{ "SchemaVersion": 2, "Trivy": { "Version": "0.70.0" }, "ReportID": "01a1b919-9a6f-7d28-93da-eab8bbee9872", "CreatedAt": "2026-11-08T04:00:25.327863909+01:00", "ArtifactID": "sha256:4b158c206e82749e086a7e1683b04e5ef09124c690c86890f948c95adbb91336", "ArtifactName": "ghcr.io/advplyr/audiobookshelf:latest", "ArtifactType": "container_image", "Metadata": { "Size": 369068544, "OS": { "Family": "alpine", "Name": "3.24.3" }, "ImageID": "sha256:428769644edafa69beffc66ea45e4e1458a0f2b52e77e914d46068ca4b9fe53b", "DiffIDs": [ "sha256:75c137aedfb2760f88629236cb7b797630aed0c3d91d626d1d1bb694878fc2ba", "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417", "sha256:a81b85a0b02f451fac1872d6f0abe015d010d800b457270409335029c55c474d", "sha256:bda40d8c442bd04d0ebe75ffa571b1cefc1845146a081ffd7f642ecb24fefe1d", "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8", "sha256:05d70516474904b3804e460e4316f4996a3d52f17bc2c59b7b530b92da5a2b70", "sha256:ebfbbfb375714fa78c7b5f249fb415121fdf5fc817bbef2fcc1610be1a74c8cd", "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332", "sha256:415bf3d93622b37a37aa71f8a82a2dd33d8ba54261ec42f88d064f543f4408af" ], "RepoTags": [ "ghcr.io/advplyr/audiobookshelf:latest" ], "RepoDigests": [ "ghcr.io/advplyr/audiobookshelf@sha256:b897c33f05972fb1bf484f7487bc878fa91ec8691335c1db6e2929c3a7658efa" ], "Reference": "ghcr.io/advplyr/audiobookshelf:latest", "ImageConfig": { "architecture": "amd64", "created": "2026-10-23T19:39:46.547383449Z", "history": [ { "created": "2026-10-21T22:37:22Z", "created_by": "ADD alpine-minirootfs-3.24.3-x86_64.tar.gz / # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-10-21T22:37:22Z", "created_by": "CMD [\"/bin/sh\"]", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-21T22:58:44Z", "created_by": "ENV NODE_VERSION=24.22.1", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-21T22:58:44Z", "created_by": "RUN /bin/sh -c addgroup -g 1000 node \u0026\u0026 adduser -u 1000 -G node -s /bin/sh -D node \u0026\u0026 apk add --no-cache libatomic libstdc++ \u0026\u0026 apk add --no-cache --virtual .build-deps gnupg curl \u0026\u0026 ARCH= OPENSSL_ARCH='linux*' \u0026\u0026 alpineArch=\"$(apk --print-arch)\" \u0026\u0026 case \"${alpineArch##*-}\" in x86_64) ARCH='x64' OPENSSL_ARCH=linux-x86_64;; aarch64) OPENSSL_ARCH=linux-aarch64;; s390x) OPENSSL_ARCH=linux-s390x;; *) echo \"unsupported architecture\"; exit 1 ;; esac \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 set -ex \u0026\u0026 for key in 5BE8A3F6C8A5C01D106C0AD820B1A390B168D356 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A 655F3B5C1FB3FA8D1A0CA6BDE4A7D232B936D2FD A363A499291CBBC940DD62E41F10027AF002F8B0 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" \u0026\u0026 gpg --batch --fingerprint \"$key\"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" \u0026\u0026 gpg --batch --fingerprint \"$key\"; } ; done \u0026\u0026 if [ \"$ARCH\" = \"x64\" ]; then curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 rm \"node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo \"Building from source\" \u0026\u0026 apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc libgcc linux-headers make python3 py-setuptools \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xf \"node-v$NODE_VERSION.tar.xz\" \u0026\u0026 cd \"node-v$NODE_VERSION\" \u0026\u0026 ./configure \u0026\u0026 make -j$(getconf _NPROCESSORS_ONLN) V= \u0026\u0026 make install \u0026\u0026 apk del .build-deps-full \u0026\u0026 cd .. \u0026\u0026 rm -Rf \"node-v$NODE_VERSION\" \u0026\u0026 rm \"node-v$NODE_VERSION.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt; fi \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apk del .build-deps \u0026\u0026 node --version \u0026\u0026 npm --version \u0026\u0026 rm -rf /tmp/* # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-10-21T22:58:44Z", "created_by": "ENV YARN_VERSION=1.22.22", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-21T22:58:47Z", "created_by": "RUN /bin/sh -c apk add --no-cache --virtual .build-deps-yarn curl gnupg tar \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in 6A010C5166006599AA17F08146C2130DFD2497F5 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" \u0026\u0026 gpg --batch --fingerprint \"$key\"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" \u0026\u0026 gpg --batch --fingerprint \"$key\"; } ; done \u0026\u0026 curl -fsSLO --compressed \"https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz\" \u0026\u0026 curl -fsSLO --compressed \"https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz.asc\" \u0026\u0026 gpg --batch --verify yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 mkdir -p /opt \u0026\u0026 tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/ \u0026\u0026 ln -s /opt/yarn-v$YARN_VERSION/bin/yarn /usr/local/bin/yarn \u0026\u0026 ln -s /opt/yarn-v$YARN_VERSION/bin/yarnpkg /usr/local/bin/yarnpkg \u0026\u0026 rm yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz \u0026\u0026 apk del .build-deps-yarn \u0026\u0026 yarn --version \u0026\u0026 rm -rf /tmp/* # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-10-21T22:58:47Z", "created_by": "COPY docker-entrypoint.sh /usr/local/bin/ # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-10-21T22:58:47Z", "created_by": "ENTRYPOINT [\"docker-entrypoint.sh\"]", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-21T22:58:47Z", "created_by": "CMD [\"node\"]", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-22T22:36:42Z", "created_by": "ARG NUSQLITE3_DIR=/usr/local/lib/nusqlite3", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-22T22:36:42Z", "created_by": "ARG NUSQLITE3_PATH=/usr/local/lib/nusqlite3/libnusqlite3.so", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-22T22:36:42Z", "created_by": "RUN |2 NUSQLITE3_DIR=/usr/local/lib/nusqlite3 NUSQLITE3_PATH=/usr/local/lib/nusqlite3/libnusqlite3.so /bin/sh -c apk add --no-cache --update tzdata ffmpeg tini # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-10-22T22:36:42Z", "created_by": "WORKDIR /app", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-10-23T19:39:45Z", "created_by": "COPY /client/dist /app/client/dist # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-10-23T19:39:46Z", "created_by": "COPY /server /app # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-10-23T19:39:46Z", "created_by": "COPY /usr/local/lib/nusqlite3/libnusqlite3.so /usr/local/lib/nusqlite3/libnusqlite3.so # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-10-23T19:39:46Z", "created_by": "EXPOSE [80/tcp]", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-23T19:39:46Z", "created_by": "ENV PORT=80", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-23T19:39:46Z", "created_by": "ENV NODE_ENV=production", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-23T19:39:46Z", "created_by": "ENV CONFIG_PATH=/config", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-23T19:39:46Z", "created_by": "ENV METADATA_PATH=/metadata", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-23T19:39:46Z", "created_by": "ENV SOURCE=docker", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-23T19:39:46Z", "created_by": "ENV NUSQLITE3_DIR=/usr/local/lib/nusqlite3", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-23T19:39:46Z", "created_by": "ENV NUSQLITE3_PATH=/usr/local/lib/nusqlite3/libnusqlite3.so", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-23T19:39:46Z", "created_by": "ENTRYPOINT [\"tini\" \"--\"]", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-23T19:39:46Z", "created_by": "CMD [\"node\" \"dist-server/index.js\"]", "comment": "buildkit.dockerfile.v0", "empty_layer": true } ], "os": "linux", "rootfs": { "type": "layers", "diff_ids": [ "sha256:75c137aedfb2760f88629236cb7b797630aed0c3d91d626d1d1bb694878fc2ba", "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417", "sha256:a81b85a0b02f451fac1872d6f0abe015d010d800b457270409335029c55c474d", "sha256:bda40d8c442bd04d0ebe75ffa571b1cefc1845146a081ffd7f642ecb24fefe1d", "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8", "sha256:05d70516474904b3804e460e4316f4996a3d52f17bc2c59b7b530b92da5a2b70", "sha256:ebfbbfb375714fa78c7b5f249fb415121fdf5fc817bbef2fcc1610be1a74c8cd", "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332", "sha256:415bf3d93622b37a37aa71f8a82a2dd33d8ba54261ec42f88d064f543f4408af" ] }, "config": { "Cmd": [ "node", "dist-server/index.js" ], "Entrypoint": [ "tini", "--" ], "Env": [ "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", "NODE_VERSION=24.22.1", "YARN_VERSION=1.22.22", "PORT=80", "NODE_ENV=production", "CONFIG_PATH=/config", "METADATA_PATH=/metadata", "SOURCE=docker", "NUSQLITE3_DIR=/usr/local/lib/nusqlite3", "NUSQLITE3_PATH=/usr/local/lib/nusqlite3/libnusqlite3.so" ], "Labels": { "org.opencontainers.image.created": "2026-10-23T19:58:49.792Z", "org.opencontainers.image.description": "Self-hosted audiobook and podcast server", "org.opencontainers.image.licenses": "GPL-3.0", "org.opencontainers.image.revision": "edb1f7efc92ecacdef51aafb4d9d5054ce10604f", "org.opencontainers.image.source": "https://github.com/advplyr/audiobookshelf", "org.opencontainers.image.title": "audiobookshelf", "org.opencontainers.image.url": "https://github.com/advplyr/audiobookshelf", "org.opencontainers.image.version": "2.37.2" }, "WorkingDir": "/app", "ExposedPorts": { "80/tcp": {} }, "ArgsEscaped": true } }, "Layers": [ { "Size": 8709632, "DiffID": "sha256:75c137aedfb2760f88629236cb7b797630aed0c3d91d626d1d1bb694878fc2ba" }, { "Size": 160412160, "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, { "Size": 5391360, "DiffID": "sha256:a81b85a0b02f451fac1872d6f0abe015d010d800b457270409335029c55c474d" }, { "Size": 3584, "DiffID": "sha256:bda40d8c442bd04d0ebe75ffa571b1cefc1845146a081ffd7f642ecb24fefe1d" }, { "Size": 132380672, "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, { "Size": 1536, "DiffID": "sha256:05d70516474904b3804e460e4316f4996a3d52f17bc2c59b7b530b92da5a2b70" }, { "Size": 13552128, "DiffID": "sha256:ebfbbfb375714fa78c7b5f249fb415121fdf5fc817bbef2fcc1610be1a74c8cd" }, { "Size": 48341504, "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, { "Size": 275968, "DiffID": "sha256:415bf3d93622b37a37aa71f8a82a2dd33d8ba54261ec42f88d064f543f4408af" } ] }, "Results": [ { "Target": "ghcr.io/advplyr/audiobookshelf:latest (alpine 3.24.3)", "Class": "os-pkgs", "Type": "alpine", "Packages": [ { "ID": "alpine-baselayout@3.7.2-r1", "Name": "alpine-baselayout", "Identifier": { "PURL": "pkg:apk/alpine/alpine-baselayout@3.7.2-r1?arch=x86_64\u0026distro=3.24.3", "UID": "1b9c543300f8073e" }, "Version": "3.7.2-r1", "Arch": "x86_64", "SrcName": "alpine-baselayout", "SrcVersion": "3.7.2-r1", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "alpine-baselayout-data@3.7.2-r1", "busybox-binsh@1.37.0-r31" ], "Layer": { "DiffID": "sha256:75c137aedfb2760f88629236cb7b797630aed0c3d91d626d1d1bb694878fc2ba" }, "Digest": "sha1:f0fcfdc2f4da058af6473bc45c4eab62916225b2", "InstalledFiles": [ "etc/motd", "etc/crontabs/root", "etc/modprobe.d/aliases.conf", "etc/modprobe.d/blacklist.conf", "etc/modprobe.d/i386.conf", "etc/profile.d/20locale.sh", "etc/profile.d/README", "etc/profile.d/color_prompt.sh.disabled", "usr/lib/sysctl.d/00-alpine.conf", "var/lock", "var/run", "var/spool/mail", "var/spool/cron/crontabs" ], "AnalyzedBy": "apk" }, { "ID": "alpine-baselayout-data@3.7.2-r1", "Name": "alpine-baselayout-data", "Identifier": { "PURL": "pkg:apk/alpine/alpine-baselayout-data@3.7.2-r1?arch=x86_64\u0026distro=3.24.3", "UID": "fcc3cd90122d8aa7" }, "Version": "3.7.2-r1", "Arch": "x86_64", "SrcName": "alpine-baselayout", "SrcVersion": "3.7.2-r1", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "Layer": { "DiffID": "sha256:75c137aedfb2760f88629236cb7b797630aed0c3d91d626d1d1bb694878fc2ba" }, "Digest": "sha1:c6f9bded17d844b6f1b0bb5766d2c35c0d5c8508", "InstalledFiles": [ "etc/fstab", "etc/group", "etc/hostname", "etc/hosts", "etc/inittab", "etc/modules", "etc/mtab", "etc/nsswitch.conf", "etc/passwd", "etc/profile", "etc/protocols", "etc/services", "etc/shadow", "etc/shells", "etc/sysctl.conf" ], "AnalyzedBy": "apk" }, { "ID": "alpine-keys@2.6-r0", "Name": "alpine-keys", "Identifier": { "PURL": "pkg:apk/alpine/alpine-keys@2.6-r0?arch=x86_64\u0026distro=3.24.3", "UID": "cb1f6c8fa74713e0" }, "Version": "2.6-r0", "Arch": "x86_64", "SrcName": "alpine-keys", "SrcVersion": "2.6-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "Layer": { "DiffID": "sha256:75c137aedfb2760f88629236cb7b797630aed0c3d91d626d1d1bb694878fc2ba" }, "Digest": "sha1:d8d6b80e53c059a77e4915da78ba964f3ffea240", "InstalledFiles": [ "etc/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", "etc/apk/keys/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub", "etc/apk/keys/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58199dcc.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58cbb476.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58e4f17d.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5e69ca50.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-60ac2099.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616a9724.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616abc23.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616ac3bc.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616adfeb.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616ae350.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616db30d.rsa.pub", "usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-66ba20fe.rsa.pub", "usr/share/apk/keys/aarch64/alpine-devel@lists.alpinelinux.org-58199dcc.rsa.pub", "usr/share/apk/keys/aarch64/alpine-devel@lists.alpinelinux.org-616ae350.rsa.pub", "usr/share/apk/keys/armhf/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub", "usr/share/apk/keys/armhf/alpine-devel@lists.alpinelinux.org-616a9724.rsa.pub", "usr/share/apk/keys/armv7/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub", "usr/share/apk/keys/armv7/alpine-devel@lists.alpinelinux.org-616adfeb.rsa.pub", "usr/share/apk/keys/loongarch64/alpine-devel@lists.alpinelinux.org-66ba20fe.rsa.pub", "usr/share/apk/keys/mips64/alpine-devel@lists.alpinelinux.org-5e69ca50.rsa.pub", "usr/share/apk/keys/ppc64le/alpine-devel@lists.alpinelinux.org-58cbb476.rsa.pub", "usr/share/apk/keys/ppc64le/alpine-devel@lists.alpinelinux.org-616abc23.rsa.pub", "usr/share/apk/keys/riscv64/alpine-devel@lists.alpinelinux.org-60ac2099.rsa.pub", "usr/share/apk/keys/riscv64/alpine-devel@lists.alpinelinux.org-616db30d.rsa.pub", "usr/share/apk/keys/s390x/alpine-devel@lists.alpinelinux.org-58e4f17d.rsa.pub", "usr/share/apk/keys/s390x/alpine-devel@lists.alpinelinux.org-616ac3bc.rsa.pub", "usr/share/apk/keys/x86/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", "usr/share/apk/keys/x86/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub", "usr/share/apk/keys/x86/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub", "usr/share/apk/keys/x86_64/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", "usr/share/apk/keys/x86_64/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub", "usr/share/apk/keys/x86_64/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub" ], "AnalyzedBy": "apk" }, { "ID": "alpine-release@3.24.3-r0", "Name": "alpine-release", "Identifier": { "PURL": "pkg:apk/alpine/alpine-release@3.24.3-r0?arch=x86_64\u0026distro=3.24.3", "UID": "58aa066dd1e7befc" }, "Version": "3.24.3-r0", "Arch": "x86_64", "SrcName": "alpine-base", "SrcVersion": "3.24.3-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "alpine-keys@2.6-r0" ], "Layer": { "DiffID": "sha256:75c137aedfb2760f88629236cb7b797630aed0c3d91d626d1d1bb694878fc2ba" }, "Digest": "sha1:5ac96a125562b69acb43e645122b1862a1074141", "InstalledFiles": [ "etc/alpine-release", "etc/issue", "etc/os-release", "etc/secfixes.d/alpine", "usr/lib/os-release" ], "AnalyzedBy": "apk" }, { "ID": "alsa-lib@1.2.15.3-r0", "Name": "alsa-lib", "Identifier": { "PURL": "pkg:apk/alpine/alsa-lib@1.2.15.3-r0?arch=x86_64\u0026distro=3.24.3", "UID": "8a4dd9cfe3a03fb3" }, "Version": "1.2.15.3-r0", "Arch": "x86_64", "SrcName": "alsa-lib", "SrcVersion": "1.2.15.3-r0", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:af03c920155254bc6704f05ce35aef50d5198457", "InstalledFiles": [ "usr/bin/aserver", "usr/lib/libasound.so.2", "usr/lib/libasound.so.2.0.0", "usr/lib/libatopology.so.2", "usr/lib/libatopology.so.2.0.0", "usr/share/alsa/alsa.conf", "usr/share/alsa/cards/AACI.conf", "usr/share/alsa/cards/ATIIXP-MODEM.conf", "usr/share/alsa/cards/ATIIXP-SPDMA.conf", "usr/share/alsa/cards/ATIIXP.conf", "usr/share/alsa/cards/AU8810.conf", "usr/share/alsa/cards/AU8820.conf", "usr/share/alsa/cards/AU8830.conf", "usr/share/alsa/cards/Audigy.conf", "usr/share/alsa/cards/Audigy2.conf", "usr/share/alsa/cards/Aureon51.conf", "usr/share/alsa/cards/Aureon71.conf", "usr/share/alsa/cards/CA0106.conf", "usr/share/alsa/cards/CMI8338-SWIEC.conf", "usr/share/alsa/cards/CMI8338.conf", "usr/share/alsa/cards/CMI8738-MC6.conf", "usr/share/alsa/cards/CMI8738-MC8.conf", "usr/share/alsa/cards/CMI8788.conf", "usr/share/alsa/cards/CS46xx.conf", "usr/share/alsa/cards/EMU10K1.conf", "usr/share/alsa/cards/EMU10K1X.conf", "usr/share/alsa/cards/ENS1370.conf", "usr/share/alsa/cards/ENS1371.conf", "usr/share/alsa/cards/ES1968.conf", "usr/share/alsa/cards/Echo_Echo3G.conf", "usr/share/alsa/cards/FM801.conf", "usr/share/alsa/cards/FWSpeakers.conf", "usr/share/alsa/cards/FireWave.conf", "usr/share/alsa/cards/GUS.conf", "usr/share/alsa/cards/HDA-Intel.conf", "usr/share/alsa/cards/HdmiLpeAudio.conf", "usr/share/alsa/cards/ICE1712.conf", "usr/share/alsa/cards/ICE1724.conf", "usr/share/alsa/cards/ICH-MODEM.conf", "usr/share/alsa/cards/ICH.conf", "usr/share/alsa/cards/ICH4.conf", "usr/share/alsa/cards/Loopback.conf", "usr/share/alsa/cards/Maestro3.conf", "usr/share/alsa/cards/NFORCE.conf", "usr/share/alsa/cards/PC-Speaker.conf", "usr/share/alsa/cards/PMac.conf", "usr/share/alsa/cards/PMacToonie.conf", "usr/share/alsa/cards/PS3.conf", "usr/share/alsa/cards/RME9636.conf", "usr/share/alsa/cards/RME9652.conf", "usr/share/alsa/cards/SB-XFi.conf", "usr/share/alsa/cards/SI7018.conf", "usr/share/alsa/cards/TRID4DWAVENX.conf", "usr/share/alsa/cards/USB-Audio.conf", "usr/share/alsa/cards/VIA686A.conf", "usr/share/alsa/cards/VIA8233.conf", "usr/share/alsa/cards/VIA8233A.conf", "usr/share/alsa/cards/VIA8237.conf", "usr/share/alsa/cards/VX222.conf", "usr/share/alsa/cards/VXPocket.conf", "usr/share/alsa/cards/VXPocket440.conf", "usr/share/alsa/cards/YMF744.conf", "usr/share/alsa/cards/aliases.conf", "usr/share/alsa/cards/pistachio-card.conf", "usr/share/alsa/cards/vc4-hdmi.conf", "usr/share/alsa/ctl/default.conf", "usr/share/alsa/pcm/center_lfe.conf", "usr/share/alsa/pcm/default.conf", "usr/share/alsa/pcm/dmix.conf", "usr/share/alsa/pcm/dpl.conf", "usr/share/alsa/pcm/dsnoop.conf", "usr/share/alsa/pcm/front.conf", "usr/share/alsa/pcm/hdmi.conf", "usr/share/alsa/pcm/iec958.conf", "usr/share/alsa/pcm/modem.conf", "usr/share/alsa/pcm/rear.conf", "usr/share/alsa/pcm/side.conf", "usr/share/alsa/pcm/surround21.conf", "usr/share/alsa/pcm/surround40.conf", "usr/share/alsa/pcm/surround41.conf", "usr/share/alsa/pcm/surround50.conf", "usr/share/alsa/pcm/surround51.conf", "usr/share/alsa/pcm/surround71.conf" ], "AnalyzedBy": "apk" }, { "ID": "aom-libs@3.14.1-r0", "Name": "aom-libs", "Identifier": { "PURL": "pkg:apk/alpine/aom-libs@3.14.1-r0?arch=x86_64\u0026distro=3.24.3", "UID": "a620da86c050613f" }, "Version": "3.14.1-r0", "Arch": "x86_64", "SrcName": "aom", "SrcVersion": "3.14.1-r0", "Licenses": [ "BSD-2-Clause", "custom" ], "Maintainer": "Oleg Titov \u003coleg.titov@gmail.com\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:fa8c19f848e5467ca7f93b9a80655fccd44fddf4", "InstalledFiles": [ "usr/lib/libaom.so.3", "usr/lib/libaom.so.3.14.1" ], "AnalyzedBy": "apk" }, { "ID": "apk-tools@3.0.8-r0", "Name": "apk-tools", "Identifier": { "PURL": "pkg:apk/alpine/apk-tools@3.0.8-r0?arch=x86_64\u0026distro=3.24.3", "UID": "fd5527f61ccb458d" }, "Version": "3.0.8-r0", "Arch": "x86_64", "SrcName": "apk-tools", "SrcVersion": "3.0.8-r0", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "ca-certificates-bundle@20261020-r0", "libapk@3.0.8-r0", "libcrypto3@3.5.9-r0", "musl@1.2.6-r3", "zlib@1.3.2-r1" ], "Layer": { "DiffID": "sha256:75c137aedfb2760f88629236cb7b797630aed0c3d91d626d1d1bb694878fc2ba" }, "Digest": "sha1:786130a8f2d3ac69fc316118757b7e8151b8b8c3", "InstalledFiles": [ "sbin/apk" ], "AnalyzedBy": "apk" }, { "ID": "brotli-libs@1.2.1-r0", "Name": "brotli-libs", "Identifier": { "PURL": "pkg:apk/alpine/brotli-libs@1.2.1-r0?arch=x86_64\u0026distro=3.24.3", "UID": "ea7f1b0dd8326b2a" }, "Version": "1.2.1-r0", "Arch": "x86_64", "SrcName": "brotli", "SrcVersion": "1.2.1-r0", "Licenses": [ "MIT" ], "Maintainer": "prspkt \u003cprspkt@protonmail.com\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:f482d0e3f6ec36fd4910358472c6b48be6388584", "InstalledFiles": [ "usr/lib/libbrotlicommon.so.1", "usr/lib/libbrotlicommon.so.1.2.1", "usr/lib/libbrotlidec.so.1", "usr/lib/libbrotlidec.so.1.2.1", "usr/lib/libbrotlienc.so.1", "usr/lib/libbrotlienc.so.1.2.1" ], "AnalyzedBy": "apk" }, { "ID": "busybox@1.37.0-r31", "Name": "busybox", "Identifier": { "PURL": "pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64\u0026distro=3.24.3", "UID": "fc424f8052296b79" }, "Version": "1.37.0-r31", "Arch": "x86_64", "SrcName": "busybox", "SrcVersion": "1.37.0-r31", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Sören Tempel \u003csoeren+alpine@soeren-tempel.net\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:75c137aedfb2760f88629236cb7b797630aed0c3d91d626d1d1bb694878fc2ba" }, "Digest": "sha1:b5405ebc02f7dd8be95b6265c54b243d5456ab8f", "InstalledFiles": [ "bin/busybox", "etc/securetty", "etc/busybox-paths.d/busybox", "etc/logrotate.d/acpid", "etc/network/if-up.d/dad", "etc/udhcpc/udhcpc.conf", "usr/share/udhcpc/default.script" ], "AnalyzedBy": "apk" }, { "ID": "busybox-binsh@1.37.0-r31", "Name": "busybox-binsh", "Identifier": { "PURL": "pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64\u0026distro=3.24.3", "UID": "1ec8a3d5d2b63297" }, "Version": "1.37.0-r31", "Arch": "x86_64", "SrcName": "busybox", "SrcVersion": "1.37.0-r31", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Sören Tempel \u003csoeren+alpine@soeren-tempel.net\u003e", "DependsOn": [ "busybox@1.37.0-r31" ], "Layer": { "DiffID": "sha256:75c137aedfb2760f88629236cb7b797630aed0c3d91d626d1d1bb694878fc2ba" }, "Digest": "sha1:5cbd14acc6f1804c5bac6c77dc2c492f010b0fc7", "InstalledFiles": [ "bin/sh" ], "AnalyzedBy": "apk" }, { "ID": "ca-certificates-bundle@20261020-r0", "Name": "ca-certificates-bundle", "Identifier": { "PURL": "pkg:apk/alpine/ca-certificates-bundle@20261020-r0?arch=x86_64\u0026distro=3.24.3", "UID": "a70608abcaf07d7a" }, "Version": "20261020-r0", "Arch": "x86_64", "SrcName": "ca-certificates", "SrcVersion": "20261020-r0", "Licenses": [ "MPL-2.0", "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "Layer": { "DiffID": "sha256:75c137aedfb2760f88629236cb7b797630aed0c3d91d626d1d1bb694878fc2ba" }, "Digest": "sha1:7c6e635f86aafb46cb3b015d8505b3a5f61156bd", "InstalledFiles": [ "etc/ssl/cert.pem", "etc/ssl/certs/ca-certificates.crt", "etc/ssl1.1/cert.pem", "etc/ssl1.1/certs" ], "AnalyzedBy": "apk" }, { "ID": "cjson@1.7.19-r1", "Name": "cjson", "Identifier": { "PURL": "pkg:apk/alpine/cjson@1.7.19-r1?arch=x86_64\u0026distro=3.24.3", "UID": "c11fe01a359fe826" }, "Version": "1.7.19-r1", "Arch": "x86_64", "SrcName": "cjson", "SrcVersion": "1.7.19-r1", "Licenses": [ "MIT" ], "Maintainer": "Jakub Jirutka \u003cjakub@jirutka.cz\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:bef76eee0c6bd78a538d2069509c380b8a286e5a", "InstalledFiles": [ "usr/lib/libcjson.so.1", "usr/lib/libcjson.so.1.7.19" ], "AnalyzedBy": "apk" }, { "ID": "dbus-libs@1.16.2-r2", "Name": "dbus-libs", "Identifier": { "PURL": "pkg:apk/alpine/dbus-libs@1.16.2-r2?arch=x86_64\u0026distro=3.24.3", "UID": "1d13b49cf6d4901f" }, "Version": "1.16.2-r2", "Arch": "x86_64", "SrcName": "dbus", "SrcVersion": "1.16.2-r2", "Licenses": [ "AFL-2.1", "GPL-2.0-or-later" ], "Maintainer": "team/alpine-desktop \u003cachill@achill.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:2ccb761ab04dfad79c15d25a67c8ec7944b9c5cd", "InstalledFiles": [ "usr/lib/libdbus-1.so.3", "usr/lib/libdbus-1.so.3.38.3" ], "AnalyzedBy": "apk" }, { "ID": "ffmpeg@8.1.2-r0", "Name": "ffmpeg", "Identifier": { "PURL": "pkg:apk/alpine/ffmpeg@8.1.2-r0?arch=x86_64\u0026distro=3.24.3", "UID": "89621b4cefa93934" }, "Version": "8.1.2-r0", "Arch": "x86_64", "SrcName": "ffmpeg", "SrcVersion": "8.1.2-r0", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "ffmpeg-libavcodec@8.1.2-r0", "ffmpeg-libavdevice@8.1.2-r0", "ffmpeg-libavfilter@8.1.2-r0", "ffmpeg-libavformat@8.1.2-r0", "ffmpeg-libavutil@8.1.2-r0", "ffmpeg-libswresample@8.1.2-r0", "ffmpeg-libswscale@8.1.2-r0", "libgcc@15.2.0-r5", "musl@1.2.6-r3", "zlib@1.3.2-r1" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:8f1bdb19aad05c896fdca8d9671af8928954b70e", "InstalledFiles": [ "usr/bin/ffmpeg", "usr/bin/ffprobe", "usr/bin/qt-faststart", "usr/share/ffmpeg/ffprobe.xsd", "usr/share/ffmpeg/libvpx-1080p.ffpreset", "usr/share/ffmpeg/libvpx-1080p50_60.ffpreset", "usr/share/ffmpeg/libvpx-360p.ffpreset", "usr/share/ffmpeg/libvpx-720p.ffpreset", "usr/share/ffmpeg/libvpx-720p50_60.ffpreset" ], "AnalyzedBy": "apk" }, { "ID": "ffmpeg-libavcodec@8.1.2-r0", "Name": "ffmpeg-libavcodec", "Identifier": { "PURL": "pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r0?arch=x86_64\u0026distro=3.24.3", "UID": "d52f86a5297186a5" }, "Version": "8.1.2-r0", "Arch": "x86_64", "SrcName": "ffmpeg", "SrcVersion": "8.1.2-r0", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "aom-libs@3.14.1-r0", "ffmpeg-libavutil@8.1.2-r0", "ffmpeg-libswresample@8.1.2-r0", "lame-libs@3.100-r5", "libSvtAv1Enc@4.1.0-r0", "libdav1d@1.5.3-r0", "libjxl@0.11.2-r1", "libtheora@1.2.0-r1", "libva@2.23.0-r0", "libvorbis@1.3.7-r2", "libvpl@2.15.0-r1", "libvpx@1.15.2-r1", "libwebp@1.6.0-r0", "libwebpmux@1.6.0-r0", "musl@1.2.6-r3", "opus@1.6.1-r0", "rav1e-libs@0.8.1-r0", "x264-libs@0.164.3108-r1", "x265-libs@4.1-r0", "xvidcore@1.3.7-r2", "zlib@1.3.2-r1" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:95ae5b6d2c19dbc92fe49dd7c120ccd2d094d029", "InstalledFiles": [ "usr/lib/libavcodec.so.62", "usr/lib/libavcodec.so.62.28.102" ], "AnalyzedBy": "apk" }, { "ID": "ffmpeg-libavdevice@8.1.2-r0", "Name": "ffmpeg-libavdevice", "Identifier": { "PURL": "pkg:apk/alpine/ffmpeg-libavdevice@8.1.2-r0?arch=x86_64\u0026distro=3.24.3", "UID": "bacda531473e9169" }, "Version": "8.1.2-r0", "Arch": "x86_64", "SrcName": "ffmpeg", "SrcVersion": "8.1.2-r0", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "alsa-lib@1.2.15.3-r0", "ffmpeg-libavcodec@8.1.2-r0", "ffmpeg-libavfilter@8.1.2-r0", "ffmpeg-libavformat@8.1.2-r0", "ffmpeg-libavutil@8.1.2-r0", "libdrm@2.4.134-r0", "libpulse@17.0-r7", "libxcb@1.17.0-r2", "musl@1.2.6-r3", "v4l-utils-libs@1.32.0-r1" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:116e7f4cc19dd46aba4154a496619ff80c329df3", "InstalledFiles": [ "usr/lib/libavdevice.so.62", "usr/lib/libavdevice.so.62.3.102" ], "AnalyzedBy": "apk" }, { "ID": "ffmpeg-libavfilter@8.1.2-r0", "Name": "ffmpeg-libavfilter", "Identifier": { "PURL": "pkg:apk/alpine/ffmpeg-libavfilter@8.1.2-r0?arch=x86_64\u0026distro=3.24.3", "UID": "647f2324dad3816c" }, "Version": "8.1.2-r0", "Arch": "x86_64", "SrcName": "ffmpeg", "SrcVersion": "8.1.2-r0", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "ffmpeg-libavcodec@8.1.2-r0", "ffmpeg-libavformat@8.1.2-r0", "ffmpeg-libavutil@8.1.2-r0", "ffmpeg-libswresample@8.1.2-r0", "ffmpeg-libswscale@8.1.2-r0", "fontconfig@2.17.1-r1", "freetype@2.14.3-r0", "fribidi@1.0.16-r3", "harfbuzz@13.2.1-r0", "libass@0.17.4-r1", "libplacebo@7.360.1-r0", "libva@2.23.0-r0", "libvpl@2.15.0-r1", "libzmq@4.3.5-r2", "lilv-libs@0.24.26-r1", "musl@1.2.6-r3", "shaderc@2026.1-r0", "vidstab@1.1.1-r0", "zimg@3.0.6-r0", "zlib@1.3.2-r1" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:228e45f52d7524dc568e1025ae6ae2b7c891a06a", "InstalledFiles": [ "usr/lib/libavfilter.so.11", "usr/lib/libavfilter.so.11.14.102" ], "AnalyzedBy": "apk" }, { "ID": "ffmpeg-libavformat@8.1.2-r0", "Name": "ffmpeg-libavformat", "Identifier": { "PURL": "pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r0?arch=x86_64\u0026distro=3.24.3", "UID": "6e5bdc2bb9e56d64" }, "Version": "8.1.2-r0", "Arch": "x86_64", "SrcName": "ffmpeg", "SrcVersion": "8.1.2-r0", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "ffmpeg-libavcodec@8.1.2-r0", "ffmpeg-libavutil@8.1.2-r0", "libbluray@1.4.0-r0", "libbz2@1.0.8-r6", "libcrypto3@3.5.9-r0", "libdvdnav@6.1.1-r1", "libdvdread@6.1.3-r2", "libopenmpt@0.8.9-r0", "librist@0.2.15-r0", "libsrt@1.5.3-r1", "libssh@0.12.2-r0", "libssl3@3.5.9-r0", "libxml2@2.13.9-r2", "libzmq@4.3.5-r2", "musl@1.2.6-r3", "zlib@1.3.2-r1" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:6a5928999893ddf2c780b021f49c332069a4865c", "InstalledFiles": [ "usr/lib/libavformat.so.62", "usr/lib/libavformat.so.62.12.102" ], "AnalyzedBy": "apk" }, { "ID": "ffmpeg-libavutil@8.1.2-r0", "Name": "ffmpeg-libavutil", "Identifier": { "PURL": "pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r0?arch=x86_64\u0026distro=3.24.3", "UID": "6da78a65c633ae1d" }, "Version": "8.1.2-r0", "Arch": "x86_64", "SrcName": "ffmpeg", "SrcVersion": "8.1.2-r0", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "libcrypto3@3.5.9-r0", "libdrm@2.4.134-r0", "libva@2.23.0-r0", "libvdpau@1.5-r4", "libvpl@2.15.0-r1", "libx11@1.8.14-r0", "musl@1.2.6-r3", "zlib@1.3.2-r1" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:f2682f5b6987bfbcd733b3b8f260409705df6c4c", "InstalledFiles": [ "usr/lib/libavutil.so.60", "usr/lib/libavutil.so.60.26.102" ], "AnalyzedBy": "apk" }, { "ID": "ffmpeg-libswresample@8.1.2-r0", "Name": "ffmpeg-libswresample", "Identifier": { "PURL": "pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r0?arch=x86_64\u0026distro=3.24.3", "UID": "102c4561b192a24c" }, "Version": "8.1.2-r0", "Arch": "x86_64", "SrcName": "ffmpeg", "SrcVersion": "8.1.2-r0", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "ffmpeg-libavutil@8.1.2-r0", "musl@1.2.6-r3", "soxr@0.1.3-r7" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:e3a6193dd06357fb9014d095f4428105df2880d0", "InstalledFiles": [ "usr/lib/libswresample.so.6", "usr/lib/libswresample.so.6.3.102" ], "AnalyzedBy": "apk" }, { "ID": "ffmpeg-libswscale@8.1.2-r0", "Name": "ffmpeg-libswscale", "Identifier": { "PURL": "pkg:apk/alpine/ffmpeg-libswscale@8.1.2-r0?arch=x86_64\u0026distro=3.24.3", "UID": "291b30049dc0978d" }, "Version": "8.1.2-r0", "Arch": "x86_64", "SrcName": "ffmpeg", "SrcVersion": "8.1.2-r0", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "ffmpeg-libavutil@8.1.2-r0", "musl@1.2.6-r3", "shaderc@2026.1-r0", "zlib@1.3.2-r1" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:cbb1115cd4a0b1f140ee68582fdd13c352574a59", "InstalledFiles": [ "usr/lib/libswscale.so.9", "usr/lib/libswscale.so.9.5.102" ], "AnalyzedBy": "apk" }, { "ID": "fontconfig@2.17.1-r1", "Name": "fontconfig", "Identifier": { "PURL": "pkg:apk/alpine/fontconfig@2.17.1-r1?arch=x86_64\u0026distro=3.24.3", "UID": "1210bb499fc4931d" }, "Version": "2.17.1-r1", "Arch": "x86_64", "SrcName": "fontconfig", "SrcVersion": "2.17.1-r1", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "busybox-binsh@1.37.0-r31", "freetype@2.14.3-r0", "libexpat@2.9.0-r0", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:2a28043c2b53804ee978f356124fc9630d08ef5b", "InstalledFiles": [ "etc/fonts/fonts.conf", "etc/fonts/conf.d/10-hinting-slight.conf", "etc/fonts/conf.d/10-scale-bitmap-fonts.conf", "etc/fonts/conf.d/10-sub-pixel-none.conf", "etc/fonts/conf.d/10-yes-antialias.conf", "etc/fonts/conf.d/11-lcdfilter-default.conf", "etc/fonts/conf.d/20-unhint-small-vera.conf", "etc/fonts/conf.d/30-metric-aliases.conf", "etc/fonts/conf.d/40-nonlatin.conf", "etc/fonts/conf.d/45-generic.conf", "etc/fonts/conf.d/45-latin.conf", "etc/fonts/conf.d/48-spacing.conf", "etc/fonts/conf.d/49-sansserif.conf", "etc/fonts/conf.d/50-user.conf", "etc/fonts/conf.d/51-local.conf", "etc/fonts/conf.d/60-generic.conf", "etc/fonts/conf.d/60-latin.conf", "etc/fonts/conf.d/65-fonts-persian.conf", "etc/fonts/conf.d/65-nonlatin.conf", "etc/fonts/conf.d/69-unifont.conf", "etc/fonts/conf.d/70-no-bitmaps-except-emoji.conf", "etc/fonts/conf.d/80-delicious.conf", "etc/fonts/conf.d/90-synthetic.conf", "etc/fonts/conf.d/README", "usr/bin/fc-cache", "usr/bin/fc-cat", "usr/bin/fc-conflist", "usr/bin/fc-list", "usr/bin/fc-match", "usr/bin/fc-pattern", "usr/bin/fc-query", "usr/bin/fc-scan", "usr/bin/fc-validate", "usr/lib/libfontconfig.so.1", "usr/lib/libfontconfig.so.1.16.1", "usr/share/fontconfig/conf.avail/05-reset-dirs-sample.conf", "usr/share/fontconfig/conf.avail/09-autohint-if-no-hinting.conf", "usr/share/fontconfig/conf.avail/10-autohint.conf", "usr/share/fontconfig/conf.avail/10-hinting-full.conf", "usr/share/fontconfig/conf.avail/10-hinting-medium.conf", "usr/share/fontconfig/conf.avail/10-hinting-none.conf", "usr/share/fontconfig/conf.avail/10-hinting-slight.conf", "usr/share/fontconfig/conf.avail/10-no-antialias.conf", "usr/share/fontconfig/conf.avail/10-scale-bitmap-fonts.conf", "usr/share/fontconfig/conf.avail/10-sub-pixel-bgr.conf", "usr/share/fontconfig/conf.avail/10-sub-pixel-none.conf", "usr/share/fontconfig/conf.avail/10-sub-pixel-rgb.conf", "usr/share/fontconfig/conf.avail/10-sub-pixel-vbgr.conf", "usr/share/fontconfig/conf.avail/10-sub-pixel-vrgb.conf", "usr/share/fontconfig/conf.avail/10-unhinted.conf", "usr/share/fontconfig/conf.avail/10-yes-antialias.conf", "usr/share/fontconfig/conf.avail/11-lcdfilter-default.conf", "usr/share/fontconfig/conf.avail/11-lcdfilter-legacy.conf", "usr/share/fontconfig/conf.avail/11-lcdfilter-light.conf", "usr/share/fontconfig/conf.avail/11-lcdfilter-none.conf", "usr/share/fontconfig/conf.avail/20-unhint-small-vera.conf", "usr/share/fontconfig/conf.avail/25-unhint-nonlatin.conf", "usr/share/fontconfig/conf.avail/30-metric-aliases.conf", "usr/share/fontconfig/conf.avail/35-lang-normalize.conf", "usr/share/fontconfig/conf.avail/40-nonlatin.conf", "usr/share/fontconfig/conf.avail/45-generic.conf", "usr/share/fontconfig/conf.avail/45-latin.conf", "usr/share/fontconfig/conf.avail/48-guessfamily.conf", "usr/share/fontconfig/conf.avail/48-spacing.conf", "usr/share/fontconfig/conf.avail/49-sansserif.conf", "usr/share/fontconfig/conf.avail/50-user.conf", "usr/share/fontconfig/conf.avail/51-local.conf", "usr/share/fontconfig/conf.avail/60-generic.conf", "usr/share/fontconfig/conf.avail/60-latin.conf", "usr/share/fontconfig/conf.avail/65-fonts-persian.conf", "usr/share/fontconfig/conf.avail/65-khmer.conf", "usr/share/fontconfig/conf.avail/65-nonlatin.conf", "usr/share/fontconfig/conf.avail/69-unifont.conf", "usr/share/fontconfig/conf.avail/70-no-bitmaps-and-emoji.conf", "usr/share/fontconfig/conf.avail/70-no-bitmaps-except-emoji.conf", "usr/share/fontconfig/conf.avail/70-no-bitmaps.conf", "usr/share/fontconfig/conf.avail/70-yes-bitmaps.conf", "usr/share/fontconfig/conf.avail/80-delicious.conf", "usr/share/fontconfig/conf.avail/90-synthetic.conf", "usr/share/xml/fontconfig/fonts.dtd" ], "AnalyzedBy": "apk" }, { "ID": "freetype@2.14.3-r0", "Name": "freetype", "Identifier": { "PURL": "pkg:apk/alpine/freetype@2.14.3-r0?arch=x86_64\u0026distro=3.24.3", "UID": "dc87104841ae8015" }, "Version": "2.14.3-r0", "Arch": "x86_64", "SrcName": "freetype", "SrcVersion": "2.14.3-r0", "Licenses": [ "FTL", "GPL-2.0-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "brotli-libs@1.2.1-r0", "libbz2@1.0.8-r6", "libpng@1.6.59-r0", "musl@1.2.6-r3", "zlib@1.3.2-r1" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:8a74de09396559a888cec101d205cf488d8a49c6", "InstalledFiles": [ "usr/lib/libfreetype.so.6", "usr/lib/libfreetype.so.6.20.6" ], "AnalyzedBy": "apk" }, { "ID": "fribidi@1.0.16-r3", "Name": "fribidi", "Identifier": { "PURL": "pkg:apk/alpine/fribidi@1.0.16-r3?arch=x86_64\u0026distro=3.24.3", "UID": "8ab1a6eb22c4720" }, "Version": "1.0.16-r3", "Arch": "x86_64", "SrcName": "fribidi", "SrcVersion": "1.0.16-r3", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:812fb36e14f8b51735b9c1e52367f0c38061fe92", "InstalledFiles": [ "usr/bin/fribidi", "usr/lib/libfribidi.so.0", "usr/lib/libfribidi.so.0.4.0" ], "AnalyzedBy": "apk" }, { "ID": "glib@2.88.1-r1", "Name": "glib", "Identifier": { "PURL": "pkg:apk/alpine/glib@2.88.1-r1?arch=x86_64\u0026distro=3.24.3", "UID": "170fc58be40ee7da" }, "Version": "2.88.1-r1", "Arch": "x86_64", "SrcName": "glib", "SrcVersion": "2.88.1-r1", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "team/gnome \u003cachill@achill.org\u003e", "DependsOn": [ "busybox-binsh@1.37.0-r31", "libffi@3.5.2-r1", "libintl@1.0-r0", "libmount@2.42.3-r1", "musl@1.2.6-r3", "pcre2@10.49-r0", "zlib@1.3.2-r1" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:9f08110ee4f48bb4abf937ac0128381caf5219a6", "InstalledFiles": [ "usr/bin/gapplication", "usr/bin/gdbus", "usr/bin/gi-compile-repository", "usr/bin/gi-decompile-typelib", "usr/bin/gi-inspect-typelib", "usr/bin/gio", "usr/bin/gio-querymodules", "usr/bin/glib-compile-schemas", "usr/bin/gsettings", "usr/lib/libgio-2.0.so.0", "usr/lib/libgio-2.0.so.0.8800.1", "usr/lib/libgirepository-2.0.so.0", "usr/lib/libgirepository-2.0.so.0.8800.1", "usr/lib/libglib-2.0.so.0", "usr/lib/libglib-2.0.so.0.8800.1", "usr/lib/libgmodule-2.0.so.0", "usr/lib/libgmodule-2.0.so.0.8800.1", "usr/lib/libgobject-2.0.so.0", "usr/lib/libgobject-2.0.so.0.8800.1", "usr/lib/libgthread-2.0.so.0", "usr/lib/libgthread-2.0.so.0.8800.1", "usr/lib/girepository-1.0/GIRepository-3.0.typelib", "usr/lib/girepository-1.0/GLib-2.0.typelib", "usr/lib/girepository-1.0/GLibUnix-2.0.typelib", "usr/lib/girepository-1.0/GModule-2.0.typelib", "usr/lib/girepository-1.0/GObject-2.0.typelib", "usr/lib/girepository-1.0/Gio-2.0.typelib", "usr/lib/girepository-1.0/GioUnix-2.0.typelib", "usr/libexec/gio-launch-desktop" ], "AnalyzedBy": "apk" }, { "ID": "glslang-libs@1.4.341.0-r0", "Name": "glslang-libs", "Identifier": { "PURL": "pkg:apk/alpine/glslang-libs@1.4.341.0-r0?arch=x86_64\u0026distro=3.24.3", "UID": "c419d09200f2896d" }, "Version": "1.4.341.0-r0", "Arch": "x86_64", "SrcName": "glslang", "SrcVersion": "1.4.341.0-r0", "Licenses": [ "BSD-3-Clause", "BSD-2-Clause", "MIT", "Apache-2.0", "GPL-3.0-or-later" ], "Maintainer": "Simon Zeni \u003csimon@bl4ckb0ne.ca\u003e", "DependsOn": [ "libstdc++@15.2.0-r5", "musl@1.2.6-r3", "spirv-tools@1.4.341.0-r0" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:56a8b6f8bcfd1e40389567eb6f2cc076db5cadc0", "InstalledFiles": [ "usr/lib/libSPIRV.so.16", "usr/lib/libSPIRV.so.16.2.0", "usr/lib/libglslang-default-resource-limits.so.16", "usr/lib/libglslang-default-resource-limits.so.16.2.0", "usr/lib/libglslang.so.16", "usr/lib/libglslang.so.16.2.0" ], "AnalyzedBy": "apk" }, { "ID": "graphite2@1.3.14-r6", "Name": "graphite2", "Identifier": { "PURL": "pkg:apk/alpine/graphite2@1.3.14-r6?arch=x86_64\u0026distro=3.24.3", "UID": "cf5ab65d95a39cc7" }, "Version": "1.3.14-r6", "Arch": "x86_64", "SrcName": "graphite2", "SrcVersion": "1.3.14-r6", "Licenses": [ "LGPL-2.1-or-later", "MPL-1.1" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:0140954b491440d3398d5a1f51b2a181b10fa378", "InstalledFiles": [ "usr/lib/libgraphite2.so.3", "usr/lib/libgraphite2.so.3.2.1" ], "AnalyzedBy": "apk" }, { "ID": "harfbuzz@13.2.1-r0", "Name": "harfbuzz", "Identifier": { "PURL": "pkg:apk/alpine/harfbuzz@13.2.1-r0?arch=x86_64\u0026distro=3.24.3", "UID": "f078c1fb23b9eab3" }, "Version": "13.2.1-r0", "Arch": "x86_64", "SrcName": "harfbuzz", "SrcVersion": "13.2.1-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "freetype@2.14.3-r0", "glib@2.88.1-r1", "graphite2@1.3.14-r6", "libpng@1.6.59-r0", "musl@1.2.6-r3", "zlib@1.3.2-r1" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:971d99c1f1dbabbc151519833d8508892cf32e19", "InstalledFiles": [ "usr/lib/libharfbuzz-raster.so.0", "usr/lib/libharfbuzz-raster.so.0.61321.0", "usr/lib/libharfbuzz-vector.so.0", "usr/lib/libharfbuzz-vector.so.0.61321.0", "usr/lib/libharfbuzz.so.0", "usr/lib/libharfbuzz.so.0.61321.0", "usr/lib/girepository-1.0/HarfBuzz-0.0.typelib" ], "AnalyzedBy": "apk" }, { "ID": "hwdata-pci@0.408-r0", "Name": "hwdata-pci", "Identifier": { "PURL": "pkg:apk/alpine/hwdata-pci@0.408-r0?arch=x86_64\u0026distro=3.24.3", "UID": "7f638b31b4b1d116" }, "Version": "0.408-r0", "Arch": "x86_64", "SrcName": "hwdata", "SrcVersion": "0.408-r0", "Licenses": [ "GPL-2.0-or-later", "XFree-86-1.1" ], "Maintainer": "Simon Zeni \u003csimon@bl4ckb0ne.ca\u003e", "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:5a4265ab52ab371215df3582674b96867fc3cbd4", "InstalledFiles": [ "usr/share/hwdata/pci.ids" ], "AnalyzedBy": "apk" }, { "ID": "json-c@0.18-r1", "Name": "json-c", "Identifier": { "PURL": "pkg:apk/alpine/json-c@0.18-r1?arch=x86_64\u0026distro=3.24.3", "UID": "de127c818049583e" }, "Version": "0.18-r1", "Arch": "x86_64", "SrcName": "json-c", "SrcVersion": "0.18-r1", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:db0d2649faf8a52414df8a9d6e4acdb60303b403", "InstalledFiles": [ "usr/lib/libjson-c.so.5", "usr/lib/libjson-c.so.5.4.0" ], "AnalyzedBy": "apk" }, { "ID": "lame-libs@3.100-r5", "Name": "lame-libs", "Identifier": { "PURL": "pkg:apk/alpine/lame-libs@3.100-r5?arch=x86_64\u0026distro=3.24.3", "UID": "3bdf8c25a9ec60f8" }, "Version": "3.100-r5", "Arch": "x86_64", "SrcName": "lame", "SrcVersion": "3.100-r5", "Licenses": [ "LGPL-2.