nAdd the following to your code to prevent sharp from decoding SVG images.\n```js\nsharp.block({ operation: [\"VipsForeignLoadSvg\"] });\n```\n\nTo avoid RCE, ensure you are using a `node` executable binary compiled as a Position Independent Executable (PIE). Most Linux package managers already use this security-hardening feature however be warned that the \"official\" Node.js binaries do not.\n1",
          "Severity": "HIGH",
          "VendorSeverity": {
            "ghsa": 3
          },
          "CVSS": {
            "ghsa": {
              "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
              "V40Score": 8.9
            }
          },
          "References": [
            "https://advisory.echohq.com/cve/GHSA-wq5f-xc86-pv6w",
            "https://github.com/advisories/GHSA-wq5f-xc86-pv6w",
            "https://github.com/lovell/sharp",
            "https://github.com/lovell/sharp/commit/96de105d9d36ab04c76c2b78b97255171630d236",
            "https://github.com/lovell/sharp/releases/tag/v0.35.5",
            "https://github.com/lovell/sharp/security/advisories/GHSA-wq5f-xc86-pv6w",
            "https://gitlab.gnome.org/GNOME/librsvg/-/work_items/1241",
            "https://www.cve.org/CVERecord?id=CVE-2026-96889"
          ],
          "PublishedDate": "2026-10-06T13:43:57Z",
          "LastModifiedDate": "2026-10-06T13:43:57Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109383",
          "VendorIDs": [
            "GHSA-2m5v-pch6-74hx"
          ],
          "PkgID": "undici@6.28.0",
          "PkgName": "undici",
          "PkgPath": "usr/local/lib/node_modules/npm/node_modules/undici/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/undici@6.28.0",
            "UID": "ce334dba36b60cab"
          },
          "InstalledVersion": "6.28.0",
          "FixedVersion": "6.29.1, 7.30.1, 8.12.2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109383",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:9a44bb965661b52e70871b13294ee23029f6885c274c7823134026c7a5001294",
          "Title": "undici: undici: Certificate validation bypass via dropped TLS options in Agent",
          "Description": "undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its constructor options through a JSON-based deep clone before forwarding them to each per-origin pool, and because JSON cannot represent functions, a caller-supplied tls option containing a checkServerIdentity callback is silently dropped before it reaches the TLS layer. As a result, a TLS peer whose certificate a custom checkServerIdentity was written to reject, but which passes Node's default hostname and chain checks, is silently accepted. Because Agent is the default dispatcher behind request, fetch, and setGlobalDispatcher, this affects the path most applications use, and EnvHttpProxyAgent is affected on its direct and no-proxy routes as well, while only applications that pass a function-valued tls option such as a custom checkServerIdentity for certificate or public-key pinning are at risk. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, which preserve the tls option outside the JSON clone so custom verification callbacks are forwarded unchanged, and users should upgrade to one of those versions or later. As a workaround, pass the TLS options through connect instead of tls, or for proxied destinations use requestTls and proxyTls.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-295"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "ghsa": 3,
            "nvd": 4,
            "redhat": 3
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "V3Score": 7.4
            },
            "nvd": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "V3Score": 9.1
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "V3Score": 7.4
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109383",
            "https://advisory.echohq.com/cve/CVE-2026-109383",
            "https://cna.openjsf.org/security-advisories.html",
            "https://github.com/nodejs/undici",
            "https://github.com/nodejs/undici/commit/04cb74b1db131ff8f5b4557dce811cbf5f4664b4",
            "https://github.com/nodejs/undici/commit/8c59f6b302898cb2e9b0f7962cd7212b6e597c9f",
            "https://github.com/nodejs/undici/commit/f75eac00ac17",
            "https://github.com/nodejs/undici/commit/f75eac00ac177f7b2e6c8bfbd52d4113164286e6",
            "https://github.com/nodejs/undici/releases/tag/v6.29.1",
            "https://github.com/nodejs/undici/releases/tag/v7.30.1",
            "https://github.com/nodejs/undici/releases/tag/v8.12.2",
            "https://github.com/nodejs/undici/security/advisories/GHSA-2m5v-pch6-74hx",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109383",
            "https://www.cve.org/CVERecord?id=CVE-2026-109383"
          ],
          "PublishedDate": "2026-10-15T19:17:20.853Z",
          "LastModifiedDate": "2026-10-19T20:45:52.41Z"
        },
        {
          "VulnerabilityID": "CVE-2026-109869",
          "VendorIDs": [
            "GHSA-xjj6-f33q-929c"
          ],
          "PkgID": "undici@6.28.0",
          "PkgName": "undici",
          "PkgPath": "usr/local/lib/node_modules/npm/node_modules/undici/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/undici@6.28.0",
            "UID": "ce334dba36b60cab"
          },