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:cc43e579770ef2181727283ca57fa7873c484131", "InstalledFiles": [ "usr/lib/libmp3lame.so.0", "usr/lib/libmp3lame.so.0.0.0" ], "AnalyzedBy": "apk" }, { "ID": "lcms2@2.19-r0", "Name": "lcms2", "Identifier": { "PURL": "pkg:apk/alpine/lcms2@2.19-r0?arch=x86_64\u0026distro=3.24.3", "UID": "bfb7915e102432b7" }, "Version": "2.19-r0", "Arch": "x86_64", "SrcName": "lcms2", "SrcVersion": "2.19-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:5b94e9ef62a7735bf41ed45f89c83263d2dbd13a", "InstalledFiles": [ "usr/lib/liblcms2.so.2", "usr/lib/liblcms2.so.2.0.19" ], "AnalyzedBy": "apk" }, { "ID": "libSvtAv1Enc@4.1.0-r0", "Name": "libSvtAv1Enc", "Identifier": { "PURL": "pkg:apk/alpine/libsvtav1enc@4.1.0-r0?arch=x86_64\u0026distro=3.24.3", "UID": "2c38566409432d4f" }, "Version": "4.1.0-r0", "Arch": "x86_64", "SrcName": "svt-av1", "SrcVersion": "4.1.0-r0", "Licenses": [ "BSD-3-Clause-Clear" ], "Maintainer": "Oleg Titov \u003coleg.titov@gmail.com\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:c438c35acc91f065155085e67a519a6806417f87", "InstalledFiles": [ "usr/lib/libSvtAv1Enc.so.4", "usr/lib/libSvtAv1Enc.so.4.1.0" ], "AnalyzedBy": "apk" }, { "ID": "libapk@3.0.8-r0", "Name": "libapk", "Identifier": { "PURL": "pkg:apk/alpine/libapk@3.0.8-r0?arch=x86_64\u0026distro=3.24.3", "UID": "cdfc970c784f7001" }, "Version": "3.0.8-r0", "Arch": "x86_64", "SrcName": "apk-tools", "SrcVersion": "3.0.8-r0", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libcrypto3@3.5.9-r0", "libssl3@3.5.9-r0", "musl@1.2.6-r3", "zlib@1.3.2-r1" ], "Layer": { "DiffID": "sha256:75c137aedfb2760f88629236cb7b797630aed0c3d91d626d1d1bb694878fc2ba" }, "Digest": "sha1:b93ce9573c1d0db3eea7ce32841ad0857abc4a54", "InstalledFiles": [ "usr/lib/libapk.so.3.0.0" ], "AnalyzedBy": "apk" }, { "ID": "libass@0.17.4-r1", "Name": "libass", "Identifier": { "PURL": "pkg:apk/alpine/libass@0.17.4-r1?arch=x86_64\u0026distro=3.24.3", "UID": "e73223acd377dcbf" }, "Version": "0.17.4-r1", "Arch": "x86_64", "SrcName": "libass", "SrcVersion": "0.17.4-r1", "Licenses": [ "ISC" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "fontconfig@2.17.1-r1", "freetype@2.14.3-r0", "fribidi@1.0.16-r3", "harfbuzz@13.2.1-r0", "libunibreak@6.1-r0", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:9e9e8f56eda7814b6e234b5019bd131757704034", "InstalledFiles": [ "usr/lib/libass.so.9", "usr/lib/libass.so.9.4.1" ], "AnalyzedBy": "apk" }, { "ID": "libasyncns@0.8-r5", "Name": "libasyncns", "Identifier": { "PURL": "pkg:apk/alpine/libasyncns@0.8-r5?arch=x86_64\u0026distro=3.24.3", "UID": "a840a6dae61f8b19" }, "Version": "0.8-r5", "Arch": "x86_64", "SrcName": "libasyncns", "SrcVersion": "0.8-r5", "Licenses": [ "LGPL-2.0-or-later" ], "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:5abd9a9936fab100e16c4fde4649472c2fed0b72", "InstalledFiles": [ "usr/lib/libasyncns.so.0", "usr/lib/libasyncns.so.0.3.1" ], "AnalyzedBy": "apk" }, { "ID": "libatomic@15.2.0-r5", "Name": "libatomic", "Identifier": { "PURL": "pkg:apk/alpine/libatomic@15.2.0-r5?arch=x86_64\u0026distro=3.24.3", "UID": "51a4238ebdcf07ef" }, "Version": "15.2.0-r5", "Arch": "x86_64", "SrcName": "gcc", "SrcVersion": "15.2.0-r5", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Ariadne Conill \u003cariadne@dereferenced.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "Digest": "sha1:098a7dbf21f0a28ffed67b111752a308ed112cb3", "InstalledFiles": [ "usr/lib/libatomic.so.1", "usr/lib/libatomic.so.1.2.0" ], "AnalyzedBy": "apk" }, { "ID": "libblkid@2.42.3-r1", "Name": "libblkid", "Identifier": { "PURL": "pkg:apk/alpine/libblkid@2.42.3-r1?arch=x86_64\u0026distro=3.24.3", "UID": "80745ec0c282db5a" }, "Version": "2.42.3-r1", "Arch": "x86_64", "SrcName": "util-linux", "SrcVersion": "2.42.3-r1", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libeconf@0.8.3-r0", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:0747b233a6af4de9bbf8052ad987d197f86a72b4", "InstalledFiles": [ "usr/lib/libblkid.so.1", "usr/lib/libblkid.so.1.1.0" ], "AnalyzedBy": "apk" }, { "ID": "libbluray@1.4.0-r0", "Name": "libbluray", "Identifier": { "PURL": "pkg:apk/alpine/libbluray@1.4.0-r0?arch=x86_64\u0026distro=3.24.3", "UID": "5293ea25c10367cb" }, "Version": "1.4.0-r0", "Arch": "x86_64", "SrcName": "libbluray", "SrcVersion": "1.4.0-r0", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Timo Teräs \u003ctimo.teras@iki.fi\u003e", "DependsOn": [ "libudfread@1.2.0-r1", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:1dae67649182feb783ecd9af91cbc24e6c79a583", "InstalledFiles": [ "usr/bin/bd_info", "usr/bin/bd_list_titles", "usr/bin/bd_splice", "usr/lib/libbluray.so.3", "usr/lib/libbluray.so.3.0.0" ], "AnalyzedBy": "apk" }, { "ID": "libbsd@0.12.2-r0", "Name": "libbsd", "Identifier": { "PURL": "pkg:apk/alpine/libbsd@0.12.2-r0?arch=x86_64\u0026distro=3.24.3", "UID": "716ca398c23a159a" }, "Version": "0.12.2-r0", "Arch": "x86_64", "SrcName": "libbsd", "SrcVersion": "0.12.2-r0", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libmd@1.2.0-r0", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:8245ff7dfee600c9da67e3757a156bd852764251", "InstalledFiles": [ "usr/lib/libbsd.so.0", "usr/lib/libbsd.so.0.12.2" ], "AnalyzedBy": "apk" }, { "ID": "libbz2@1.0.8-r6", "Name": "libbz2", "Identifier": { "PURL": "pkg:apk/alpine/libbz2@1.0.8-r6?arch=x86_64\u0026distro=3.24.3", "UID": "58cbb729cba7750a" }, "Version": "1.0.8-r6", "Arch": "x86_64", "SrcName": "bzip2", "SrcVersion": "1.0.8-r6", "Licenses": [ "bzip-2-1.0.6" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:08566ba5c7af97c25474be8b24e8b48f0116b67d", "InstalledFiles": [ "usr/lib/libbz2.so.1", "usr/lib/libbz2.so.1.0.8" ], "AnalyzedBy": "apk" }, { "ID": "libcrypto3@3.5.9-r0", "Name": "libcrypto3", "Identifier": { "PURL": "pkg:apk/alpine/libcrypto3@3.5.9-r0?arch=x86_64\u0026distro=3.24.3", "UID": "3de134b31d66634f" }, "Version": "3.5.9-r0", "Arch": "x86_64", "SrcName": "openssl", "SrcVersion": "3.5.9-r0", "Licenses": [ "Apache-2.0" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:75c137aedfb2760f88629236cb7b797630aed0c3d91d626d1d1bb694878fc2ba" }, "Digest": "sha1:1c0dee9734cf22fc97cdd181913bbd710e6dfb08", "InstalledFiles": [ "etc/ssl/ct_log_list.cnf", "etc/ssl/ct_log_list.cnf.dist", "etc/ssl/openssl.cnf", "etc/ssl/openssl.cnf.dist", "usr/lib/libcrypto.so.3", "usr/lib/engines-3/afalg.so", "usr/lib/engines-3/capi.so", "usr/lib/engines-3/loader_attic.so", "usr/lib/engines-3/padlock.so", "usr/lib/ossl-modules/legacy.so" ], "AnalyzedBy": "apk" }, { "ID": "libdav1d@1.5.3-r0", "Name": "libdav1d", "Identifier": { "PURL": "pkg:apk/alpine/libdav1d@1.5.3-r0?arch=x86_64\u0026distro=3.24.3", "UID": "b892821c667a3de6" }, "Version": "1.5.3-r0", "Arch": "x86_64", "SrcName": "dav1d", "SrcVersion": "1.5.3-r0", "Licenses": [ "BSD-2-Clause" ], "Maintainer": "Bart Ribbers \u003cbribbers@disroot.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:f50308906e3796f040689e3c80119b583946bca6", "InstalledFiles": [ "usr/lib/libdav1d.so.7", "usr/lib/libdav1d.so.7.0.0" ], "AnalyzedBy": "apk" }, { "ID": "libdovi@3.3.2-r0", "Name": "libdovi", "Identifier": { "PURL": "pkg:apk/alpine/libdovi@3.3.2-r0?arch=x86_64\u0026distro=3.24.3", "UID": "3b8ed721b40528a1" }, "Version": "3.3.2-r0", "Arch": "x86_64", "SrcName": "libdovi", "SrcVersion": "3.3.2-r0", "Licenses": [ "MIT" ], "Maintainer": "Krassy Boykinov \u003ckboykinov@teamcentrixx.com\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:4565fbc34e573477c6b7f0dcff0e58a65ca05f08", "InstalledFiles": [ "usr/lib/libdovi.so.3", "usr/lib/libdovi.so.3.3.2" ], "AnalyzedBy": "apk" }, { "ID": "libdrm@2.4.134-r0", "Name": "libdrm", "Identifier": { "PURL": "pkg:apk/alpine/libdrm@2.4.134-r0?arch=x86_64\u0026distro=3.24.3", "UID": "1b6ef0e236a9d002" }, "Version": "2.4.134-r0", "Arch": "x86_64", "SrcName": "libdrm", "SrcVersion": "2.4.134-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libpciaccess@0.19-r0", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:25fc316016cb0ada020acea492ce8cc6475b7cff", "InstalledFiles": [ "usr/lib/libdrm.so.2", "usr/lib/libdrm.so.2.134.0", "usr/lib/libdrm_amdgpu.so.1", "usr/lib/libdrm_amdgpu.so.1.134.0", "usr/lib/libdrm_etnaviv.so.1", "usr/lib/libdrm_etnaviv.so.1.134.0", "usr/lib/libdrm_exynos.so.1", "usr/lib/libdrm_exynos.so.1.134.0", "usr/lib/libdrm_freedreno.so.1", "usr/lib/libdrm_freedreno.so.1.134.0", "usr/lib/libdrm_intel.so.1", "usr/lib/libdrm_intel.so.1.134.0", "usr/lib/libdrm_nouveau.so.2", "usr/lib/libdrm_nouveau.so.2.134.0", "usr/lib/libdrm_omap.so.1", "usr/lib/libdrm_omap.so.1.134.0", "usr/lib/libdrm_radeon.so.1", "usr/lib/libdrm_radeon.so.1.134.0", "usr/lib/libdrm_tegra.so.0", "usr/lib/libdrm_tegra.so.0.134.0", "usr/share/libdrm/amdgpu.ids" ], "AnalyzedBy": "apk" }, { "ID": "libdvdcss@1.4.3-r0", "Name": "libdvdcss", "Identifier": { "PURL": "pkg:apk/alpine/libdvdcss@1.4.3-r0?arch=x86_64\u0026distro=3.24.3", "UID": "d0545e1af739e052" }, "Version": "1.4.3-r0", "Arch": "x86_64", "SrcName": "libdvdcss", "SrcVersion": "1.4.3-r0", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Leonardo Arena \u003crnalrd@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:882cca745169529018c462227b364c065651940e", "InstalledFiles": [ "usr/lib/libdvdcss.so.2", "usr/lib/libdvdcss.so.2.2.0" ], "AnalyzedBy": "apk" }, { "ID": "libdvdnav@6.1.1-r1", "Name": "libdvdnav", "Identifier": { "PURL": "pkg:apk/alpine/libdvdnav@6.1.1-r1?arch=x86_64\u0026distro=3.24.3", "UID": "43d122fb0f981bc8" }, "Version": "6.1.1-r1", "Arch": "x86_64", "SrcName": "libdvdnav", "SrcVersion": "6.1.1-r1", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Timo Teräs \u003ctimo.teras@iki.fi\u003e", "DependsOn": [ "libdvdread@6.1.3-r2", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:a2159806adcfc94671668be2f02cea708cdf3571", "InstalledFiles": [ "usr/lib/libdvdnav.so.4", "usr/lib/libdvdnav.so.4.3.0" ], "AnalyzedBy": "apk" }, { "ID": "libdvdread@6.1.3-r2", "Name": "libdvdread", "Identifier": { "PURL": "pkg:apk/alpine/libdvdread@6.1.3-r2?arch=x86_64\u0026distro=3.24.3", "UID": "6e303a2910676e3e" }, "Version": "6.1.3-r2", "Arch": "x86_64", "SrcName": "libdvdread", "SrcVersion": "6.1.3-r2", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Timo Teräs \u003ctimo.teras@iki.fi\u003e", "DependsOn": [ "libdvdcss@1.4.3-r0", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:23b158828e6fa831435c668dbd7d6cd0914698e4", "InstalledFiles": [ "usr/lib/libdvdread.so.8", "usr/lib/libdvdread.so.8.0.0" ], "AnalyzedBy": "apk" }, { "ID": "libeconf@0.8.3-r0", "Name": "libeconf", "Identifier": { "PURL": "pkg:apk/alpine/libeconf@0.8.3-r0?arch=x86_64\u0026distro=3.24.3", "UID": "c0c7b9f91a38d307" }, "Version": "0.8.3-r0", "Arch": "x86_64", "SrcName": "libeconf", "SrcVersion": "0.8.3-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:339ee06b8ab565ceac3302ad3b8e1cba177a4b68", "InstalledFiles": [ "usr/bin/econftool", "usr/lib/libeconf.so.0", "usr/lib/libeconf.so.0.8.3" ], "AnalyzedBy": "apk" }, { "ID": "libexpat@2.9.0-r0", "Name": "libexpat", "Identifier": { "PURL": "pkg:apk/alpine/libexpat@2.9.0-r0?arch=x86_64\u0026distro=3.24.3", "UID": "de4b08b485b70dec" }, "Version": "2.9.0-r0", "Arch": "x86_64", "SrcName": "expat", "SrcVersion": "2.9.0-r0", "Licenses": [ "MIT" ], "Maintainer": "Carlo Landmeter \u003cclandmeter@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:b6e82faa7913a63da771bbddaa6ad38842047f78", "InstalledFiles": [ "usr/lib/libexpat.so.1", "usr/lib/libexpat.so.1.13.0" ], "AnalyzedBy": "apk" }, { "ID": "libffi@3.5.2-r1", "Name": "libffi", "Identifier": { "PURL": "pkg:apk/alpine/libffi@3.5.2-r1?arch=x86_64\u0026distro=3.24.3", "UID": "b9077badab89665d" }, "Version": "3.5.2-r1", "Arch": "x86_64", "SrcName": "libffi", "SrcVersion": "3.5.2-r1", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:2f7b261f7fcecc4eebd8b330e7f6fb80713bfe3a", "InstalledFiles": [ "usr/lib/libffi.so.8", "usr/lib/libffi.so.8.2.0" ], "AnalyzedBy": "apk" }, { "ID": "libflac@1.4.3-r2", "Name": "libflac", "Identifier": { "PURL": "pkg:apk/alpine/libflac@1.4.3-r2?arch=x86_64\u0026distro=3.24.3", "UID": "b8c8b0d3ccbaabcb" }, "Version": "1.4.3-r2", "Arch": "x86_64", "SrcName": "flac", "SrcVersion": "1.4.3-r2", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libogg@1.3.6-r0", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:84e2d9db9e6d7f45ab136d5f5de9119443de091e", "InstalledFiles": [ "usr/lib/libFLAC.so.12", "usr/lib/libFLAC.so.12.1.0" ], "AnalyzedBy": "apk" }, { "ID": "libgcc@15.2.0-r5", "Name": "libgcc", "Identifier": { "PURL": "pkg:apk/alpine/libgcc@15.2.0-r5?arch=x86_64\u0026distro=3.24.3", "UID": "a092110f00cd5329" }, "Version": "15.2.0-r5", "Arch": "x86_64", "SrcName": "gcc", "SrcVersion": "15.2.0-r5", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Ariadne Conill \u003cariadne@dereferenced.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "Digest": "sha1:379c156c53e0cc140e87c79c0a3dd22b6ee51552", "InstalledFiles": [ "usr/lib/libgcc_s.so.1" ], "AnalyzedBy": "apk" }, { "ID": "libgomp@15.2.0-r5", "Name": "libgomp", "Identifier": { "PURL": "pkg:apk/alpine/libgomp@15.2.0-r5?arch=x86_64\u0026distro=3.24.3", "UID": "3407b14080cde5b6" }, "Version": "15.2.0-r5", "Arch": "x86_64", "SrcName": "gcc", "SrcVersion": "15.2.0-r5", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Ariadne Conill \u003cariadne@dereferenced.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:a50286334fca08d41b5409d8e31836bb977e45b2", "InstalledFiles": [ "usr/lib/libgomp.so.1", "usr/lib/libgomp.so.1.0.0" ], "AnalyzedBy": "apk" }, { "ID": "libhwy@1.3.0-r0", "Name": "libhwy", "Identifier": { "PURL": "pkg:apk/alpine/libhwy@1.3.0-r0?arch=x86_64\u0026distro=3.24.3", "UID": "f54747e77d6611e5" }, "Version": "1.3.0-r0", "Arch": "x86_64", "SrcName": "highway", "SrcVersion": "1.3.0-r0", "Licenses": [ "Apache-2.0" ], "Maintainer": "Alex Xu (Hello71) \u003calex_y_xu@yahoo.ca\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "libstdc++@15.2.0-r5", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:1800106d92cf42141beef5beab690bb0f2027943", "InstalledFiles": [ "usr/lib/libhwy.so.1", "usr/lib/libhwy.so.1.3.0" ], "AnalyzedBy": "apk" }, { "ID": "libintl@1.0-r0", "Name": "libintl", "Identifier": { "PURL": "pkg:apk/alpine/libintl@1.0-r0?arch=x86_64\u0026distro=3.24.3", "UID": "2cc4316420393b2" }, "Version": "1.0-r0", "Arch": "x86_64", "SrcName": "gettext", "SrcVersion": "1.0-r0", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Carlo Landmeter \u003cclandmeter@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:282d6642ccac87237e43a864159d73cf5abe7550", "InstalledFiles": [ "usr/lib/libintl.so.8", "usr/lib/libintl.so.8.4.6" ], "AnalyzedBy": "apk" }, { "ID": "libjpeg-turbo@3.1.3-r0", "Name": "libjpeg-turbo", "Identifier": { "PURL": "pkg:apk/alpine/libjpeg-turbo@3.1.3-r0?arch=x86_64\u0026distro=3.24.3", "UID": "bbe7117ccb29e8b4" }, "Version": "3.1.3-r0", "Arch": "x86_64", "SrcName": "libjpeg-turbo", "SrcVersion": "3.1.3-r0", "Licenses": [ "BSD-3-Clause", "IJG", "Zlib" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:5e85183c052743916cd987c8c305b7709accbbd9", "InstalledFiles": [ "usr/lib/libjpeg.so.8", "usr/lib/libjpeg.so.8.3.2" ], "AnalyzedBy": "apk" }, { "ID": "libjxl@0.11.2-r1", "Name": "libjxl", "Identifier": { "PURL": "pkg:apk/alpine/libjxl@0.11.2-r1?arch=x86_64\u0026distro=3.24.3", "UID": "40702d091cd4d8c" }, "Version": "0.11.2-r1", "Arch": "x86_64", "SrcName": "libjxl", "SrcVersion": "0.11.2-r1", "Licenses": [ "Apache-2.0" ], "Maintainer": "Alex Xu (Hello71) \u003calex_y_xu@yahoo.ca\u003e", "DependsOn": [ "brotli-libs@1.2.1-r0", "lcms2@2.19-r0", "libhwy@1.3.0-r0", "libstdc++@15.2.0-r5", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:d33fd2c1e7eaacb140ddf4b9d8680f2116ce9edb", "InstalledFiles": [ "usr/lib/libjxl.so.0.11", "usr/lib/libjxl.so.0.11.2", "usr/lib/libjxl_cms.so.0.11", "usr/lib/libjxl_cms.so.0.11.2", "usr/lib/libjxl_threads.so.0.11", "usr/lib/libjxl_threads.so.0.11.2", "usr/share/mime/packages/image-jxl.xml" ], "AnalyzedBy": "apk" }, { "ID": "libltdl@2.6.0-r1", "Name": "libltdl", "Identifier": { "PURL": "pkg:apk/alpine/libltdl@2.6.0-r1?arch=x86_64\u0026distro=3.24.3", "UID": "aacec1dc0e5f56c8" }, "Version": "2.6.0-r1", "Arch": "x86_64", "SrcName": "libtool", "SrcVersion": "2.6.0-r1", "Licenses": [ "LGPL-2.0-or-later", "GPL-2.0-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:c4dfde951a9074218c0d06060e4fe60638feb6b2", "InstalledFiles": [ "usr/lib/libltdl.so", "usr/lib/libltdl.so.7", "usr/lib/libltdl.so.7.3.5" ], "AnalyzedBy": "apk" }, { "ID": "libmd@1.2.0-r0", "Name": "libmd", "Identifier": { "PURL": "pkg:apk/alpine/libmd@1.2.0-r0?arch=x86_64\u0026distro=3.24.3", "UID": "61fb5e1e545fe34c" }, "Version": "1.2.0-r0", "Arch": "x86_64", "SrcName": "libmd", "SrcVersion": "1.2.0-r0", "Licenses": [ "BSD-3-Clause", "BSD-2-Clause", "ISC", "Beerware", "Public", "Domain" ], "Maintainer": "omni \u003comni+alpine@hack.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:3478a5f1c2bb99b8e01fe9f04d175c2ae86e0bf3", "InstalledFiles": [ "usr/lib/libmd.so.0", "usr/lib/libmd.so.0.2.0" ], "AnalyzedBy": "apk" }, { "ID": "libmount@2.42.3-r1", "Name": "libmount", "Identifier": { "PURL": "pkg:apk/alpine/libmount@2.42.3-r1?arch=x86_64\u0026distro=3.24.3", "UID": "8ce2eae390bb8cbd" }, "Version": "2.42.3-r1", "Arch": "x86_64", "SrcName": "util-linux", "SrcVersion": "2.42.3-r1", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libblkid@2.42.3-r1", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:c28f61fd67d14f5a4c2a8c87416420438271ca4c", "InstalledFiles": [ "usr/lib/libmount.so.1", "usr/lib/libmount.so.1.1.0" ], "AnalyzedBy": "apk" }, { "ID": "libogg@1.3.6-r0", "Name": "libogg", "Identifier": { "PURL": "pkg:apk/alpine/libogg@1.3.6-r0?arch=x86_64\u0026distro=3.24.3", "UID": "d2a62fad42a81959" }, "Version": "1.3.6-r0", "Arch": "x86_64", "SrcName": "libogg", "SrcVersion": "1.3.6-r0", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:55a113e41cfa6a4978709d4634abb3600c0d7c3c", "InstalledFiles": [ "usr/lib/libogg.so.0", "usr/lib/libogg.so.0.8.6" ], "AnalyzedBy": "apk" }, { "ID": "libopenmpt@0.8.9-r0", "Name": "libopenmpt", "Identifier": { "PURL": "pkg:apk/alpine/libopenmpt@0.8.9-r0?arch=x86_64\u0026distro=3.24.3", "UID": "9f3c59503ca4b987" }, "Version": "0.8.9-r0", "Arch": "x86_64", "SrcName": "libopenmpt", "SrcVersion": "0.8.9-r0", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "knuxify \u003cknuxify@gmail.com\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "libstdc++@15.2.0-r5", "libvorbis@1.3.7-r2", "mpg123-libs@1.33.5-r0", "musl@1.2.6-r3", "zlib@1.3.2-r1" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:61c4fa7683a898730c21f36b0ed784bfda16cfad", "InstalledFiles": [ "usr/lib/libopenmpt.so.0", "usr/lib/libopenmpt.so.0.5.5" ], "AnalyzedBy": "apk" }, { "ID": "libpciaccess@0.19-r0", "Name": "libpciaccess", "Identifier": { "PURL": "pkg:apk/alpine/libpciaccess@0.19-r0?arch=x86_64\u0026distro=3.24.3", "UID": "1f85517c7c0b673d" }, "Version": "0.19-r0", "Arch": "x86_64", "SrcName": "libpciaccess", "SrcVersion": "0.19-r0", "Licenses": [ "X-11" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "hwdata-pci@0.408-r0", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:b8bd822b41f7d8944b81483daad58b33646e0df8", "InstalledFiles": [ "usr/lib/libpciaccess.so.0", "usr/lib/libpciaccess.so.0.11.1" ], "AnalyzedBy": "apk" }, { "ID": "libplacebo@7.360.1-r0", "Name": "libplacebo", "Identifier": { "PURL": "pkg:apk/alpine/libplacebo@7.360.1-r0?arch=x86_64\u0026distro=3.24.3", "UID": "a5c6d72745414d12" }, "Version": "7.360.1-r0", "Arch": "x86_64", "SrcName": "libplacebo", "SrcVersion": "7.360.1-r0", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Simon Zeni \u003csimon@bl4ckb0ne.ca\u003e", "DependsOn": [ "glslang-libs@1.4.341.0-r0", "lcms2@2.19-r0", "libdovi@3.3.2-r0", "libgcc@15.2.0-r5", "libstdc++@15.2.0-r5", "musl@1.2.6-r3", "shaderc@2026.1-r0", "vulkan-loader@1.4.347-r0" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:f1478e91943f9a8b7f1ca6e40dfe1428365ccb37", "InstalledFiles": [ "usr/lib/libplacebo.so.360" ], "AnalyzedBy": "apk" }, { "ID": "libpng@1.6.59-r0", "Name": "libpng", "Identifier": { "PURL": "pkg:apk/alpine/libpng@1.6.59-r0?arch=x86_64\u0026distro=3.24.3", "UID": "2d5f99b5ff01e349" }, "Version": "1.6.59-r0", "Arch": "x86_64", "SrcName": "libpng", "SrcVersion": "1.6.59-r0", "Licenses": [ "Libpng" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3", "zlib@1.3.2-r1" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:aadb0fae1f673f7f57c582ef75714050eca43b92", "InstalledFiles": [ "usr/lib/libpng16.so.16", "usr/lib/libpng16.so.16.59.0" ], "AnalyzedBy": "apk" }, { "ID": "libpulse@17.0-r7", "Name": "libpulse", "Identifier": { "PURL": "pkg:apk/alpine/libpulse@17.0-r7?arch=x86_64\u0026distro=3.24.3", "UID": "f83d0f9e4cee2400" }, "Version": "17.0-r7", "Arch": "x86_64", "SrcName": "pulseaudio", "SrcVersion": "17.0-r7", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Pablo Correa Gomez \u003cpabloyoyoista@postmarketos.org\u003e", "DependsOn": [ "dbus-libs@1.16.2-r2", "libasyncns@0.8-r5", "libintl@1.0-r0", "libltdl@2.6.0-r1", "libsndfile@1.2.2-r2", "libx11@1.8.14-r0", "libxcb@1.17.0-r2", "musl@1.2.6-r3", "orc@0.4.41-r0", "soxr@0.1.3-r7", "speexdsp@1.2.1-r2", "tdb-libs@1.4.15-r1" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:f455f4e46106e75baa84a7db8857723d142d4eca", "InstalledFiles": [ "etc/pulse/client.conf", "usr/lib/libpulse-simple.so.0", "usr/lib/libpulse-simple.so.0.1.1", "usr/lib/libpulse.so.0", "usr/lib/libpulse.so.0.24.3", "usr/lib/pulseaudio/libpulsecommon-17.0.so", "usr/lib/pulseaudio/libpulsecore-17.0.so", "usr/lib/pulseaudio/libpulsedsp.so" ], "AnalyzedBy": "apk" }, { "ID": "librist@0.2.15-r0", "Name": "librist", "Identifier": { "PURL": "pkg:apk/alpine/librist@0.2.15-r0?arch=x86_64\u0026distro=3.24.3", "UID": "29a8809be8f6cdae" }, "Version": "0.2.15-r0", "Arch": "x86_64", "SrcName": "librist", "SrcVersion": "0.2.15-r0", "Licenses": [ "BSD-2-Clause" ], "Maintainer": "Kevin Wang \u003ckevin@muxable.com\u003e", "DependsOn": [ "cjson@1.7.19-r1", "mbedtls3@3.6.7-r0", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:205a0aecedd3c05bdf4f62817332db751bbc0af5", "InstalledFiles": [ "usr/lib/librist.so.4", "usr/lib/librist.so.4.6.3" ], "AnalyzedBy": "apk" }, { "ID": "libsharpyuv@1.6.0-r0", "Name": "libsharpyuv", "Identifier": { "PURL": "pkg:apk/alpine/libsharpyuv@1.6.0-r0?arch=x86_64\u0026distro=3.24.3", "UID": "e04e68c942a0ca6f" }, "Version": "1.6.0-r0", "Arch": "x86_64", "SrcName": "libwebp", "SrcVersion": "1.6.0-r0", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:b6b67d8faf3331da87f2d4bf44268a63fc189249", "InstalledFiles": [ "usr/lib/libsharpyuv.so.0", "usr/lib/libsharpyuv.so.0.1.2" ], "AnalyzedBy": "apk" }, { "ID": "libsndfile@1.2.2-r2", "Name": "libsndfile", "Identifier": { "PURL": "pkg:apk/alpine/libsndfile@1.2.2-r2?arch=x86_64\u0026distro=3.24.3", "UID": "6b72d05b2f92e26d" }, "Version": "1.2.2-r2", "Arch": "x86_64", "SrcName": "libsndfile", "SrcVersion": "1.2.2-r2", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "alsa-lib@1.2.15.3-r0", "lame-libs@3.100-r5", "libflac@1.4.3-r2", "libogg@1.3.6-r0", "libvorbis@1.3.7-r2", "mpg123-libs@1.33.5-r0", "musl@1.2.6-r3", "opus@1.6.1-r0" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:8609db5b1b6a14681ca58e0ce22ba06f302772f4", "InstalledFiles": [ "usr/bin/sndfile-cmp", "usr/bin/sndfile-concat", "usr/bin/sndfile-convert", "usr/bin/sndfile-deinterleave", "usr/bin/sndfile-info", "usr/bin/sndfile-interleave", "usr/bin/sndfile-metadata-get", "usr/bin/sndfile-metadata-set", "usr/bin/sndfile-play", "usr/bin/sndfile-salvage", "usr/lib/libsndfile.so.1", "usr/lib/libsndfile.so.1.0.37" ], "AnalyzedBy": "apk" }, { "ID": "libsodium@1.0.22-r0", "Name": "libsodium", "Identifier": { "PURL": "pkg:apk/alpine/libsodium@1.0.22-r0?arch=x86_64\u0026distro=3.24.3", "UID": "80d0a8abd9c5942b" }, "Version": "1.0.22-r0", "Arch": "x86_64", "SrcName": "libsodium", "SrcVersion": "1.0.22-r0", "Licenses": [ "ISC" ], "Maintainer": "Daniel Néri \u003cdne+alpine@mayonnaise.net\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:e5bfa7b8c7e0639f44d57d4aaac2621e46523aad", "InstalledFiles": [ "usr/lib/libsodium.so.26", "usr/lib/libsodium.so.26.4.0" ], "AnalyzedBy": "apk" }, { "ID": "libsrt@1.5.3-r1", "Name": "libsrt", "Identifier": { "PURL": "pkg:apk/alpine/libsrt@1.5.3-r1?arch=x86_64\u0026distro=3.24.3", "UID": "1c4f1e0d775c51c7" }, "Version": "1.5.3-r1", "Arch": "x86_64", "SrcName": "libsrt", "SrcVersion": "1.5.3-r1", "Licenses": [ "MPL-2.0" ], "Maintainer": "Yohann DANELLO \u003cyohann.danello@crans.org\u003e", "DependsOn": [ "libcrypto3@3.5.9-r0", "libgcc@15.2.0-r5", "libstdc++@15.2.0-r5", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:b8ededb51330333b684c87e33bdf36ebb0a8a559", "InstalledFiles": [ "usr/lib/libsrt.so.1.5", "usr/lib/libsrt.so.1.5.3" ], "AnalyzedBy": "apk" }, { "ID": "libssh@0.12.2-r0", "Name": "libssh", "Identifier": { "PURL": "pkg:apk/alpine/libssh@0.12.2-r0?arch=x86_64\u0026distro=3.24.3", "UID": "c0d0b9c2c6073e4b" }, "Version": "0.12.2-r0", "Arch": "x86_64", "SrcName": "libssh", "SrcVersion": "0.12.2-r0", "Licenses": [ "LGPL-2.1-or-later", "BSD-2-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libcrypto3@3.5.9-r0", "musl@1.2.6-r3", "zlib@1.3.2-r1" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:ac53a0bf13a73220f52b1db7ecc2fa3b4322bb00", "InstalledFiles": [ "usr/lib/libssh.so.4", "usr/lib/libssh.so.4.12.0" ], "AnalyzedBy": "apk" }, { "ID": "libssl3@3.5.9-r0", "Name": "libssl3", "Identifier": { "PURL": "pkg:apk/alpine/libssl3@3.5.9-r0?arch=x86_64\u0026distro=3.24.3", "UID": "c5a60e84169f3215" }, "Version": "3.5.9-r0", "Arch": "x86_64", "SrcName": "openssl", "SrcVersion": "3.5.9-r0", "Licenses": [ "Apache-2.0" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libcrypto3@3.5.9-r0", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:75c137aedfb2760f88629236cb7b797630aed0c3d91d626d1d1bb694878fc2ba" }, "Digest": "sha1:20c4c90ea9d20a9dd3a04deadf2c6c4f64233643", "InstalledFiles": [ "usr/lib/libssl.so.3" ], "AnalyzedBy": "apk" }, { "ID": "libstdc++@15.2.0-r5", "Name": "libstdc++", "Identifier": { "PURL": "pkg:apk/alpine/libstdc%2B%2B@15.2.0-r5?arch=x86_64\u0026distro=3.24.3", "UID": "81829e8deb73ca15" }, "Version": "15.2.0-r5", "Arch": "x86_64", "SrcName": "gcc", "SrcVersion": "15.2.0-r5", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later" ], "Maintainer": "Ariadne Conill \u003cariadne@dereferenced.org\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "Digest": "sha1:5f7a2ad7646128ba02cc0d6fb94672b6845648d5", "InstalledFiles": [ "usr/lib/libstdc++.so.6", "usr/lib/libstdc++.so.6.0.34" ], "AnalyzedBy": "apk" }, { "ID": "libtheora@1.2.0-r1", "Name": "libtheora", "Identifier": { "PURL": "pkg:apk/alpine/libtheora@1.2.0-r1?arch=x86_64\u0026distro=3.24.3", "UID": "b64073e00d33caff" }, "Version": "1.2.0-r1", "Arch": "x86_64", "SrcName": "libtheora", "SrcVersion": "1.2.0-r1", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libogg@1.3.6-r0", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:4e22a632309797f6be838e0751c044da00641b27", "InstalledFiles": [ "usr/lib/libtheora.so.1", "usr/lib/libtheora.so.1.4.1", "usr/lib/libtheoradec.so.2", "usr/lib/libtheoradec.so.2.1.1", "usr/lib/libtheoraenc.so.2", "usr/lib/libtheoraenc.so.2.2.1" ], "AnalyzedBy": "apk" }, { "ID": "libudfread@1.2.0-r1", "Name": "libudfread", "Identifier": { "PURL": "pkg:apk/alpine/libudfread@1.2.0-r1?arch=x86_64\u0026distro=3.24.3", "UID": "b2b398fe2ba0406d" }, "Version": "1.2.0-r1", "Arch": "x86_64", "SrcName": "libudfread", "SrcVersion": "1.2.0-r1", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Achill Gilgenast \u003cachill@achill.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:bda6e2c2b8e5807793b1d2806b29ba2a2a63703e", "InstalledFiles": [ "usr/lib/libudfread.so.3", "usr/lib/libudfread.so.3.0.0" ], "AnalyzedBy": "apk" }, { "ID": "libunibreak@6.1-r0", "Name": "libunibreak", "Identifier": { "PURL": "pkg:apk/alpine/libunibreak@6.1-r0?arch=x86_64\u0026distro=3.24.3", "UID": "60ce47751b246830" }, "Version": "6.1-r0", "Arch": "x86_64", "SrcName": "libunibreak", "SrcVersion": "6.1-r0", "Licenses": [ "Zlib" ], "Maintainer": "Krassy Boykinov \u003ckboykinov@teamcentrixx.com\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:f701b05e3412a4f5eb1f46eeb0dfd63f5ae0a0e5", "InstalledFiles": [ "usr/lib/libunibreak.so.6", "usr/lib/libunibreak.so.6.0.1" ], "AnalyzedBy": "apk" }, { "ID": "libva@2.23.0-r0", "Name": "libva", "Identifier": { "PURL": "pkg:apk/alpine/libva@2.23.0-r0?arch=x86_64\u0026distro=3.24.3", "UID": "e0f457e79f2234e" }, "Version": "2.23.0-r0", "Arch": "x86_64", "SrcName": "libva", "SrcVersion": "2.23.0-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libdrm@2.4.134-r0", "libx11@1.8.14-r0", "libxcb@1.17.0-r2", "libxext@1.3.7-r0", "libxfixes@6.0.2-r0", "musl@1.2.6-r3", "wayland-libs-client@1.25.0-r0" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:282c887f27c3a451fa942b67a756f17c8ee99754", "InstalledFiles": [ "usr/lib/libva-drm.so.2", "usr/lib/libva-drm.so.2.2300.0", "usr/lib/libva-wayland.so.2", "usr/lib/libva-wayland.so.2.2300.0", "usr/lib/libva-x11.so.2", "usr/lib/libva-x11.so.2.2300.0", "usr/lib/libva.so.2", "usr/lib/libva.so.2.2300.0" ], "AnalyzedBy": "apk" }, { "ID": "libvdpau@1.5-r4", "Name": "libvdpau", "Identifier": { "PURL": "pkg:apk/alpine/libvdpau@1.5-r4?arch=x86_64\u0026distro=3.24.3", "UID": "70822bd793577a2a" }, "Version": "1.5-r4", "Arch": "x86_64", "SrcName": "libvdpau", "SrcVersion": "1.5-r4", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libx11@1.8.14-r0", "libxext@1.3.7-r0", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:c3a0bbd59ea75948b626f8b476e66822ff1d27e5", "InstalledFiles": [ "etc/vdpau_wrapper.cfg", "usr/lib/libvdpau.so.1", "usr/lib/libvdpau.so.1.0.0", "usr/lib/vdpau/libvdpau_trace.so", "usr/lib/vdpau/libvdpau_trace.so.1", "usr/lib/vdpau/libvdpau_trace.so.1.0.0" ], "AnalyzedBy": "apk" }, { "ID": "libvorbis@1.3.7-r2", "Name": "libvorbis", "Identifier": { "PURL": "pkg:apk/alpine/libvorbis@1.3.7-r2?arch=x86_64\u0026distro=3.24.3", "UID": "94df80d20a7973a7" }, "Version": "1.3.7-r2", "Arch": "x86_64", "SrcName": "libvorbis", "SrcVersion": "1.3.7-r2", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libogg@1.3.6-r0", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:58984222abb87e02f73a48cff79dc75280bf4335", "InstalledFiles": [ "usr/lib/libvorbis.so.0", "usr/lib/libvorbis.so.0.4.9", "usr/lib/libvorbisenc.so.2", "usr/lib/libvorbisenc.so.2.0.12", "usr/lib/libvorbisfile.so.3", "usr/lib/libvorbisfile.so.3.3.8" ], "AnalyzedBy": "apk" }, { "ID": "libvpl@2.15.0-r1", "Name": "libvpl", "Identifier": { "PURL": "pkg:apk/alpine/libvpl@2.15.0-r1?arch=x86_64\u0026distro=3.24.3", "UID": "4b43381e9014c366" }, "Version": "2.15.0-r1", "Arch": "x86_64", "SrcName": "libvpl", "SrcVersion": "2.15.0-r1", "Licenses": [ "MIT" ], "Maintainer": "Krassy Boykinov \u003ckboykinov@teamcentrixx.com\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "libstdc++@15.2.0-r5", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:c61bf4a54e7592a4c8f5aae04388b6cfd84c667c", "InstalledFiles": [ "usr/lib/libvpl.so.2", "usr/lib/libvpl.so.2.15" ], "AnalyzedBy": "apk" }, { "ID": "libvpx@1.15.2-r1", "Name": "libvpx", "Identifier": { "PURL": "pkg:apk/alpine/libvpx@1.15.2-r1?arch=x86_64\u0026distro=3.24.3", "UID": "4489388655c4a15f" }, "Version": "1.15.2-r1", "Arch": "x86_64", "SrcName": "libvpx", "SrcVersion": "1.15.2-r1", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:2d0a84e99f83a86478fb7db85c88faa8a17ef8fc", "InstalledFiles": [ "usr/lib/libvpx.so.11", "usr/lib/libvpx.so.11.0", "usr/lib/libvpx.so.11.0.1" ], "AnalyzedBy": "apk" }, { "ID": "libwebp@1.6.0-r0", "Name": "libwebp", "Identifier": { "PURL": "pkg:apk/alpine/libwebp@1.6.0-r0?arch=x86_64\u0026distro=3.24.3", "UID": "c5f3967611ce9dca" }, "Version": "1.6.0-r0", "Arch": "x86_64", "SrcName": "libwebp", "SrcVersion": "1.6.0-r0", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libsharpyuv@1.6.0-r0", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:47c88e69c4cefde61d94174ace8b11b5298712ca", "InstalledFiles": [ "usr/lib/libwebp.so.7", "usr/lib/libwebp.so.7.2.0" ], "AnalyzedBy": "apk" }, { "ID": "libwebpmux@1.6.0-r0", "Name": "libwebpmux", "Identifier": { "PURL": "pkg:apk/alpine/libwebpmux@1.6.0-r0?arch=x86_64\u0026distro=3.24.3", "UID": "70544cbfaf67d2ca" }, "Version": "1.6.0-r0", "Arch": "x86_64", "SrcName": "libwebp", "SrcVersion": "1.6.0-r0", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libwebp@1.6.0-r0", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:279115790748bc6e8ae0ad11b8fb833f1cb6fc41", "InstalledFiles": [ "usr/lib/libwebpmux.so.3", "usr/lib/libwebpmux.so.3.1.2" ], "AnalyzedBy": "apk" }, { "ID": "libx11@1.8.14-r0", "Name": "libx11", "Identifier": { "PURL": "pkg:apk/alpine/libx11@1.8.14-r0?arch=x86_64\u0026distro=3.24.3", "UID": "6343308b4516fe3e" }, "Version": "1.8.14-r0", "Arch": "x86_64", "SrcName": "libx11", "SrcVersion": "1.8.14-r0", "Licenses": [ "X-11" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libxcb@1.17.0-r2", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:903bb9991efb9e31ebd48e7382337f853ea9e101", "InstalledFiles": [ "usr/lib/libX11-xcb.so.1", "usr/lib/libX11-xcb.so.1.0.0", "usr/lib/libX11.so.6", "usr/lib/libX11.so.6.4.0", "usr/share/X11/XErrorDB", "usr/share/X11/Xcms.txt", "usr/share/X11/locale/compose.dir", "usr/share/X11/locale/locale.alias", "usr/share/X11/locale/locale.dir", "usr/share/X11/locale/C/Compose", "usr/share/X11/locale/C/XI18N_OBJS", "usr/share/X11/locale/C/XLC_LOCALE", "usr/share/X11/locale/am_ET.UTF-8/Compose", "usr/share/X11/locale/am_ET.UTF-8/XI18N_OBJS", "usr/share/X11/locale/am_ET.UTF-8/XLC_LOCALE", "usr/share/X11/locale/armscii-8/Compose", "usr/share/X11/locale/armscii-8/XI18N_OBJS", "usr/share/X11/locale/armscii-8/XLC_LOCALE", "usr/share/X11/locale/cs_CZ.UTF-8/Compose", "usr/share/X11/locale/cs_CZ.UTF-8/XI18N_OBJS", "usr/share/X11/locale/cs_CZ.UTF-8/XLC_LOCALE", "usr/share/X11/locale/el_GR.UTF-8/Compose", "usr/share/X11/locale/el_GR.UTF-8/XI18N_OBJS", "usr/share/X11/locale/el_GR.UTF-8/XLC_LOCALE", "usr/share/X11/locale/en_US.UTF-8/Compose", "usr/share/X11/locale/en_US.UTF-8/XI18N_OBJS", "usr/share/X11/locale/en_US.UTF-8/XLC_LOCALE", "usr/share/X11/locale/fi_FI.UTF-8/Compose", "usr/share/X11/locale/fi_FI.UTF-8/XI18N_OBJS", "usr/share/X11/locale/fi_FI.UTF-8/XLC_LOCALE", "usr/share/X11/locale/georgian-academy/Compose", "usr/share/X11/locale/georgian-academy/XI18N_OBJS", "usr/share/X11/locale/georgian-academy/XLC_LOCALE", "usr/share/X11/locale/georgian-ps/Compose", "usr/share/X11/locale/georgian-ps/XI18N_OBJS", "usr/share/X11/locale/georgian-ps/XLC_LOCALE", "usr/share/X11/locale/ibm-cp1133/Compose", "usr/share/X11/locale/ibm-cp1133/XI18N_OBJS", "usr/share/X11/locale/ibm-cp1133/XLC_LOCALE", "usr/share/X11/locale/iscii-dev/Compose", "usr/share/X11/locale/iscii-dev/XI18N_OBJS", "usr/share/X11/locale/iscii-dev/XLC_LOCALE", "usr/share/X11/locale/isiri-3342/Compose", "usr/share/X11/locale/isiri-3342/XI18N_OBJS", "usr/share/X11/locale/isiri-3342/XLC_LOCALE", "usr/share/X11/locale/iso8859-1/Compose", "usr/share/X11/locale/iso8859-1/XI18N_OBJS", "usr/share/X11/locale/iso8859-1/XLC_LOCALE", "usr/share/X11/locale/iso8859-10/Compose", "usr/share/X11/locale/iso8859-10/XI18N_OBJS", "usr/share/X11/locale/iso8859-10/XLC_LOCALE", "usr/share/X11/locale/iso8859-11/Compose", "usr/share/X11/locale/iso8859-11/XI18N_OBJS", "usr/share/X11/locale/iso8859-11/XLC_LOCALE", "usr/share/X11/locale/iso8859-13/Compose", "usr/share/X11/locale/iso8859-13/XI18N_OBJS", "usr/share/X11/locale/iso8859-13/XLC_LOCALE", "usr/share/X11/locale/iso8859-14/Compose", "usr/share/X11/locale/iso8859-14/XI18N_OBJS", "usr/share/X11/locale/iso8859-14/XLC_LOCALE", "usr/share/X11/locale/iso8859-15/Compose", "usr/share/X11/locale/iso8859-15/XI18N_OBJS", "usr/share/X11/locale/iso8859-15/XLC_LOCALE", "usr/share/X11/locale/iso8859-2/Compose", "usr/share/X11/locale/iso8859-2/XI18N_OBJS", "usr/share/X11/locale/iso8859-2/XLC_LOCALE", "usr/share/X11/locale/iso8859-3/Compose", "usr/share/X11/locale/iso8859-3/XI18N_OBJS", "usr/share/X11/locale/iso8859-3/XLC_LOCALE", "usr/share/X11/locale/iso8859-4/Compose", "usr/share/X11/locale/iso8859-4/XI18N_OBJS", "usr/share/X11/locale/iso8859-4/XLC_LOCALE", "usr/share/X11/locale/iso8859-5/Compose", "usr/share/X11/locale/iso8859-5/XI18N_OBJS", "usr/share/X11/locale/iso8859-5/XLC_LOCALE", "usr/share/X11/locale/iso8859-6/Compose", "usr/share/X11/locale/iso8859-6/XI18N_OBJS", "usr/share/X11/locale/iso8859-6/XLC_LOCALE", "usr/share/X11/locale/iso8859-7/Compose", "usr/share/X11/locale/iso8859-7/XI18N_OBJS", "usr/share/X11/locale/iso8859-7/XLC_LOCALE", "usr/share/X11/locale/iso8859-8/Compose", "usr/share/X11/locale/iso8859-8/XI18N_OBJS", "usr/share/X11/locale/iso8859-8/XLC_LOCALE", "usr/share/X11/locale/iso8859-9/Compose", "usr/share/X11/locale/iso8859-9/XI18N_OBJS", "usr/share/X11/locale/iso8859-9/XLC_LOCALE", "usr/share/X11/locale/iso8859-9e/Compose", "usr/share/X11/locale/iso8859-9e/XI18N_OBJS", "usr/share/X11/locale/iso8859-9e/XLC_LOCALE", "usr/share/X11/locale