          "InstalledVersion": "6.28.0",
          "FixedVersion": "6.29.1, 7.30.1, 8.12.2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109869",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:7c476215b596fa70157cb35d05b4de505401ebea722846fc609ad4831d0fd7eb",
          "Title": "undici: undici: Denial of Service via unhandled stream error on excessive content encodings",
          "Description": "undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.0.0 through 8.12.1, its fetch() implementation crashes the Node.js process when a malicious server returns a response with more than five content codings and closes the connection before sending the body. undici rejects such responses because of a content-encoding limit, but it created the internal response stream before that check and returned without attaching an error listener or aborting the request, so the early close surfaces a content-length mismatch on the orphaned stream, which Node.js treats as an unhandled error and terminates the process. A remote, unauthenticated server can trigger this with a single response, even when the application correctly catches the fetch() rejection, resulting in a denial of service. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, and users should upgrade to one of those versions or later. There is no workaround.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-248",
            "CWE-459"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "ghsa": 3,
            "redhat": 3
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-109869",
            "https://advisory.echohq.com/cve/CVE-2026-109869",
            "https://cna.openjsf.org/security-advisories.html",
            "https://github.com/nodejs/undici",
            "https://github.com/nodejs/undici/commit/07ded4941b1e72afec862958c3b8ddf468f3b429",
            "https://github.com/nodejs/undici/commit/1325a87dfb3492f8e87e6b0a84b3bda4e82e3436",
            "https://github.com/nodejs/undici/commit/b5084c7dc239",
            "https://github.com/nodejs/undici/commit/b5084c7dc239172d75c336b1cd51ddac023938a5",
            "https://github.com/nodejs/undici/releases/tag/v6.29.1",
            "https://github.com/nodejs/undici/releases/tag/v7.30.1",
            "https://github.com/nodejs/undici/releases/tag/v8.12.2",
            "https://github.com/nodejs/undici/security/advisories/GHSA-xjj6-f33q-929c",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-109869",
            "https://www.cve.org/CVERecord?id=CVE-2026-109869"
          ],
          "PublishedDate": "2026-10-15T19:17:21.77Z",
          "LastModifiedDate": "2026-10-19T20:45:20.34Z"
        },
        {
          "VulnerabilityID": "CVE-2026-19534",
          "VendorIDs": [
            "GHSA-rfgv-xxqx-mfg5"
          ],
          "PkgID": "undici@6.28.0",
          "PkgName": "undici",
          "PkgPath": "usr/local/lib/node_modules/npm/node_modules/undici/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/undici@6.28.0",
            "UID": "ce334dba36b60cab"
          },
          "InstalledVersion": "6.28.0",
          "FixedVersion": "6.28.1, 7.29.1, 8.10.2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-19534",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:f52058c6467e99215c0b039a3317bcc77b7865dcd3de21a967deadff0f798162",
          "Title": "undici: undici: Denial of Service via unrequested WebSocket subprotocol",
          "Description": "undici's WebSocket client crashes the whole Node.js process during the opening handshake when a server responds with a subprotocol that the client never requested. A default WebSocket connection sends no subprotocol, but if the server's 101 response includes a Sec-WebSocket-Protocol header, undici dereferences a null value while checking it against the requested list and throws an uncaught TypeError. Because that code runs inside a microtask with no surrounding error handling, the exception propagates and terminates the process under Node's default behavior, instead of gracefully failing the connection as required by the WebSocket protocol. Any application that opens a WebSocket to an attacker-controlled or compromised server, or over a plaintext connection subject to a machine-in-the-middle, can be crashed remotely without authentication in the default configuration. This affects undici versions from 6.7.0 up to 6.28.1, from 7.0.0 up to 7.29.1, and from 8.0.0 up to 8.10.2. Users should upgrade to undici 6.28.1, 7.29.1, or 8.10.2.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-248",
            "CWE-252"
          ],
          "VendorSeverity": {
            "alma": 3,
            "amazon": 3,
            "ghsa": 3,
            "oracle-oval": 3,
            "redhat": 3,
            "rocky": 3
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/errata/RHSA-2026:76750",
            "https://access.redhat.com/security/cve/CVE-2026-19534",
            "https://advisory.echohq.com/cve/CVE-2026-19534",
            "https://bugzilla.redhat.com/2481394",
            "https://bugzilla.redhat.com/2528759",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2481394",
            "https://bugzilla.redhat.com/show_bug.cgi?id=2528759",
            "https://cna.openjsf.org/security-advisories.html",
            "https://creativecommons.org/licenses/by/4.0/",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19534",