/ja/Compose", "usr/share/X11/locale/ja/XI18N_OBJS", "usr/share/X11/locale/ja/XLC_LOCALE", "usr/share/X11/locale/ja.JIS/Compose", "usr/share/X11/locale/ja.JIS/XI18N_OBJS", "usr/share/X11/locale/ja.JIS/XLC_LOCALE", "usr/share/X11/locale/ja.SJIS/Compose", "usr/share/X11/locale/ja.SJIS/XI18N_OBJS", "usr/share/X11/locale/ja.SJIS/XLC_LOCALE", "usr/share/X11/locale/ja_JP.UTF-8/Compose", "usr/share/X11/locale/ja_JP.UTF-8/XI18N_OBJS", "usr/share/X11/locale/ja_JP.UTF-8/XLC_LOCALE", "usr/share/X11/locale/km_KH.UTF-8/Compose", "usr/share/X11/locale/km_KH.UTF-8/XI18N_OBJS", "usr/share/X11/locale/km_KH.UTF-8/XLC_LOCALE", "usr/share/X11/locale/ko/Compose", "usr/share/X11/locale/ko/XI18N_OBJS", "usr/share/X11/locale/ko/XLC_LOCALE", "usr/share/X11/locale/ko_KR.UTF-8/Compose", "usr/share/X11/locale/ko_KR.UTF-8/XI18N_OBJS", "usr/share/X11/locale/ko_KR.UTF-8/XLC_LOCALE", "usr/share/X11/locale/koi8-c/Compose", "usr/share/X11/locale/koi8-c/XI18N_OBJS", "usr/share/X11/locale/koi8-c/XLC_LOCALE", "usr/share/X11/locale/koi8-r/Compose", "usr/share/X11/locale/koi8-r/XI18N_OBJS", "usr/share/X11/locale/koi8-r/XLC_LOCALE", "usr/share/X11/locale/koi8-u/Compose", "usr/share/X11/locale/koi8-u/XI18N_OBJS", "usr/share/X11/locale/koi8-u/XLC_LOCALE", "usr/share/X11/locale/microsoft-cp1251/Compose", "usr/share/X11/locale/microsoft-cp1251/XI18N_OBJS", "usr/share/X11/locale/microsoft-cp1251/XLC_LOCALE", "usr/share/X11/locale/microsoft-cp1255/Compose", "usr/share/X11/locale/microsoft-cp1255/XI18N_OBJS", "usr/share/X11/locale/microsoft-cp1255/XLC_LOCALE", "usr/share/X11/locale/microsoft-cp1256/Compose", "usr/share/X11/locale/microsoft-cp1256/XI18N_OBJS", "usr/share/X11/locale/microsoft-cp1256/XLC_LOCALE", "usr/share/X11/locale/mulelao-1/Compose", "usr/share/X11/locale/mulelao-1/XI18N_OBJS", "usr/share/X11/locale/mulelao-1/XLC_LOCALE", "usr/share/X11/locale/nokhchi-1/Compose", "usr/share/X11/locale/nokhchi-1/XI18N_OBJS", "usr/share/X11/locale/nokhchi-1/XLC_LOCALE", "usr/share/X11/locale/pt_BR.UTF-8/Compose", "usr/share/X11/locale/pt_BR.UTF-8/XI18N_OBJS", "usr/share/X11/locale/pt_BR.UTF-8/XLC_LOCALE", "usr/share/X11/locale/pt_PT.UTF-8/Compose", "usr/share/X11/locale/pt_PT.UTF-8/XI18N_OBJS", "usr/share/X11/locale/pt_PT.UTF-8/XLC_LOCALE", "usr/share/X11/locale/ru_RU.UTF-8/Compose", "usr/share/X11/locale/ru_RU.UTF-8/XI18N_OBJS", "usr/share/X11/locale/ru_RU.UTF-8/XLC_LOCALE", "usr/share/X11/locale/sr_RS.UTF-8/Compose", "usr/share/X11/locale/sr_RS.UTF-8/XI18N_OBJS", "usr/share/X11/locale/sr_RS.UTF-8/XLC_LOCALE", "usr/share/X11/locale/tatar-cyr/Compose", "usr/share/X11/locale/tatar-cyr/XI18N_OBJS", "usr/share/X11/locale/tatar-cyr/XLC_LOCALE", "usr/share/X11/locale/th_TH/Compose", "usr/share/X11/locale/th_TH/XI18N_OBJS", "usr/share/X11/locale/th_TH/XLC_LOCALE", "usr/share/X11/locale/th_TH.UTF-8/Compose", "usr/share/X11/locale/th_TH.UTF-8/XI18N_OBJS", "usr/share/X11/locale/th_TH.UTF-8/XLC_LOCALE", "usr/share/X11/locale/tscii-0/Compose", "usr/share/X11/locale/tscii-0/XI18N_OBJS", "usr/share/X11/locale/tscii-0/XLC_LOCALE", "usr/share/X11/locale/vi_VN.tcvn/Compose", "usr/share/X11/locale/vi_VN.tcvn/XI18N_OBJS", "usr/share/X11/locale/vi_VN.tcvn/XLC_LOCALE", "usr/share/X11/locale/vi_VN.viscii/Compose", "usr/share/X11/locale/vi_VN.viscii/XI18N_OBJS", "usr/share/X11/locale/vi_VN.viscii/XLC_LOCALE", "usr/share/X11/locale/zh_CN/Compose", "usr/share/X11/locale/zh_CN/XI18N_OBJS", "usr/share/X11/locale/zh_CN/XLC_LOCALE", "usr/share/X11/locale/zh_CN.UTF-8/Compose", "usr/share/X11/locale/zh_CN.UTF-8/XI18N_OBJS", "usr/share/X11/locale/zh_CN.UTF-8/XLC_LOCALE", "usr/share/X11/locale/zh_CN.gb18030/Compose", "usr/share/X11/locale/zh_CN.gb18030/XI18N_OBJS", "usr/share/X11/locale/zh_CN.gb18030/XLC_LOCALE", "usr/share/X11/locale/zh_CN.gbk/Compose", "usr/share/X11/locale/zh_CN.gbk/XI18N_OBJS", "usr/share/X11/locale/zh_CN.gbk/XLC_LOCALE", "usr/share/X11/locale/zh_HK.UTF-8/Compose", "usr/share/X11/locale/zh_HK.UTF-8/XI18N_OBJS", "usr/share/X11/locale/zh_HK.UTF-8/XLC_LOCALE", "usr/share/X11/locale/zh_HK.big5/Compose", "usr/share/X11/locale/zh_HK.big5/XI18N_OBJS", "usr/share/X11/locale/zh_HK.big5/XLC_LOCALE", "usr/share/X11/locale/zh_HK.big5hkscs/Compose", "usr/share/X11/locale/zh_HK.big5hkscs/XI18N_OBJS", "usr/share/X11/locale/zh_HK.big5hkscs/XLC_LOCALE", "usr/share/X11/locale/zh_TW/Compose", "usr/share/X11/locale/zh_TW/XI18N_OBJS", "usr/share/X11/locale/zh_TW/XLC_LOCALE", "usr/share/X11/locale/zh_TW.UTF-8/Compose", "usr/share/X11/locale/zh_TW.UTF-8/XI18N_OBJS", "usr/share/X11/locale/zh_TW.UTF-8/XLC_LOCALE", "usr/share/X11/locale/zh_TW.big5/Compose", "usr/share/X11/locale/zh_TW.big5/XI18N_OBJS", "usr/share/X11/locale/zh_TW.big5/XLC_LOCALE" ], "AnalyzedBy": "apk" }, { "ID": "libxau@1.0.12-r0", "Name": "libxau", "Identifier": { "PURL": "pkg:apk/alpine/libxau@1.0.12-r0?arch=x86_64\u0026distro=3.24.3", "UID": "6424631a8696d59" }, "Version": "1.0.12-r0", "Arch": "x86_64", "SrcName": "libxau", "SrcVersion": "1.0.12-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:4fb62db473242458df6bcd46ff3ad08d2aa88038", "InstalledFiles": [ "usr/lib/libXau.so.6", "usr/lib/libXau.so.6.0.0" ], "AnalyzedBy": "apk" }, { "ID": "libxcb@1.17.0-r2", "Name": "libxcb", "Identifier": { "PURL": "pkg:apk/alpine/libxcb@1.17.0-r2?arch=x86_64\u0026distro=3.24.3", "UID": "a3fdf929ead6f59c" }, "Version": "1.17.0-r2", "Arch": "x86_64", "SrcName": "libxcb", "SrcVersion": "1.17.0-r2", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libxau@1.0.12-r0", "libxdmcp@1.1.5-r1", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:8caa749e0d2fc4788e0706930262ac81d9cd0e10", "InstalledFiles": [ "usr/lib/libxcb-composite.so.0", "usr/lib/libxcb-composite.so.0.0.0", "usr/lib/libxcb-damage.so.0", "usr/lib/libxcb-damage.so.0.0.0", "usr/lib/libxcb-dbe.so.0", "usr/lib/libxcb-dbe.so.0.0.0", "usr/lib/libxcb-dpms.so.0", "usr/lib/libxcb-dpms.so.0.0.0", "usr/lib/libxcb-dri2.so.0", "usr/lib/libxcb-dri2.so.0.0.0", "usr/lib/libxcb-dri3.so.0", "usr/lib/libxcb-dri3.so.0.1.0", "usr/lib/libxcb-glx.so.0", "usr/lib/libxcb-glx.so.0.0.0", "usr/lib/libxcb-present.so.0", "usr/lib/libxcb-present.so.0.0.0", "usr/lib/libxcb-randr.so.0", "usr/lib/libxcb-randr.so.0.1.0", "usr/lib/libxcb-record.so.0", "usr/lib/libxcb-record.so.0.0.0", "usr/lib/libxcb-render.so.0", "usr/lib/libxcb-render.so.0.0.0", "usr/lib/libxcb-res.so.0", "usr/lib/libxcb-res.so.0.0.0", "usr/lib/libxcb-screensaver.so.0", "usr/lib/libxcb-screensaver.so.0.0.0", "usr/lib/libxcb-shape.so.0", "usr/lib/libxcb-shape.so.0.0.0", "usr/lib/libxcb-shm.so.0", "usr/lib/libxcb-shm.so.0.0.0", "usr/lib/libxcb-sync.so.1", "usr/lib/libxcb-sync.so.1.0.0", "usr/lib/libxcb-xf86dri.so.0", "usr/lib/libxcb-xf86dri.so.0.0.0", "usr/lib/libxcb-xfixes.so.0", "usr/lib/libxcb-xfixes.so.0.0.0", "usr/lib/libxcb-xinerama.so.0", "usr/lib/libxcb-xinerama.so.0.0.0", "usr/lib/libxcb-xinput.so.0", "usr/lib/libxcb-xinput.so.0.1.0", "usr/lib/libxcb-xkb.so.1", "usr/lib/libxcb-xkb.so.1.0.0", "usr/lib/libxcb-xtest.so.0", "usr/lib/libxcb-xtest.so.0.0.0", "usr/lib/libxcb-xv.so.0", "usr/lib/libxcb-xv.so.0.0.0", "usr/lib/libxcb-xvmc.so.0", "usr/lib/libxcb-xvmc.so.0.0.0", "usr/lib/libxcb.so.1", "usr/lib/libxcb.so.1.1.0" ], "AnalyzedBy": "apk" }, { "ID": "libxdmcp@1.1.5-r1", "Name": "libxdmcp", "Identifier": { "PURL": "pkg:apk/alpine/libxdmcp@1.1.5-r1?arch=x86_64\u0026distro=3.24.3", "UID": "7e43a94432f13aed" }, "Version": "1.1.5-r1", "Arch": "x86_64", "SrcName": "libxdmcp", "SrcVersion": "1.1.5-r1", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libbsd@0.12.2-r0", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:204e413c0222b6ae7a94adc53b9057d3536fd200", "InstalledFiles": [ "usr/lib/libXdmcp.so.6", "usr/lib/libXdmcp.so.6.0.0" ], "AnalyzedBy": "apk" }, { "ID": "libxext@1.3.7-r0", "Name": "libxext", "Identifier": { "PURL": "pkg:apk/alpine/libxext@1.3.7-r0?arch=x86_64\u0026distro=3.24.3", "UID": "da6448eac0c41c98" }, "Version": "1.3.7-r0", "Arch": "x86_64", "SrcName": "libxext", "SrcVersion": "1.3.7-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libx11@1.8.14-r0", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:6f631e2b33b664a546b3a1a7dd65805b8776bef0", "InstalledFiles": [ "usr/lib/libXext.so.6", "usr/lib/libXext.so.6.4.0" ], "AnalyzedBy": "apk" }, { "ID": "libxfixes@6.0.2-r0", "Name": "libxfixes", "Identifier": { "PURL": "pkg:apk/alpine/libxfixes@6.0.2-r0?arch=x86_64\u0026distro=3.24.3", "UID": "1061c77c5092251f" }, "Version": "6.0.2-r0", "Arch": "x86_64", "SrcName": "libxfixes", "SrcVersion": "6.0.2-r0", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libx11@1.8.14-r0", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:6279b3beb666c71ed61ea6464988b930e29ea414", "InstalledFiles": [ "usr/lib/libXfixes.so.3", "usr/lib/libXfixes.so.3.1.0" ], "AnalyzedBy": "apk" }, { "ID": "libxml2@2.13.9-r2", "Name": "libxml2", "Identifier": { "PURL": "pkg:apk/alpine/libxml2@2.13.9-r2?arch=x86_64\u0026distro=3.24.3", "UID": "be5453936d3ca669" }, "Version": "2.13.9-r2", "Arch": "x86_64", "SrcName": "libxml2", "SrcVersion": "2.13.9-r2", "Licenses": [ "MIT" ], "Maintainer": "Carlo Landmeter \u003cclandmeter@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3", "xz-libs@5.8.4-r0", "zlib@1.3.2-r1" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:c2c2cb44647ddc8c82ae78c8aca9bd4ad5a736da", "InstalledFiles": [ "usr/lib/libxml2.so.2", "usr/lib/libxml2.so.2.13.9" ], "AnalyzedBy": "apk" }, { "ID": "libzmq@4.3.5-r2", "Name": "libzmq", "Identifier": { "PURL": "pkg:apk/alpine/libzmq@4.3.5-r2?arch=x86_64\u0026distro=3.24.3", "UID": "560eb06773f3d02c" }, "Version": "4.3.5-r2", "Arch": "x86_64", "SrcName": "zeromq", "SrcVersion": "4.3.5-r2", "Licenses": [ "MPL-2.0" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "libsodium@1.0.22-r0", "libstdc++@15.2.0-r5", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:08bdcea95ab9fea742e3ac1f749e6a99227f9db5", "InstalledFiles": [ "usr/lib/libzmq.so.5", "usr/lib/libzmq.so.5.2.5" ], "AnalyzedBy": "apk" }, { "ID": "lilv-libs@0.24.26-r1", "Name": "lilv-libs", "Identifier": { "PURL": "pkg:apk/alpine/lilv-libs@0.24.26-r1?arch=x86_64\u0026distro=3.24.3", "UID": "f2925202316ab1d4" }, "Version": "0.24.26-r1", "Arch": "x86_64", "SrcName": "lilv", "SrcVersion": "0.24.26-r1", "Licenses": [ "ISC" ], "Maintainer": "David Demelier \u003cmarkand@malikania.fr\u003e", "DependsOn": [ "musl@1.2.6-r3", "serd-libs@0.32.8-r0", "sord-libs@0.16.22-r0", "sratom@0.6.20-r0", "zix-libs@0.8.0-r0" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:97b671092d319beeff9d3601b1c5ba18549033e3", "InstalledFiles": [ "usr/lib/liblilv-0.so.0", "usr/lib/liblilv-0.so.0.24.26" ], "AnalyzedBy": "apk" }, { "ID": "mbedtls3@3.6.7-r0", "Name": "mbedtls3", "Identifier": { "PURL": "pkg:apk/alpine/mbedtls3@3.6.7-r0?arch=x86_64\u0026distro=3.24.3", "UID": "6fca4f09a0c4217b" }, "Version": "3.6.7-r0", "Arch": "x86_64", "SrcName": "mbedtls3", "SrcVersion": "3.6.7-r0", "Licenses": [ "Apache-2.0", "GPL-2.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:ca420c9878bb508d883618a68f26e3d0e62d288a", "InstalledFiles": [ "usr/lib/libmbedcrypto.so.16", "usr/lib/libmbedcrypto.so.3.6.7", "usr/lib/libmbedtls.so.21", "usr/lib/libmbedtls.so.3.6.7", "usr/lib/libmbedx509.so.3.6.7", "usr/lib/libmbedx509.so.7" ], "AnalyzedBy": "apk" }, { "ID": "mpg123-libs@1.33.5-r0", "Name": "mpg123-libs", "Identifier": { "PURL": "pkg:apk/alpine/mpg123-libs@1.33.5-r0?arch=x86_64\u0026distro=3.24.3", "UID": "b9756b34db7cead2" }, "Version": "1.33.5-r0", "Arch": "x86_64", "SrcName": "mpg123", "SrcVersion": "1.33.5-r0", "Licenses": [ "LGPL-2.1-only" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:617b11b4b5c608af7255677f9099a4b7acd74290", "InstalledFiles": [ "usr/lib/libmpg123.so.0", "usr/lib/libmpg123.so.0.49.4", "usr/lib/libout123.so.0", "usr/lib/libout123.so.0.5.2", "usr/lib/libsyn123.so.0", "usr/lib/libsyn123.so.0.2.3" ], "AnalyzedBy": "apk" }, { "ID": "musl@1.2.6-r3", "Name": "musl", "Identifier": { "PURL": "pkg:apk/alpine/musl@1.2.6-r3?arch=x86_64\u0026distro=3.24.3", "UID": "43d4b05c5472a58c" }, "Version": "1.2.6-r3", "Arch": "x86_64", "SrcName": "musl", "SrcVersion": "1.2.6-r3", "Licenses": [ "MIT" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "Layer": { "DiffID": "sha256:75c137aedfb2760f88629236cb7b797630aed0c3d91d626d1d1bb694878fc2ba" }, "Digest": "sha1:770e8304d958dced98d76997df9e8fa1db5ca32f", "InstalledFiles": [ "lib/ld-musl-x86_64.so.1", "lib/libc.musl-x86_64.so.1" ], "AnalyzedBy": "apk" }, { "ID": "musl-utils@1.2.6-r3", "Name": "musl-utils", "Identifier": { "PURL": "pkg:apk/alpine/musl-utils@1.2.6-r3?arch=x86_64\u0026distro=3.24.3", "UID": "1bd73db44d355699" }, "Version": "1.2.6-r3", "Arch": "x86_64", "SrcName": "musl", "SrcVersion": "1.2.6-r3", "Licenses": [ "MIT", "BSD-2-Clause", "GPL-2.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3", "scanelf@1.3.9-r1" ], "Layer": { "DiffID": "sha256:75c137aedfb2760f88629236cb7b797630aed0c3d91d626d1d1bb694878fc2ba" }, "Digest": "sha1:51372daafb234646960eca4d7a13f706324f24d6", "InstalledFiles": [ "sbin/ldconfig", "usr/bin/getconf", "usr/bin/getent", "usr/bin/iconv", "usr/bin/ldd" ], "AnalyzedBy": "apk" }, { "ID": "numactl@2.0.19-r0", "Name": "numactl", "Identifier": { "PURL": "pkg:apk/alpine/numactl@2.0.19-r0?arch=x86_64\u0026distro=3.24.3", "UID": "4e36f1e9d34c1386" }, "Version": "2.0.19-r0", "Arch": "x86_64", "SrcName": "numactl", "SrcVersion": "2.0.19-r0", "Licenses": [ "LGPL-2.1-only" ], "Maintainer": "Daniel Sabogal \u003cdsabogalcc@gmail.com\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:3dc00e56b79f43926b5f12b53cc3eb9ed0906786", "InstalledFiles": [ "usr/lib/libnuma.so.1", "usr/lib/libnuma.so.1.0.0" ], "AnalyzedBy": "apk" }, { "ID": "opus@1.6.1-r0", "Name": "opus", "Identifier": { "PURL": "pkg:apk/alpine/opus@1.6.1-r0?arch=x86_64\u0026distro=3.24.3", "UID": "84592037d94ac10" }, "Version": "1.6.1-r0", "Arch": "x86_64", "SrcName": "opus", "SrcVersion": "1.6.1-r0", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Francesco Colista \u003cfcolista@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:0c71c13b5cf27862535ddb8fa261f9623c7a88f2", "InstalledFiles": [ "usr/lib/libopus.so.0", "usr/lib/libopus.so.0.11.1" ], "AnalyzedBy": "apk" }, { "ID": "orc@0.4.41-r0", "Name": "orc", "Identifier": { "PURL": "pkg:apk/alpine/orc@0.4.41-r0?arch=x86_64\u0026distro=3.24.3", "UID": "abcc7ba464711682" }, "Version": "0.4.41-r0", "Arch": "x86_64", "SrcName": "orc", "SrcVersion": "0.4.41-r0", "Licenses": [ "BSD-2-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:48eed092ee1eef4d0d88a608fcadb3241e6b796d", "InstalledFiles": [ "usr/lib/liborc-0.4.so.0", "usr/lib/liborc-0.4.so.0.41.0" ], "AnalyzedBy": "apk" }, { "ID": "pcre2@10.49-r0", "Name": "pcre2", "Identifier": { "PURL": "pkg:apk/alpine/pcre2@10.49-r0?arch=x86_64\u0026distro=3.24.3", "UID": "589dcb8bdf2a842" }, "Version": "10.49-r0", "Arch": "x86_64", "SrcName": "pcre2", "SrcVersion": "10.49-r0", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Jakub Jirutka \u003cjakub@jirutka.cz\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:ec992b00baf71bba1dd9e2179613f9233af35c8d", "InstalledFiles": [ "usr/lib/libpcre2-8.so.0", "usr/lib/libpcre2-8.so.0.16.1", "usr/lib/libpcre2-posix.so.3", "usr/lib/libpcre2-posix.so.3.0.9" ], "AnalyzedBy": "apk" }, { "ID": "rav1e-libs@0.8.1-r0", "Name": "rav1e-libs", "Identifier": { "PURL": "pkg:apk/alpine/rav1e-libs@0.8.1-r0?arch=x86_64\u0026distro=3.24.3", "UID": "3b930e4ed4c9036b" }, "Version": "0.8.1-r0", "Arch": "x86_64", "SrcName": "rav1e", "SrcVersion": "0.8.1-r0", "Licenses": [ "BSD-2-Clause", "custom" ], "Maintainer": "Oleg Titov \u003coleg.titov@gmail.com\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:e221b7a5bef3e3962d99bc8ec8ef1d1b3bd0bb9f", "InstalledFiles": [ "usr/lib/librav1e.so.0.8", "usr/lib/librav1e.so.0.8.1" ], "AnalyzedBy": "apk" }, { "ID": "scanelf@1.3.9-r1", "Name": "scanelf", "Identifier": { "PURL": "pkg:apk/alpine/scanelf@1.3.9-r1?arch=x86_64\u0026distro=3.24.3", "UID": "f832b0b0d6c76e18" }, "Version": "1.3.9-r1", "Arch": "x86_64", "SrcName": "pax-utils", "SrcVersion": "1.3.9-r1", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:75c137aedfb2760f88629236cb7b797630aed0c3d91d626d1d1bb694878fc2ba" }, "Digest": "sha1:013f903d0ba219673aebbdd04f74bb5ed82b01f0", "InstalledFiles": [ "usr/bin/scanelf" ], "AnalyzedBy": "apk" }, { "ID": "serd-libs@0.32.8-r0", "Name": "serd-libs", "Identifier": { "PURL": "pkg:apk/alpine/serd-libs@0.32.8-r0?arch=x86_64\u0026distro=3.24.3", "UID": "2bf579cca7ffd63e" }, "Version": "0.32.8-r0", "Arch": "x86_64", "SrcName": "serd", "SrcVersion": "0.32.8-r0", "Licenses": [ "ISC" ], "Maintainer": "David Demelier \u003cmarkand@malikania.fr\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:2abcf86da94e7b20d3808ed33192a7ba58702b13", "InstalledFiles": [ "usr/lib/libserd-0.so.0", "usr/lib/libserd-0.so.0.32.8" ], "AnalyzedBy": "apk" }, { "ID": "shaderc@2026.1-r0", "Name": "shaderc", "Identifier": { "PURL": "pkg:apk/alpine/shaderc@2026.1-r0?arch=x86_64\u0026distro=3.24.3", "UID": "3ba519355ad9db93" }, "Version": "2026.1-r0", "Arch": "x86_64", "SrcName": "shaderc", "SrcVersion": "2026.1-r0", "Licenses": [ "Apache-2.0" ], "Maintainer": "Simon Zeni \u003csimon@bl4ckb0ne.ca\u003e", "DependsOn": [ "glslang-libs@1.4.341.0-r0", "libgcc@15.2.0-r5", "libstdc++@15.2.0-r5", "musl@1.2.6-r3", "spirv-tools@1.4.341.0-r0" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:ee275e76ed3af3ad335028bc6d76101bd2061fbb", "InstalledFiles": [ "usr/bin/glslc", "usr/lib/libshaderc_shared.so.1" ], "AnalyzedBy": "apk" }, { "ID": "sord-libs@0.16.22-r0", "Name": "sord-libs", "Identifier": { "PURL": "pkg:apk/alpine/sord-libs@0.16.22-r0?arch=x86_64\u0026distro=3.24.3", "UID": "338eba91c7ac50ed" }, "Version": "0.16.22-r0", "Arch": "x86_64", "SrcName": "sord", "SrcVersion": "0.16.22-r0", "Licenses": [ "ISC" ], "Maintainer": "David Demelier \u003cmarkand@malikania.fr\u003e", "DependsOn": [ "musl@1.2.6-r3", "serd-libs@0.32.8-r0", "zix-libs@0.8.0-r0" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:cc70f68111af109fade023b93fcf1a298cfe2f22", "InstalledFiles": [ "usr/lib/libsord-0.so.0", "usr/lib/libsord-0.so.0.16.22" ], "AnalyzedBy": "apk" }, { "ID": "soxr@0.1.3-r7", "Name": "soxr", "Identifier": { "PURL": "pkg:apk/alpine/soxr@0.1.3-r7?arch=x86_64\u0026distro=3.24.3", "UID": "286a59b4729b8188" }, "Version": "0.1.3-r7", "Arch": "x86_64", "SrcName": "soxr", "SrcVersion": "0.1.3-r7", "Licenses": [ "LGPL-2.1-or-later" ], "Maintainer": "Francesco Colista \u003cfcolista@alpinelinux.org\u003e", "DependsOn": [ "libgomp@15.2.0-r5", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:6c6fa7cb509cb01cee50e4506a3473d623121d7f", "InstalledFiles": [ "usr/lib/libsoxr-lsr.so.0", "usr/lib/libsoxr-lsr.so.0.1.9", "usr/lib/libsoxr.so.0", "usr/lib/libsoxr.so.0.1.2" ], "AnalyzedBy": "apk" }, { "ID": "speexdsp@1.2.1-r2", "Name": "speexdsp", "Identifier": { "PURL": "pkg:apk/alpine/speexdsp@1.2.1-r2?arch=x86_64\u0026distro=3.24.3", "UID": "dcd5b370f30eb0d2" }, "Version": "1.2.1-r2", "Arch": "x86_64", "SrcName": "speexdsp", "SrcVersion": "1.2.1-r2", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:f2fcc262f45daee3b7fa55ca2a32ed69367fc92e", "InstalledFiles": [ "usr/lib/libspeexdsp.so.1", "usr/lib/libspeexdsp.so.1.5.2" ], "AnalyzedBy": "apk" }, { "ID": "spirv-tools@1.4.341.0-r0", "Name": "spirv-tools", "Identifier": { "PURL": "pkg:apk/alpine/spirv-tools@1.4.341.0-r0?arch=x86_64\u0026distro=3.24.3", "UID": "fa43c450705ae663" }, "Version": "1.4.341.0-r0", "Arch": "x86_64", "SrcName": "spirv-tools", "SrcVersion": "1.4.341.0-r0", "Licenses": [ "Apache-2.0" ], "Maintainer": "Simon Zeni \u003csimon@bl4ckb0ne.ca\u003e", "DependsOn": [ "libstdc++@15.2.0-r5", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:6a1dfa56f156ee15b6b34e4925e8804e33fa2c96", "InstalledFiles": [ "usr/bin/spirv-as", "usr/bin/spirv-cfg", "usr/bin/spirv-diff", "usr/bin/spirv-dis", "usr/bin/spirv-lesspipe.sh", "usr/bin/spirv-link", "usr/bin/spirv-lint", "usr/bin/spirv-objdump", "usr/bin/spirv-opt", "usr/bin/spirv-reduce", "usr/bin/spirv-val", "usr/lib/libSPIRV-Tools-diff.so", "usr/lib/libSPIRV-Tools-link.so", "usr/lib/libSPIRV-Tools-lint.so", "usr/lib/libSPIRV-Tools-opt.so", "usr/lib/libSPIRV-Tools-reduce.so", "usr/lib/libSPIRV-Tools-shared.so", "usr/lib/libSPIRV-Tools.so" ], "AnalyzedBy": "apk" }, { "ID": "sratom@0.6.20-r0", "Name": "sratom", "Identifier": { "PURL": "pkg:apk/alpine/sratom@0.6.20-r0?arch=x86_64\u0026distro=3.24.3", "UID": "18c1d5d5ad022895" }, "Version": "0.6.20-r0", "Arch": "x86_64", "SrcName": "sratom", "SrcVersion": "0.6.20-r0", "Licenses": [ "ISC" ], "Maintainer": "David Demelier \u003cmarkand@malikania.fr\u003e", "DependsOn": [ "musl@1.2.6-r3", "serd-libs@0.32.8-r0", "sord-libs@0.16.22-r0" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:fd1746545200e9f37b72cdb6e0e582f074763538", "InstalledFiles": [ "usr/lib/libsratom-0.so.0", "usr/lib/libsratom-0.so.0.6.20" ], "AnalyzedBy": "apk" }, { "ID": "ssl_client@1.37.0-r31", "Name": "ssl_client", "Identifier": { "PURL": "pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64\u0026distro=3.24.3", "UID": "3e7a1baa8bc3bfe0" }, "Version": "1.37.0-r31", "Arch": "x86_64", "SrcName": "busybox", "SrcVersion": "1.37.0-r31", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Sören Tempel \u003csoeren+alpine@soeren-tempel.net\u003e", "DependsOn": [ "libcrypto3@3.5.9-r0", "libssl3@3.5.9-r0", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:75c137aedfb2760f88629236cb7b797630aed0c3d91d626d1d1bb694878fc2ba" }, "Digest": "sha1:c220f4a5125a313af733e98def94132bb1e9d40d", "InstalledFiles": [ "usr/bin/ssl_client" ], "AnalyzedBy": "apk" }, { "ID": "tdb-libs@1.4.15-r1", "Name": "tdb-libs", "Identifier": { "PURL": "pkg:apk/alpine/tdb-libs@1.4.15-r1?arch=x86_64\u0026distro=3.24.3", "UID": "8af876fb3ce8fd5" }, "Version": "1.4.15-r1", "Arch": "x86_64", "SrcName": "tdb", "SrcVersion": "1.4.15-r1", "Licenses": [ "LGPL-3.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:ab79bec659f17a395063cfffb5e3bde8f5043a18", "InstalledFiles": [ "usr/lib/libtdb.so.1", "usr/lib/libtdb.so.1.4.15" ], "AnalyzedBy": "apk" }, { "ID": "tini@0.19.0-r3", "Name": "tini", "Identifier": { "PURL": "pkg:apk/alpine/tini@0.19.0-r3?arch=x86_64\u0026distro=3.24.3", "UID": "2a46c9c7f70aaac1" }, "Version": "0.19.0-r3", "Arch": "x86_64", "SrcName": "tini", "SrcVersion": "0.19.0-r3", "Licenses": [ "MIT" ], "Maintainer": "Danilo Bürger \u003cdanilo@feastr.de\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:4f4b8d99a5423eec5753f7cdd0a94d291bc8b782", "InstalledFiles": [ "sbin/tini" ], "AnalyzedBy": "apk" }, { "ID": "tzdata@2026e-r0", "Name": "tzdata", "Identifier": { "PURL": "pkg:apk/alpine/tzdata@2026e-r0?arch=x86_64\u0026distro=3.24.3", "UID": "915df5c2bcf1aaa1" }, "Version": "2026e-r0", "Arch": "x86_64", "SrcName": "tzdata", "SrcVersion": "2026e-r0", "Licenses": [ "Public-Domain" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:f0e583fbc59bdeb44ff11df175529ae485353465", "InstalledFiles": [ "usr/share/zoneinfo/CET", "usr/share/zoneinfo/CST6CDT", "usr/share/zoneinfo/Cuba", "usr/share/zoneinfo/EET", "usr/share/zoneinfo/EST", "usr/share/zoneinfo/EST5EDT", "usr/share/zoneinfo/Egypt", "usr/share/zoneinfo/Eire", "usr/share/zoneinfo/Factory", "usr/share/zoneinfo/GB", "usr/share/zoneinfo/GB-Eire", "usr/share/zoneinfo/GMT", "usr/share/zoneinfo/GMT+0", "usr/share/zoneinfo/GMT-0", "usr/share/zoneinfo/GMT0", "usr/share/zoneinfo/Greenwich", "usr/share/zoneinfo/HST", "usr/share/zoneinfo/Hongkong", "usr/share/zoneinfo/Iceland", "usr/share/zoneinfo/Iran", "usr/share/zoneinfo/Israel", "usr/share/zoneinfo/Jamaica", "usr/share/zoneinfo/Japan", "usr/share/zoneinfo/Kwajalein", "usr/share/zoneinfo/Libya", "usr/share/zoneinfo/MET", "usr/share/zoneinfo/MST", "usr/share/zoneinfo/MST7MDT", "usr/share/zoneinfo/NZ", "usr/share/zoneinfo/NZ-CHAT", "usr/share/zoneinfo/Navajo", "usr/share/zoneinfo/PRC", "usr/share/zoneinfo/PST8PDT", "usr/share/zoneinfo/Poland", "usr/share/zoneinfo/Portugal", "usr/share/zoneinfo/ROC", "usr/share/zoneinfo/ROK", "usr/share/zoneinfo/Singapore", "usr/share/zoneinfo/Turkey", "usr/share/zoneinfo/UCT", "usr/share/zoneinfo/UTC", "usr/share/zoneinfo/Universal", "usr/share/zoneinfo/W-SU", "usr/share/zoneinfo/WET", "usr/share/zoneinfo/Zulu", "usr/share/zoneinfo/iso3166.tab", "usr/share/zoneinfo/leap-seconds.list", "usr/share/zoneinfo/posixrules", "usr/share/zoneinfo/zone.tab", "usr/share/zoneinfo/zone1970.tab", "usr/share/zoneinfo/Africa/Abidjan", "usr/share/zoneinfo/Africa/Accra", "usr/share/zoneinfo/Africa/Addis_Ababa", "usr/share/zoneinfo/Africa/Algiers", "usr/share/zoneinfo/Africa/Asmara", "usr/share/zoneinfo/Africa/Asmera", "usr/share/zoneinfo/Africa/Bamako", "usr/share/zoneinfo/Africa/Bangui", "usr/share/zoneinfo/Africa/Banjul", "usr/share/zoneinfo/Africa/Bissau", "usr/share/zoneinfo/Africa/Blantyre", "usr/share/zoneinfo/Africa/Brazzaville", "usr/share/zoneinfo/Africa/Bujumbura", "usr/share/zoneinfo/Africa/Cairo", "usr/share/zoneinfo/Africa/Casablanca", "usr/share/zoneinfo/Africa/Ceuta", "usr/share/zoneinfo/Africa/Conakry", "usr/share/zoneinfo/Africa/Dakar", "usr/share/zoneinfo/Africa/Dar_es_Salaam", "usr/share/zoneinfo/Africa/Djibouti", "usr/share/zoneinfo/Africa/Douala", "usr/share/zoneinfo/Africa/El_Aaiun", "usr/share/zoneinfo/Africa/Freetown", "usr/share/zoneinfo/Africa/Gaborone", "usr/share/zoneinfo/Africa/Harare", "usr/share/zoneinfo/Africa/Johannesburg", "usr/share/zoneinfo/Africa/Juba", "usr/share/zoneinfo/Africa/Kampala", "usr/share/zoneinfo/Africa/Khartoum", "usr/share/zoneinfo/Africa/Kigali", "usr/share/zoneinfo/Africa/Kinshasa", "usr/share/zoneinfo/Africa/Lagos", "usr/share/zoneinfo/Africa/Libreville", "usr/share/zoneinfo/Africa/Lome", "usr/share/zoneinfo/Africa/Luanda", "usr/share/zoneinfo/Africa/Lubumbashi", "usr/share/zoneinfo/Africa/Lusaka", "usr/share/zoneinfo/Africa/Malabo", "usr/share/zoneinfo/Africa/Maputo", "usr/share/zoneinfo/Africa/Maseru", "usr/share/zoneinfo/Africa/Mbabane", "usr/share/zoneinfo/Africa/Mogadishu", "usr/share/zoneinfo/Africa/Monrovia", "usr/share/zoneinfo/Africa/Nairobi", "usr/share/zoneinfo/Africa/Ndjamena", "usr/share/zoneinfo/Africa/Niamey", "usr/share/zoneinfo/Africa/Nouakchott", "usr/share/zoneinfo/Africa/Ouagadougou", "usr/share/zoneinfo/Africa/Porto-Novo", "usr/share/zoneinfo/Africa/Sao_Tome", "usr/share/zoneinfo/Africa/Timbuktu", "usr/share/zoneinfo/Africa/Tripoli", "usr/share/zoneinfo/Africa/Tunis", "usr/share/zoneinfo/Africa/Windhoek", "usr/share/zoneinfo/America/Adak", "usr/share/zoneinfo/America/Anchorage", "usr/share/zoneinfo/America/Anguilla", "usr/share/zoneinfo/America/Antigua", "usr/share/zoneinfo/America/Araguaina", "usr/share/zoneinfo/America/Aruba", "usr/share/zoneinfo/America/Asuncion", "usr/share/zoneinfo/America/Atikokan", "usr/share/zoneinfo/America/Atka", "usr/share/zoneinfo/America/Bahia", "usr/share/zoneinfo/America/Bahia_Banderas", "usr/share/zoneinfo/America/Barbados", "usr/share/zoneinfo/America/Belem", "usr/share/zoneinfo/America/Belize", "usr/share/zoneinfo/America/Blanc-Sablon", "usr/share/zoneinfo/America/Boa_Vista", "usr/share/zoneinfo/America/Bogota", "usr/share/zoneinfo/America/Boise", "usr/share/zoneinfo/America/Buenos_Aires", "usr/share/zoneinfo/America/Cambridge_Bay", "usr/share/zoneinfo/America/Campo_Grande", "usr/share/zoneinfo/America/Cancun", "usr/share/zoneinfo/America/Caracas", "usr/share/zoneinfo/America/Catamarca", "usr/share/zoneinfo/America/Cayenne", "usr/share/zoneinfo/America/Cayman", "usr/share/zoneinfo/America/Chicago", "usr/share/zoneinfo/America/Chihuahua", "usr/share/zoneinfo/America/Ciudad_Juarez", "usr/share/zoneinfo/America/Coral_Harbour", "usr/share/zoneinfo/America/Cordoba", "usr/share/zoneinfo/America/Costa_Rica", "usr/share/zoneinfo/America/Coyhaique", "usr/share/zoneinfo/America/Creston", "usr/share/zoneinfo/America/Cuiaba", "usr/share/zoneinfo/America/Curacao", "usr/share/zoneinfo/America/Danmarkshavn", "usr/share/zoneinfo/America/Dawson", "usr/share/zoneinfo/America/Dawson_Creek", "usr/share/zoneinfo/America/Denver", "usr/share/zoneinfo/America/Detroit", "usr/share/zoneinfo/America/Dominica", "usr/share/zoneinfo/America/Edmonton", "usr/share/zoneinfo/America/Eirunepe", "usr/share/zoneinfo/America/El_Salvador", "usr/share/zoneinfo/America/Ensenada", "usr/share/zoneinfo/America/Fort_Nelson", "usr/share/zoneinfo/America/Fort_Wayne", "usr/share/zoneinfo/America/Fortaleza", "usr/share/zoneinfo/America/Glace_Bay", "usr/share/zoneinfo/America/Godthab", "usr/share/zoneinfo/America/Goose_Bay", "usr/share/zoneinfo/America/Grand_Turk", "usr/share/zoneinfo/America/Grenada", "usr/share/zoneinfo/America/Guadeloupe", "usr/share/zoneinfo/America/Guatemala", "usr/share/zoneinfo/America/Guayaquil", "usr/share/zoneinfo/America/Guyana", "usr/share/zoneinfo/America/Halifax", "usr/share/zoneinfo/America/Havana", "usr/share/zoneinfo/America/Hermosillo", "usr/share/zoneinfo/America/Indianapolis", "usr/share/zoneinfo/America/Inuvik", "usr/share/zoneinfo/America/Iqaluit", "usr/share/zoneinfo/America/Jamaica", "usr/share/zoneinfo/America/Jujuy", "usr/share/zoneinfo/America/Juneau", "usr/share/zoneinfo/America/Knox_IN", "usr/share/zoneinfo/America/Kralendijk", "usr/share/zoneinfo/America/La_Paz", "usr/share/zoneinfo/America/Lima", "usr/share/zoneinfo/America/Los_Angeles", "usr/share/zoneinfo/America/Louisville", "usr/share/zoneinfo/America/Lower_Princes", "usr/share/zoneinfo/America/Maceio", "usr/share/zoneinfo/America/Managua", "usr/share/zoneinfo/America/Manaus", "usr/share/zoneinfo/America/Marigot", "usr/share/zoneinfo/America/Martinique", "usr/share/zoneinfo/America/Matamoros", "usr/share/zoneinfo/America/Mazatlan", "usr/share/zoneinfo/America/Mendoza", "usr/share/zoneinfo/America/Menominee", "usr/share/zoneinfo/America/Merida", "usr/share/zoneinfo/America/Metlakatla", "usr/share/zoneinfo/America/Mexico_City", "usr/share/zoneinfo/America/Miquelon", "usr/share/zoneinfo/America/Moncton", "usr/share/zoneinfo/America/Monterrey", "usr/share/zoneinfo/America/Montevideo", "usr/share/zoneinfo/America/Montreal", "usr/share/zoneinfo/America/Montserrat", "usr/share/zoneinfo/America/Nassau", "usr/share/zoneinfo/America/New_York", "usr/share/zoneinfo/America/Nipigon", "usr/share/zoneinfo/America/Nome", "usr/share/zoneinfo/America/Noronha", "usr/share/zoneinfo/America/Nuuk", "usr/share/zoneinfo/America/Ojinaga", "usr/share/zoneinfo/America/Panama", "usr/share/zoneinfo/America/Pangnirtung", "usr/share/zoneinfo/America/Paramaribo", "usr/share/zoneinfo/America/Phoenix", "usr/share/zoneinfo/America/Port-au-Prince", "usr/share/zoneinfo/America/Port_of_Spain", "usr/share/zoneinfo/America/Porto_Acre", "usr/share/zoneinfo/America/Porto_Velho", "usr/share/zoneinfo/America/Puerto_Rico", "usr/share/zoneinfo/America/Punta_Arenas", "usr/share/zoneinfo/America/Rainy_River", "usr/share/zoneinfo/America/Rankin_Inlet", "usr/share/zoneinfo/America/Recife", "usr/share/zoneinfo/America/Regina", "usr/share/zoneinfo/America/Resolute", "usr/share/zoneinfo/America/Rio_Branco", "usr/share/zoneinfo/America/Rosario", "usr/share/zoneinfo/America/Santa_Isabel", "usr/share/zoneinfo/America/Santarem", "usr/share/zoneinfo/America/Santiago", "usr/share/zoneinfo/America/Santo_Domingo", "usr/share/zoneinfo/America/Sao_Paulo", "usr/share/zoneinfo/America/Scoresbysund", "usr/share/zoneinfo/America/Shiprock", "usr/share/zoneinfo/America/Sitka", "usr/share/zoneinfo/America/St_Barthelemy", "usr/share/zoneinfo/America/St_Johns", "usr/share/zoneinfo/America/St_Kitts", "usr/share/zoneinfo/America/St_Lucia", "usr/share/zoneinfo/America/St_Thomas", "usr/share/zoneinfo/America/St_Vincent", "usr/share/zoneinfo/America/Swift_Current", "usr/share/zoneinfo/America/Tegucigalpa", "usr/share/zoneinfo/America/Thule", "usr/share/zoneinfo/America/Thunder_Bay", "usr/share/zoneinfo/America/Tijuana", "usr/share/zoneinfo/America/Toronto", "usr/share/zoneinfo/America/Tortola", "usr/share/zoneinfo/America/Vancouver", "usr/share/zoneinfo/America/Virgin", "usr/share/zoneinfo/America/Whitehorse", "usr/share/zoneinfo/America/Winnipeg", "usr/share/zoneinfo/America/Yakutat", "usr/share/zoneinfo/America/Yellowknife", "usr/share/zoneinfo/America/Argentina/Buenos_Aires", "usr/share/zoneinfo/America/Argentina/Catamarca", "usr/share/zoneinfo/America/Argentina/ComodRivadavia", "usr/share/zoneinfo/America/Argentina/Cordoba", "usr/share/zoneinfo/America/Argentina/Jujuy", "usr/share/zoneinfo/America/Argentina/La_Rioja", "usr/share/zoneinfo/America/Argentina/Mendoza", "usr/share/zoneinfo/America/Argentina/Rio_Gallegos", "usr/share/zoneinfo/America/Argentina/Salta", "usr/share/zoneinfo/America/Argentina/San_Juan", "usr/share/zoneinfo/America/Argentina/San_Luis", "usr/share/zoneinfo/America/Argentina/Tucuman", "usr/share/zoneinfo/America/Argentina/Ushuaia", "usr/share/zoneinfo/America/Indiana/Indianapolis", "usr/share/zoneinfo/America/Indiana/Knox", "usr/share/zoneinfo/America/Indiana/Marengo", "usr/share/zoneinfo/America/Indiana/Petersburg", "usr/share/zoneinfo/America/Indiana/Tell_City", "usr/share/zoneinfo/America/Indiana/Vevay", "usr/share/zoneinfo/America/Indiana/Vincennes", "usr/share/zoneinfo/America/Indiana/Winamac", "usr/share/zoneinfo/America/Kentucky/Louisville", "usr/share/zoneinfo/America/Kentucky/Monticello", "usr/share/zoneinfo/America/North_Dakota/Beulah", "usr/share/zoneinfo/America/North_Dakota/Center", "usr/share/zoneinfo/America/North_Dakota/New_Salem", "usr/share/zoneinfo/Antarctica/Casey", "usr/share/zoneinfo/Antarctica/Davis", "usr/share/zoneinfo/Antarctica/DumontDUrville", "usr/share/zoneinfo/Antarctica/Macquarie", "usr/share/zoneinfo/Antarctica/Mawson", "usr/share/zoneinfo/Antarctica/McMurdo", "usr/share/zoneinfo/Antarctica/Palmer", "usr/share/zoneinfo/Antarctica/Rothera", "usr/share/zoneinfo/Antarctica/South_Pole", "usr/share/zoneinfo/Antarctica/Syowa", "usr/share/zoneinfo/Antarctica/Troll", "usr/share/zoneinfo/Antarctica/Vostok", "usr/share/zoneinfo/Arctic/Longyearbyen", "usr/share/zoneinfo/Asia/Aden", "usr/share/zoneinfo/Asia/Almaty", "usr/share/zoneinfo/Asia/Amman", "usr/share/zoneinfo/Asia/Anadyr", "usr/share/zoneinfo/Asia/Aqtau", "usr/share/zoneinfo/Asia/Aqtobe", "usr/share/zoneinfo/Asia/Ashgabat", "usr/share/zoneinfo/Asia/Ashkhabad", "usr/share/zoneinfo/Asia/Atyrau", "usr/share/zoneinfo/Asia/Baghdad", "usr/share/zoneinfo/Asia/Bahrain", "usr/share/zoneinfo/Asia/Baku", "usr/share/zoneinfo/Asia/Bangkok", "usr/share/zoneinfo/Asia/Barnaul", "usr/share/zoneinfo/Asia/Beirut", "usr/share/zoneinfo/Asia/Bishkek", "usr/share/zoneinfo/Asia/Brunei", "usr/share/zoneinfo/Asia/Calcutta", "usr/share/zoneinfo/Asia/Chita", "usr/share/zoneinfo/Asia/Choibalsan", "usr/share/zoneinfo/Asia/Chongqing", "usr/share/zoneinfo/Asia/Chungking", "usr/share/zoneinfo/Asia/Colombo", "usr/share/zoneinfo/Asia/Dacca", "usr/share/zoneinfo/Asia/Damascus", "usr/share/zoneinfo/Asia/Dhaka", "usr/share/zoneinfo/Asia/Dili", "usr/share/zoneinfo/Asia/Dubai", "usr/share/zoneinfo/Asia/Dushanbe", "usr/share/zoneinfo/Asia/Famagusta", "usr/share/zoneinfo/Asia/Gaza", "usr/share/zoneinfo/Asia/Harbin", "usr/share/zoneinfo/Asia/Hebron", "usr/share/zoneinfo/Asia/Ho_Chi_Minh", "usr/share/zoneinfo/Asia/Hong_Kong", "usr/share/zoneinfo/Asia/Hovd", "usr/share/zoneinfo/Asia/Irkutsk", "usr/share/zoneinfo/Asia/Istanbul", "usr/share/zoneinfo/Asia/Jakarta", "usr/share/zoneinfo/Asia/Jayapura", "usr/share/zoneinfo/Asia/Jerusalem", "usr/share/zoneinfo/Asia/Kabul", "usr/share/zoneinfo/Asia/Kamchatka", "usr/share/zoneinfo/Asia/Karachi", "usr/share/zoneinfo/Asia/Kashgar", "usr/share/zoneinfo/Asia/Kathmandu", "usr/share/zoneinfo/Asia/Katmandu", "usr/share/zoneinfo/Asia/Khandyga", "usr/share/zoneinfo/Asia/Kolkata", "usr/share/zoneinfo/Asia/Krasnoyarsk", "usr/share/zoneinfo/Asia/Kuala_Lumpur", "usr/share/zoneinfo/Asia/Kuching", "usr/share/zoneinfo/Asia/Kuwait", "usr/share/zoneinfo/Asia/Macao", "usr/share/zoneinfo/Asia/Macau", "usr/share/zoneinfo/Asia/Magadan", "usr/share/zoneinfo/Asia/Makassar", "usr/share/zoneinfo/Asia/Manila", "usr/share/zoneinfo/Asia/Muscat", "usr/share/zoneinfo/Asia/Nicosia", "usr/share/zoneinfo/Asia/Novokuznetsk", "usr/share/zoneinfo/Asia/Novosibirsk", "usr/share/zoneinfo/Asia/Omsk", "usr/share/zoneinfo/Asia/Oral", "usr/share/zoneinfo/Asia/Phnom_Penh", "usr/share/zoneinfo/Asia/Pontianak", "usr/share/zoneinfo/Asia/Pyongyang", "usr/share/zoneinfo/Asia/Qatar", "usr/share/zoneinfo/Asia/Qostanay", "usr/share/zoneinfo/Asia/Qyzylorda", "usr/share/zoneinfo/Asia/Rangoon", "usr/share/zoneinfo/Asia/Riyadh", "usr/share/zoneinfo/Asia/Saigon", "usr/share/zoneinfo/Asia/Sakhalin", "usr/share/zoneinfo/Asia/Samarkand", "usr/share/zoneinfo/Asia/Seoul", "usr/share/zoneinfo/Asia/Shanghai", "usr/share/zoneinfo/Asia/Singapore", "usr/share/zoneinfo/Asia/Srednekolymsk", "usr/share/zoneinfo/Asia/Taipei", "usr/share/zoneinfo/Asia/Tashkent", "usr/share/zoneinfo/Asia/Tbilisi", "usr/share/zoneinfo/Asia/Tehran", "usr/share/zoneinfo/Asia/Tel_Aviv", "usr/share/zoneinfo/Asia/Thimbu", "usr/share/zoneinfo/Asia/Thimphu", "usr/share/zoneinfo/Asia/Tokyo", "usr/share/zoneinfo/Asia/Tomsk", "usr/share/zoneinfo/Asia/Ujung_Pandang", "usr/share/zoneinfo/Asia/Ulaanbaatar", "usr/share/zoneinfo/Asia/Ulan_Bator", "usr/share/zoneinfo/Asia/Urumqi", "usr/share/zoneinfo/Asia/Ust-Nera", "usr/share/zoneinfo/Asia/Vientiane", "usr/share/zoneinfo/Asia/Vladivostok", "usr/share/zoneinfo/Asia/Yakutsk", "usr/share/zoneinfo/Asia/Yangon", "usr/share/zoneinfo/Asia/Yekaterinburg", "usr/share/zoneinfo/Asia/Yerevan", "usr/share/zoneinfo/Atlantic/Azores", "usr/share/zoneinfo/Atlantic/Bermuda", "usr/share/zoneinfo/Atlantic/Canary", "usr/share/zoneinfo/Atlantic/Cape_Verde", "usr/share/zoneinfo/Atlantic/Faeroe", "usr/share/zoneinfo/Atlantic/Faroe", "usr/share/zoneinfo/Atlantic/Jan_Mayen", "usr/share/zoneinfo/Atlantic/Madeira", "usr/share/zoneinfo/Atlantic/Reykjavik", "usr/share/zoneinfo/Atlantic/South_Georgia", "usr/share/zoneinfo/Atlantic/St_Helena", "usr/share/zoneinfo/Atlantic/Stanley", "usr/share/zoneinfo/Australia/ACT", "usr/share/zoneinfo/Australia/Adelaide", "usr/share/zoneinfo/Australia/Brisbane", "usr/share/zoneinfo/Australia/Broken_Hill", "usr/share/zoneinfo/Australia/Canberra", "usr/share/zoneinfo/Australia/Currie", "usr/share/zoneinfo/Australia/Darwin", "usr/share/zoneinfo/Australia/Eucla", "usr/share/zoneinfo/Australia/Hobart", "usr/share/zoneinfo/Australia/LHI", "usr/share/zoneinfo/Australia/Lindeman", "usr/share/zoneinfo/Australia/Lord_Howe", "usr/share/zoneinfo/Australia/Melbourne", "usr/share/zoneinfo/Australia/NSW", "usr/share/zoneinfo/Australia/North", "usr/share/zoneinfo/Australia/Perth", "usr/share/zoneinfo/Australia/Queensland", "usr/share/zoneinfo/Australia/South", "usr/share/zoneinfo/Australia/Sydney", "usr/share/zoneinfo/Australia/Tasmania", "usr/share/zoneinfo/Australia/Victoria", "usr/share/zoneinfo/Australia/West", "usr/share/zoneinfo/Australia/Yancowinna", "usr/share/zoneinfo/Brazil/Acre", "usr/share/zoneinfo/Brazil/DeNoronha", "usr/share/zoneinfo/Brazil/East", "usr/share/zoneinfo/Brazil/West", "usr/share/zoneinfo/Canada/Atlantic", "usr/share/zoneinfo/Canada/Central", "usr/share/zoneinfo/Canada/Eastern", "usr/share/zoneinfo/Canada/Mountain", "usr/share/zoneinfo/Canada/Newfoundland", "usr/share/zoneinfo/Canada/Pacific", "usr/share/zoneinfo/Canada/Saskatchewan", "usr/share/zoneinfo/Canada/Yukon", "usr/share/zoneinfo/Chile/Continental", "usr/share/zoneinfo/Chile/EasterIsland", "usr/share/zoneinfo/Etc/GMT", "usr/share/zoneinfo/Etc/GMT+0", "usr/share/zoneinfo/Etc/GMT+1", "usr/share/zoneinfo/Etc/GMT+10", "usr/share/zoneinfo/Etc/GMT+11", "usr/share/zoneinfo/Etc/GMT+12", "usr/share/zoneinfo/Etc/GMT+2", "usr/share/zoneinfo/Etc/GMT+3", "usr/share/zoneinfo/Etc/GMT+4", "usr/share/zoneinfo/Etc/GMT+5", "usr/share/zoneinfo/Etc/GMT+6", "usr/share/zoneinfo/Etc/GMT+7", "usr/share/zoneinfo/Etc/GMT+8", "usr/share/zoneinfo/Etc/GMT+9", "usr/share/zoneinfo/Etc/GMT-0", "usr/share/zoneinfo/Etc/GMT-1", "usr/share/zoneinfo/Etc/GMT-10", "usr/share/zoneinfo/Etc/GMT-11", "usr/share/zoneinfo/Etc/GMT-12", "usr/share/zoneinfo/Etc/GMT-13", "usr/share/zoneinfo/Etc/GMT-14", "usr/share/zoneinfo/Etc/GMT-2", "usr/share/zoneinfo/Etc/GMT-3", "usr/share/zoneinfo/Etc/GMT-4", "usr/share/zoneinfo/Etc/GMT-5", "usr/share/zoneinfo/Etc/GMT-6", "usr/share/zoneinfo/Etc/GMT-7", "usr/share/zoneinfo/Etc/GMT-8", "usr/share/zoneinfo/Etc/GMT-9", "usr/share/zoneinfo/Etc/GMT0", "usr/share/zoneinfo/Etc/Greenwich", "usr/share/zoneinfo/Etc/UCT", "usr/share/zoneinfo/Etc/UTC", "usr/share/zoneinfo/Etc/Universal", "usr/share/zoneinfo/Etc/Zulu", "usr/share/zoneinfo/Europe/Amsterdam", "usr/share/zoneinfo/Europe/Andorra", "usr/share/zoneinfo/Europe/Astrakhan", "usr/share/zoneinfo/Europe/Athens", "usr/share/zoneinfo/Europe/Belfast", "usr/share/zoneinfo/Europe/Belgrade", "usr/share/zoneinfo/Europe/Berlin", "usr/share/zoneinfo/Europe/Bratislava", "usr/share/zoneinfo/Europe/Brussels", "usr/share/zoneinfo/Europe/Bucharest", "usr/share/zoneinfo/Europe/Budapest", "usr/share/zoneinfo/Europe/Busingen", "usr/share/zoneinfo/Europe/Chisinau", "usr/share/zoneinfo/Europe/Copenhagen", "usr/share/zoneinfo/Europe/Dublin", "usr/share/zoneinfo/Europe/Gibraltar", "usr/share/zoneinfo/Europe/Guernsey", "usr/share/zoneinfo/Europe/Helsinki", "usr/share/zoneinfo/Europe/Isle_of_Man", "usr/share/zoneinfo/Europe/Istanbul", "usr/share/zoneinfo/Europe/Jersey", "usr/share/zoneinfo/Europe/Kaliningrad", "usr/share/zoneinfo/Europe/Kiev", "usr/share/zoneinfo/Europe/Kirov", "usr/share/zoneinfo/Europe/Kyiv", "usr/share/zoneinfo/Europe/Lisbon", "usr/share/zoneinfo/Europe/Ljubljana", "usr/share/zoneinfo/Europe/London", "usr/share/zoneinfo/Europe/Luxembourg", "usr/share/zoneinfo/Europe/Madrid", "usr/share/zoneinfo/Europe/Malta", "usr/share/zoneinfo/Europe/Mariehamn", "usr/share/zoneinfo/Europe/Minsk", "usr/share/zoneinfo/Europe/Monaco", "usr/share/zoneinfo/Europe/Moscow", "usr/share/zoneinfo/Europe/Nicosia", "usr/share/zoneinfo/Europe/Oslo", "usr/share/zoneinfo/Europe/Paris", "usr/share/zoneinfo/Europe/Podgorica", "usr/share/zoneinfo/Europe/Prague", "usr/share/zoneinfo/Europe/Riga", "usr/share/zoneinfo/Europe/Rome", "usr/share/zoneinfo/Europe/Samara", "usr/share/zoneinfo/Europe/San_Marino", "usr/share/zoneinfo/Europe/Sarajevo", "usr/share/zoneinfo/Europe/Saratov", "usr/share/zoneinfo/Europe/Simferopol", "usr/share/zoneinfo/Europe/Skopje", "usr/share/zoneinfo/Europe/Sofia", "usr/share/zoneinfo/Europe/Stockholm", "usr/share/zoneinfo/Europe/Tallinn", "usr/share/zoneinfo/Europe/Tirane", "usr/share/zoneinfo/Europe/Tiraspol", "usr/share/zoneinfo/Europe/Ulyanovsk", "usr/share/zoneinfo/Europe/Uzhgorod", "usr/share/zoneinfo/Europe/Vaduz", "usr/share/zoneinfo/Europe/Vatican", "usr/share/zoneinfo/Europe/Vienna", "usr/share/zoneinfo/Europe/Vilnius", "usr/share/zoneinfo/Europe/Volgograd", "usr/share/zoneinfo/Europe/Warsaw", "usr/share/zoneinfo/Europe/Zagreb", "usr/share/zoneinfo/Europe/Zaporozhye", "usr/share/zoneinfo/Europe/Zurich", "usr/share/zoneinfo/Indian/Antananarivo", "usr/share/zoneinfo/Indian/Chagos", "usr/share/zoneinfo/Indian/Christmas", "usr/share/zoneinfo/Indian/Cocos", "usr/share/zoneinfo/Indian/Comoro", "usr/share/zoneinfo/Indian/Kerguelen", "usr/share/zoneinfo/Indian/Mahe", "usr/share/zoneinfo/Indian/Maldives", "usr/share/zoneinfo/Indian/Mauritius", "usr/share/zoneinfo/Indian/Mayotte", "usr/share/zoneinfo/Indian/Reunion", "usr/share/zoneinfo/Mexico/BajaNorte", "usr/share/zoneinfo/Mexico/BajaSur", "usr/share/zoneinfo/Mexico/General", "usr/share/zoneinfo/Pacific/Apia", "usr/share/zoneinfo/Pacific/Auckland", "usr/share/zoneinfo/Pacific/Bougainville", "usr/share/zoneinfo/Pacific/Chatham", "usr/share/zoneinfo/Pacific/Chuuk", "usr/share/zoneinfo/Pacific/Easter", "usr/share/zoneinfo/Pacific/Efate", "usr/share/zoneinfo/Pacific/Enderbury", "usr/share/zoneinfo/Pacific/Fakaofo", "usr/share/zoneinfo/Pacific/Fiji", "usr/share/zoneinfo/Pacific/Funafuti", "usr/share/zoneinfo/Pacific/Galapagos", "usr/share/zoneinfo/Pacific/Gambier", "usr/share/zoneinfo/Pacific/Guadalcanal", "usr/share/zoneinfo/Pacific/Guam", "usr/share/zoneinfo/Pacific/Honolulu", "usr/share/zoneinfo/Pacific/Johnston", "usr/share/zoneinfo/Pacific/Kanton", "usr/share/zoneinfo/Pacific/Kiritimati", "usr/share/zoneinfo/Pacific/Kosrae", "usr/share/zoneinfo/Pacific/Kwajalein", "usr/share/zoneinfo/Pacific/Majuro", "usr/share/zoneinfo/Pacific/Marquesas", "usr/share/zoneinfo/Pacific/Midway", "usr/share/zoneinfo/Pacific/Nauru", "usr/share/zoneinfo/Pacific/Niue", "usr/share/zoneinfo/Pacific/Norfolk", "usr/share/zoneinfo/Pacific/Noumea", "usr/share/zoneinfo/Pacific/Pago_Pago", "usr/share/zoneinfo/Pacific/Palau", "usr/share/zoneinfo/Pacific/Pitcairn", "usr/share/zoneinfo/Pacific/Pohnpei", "usr/share/zoneinfo/Pacific/Ponape", "usr/share/zoneinfo/Pacific/Port_Moresby", "usr/share/zoneinfo/Pacific/Rarotonga", "usr/share/zoneinfo/Pacific/Saipan", "usr/share/zoneinfo/Pacific/Samoa", "usr/share/zoneinfo/Pacific/Tahiti", "usr/share/zoneinfo/Pacific/Tarawa", "usr/share/zoneinfo/Pacific/Tongatapu", "usr/share/zoneinfo/Pacific/Truk", "usr/share/zoneinfo/Pacific/Wake", "usr/share/zoneinfo/Pacific/Wallis", "usr/share/zoneinfo/Pacific/Yap", "usr/share/zoneinfo/US/Alaska", "usr/share/zoneinfo/US/Aleutian", "usr/share/zoneinfo/US/Arizona", "usr/share/zoneinfo/US/Central", "usr/share/zoneinfo/US/East-Indiana", "usr/share/zoneinfo/US/Eastern", "usr/share/zoneinfo/US/Hawaii", "usr/share/zoneinfo/US/Indiana-Starke", "usr/share/zoneinfo/US/Michigan", "usr/share/zoneinfo/US/Mountain", "usr/share/zoneinfo/US/Pacific", "usr/share/zoneinfo/US/Samoa" ], "AnalyzedBy": "apk" }, { "ID": "v4l-utils-libs@1.32.0-r1", "Name": "v4l-utils-libs", "Identifier": { "PURL": "pkg:apk/alpine/v4l-utils-libs@1.32.0-r1?arch=x86_64\u0026distro=3.24.3", "UID": "1c3390aa91029a4c" }, "Version": "1.32.0-r1", "Arch": "x86_64", "SrcName": "v4l-utils", "SrcVersion": "1.32.0-r1", "Licenses": [ "LGPL-2.0-or-later" ], "Maintainer": "Francesco Colista \u003cfcolista@alpinelinux.org\u003e", "DependsOn": [ "json-c@0.18-r1", "libgcc@15.2.0-r5", "libjpeg-turbo@3.1.3-r0", "libstdc++@15.2.0-r5", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:d8068506bf3c124b788887d6952e663eccd8e22d", "InstalledFiles": [ "usr/lib/libv4l1.so.0", "usr/lib/libv4l1.so.0.0.0", "usr/lib/libv4l2.so.0", "usr/lib/libv4l2.so.0.0.0", "usr/lib/libv4l2rds.so.0", "usr/lib/libv4l2rds.so.0.0.0", "usr/lib/libv4lconvert.so.0", "usr/lib/libv4lconvert.so.0.0.0", "usr/lib/libv4l/libv4l2tracer.so", "usr/lib/libv4l/ov511-decomp", "usr/lib/libv4l/ov518-decomp", "usr/lib/libv4l/v4l1compat.so", "usr/lib/libv4l/v4l2convert.so", "usr/lib/libv4l/plugins/libv4l-mplane.so" ], "AnalyzedBy": "apk" }, { "ID": "vidstab@1.1.1-r0", "Name": "vidstab", "Identifier": { "PURL": "pkg:apk/alpine/vidstab@1.1.1-r0?arch=x86_64\u0026distro=3.24.3", "UID": "b32f41f400772cd1" }, "Version": "1.1.1-r0", "Arch": "x86_64", "SrcName": "vidstab", "SrcVersion": "1.1.1-r0", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Bart Ribbers \u003cbribbers@disroot.org\u003e", "DependsOn": [ "libgomp@15.2.0-r5", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:4c6a063376e47793bc8278e81c69237c0903a512", "InstalledFiles": [ "usr/lib/libvidstab.so.1.2" ], "AnalyzedBy": "apk" }, { "ID": "vulkan-loader@1.4.347-r0", "Name": "vulkan-loader", "Identifier": { "PURL": "pkg:apk/alpine/vulkan-loader@1.4.347-r0?arch=x86_64\u0026distro=3.24.3", "UID": "9d73493835dafa26" }, "Version": "1.4.347-r0", "Arch": "x86_64", "SrcName": "vulkan-loader", "SrcVersion": "1.4.347-r0", "Licenses": [ "Apache-2.0" ], "Maintainer": "Simon Zeni \u003csimon@bl4ckb0ne.ca\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:180bfddcbe6ab884450ca2bf6f24e8dc45d0cbc6", "InstalledFiles": [ "usr/lib/libvulkan.so.1", "usr/lib/libvulkan.so.1.4.347" ], "AnalyzedBy": "apk" }, { "ID": "wayland-libs-client@1.25.0-r0", "Name": "wayland-libs-client", "Identifier": { "PURL": "pkg:apk/alpine/wayland-libs-client@1.25.0-r0?arch=x86_64\u0026distro=3.24.3", "UID": "eb9734da9e4299ae" }, "Version": "1.25.0-r0", "Arch": "x86_64", "SrcName": "wayland", "SrcVersion": "1.25.0-r0", "Licenses": [ "MIT" ], "Maintainer": "Peter Shkenev \u003csanturysim@gmail.com\u003e", "DependsOn": [ "libffi@3.5.2-r1", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:7d36fb088612e0466eed59f8c1eea6d353023d2d", "InstalledFiles": [ "usr/lib/libwayland-client.so.0", "usr/lib/libwayland-client.so.0.25.0" ], "AnalyzedBy": "apk" }, { "ID": "x264-libs@0.164.3108-r1", "Name": "x264-libs", "Identifier": { "PURL": "pkg:apk/alpine/x264-libs@0.164.3108-r1?arch=x86_64\u0026distro=3.24.3", "UID": "75f09e46b3114267" }, "Version": "0.164.3108-r1", "Arch": "x86_64", "SrcName": "x264", "SrcVersion": "0.164.3108-r1", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:b1b60f74869bbc655e98878c26d0d560a062ee95", "InstalledFiles": [ "usr/lib/libx264.so.164" ], "AnalyzedBy": "apk" }, { "ID": "x265-libs@4.1-r0", "Name": "x265-libs", "Identifier": { "PURL": "pkg:apk/alpine/x265-libs@4.1-r0?arch=x86_64\u0026distro=3.24.3", "UID": "33a30622f15244c7" }, "Version": "4.1-r0", "Arch": "x86_64", "SrcName": "x265", "SrcVersion": "4.1-r0", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "libstdc++@15.2.0-r5", "musl@1.2.6-r3", "numactl@2.0.19-r0" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:6c174a46503bb23300308b6d667e3191eb6a019a", "InstalledFiles": [ "usr/lib/libx265.so.215" ], "AnalyzedBy": "apk" }, { "ID": "xvidcore@1.3.7-r2", "Name": "xvidcore", "Identifier": { "PURL": "pkg:apk/alpine/xvidcore@1.3.7-r2?arch=x86_64\u0026distro=3.24.3", "UID": "3289c8f6396f6dd6" }, "Version": "1.3.7-r2", "Arch": "x86_64", "SrcName": "xvidcore", "SrcVersion": "1.3.7-r2", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:29da2ec1b87612be3c44378e587c56056d917e6d", "InstalledFiles": [ "usr/lib/libxvidcore.so.4", "usr/lib/libxvidcore.so.4.3" ], "AnalyzedBy": "apk" }, { "ID": "xz-libs@5.8.4-r0", "Name": "xz-libs", "Identifier": { "PURL": "pkg:apk/alpine/xz-libs@5.8.4-r0?arch=x86_64\u0026distro=3.24.3", "UID": "6f0223c49816ec31" }, "Version": "5.8.4-r0", "Arch": "x86_64", "SrcName": "xz", "SrcVersion": "5.8.4-r0", "Licenses": [ "GPL-2.0-or-later", "0BSD", "Public-Domain", "LGPL-2.1-or-later" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:8501065b1862821630174c663b45974462c296e1", "InstalledFiles": [ "usr/lib/liblzma.so.5", "usr/lib/liblzma.so.5.8.4" ], "AnalyzedBy": "apk" }, { "ID": "zimg@3.0.6-r0", "Name": "zimg", "Identifier": { "PURL": "pkg:apk/alpine/zimg@3.0.6-r0?arch=x86_64\u0026distro=3.24.3", "UID": "58eeddc7e0366f1e" }, "Version": "3.0.6-r0", "Arch": "x86_64", "SrcName": "zimg", "SrcVersion": "3.0.6-r0", "Licenses": [ "WTFPL" ], "Maintainer": "Patrycja Rosa \u003calpine@ptrcnull.me\u003e", "DependsOn": [ "libgcc@15.2.0-r5", "libstdc++@15.2.0-r5", "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:38fb473bb162e79ec34a3393b35c39479beb3c2d", "InstalledFiles": [ "usr/lib/libzimg.so.2", "usr/lib/libzimg.so.2.0.0" ], "AnalyzedBy": "apk" }, { "ID": "zix-libs@0.8.0-r0", "Name": "zix-libs", "Identifier": { "PURL": "pkg:apk/alpine/zix-libs@0.8.0-r0?arch=x86_64\u0026distro=3.24.3", "UID": "55ae7053c0a04d5a" }, "Version": "0.8.0-r0", "Arch": "x86_64", "SrcName": "zix", "SrcVersion": "0.8.0-r0", "Licenses": [ "ISC" ], "Maintainer": "David Demelier \u003cmarkand@malikania.fr\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "Digest": "sha1:df88a2e7d83fa31937d2ca62d7d2b075066495b0", "InstalledFiles": [ "usr/lib/libzix-0.so.0", "usr/lib/libzix-0.so.0.8.0" ], "AnalyzedBy": "apk" }, { "ID": "zlib@1.3.2-r1", "Name": "zlib", "Identifier": { "PURL": "pkg:apk/alpine/zlib@1.3.2-r1?arch=x86_64\u0026distro=3.24.3", "UID": "926381dc853769fb" }, "Version": "1.3.2-r1", "Arch": "x86_64", "SrcName": "zlib", "SrcVersion": "1.3.2-r1", "Licenses": [ "Zlib" ], "Maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", "DependsOn": [ "musl@1.2.6-r3" ], "Layer": { "DiffID": "sha256:75c137aedfb2760f88629236cb7b797630aed0c3d91d626d1d1bb694878fc2ba" }, "Digest": "sha1:4f525c8cc204f84b8b4ca40db3be389958f056c6", "InstalledFiles": [ "usr/lib/libz.so.1", "usr/lib/libz.so.1.3.2" ], "AnalyzedBy": "apk" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2026-113351", "PkgID": "libexpat@2.9.0-r0", "PkgName": "libexpat", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libexpat@2.9.0-r0?arch=x86_64\u0026distro=3.24.3", "UID": "de4b08b485b70dec" }, "InstalledVersion": "2.9.0-r0", "FixedVersion": "2.10.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-113351", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:dce2d0ccb9c5897e1062d56d79e5a0f434ec907472f8593860930a2596251b7f", "Title": "expat: expat: Denial of Service via improper memory tracking in XML_ParserReset", "Description": "libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XML_ERROR_NO_MEMORY until it is recreated.", "Severity": "HIGH", "CweIDs": [ "CWE-909" ], "VendorSeverity": { "nvd": 3, "redhat": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-113351", "https://github.com/libexpat/libexpat", "https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L1560", "https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L860-L884", "https://github.com/libexpat/libexpat/pull/1431", "https://nvd.nist.gov/vuln/detail/CVE-2026-113351", "https://www.cve.org/CVERecord?id=CVE-2026-113351", "https://www.vulncheck.com/advisories/libexpat-2.7.2-through-2.9.0-denial-of-service-via-xml-parserreset" ], "PublishedDate": "2026-10-20T11:17:19.363Z", "LastModifiedDate": "2026-11-03T21:26:47.25Z" }, { "VulnerabilityID": "CVE-2026-115506", "PkgID": "libexpat@2.9.0-r0", "PkgName": "libexpat", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libexpat@2.9.0-r0?arch=x86_64\u0026distro=3.24.3", "UID": "de4b08b485b70dec" }, "InstalledVersion": "2.9.0-r0", "FixedVersion": "2.10.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-115506", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:3fc749f74e8839392d50f242c7192198ddf3cd2488bc17afbf3a9b790d0d9ada", "Title": "expat: expat: Denial of Service via delayed entity amplification detection", "Description": "libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerated() in xmlparse.c detects entity amplification too late. Attackers can supply a moderately sized XML document with a large DTD and nested entity expansions to consume tens of seconds of CPU per parse.", "Severity": "HIGH", "CweIDs": [ "CWE-776" ], "VendorSeverity": { "photon": 3, "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-115506", "https://github.com/hannob/lololol", "https://github.com/libexpat/libexpat", "https://github.com/libexpat/libexpat/issues/1160", "https://github.com/libexpat/libexpat/pull/1433", "https://nvd.nist.gov/vuln/detail/CVE-2026-115506", "https://www.cve.org/CVERecord?id=CVE-2026-115506", "https://www.vulncheck.com/advisories/libexpat-through-2.9.0-denial-of-service-via-billion-laughs-detection-delay" ], "PublishedDate": "2026-10-22T20:17:06.62Z", "LastModifiedDate": "2026-11-02T18:27:06.127Z" }, { "VulnerabilityID": "CVE-2026-117610", "PkgID": "libexpat@2.9.0-r0", "PkgName": "libexpat", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libexpat@2.9.0-r0?arch=x86_64\u0026distro=3.24.3", "UID": "de4b08b485b70dec" }, "InstalledVersion": "2.9.0-r0", "FixedVersion": "2.10.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-117610", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:615389d48011f20e9a9c7c0bc9edf7891c124f6a122d5646d7dce101abcbaa13", "Title": "expat: expat: Denial of Service via NULL pointer dereference in external entity parsing", "Description": "libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in lib/xmlparse.c that mishandles the XML_TOK_NONE token from empty input. Attackers who control stream chunking can force an empty non-final first parse on an external entity subparser, causing a later parse to crash the application.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "nvd": 3, "redhat": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-117610", "https://github.com/libexpat/libexpat", "https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L3468-L3510", "https://github.com/libexpat/libexpat/commit/7b0d50e4b1d16fafd55876260701e04279a7489d", "https://github.com/libexpat/libexpat/pull/1444", "https://nvd.nist.gov/vuln/detail/CVE-2026-117610", "https://www.cve.org/CVERecord?id=CVE-2026-117610", "https://www.vulncheck.com/advisories/libexpat-through-2.9.0-null-pointer-dereference-via-external-entity-subparser" ], "PublishedDate": "2026-10-28T03:17:12.777Z", "LastModifiedDate": "2026-11-05T16:17:35.787Z" }, { "VulnerabilityID": "CVE-2026-118370", "PkgID": "libexpat@2.9.0-r0", "PkgName": "libexpat", "PkgIdentifier": { "PURL": "pkg:apk/alpine/libexpat@2.9.0-r0?arch=x86_64\u0026distro=3.24.3", "UID": "de4b08b485b70dec" }, "InstalledVersion": "2.9.0-r0", "FixedVersion": "2.10.0-r0", "Status": "fixed", "Layer": { "DiffID": "sha256:56c022be266ae58b260099c0b9da1032b0064cc32bd7b2483277cbdae7f77de8" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-118370", "DataSource": { "ID": "alpine", "Name": "Alpine Secdb", "URL": "https://secdb.alpinelinux.org/" }, "Fingerprint": "sha256:005cac42482167e0b1c273e587fe9a5a43be8754f208cae436dc0b46cc80ea9d", "Title": "expat: expat: Denial of Service via integer overflow during XML attribute parsing", "Description": "libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlparse.c that allows attackers to trigger out-of-bounds writes via oversized attribute counts. Attackers can supply a multi-gigabyte document with a start tag carrying over 2^30 attributes to overflow attIndex and nPrefixes, crashing applications or corrupting heap memory.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "nvd": 3, "redhat": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "V3Score": 8.2 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-118370", "https://github.com/libexpat/libexpat", "https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L4138-L4140", "https://github.com/libexpat/libexpat/commit/1bac53c4fc460a03cd9860f39501c7979f6750ae", "https://github.com/libexpat/libexpat/commit/621cb2c78b253ee023a86bc91d6ddb048481c04c", "https://github.com/libexpat/libexpat/pull/1450", "https://nvd.nist.gov/vuln/detail/CVE-2026-118370", "https://www.cve.org/CVERecord?id=CVE-2026-118370", "https://www.vulncheck.com/advisories/libexpat-through-2.9.0-integer-overflow-in-storeatts-via-attindex-and-nprefixes" ], "PublishedDate": "2026-10-28T03:17:13.293Z", "LastModifiedDate": "2026-11-02T20:17:37.377Z" } ] }, { "Target": "Node.js", "Class": "lang-pkgs", "Type": "node-pkg", "Packages": [ { "ID": "@gar/promise-retry@1.0.3", "Name": "@gar/promise-retry", "Identifier": { "PURL": "pkg:npm/%40gar/promise-retry@1.0.3", "UID": "8e0b76d34126019b" }, "Version": "1.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@gar/promise-retry/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@gar/promisify@1.1.3", "Name": "@gar/promisify", "Identifier": { "PURL": "pkg:npm/%40gar/promisify@1.1.3", "UID": "59b15b99a4c0b7e6" }, "Version": "1.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/@gar/promisify/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@isaacs/fs-minipass@4.0.1", "Name": "@isaacs/fs-minipass", "Identifier": { "PURL": "pkg:npm/%40isaacs/fs-minipass@4.0.1", "UID": "a243149143caa5d3" }, "Version": "4.