            "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9496",
            "https://errata.almalinux.org/9/ALSA-2026-76750.html",
            "https://errata.rockylinux.org/RLSA-2026:76750",
            "https://github.com/nodejs/undici",
            "https://github.com/nodejs/undici/commit/2af0faf88b906d3127a360c3ac75164c0f95e5a5",
            "https://github.com/nodejs/undici/commit/6615e0175e9b635bcd2e3e87a47daa82f6f5b728",
            "https://github.com/nodejs/undici/commit/66e12816064cf3068f63bd134748b7fc4e779bad",
            "https://github.com/nodejs/undici/releases/tag/v6.28.1",
            "https://github.com/nodejs/undici/releases/tag/v7.29.1",
            "https://github.com/nodejs/undici/releases/tag/v8.10.2",
            "https://github.com/nodejs/undici/security/advisories/GHSA-rfgv-xxqx-mfg5",
            "https://linux.oracle.com/cve/CVE-2026-19534.html",
            "https://linux.oracle.com/errata/ELSA-2026-76750.html",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-19534",
            "https://www.cve.org/CVERecord?id=CVE-2026-19534"
          ],
          "PublishedDate": "2026-09-04T18:17:51.647Z",
          "LastModifiedDate": "2026-09-16T20:41:08.75Z"
        },
        {
          "VulnerabilityID": "CVE-2026-87018",
          "VendorIDs": [
            "GHSA-qrxm-fqhp-jwvm"
          ],
          "PkgID": "undici@6.28.0",
          "PkgName": "undici",
          "PkgPath": "usr/local/lib/node_modules/npm/node_modules/undici/package.json",
          "PkgIdentifier": {
            "PURL": "pkg:npm/undici@6.28.0",
            "UID": "ce334dba36b60cab"
          },
          "InstalledVersion": "6.28.0",
          "FixedVersion": "6.29.1, 7.30.1, 8.12.2",
          "Status": "fixed",
          "Layer": {
            "DiffID": "sha256:85065cc72b0d3cbe08cd9e8c086688b7836ee321e313096d1cfb441674361f65"
          },
          "SeveritySource": "ghsa",
          "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-87018",
          "DataSource": {
            "ID": "ghsa",
            "Name": "GitHub Security Advisory npm",
            "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
          },
          "Fingerprint": "sha256:f27f4a9a6d0071715e9d87fd03b10390a36ee14684a85da5713d9722142b214f",
          "Title": "undici: undici: Denial of Service via TLS renegotiation with mismatched certificate",
          "Description": "undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, the client process crashes when a TLS 1.2 server renegotiates after the connection is established and presents a different, CA-trusted certificate whose hostname does not match the requested host. Node.js re-runs hostname verification on the renegotiated handshake and destroys the socket with a certificate-altname error, but undici's established-socket error handler asserted that this error code could never occur, so the peer-controlled error became an uncaught assertion that terminates the Node.js process, affecting both the HTTP/1.1 and HTTP/2 paths. A malicious or compromised HTTPS endpoint reached through undici or the global fetch() can crash the client with a single server-initiated renegotiation, taking down all in-flight requests and background work in the process, and exploitation needs no CA compromise because the attacker controls the endpoint and can present two ordinary valid certificates. Only TLS 1.2 is affected, since TLS 1.3 does not support renegotiation. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, and users should upgrade to one of those versions or later. As a workaround, restrict outbound connections to TLS 1.3 so renegotiation cannot occur, when the target endpoints support it.",
          "Severity": "HIGH",
          "CweIDs": [
            "CWE-248",
            "CWE-617"
          ],
          "VendorSeverity": {
            "amazon": 3,
            "ghsa": 3,
            "redhat": 3
          },
          "CVSS": {
            "ghsa": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            },
            "redhat": {
              "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "V3Score": 7.5
            }
          },
          "References": [
            "https://access.redhat.com/security/cve/CVE-2026-87018",
            "https://advisory.echohq.com/cve/CVE-2026-87018",
            "https://cna.openjsf.org/security-advisories.html",
            "https://github.com/nodejs/undici",
            "https://github.com/nodejs/undici/commit/12cfd96c3f430897656e3edc1c5e02be8c1cd309",
            "https://github.com/nodejs/undici/commit/b40fbfc0651703cf9fa9f6ced68b679f28d8bb28",
            "https://github.com/nodejs/undici/commit/e257e9f8fb42eedd50727b9cf65e548c8925e4a8",
            "https://github.com/nodejs/undici/releases/tag/v6.29.1",
            "https://github.com/nodejs/undici/releases/tag/v7.30.1",
            "https://github.com/nodejs/undici/releases/tag/v8.12.2",
            "https://github.com/nodejs/undici/security/advisories/GHSA-qrxm-fqhp-jwvm",
            "https://nvd.nist.gov/vuln/detail/CVE-2026-87018",
            "https://www.cve.org/CVERecord?id=CVE-2026-87018"
          ],
          "PublishedDate": "2026-10-15T19:17:46.6Z",
          "LastModifiedDate": "2026-10-19T20:41:16.643Z"
        }
      ]
    }
  ]
}