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@isaacs/fs-minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@isaacs/string-locale-compare@1.1.0", "Name": "@isaacs/string-locale-compare", "Identifier": { "PURL": "pkg:npm/%40isaacs/string-locale-compare@1.1.0", "UID": "4b7c47e3454f8345" }, "Version": "1.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@isaacs/string-locale-compare/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/agent@4.0.2", "Name": "@npmcli/agent", "Identifier": { "PURL": "pkg:npm/%40npmcli/agent@4.0.2", "UID": "3fa7699fb2a76a9a" }, "Version": "4.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/agent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/arborist@9.9.1", "Name": "@npmcli/arborist", "Identifier": { "PURL": "pkg:npm/%40npmcli/arborist@9.9.1", "UID": "85504a0269f62d8d" }, "Version": "9.9.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/arborist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/config@10.12.0", "Name": "@npmcli/config", "Identifier": { "PURL": "pkg:npm/%40npmcli/config@10.12.0", "UID": "cffcf31a2130c4e3" }, "Version": "10.12.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/config/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/fs@1.1.1", "Name": "@npmcli/fs", "Identifier": { "PURL": "pkg:npm/%40npmcli/fs@1.1.1", "UID": "4b15017480e49784" }, "Version": "1.1.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/@npmcli/fs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/fs@5.0.0", "Name": "@npmcli/fs", "Identifier": { "PURL": "pkg:npm/%40npmcli/fs@5.0.0", "UID": "c8117500576f6ced" }, "Version": "5.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/fs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/git@7.0.2", "Name": "@npmcli/git", "Identifier": { "PURL": "pkg:npm/%40npmcli/git@7.0.2", "UID": "1dbf0a5690695b0" }, "Version": "7.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/git/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/installed-package-contents@4.0.0", "Name": "@npmcli/installed-package-contents", "Identifier": { "PURL": "pkg:npm/%40npmcli/installed-package-contents@4.0.0", "UID": "f8b7211aeeb626eb" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/installed-package-contents/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/map-workspaces@5.0.3", "Name": "@npmcli/map-workspaces", "Identifier": { "PURL": "pkg:npm/%40npmcli/map-workspaces@5.0.3", "UID": "16ac0fb6ae1a33f4" }, "Version": "5.0.3", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/map-workspaces/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/metavuln-calculator@9.0.3", "Name": "@npmcli/metavuln-calculator", "Identifier": { "PURL": "pkg:npm/%40npmcli/metavuln-calculator@9.0.3", "UID": "3a23b7833b0b5f20" }, "Version": "9.0.3", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/metavuln-calculator/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/move-file@1.1.2", "Name": "@npmcli/move-file", "Identifier": { "PURL": "pkg:npm/%40npmcli/move-file@1.1.2", "UID": "5ac02500d4571f9a" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/@npmcli/move-file/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/name-from-folder@4.0.0", "Name": "@npmcli/name-from-folder", "Identifier": { "PURL": "pkg:npm/%40npmcli/name-from-folder@4.0.0", "UID": "d27c720e3ae2edc6" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/name-from-folder/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/node-gyp@5.0.0", "Name": "@npmcli/node-gyp", "Identifier": { "PURL": "pkg:npm/%40npmcli/node-gyp@5.0.0", "UID": "698db9fa08ba9b90" }, "Version": "5.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/node-gyp/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/package-json@7.0.5", "Name": "@npmcli/package-json", "Identifier": { "PURL": "pkg:npm/%40npmcli/package-json@7.0.5", "UID": "4c5a1c7780f4f4cc" }, "Version": "7.0.5", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/package-json/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/promise-spawn@9.0.1", "Name": "@npmcli/promise-spawn", "Identifier": { "PURL": "pkg:npm/%40npmcli/promise-spawn@9.0.1", "UID": "a88c373a1e8ab1ac" }, "Version": "9.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/promise-spawn/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/query@5.0.0", "Name": "@npmcli/query", "Identifier": { "PURL": "pkg:npm/%40npmcli/query@5.0.0", "UID": "f3a974e2dfc105ee" }, "Version": "5.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/query/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/redact@4.0.0", "Name": "@npmcli/redact", "Identifier": { "PURL": "pkg:npm/%40npmcli/redact@4.0.0", "UID": "c0e751bc9297c412" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/redact/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@npmcli/run-script@10.0.4", "Name": "@npmcli/run-script", "Identifier": { "PURL": "pkg:npm/%40npmcli/run-script@10.0.4", "UID": "a36824b9bd7c7f1c" }, "Version": "10.0.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/run-script/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@sigstore/bundle@4.0.0", "Name": "@sigstore/bundle", "Identifier": { "PURL": "pkg:npm/%40sigstore/bundle@4.0.0", "UID": "4768290514d54a7e" }, "Version": "4.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/bundle/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@sigstore/core@3.2.1", "Name": "@sigstore/core", "Identifier": { "PURL": "pkg:npm/%40sigstore/core@3.2.1", "UID": "2459cff4fcada873" }, "Version": "3.2.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/core/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@sigstore/protobuf-specs@0.5.1", "Name": "@sigstore/protobuf-specs", "Identifier": { "PURL": "pkg:npm/%40sigstore/protobuf-specs@0.5.1", "UID": "718c51160885db1d" }, "Version": "0.5.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/protobuf-specs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@sigstore/sign@4.1.1", "Name": "@sigstore/sign", "Identifier": { "PURL": "pkg:npm/%40sigstore/sign@4.1.1", "UID": "8cde9abb0aa0ae81" }, "Version": "4.1.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/sign/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@sigstore/tuf@4.0.2", "Name": "@sigstore/tuf", "Identifier": { "PURL": "pkg:npm/%40sigstore/tuf@4.0.2", "UID": "ffa89c0092633c39" }, "Version": "4.0.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/tuf/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@sigstore/verify@3.1.1", "Name": "@sigstore/verify", "Identifier": { "PURL": "pkg:npm/%40sigstore/verify@3.1.1", "UID": "905d81304c08e5c8" }, "Version": "3.1.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/verify/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@socket.io/component-emitter@3.1.0", "Name": "@socket.io/component-emitter", "Identifier": { "PURL": "pkg:npm/%40socket.io/component-emitter@3.1.0", "UID": "e6215540af0b4acd" }, "Version": "3.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/@socket.io/component-emitter/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@tootallnate/once@1.1.2", "Name": "@tootallnate/once", "Identifier": { "PURL": "pkg:npm/%40tootallnate/once@1.1.2", "UID": "cffee1dc8c1b24ad" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/@tootallnate/once/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@tufjs/canonical-json@2.0.0", "Name": "@tufjs/canonical-json", "Identifier": { "PURL": "pkg:npm/%40tufjs/canonical-json@2.0.0", "UID": "c9bd83d46147e58a" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@tufjs/canonical-json/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@tufjs/models@4.1.0", "Name": "@tufjs/models", "Identifier": { "PURL": "pkg:npm/%40tufjs/models@4.1.0", "UID": "98a1e2a0a0d02abb" }, "Version": "4.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/@tufjs/models/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/cookie@0.4.1", "Name": "@types/cookie", "Identifier": { "PURL": "pkg:npm/%40types/cookie@0.4.1", "UID": "b33cf3455452408d" }, "Version": "0.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/@types/cookie/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/cors@2.8.17", "Name": "@types/cors", "Identifier": { "PURL": "pkg:npm/%40types/cors@2.8.17", "UID": "331774ed5df8551" }, "Version": "2.8.17", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/@types/cors/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/debug@4.1.8", "Name": "@types/debug", "Identifier": { "PURL": "pkg:npm/%40types/debug@4.1.8", "UID": "27eadc5e4289e0b5" }, "Version": "4.1.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/@types/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/ms@0.7.31", "Name": "@types/ms", "Identifier": { "PURL": "pkg:npm/%40types/ms@0.7.31", "UID": "8d933178ed2045a0" }, "Version": "0.7.31", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/@types/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/node@24.13.6", "Name": "@types/node", "Identifier": { "PURL": "pkg:npm/%40types/node@24.13.6", "UID": "c1f7a43cd1025270" }, "Version": "24.13.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/@types/node/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "@types/validator@13.7.17", "Name": "@types/validator", "Identifier": { "PURL": "pkg:npm/%40types/validator@13.7.17", "UID": "b78460c9d9aa2775" }, "Version": "13.7.17", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/@types/validator/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "abbrev@1.1.1", "Name": "abbrev", "Identifier": { "PURL": "pkg:npm/abbrev@1.1.1", "UID": "d02a32d62b4a37e4" }, "Version": "1.1.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/abbrev/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "abbrev@4.0.0", "Name": "abbrev", "Identifier": { "PURL": "pkg:npm/abbrev@4.0.0", "UID": "8d8e13cc8f0eb11f" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/abbrev/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "accepts@1.3.8", "Name": "accepts", "Identifier": { "PURL": "pkg:npm/accepts@1.3.8", "UID": "5409a311747e5bed" }, "Version": "1.3.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/accepts/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "agent-base@6.0.2", "Name": "agent-base", "Identifier": { "PURL": "pkg:npm/agent-base@6.0.2", "UID": "1edb58fbe05b4909" }, "Version": "6.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/agent-base/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "agent-base@7.1.4", "Name": "agent-base", "Identifier": { "PURL": "pkg:npm/agent-base@7.1.4", "UID": "a29114964ca5cb1" }, "Version": "7.1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/agent-base/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "agentkeepalive@4.3.0", "Name": "agentkeepalive", "Identifier": { "PURL": "pkg:npm/agentkeepalive@4.3.0", "UID": "93f6e301555e853a" }, "Version": "4.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/agentkeepalive/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "aggregate-error@3.1.0", "Name": "aggregate-error", "Identifier": { "PURL": "pkg:npm/aggregate-error@3.1.0", "UID": "742df4158847cd25" }, "Version": "3.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/aggregate-error/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ansi-regex@5.0.1", "Name": "ansi-regex", "Identifier": { "PURL": "pkg:npm/ansi-regex@5.0.1", "UID": "36ae639bde2db0af" }, "Version": "5.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/ansi-regex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "aproba@2.0.0", "Name": "aproba", "Identifier": { "PURL": "pkg:npm/aproba@2.0.0", "UID": "5b0f24844018d977" }, "Version": "2.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/aproba/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "aproba@2.1.0", "Name": "aproba", "Identifier": { "PURL": "pkg:npm/aproba@2.1.0", "UID": "65b5d298c3c834d" }, "Version": "2.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/aproba/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "archy@1.0.0", "Name": "archy", "Identifier": { "PURL": "pkg:npm/archy@1.0.0", "UID": "c6f97df2c6bd73cd" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/archy/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "are-we-there-yet@3.0.1", "Name": "are-we-there-yet", "Identifier": { "PURL": "pkg:npm/are-we-there-yet@3.0.1", "UID": "9be0fed92d538415" }, "Version": "3.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/node-gyp/node_modules/are-we-there-yet/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "array-flatten@1.1.1", "Name": "array-flatten", "Identifier": { "PURL": "pkg:npm/array-flatten@1.1.1", "UID": "6eec8aff1204422d" }, "Version": "1.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/array-flatten/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "asynckit@0.4.0", "Name": "asynckit", "Identifier": { "PURL": "pkg:npm/asynckit@0.4.0", "UID": "d0ee63f604de4d47" }, "Version": "0.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/asynckit/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "audiobookshelf@2.37.2", "Name": "audiobookshelf", "Identifier": { "PURL": "pkg:npm/audiobookshelf@2.37.2", "UID": "fce1ee379ec0bf84" }, "Version": "2.37.2", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/dist-server/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "audiobookshelf@2.37.2", "Name": "audiobookshelf", "Identifier": { "PURL": "pkg:npm/audiobookshelf@2.37.2", "UID": "84f2febdb7f3baee" }, "Version": "2.37.2", "Licenses": [ "GPL-3.0-only" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "axios@0.27.2", "Name": "axios", "Identifier": { "PURL": "pkg:npm/axios@0.27.2", "UID": "701481161630eb5" }, "Version": "0.27.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/axios/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "balanced-match@1.0.2", "Name": "balanced-match", "Identifier": { "PURL": "pkg:npm/balanced-match@1.0.2", "UID": "24ccec41f2e146" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/balanced-match/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "balanced-match@4.0.4", "Name": "balanced-match", "Identifier": { "PURL": "pkg:npm/balanced-match@4.0.4", "UID": "130610ebd0a80b54" }, "Version": "4.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/balanced-match/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "base64-js@1.5.1", "Name": "base64-js", "Identifier": { "PURL": "pkg:npm/base64-js@1.5.1", "UID": "aa374fb1de4783db" }, "Version": "1.5.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/base64-js/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "base64id@2.0.0", "Name": "base64id", "Identifier": { "PURL": "pkg:npm/base64id@2.0.0", "UID": "13595ff141c1893a" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/base64id/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "beep-boop@1.2.3", "Name": "beep-boop", "Identifier": { "PURL": "pkg:npm/beep-boop@1.2.3", "UID": "a5f5f38719d3acd8" }, "Version": "1.2.3", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/github-from-package/example/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "bin-links@6.0.2", "Name": "bin-links", "Identifier": { "PURL": "pkg:npm/bin-links@6.0.2", "UID": "b514fce0680ac539" }, "Version": "6.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/bin-links/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "binary-extensions@3.1.0", "Name": "binary-extensions", "Identifier": { "PURL": "pkg:npm/binary-extensions@3.1.0", "UID": "ea5ef4874c55097a" }, "Version": "3.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/binary-extensions/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "bindings@1.5.0", "Name": "bindings", "Identifier": { "PURL": "pkg:npm/bindings@1.5.0", "UID": "976c4c472005c18c" }, "Version": "1.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/bindings/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "bl@4.1.0", "Name": "bl", "Identifier": { "PURL": "pkg:npm/bl@4.1.0", "UID": "9c285575da0aa81f" }, "Version": "4.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/bl/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "body-parser@1.20.1", "Name": "body-parser", "Identifier": { "PURL": "pkg:npm/body-parser@1.20.1", "UID": "52df305ec55af0db" }, "Version": "1.20.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/body-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "brace-expansion@1.1.11", "Name": "brace-expansion", "Identifier": { "PURL": "pkg:npm/brace-expansion@1.1.11", "UID": "7dba102d1cf44988" }, "Version": "1.1.11", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/brace-expansion/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "brace-expansion@5.0.9", "Name": "brace-expansion", "Identifier": { "PURL": "pkg:npm/brace-expansion@5.0.9", "UID": "868042afe866f0f9" }, "Version": "5.0.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "buffer@5.7.1", "Name": "buffer", "Identifier": { "PURL": "pkg:npm/buffer@5.7.1", "UID": "c96d62881c33a704" }, "Version": "5.7.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "buffer-equal-constant-time@1.0.1", "Name": "buffer-equal-constant-time", "Identifier": { "PURL": "pkg:npm/buffer-equal-constant-time@1.0.1", "UID": "5ac7cd4e7cdf71e8" }, "Version": "1.0.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/buffer-equal-constant-time/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "bytes@3.1.2", "Name": "bytes", "Identifier": { "PURL": "pkg:npm/bytes@3.1.2", "UID": "47d46450f00e82cc" }, "Version": "3.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/bytes/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cacache@15.3.0", "Name": "cacache", "Identifier": { "PURL": "pkg:npm/cacache@15.3.0", "UID": "4049269ec27f9a5f" }, "Version": "15.3.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/cacache/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cacache@20.0.4", "Name": "cacache", "Identifier": { "PURL": "pkg:npm/cacache@20.0.4", "UID": "d2b15bdfb2c81564" }, "Version": "20.0.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/cacache/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "call-bind@1.0.2", "Name": "call-bind", "Identifier": { "PURL": "pkg:npm/call-bind@1.0.2", "UID": "5ba564cb2ce63360" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/call-bind/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "chalk@5.6.2", "Name": "chalk", "Identifier": { "PURL": "pkg:npm/chalk@5.6.2", "UID": "1f19bd2e420a59a6" }, "Version": "5.6.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/chalk/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "chownr@1.1.4", "Name": "chownr", "Identifier": { "PURL": "pkg:npm/chownr@1.1.4", "UID": "52e3312db70693c4" }, "Version": "1.1.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/tar-fs/node_modules/chownr/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "chownr@2.0.0", "Name": "chownr", "Identifier": { "PURL": "pkg:npm/chownr@2.0.0", "UID": "6eaa153c26c74574" }, "Version": "2.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/chownr/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "chownr@3.0.0", "Name": "chownr", "Identifier": { "PURL": "pkg:npm/chownr@3.0.0", "UID": "c2446e59cf4aad08" }, "Version": "3.0.0", "Licenses": [ "BlueOak-1.0.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/chownr/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ci-info@4.4.0", "Name": "ci-info", "Identifier": { "PURL": "pkg:npm/ci-info@4.4.0", "UID": "ec9c48df6b096b3a" }, "Version": "4.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/ci-info/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cidr-regex@5.0.5", "Name": "cidr-regex", "Identifier": { "PURL": "pkg:npm/cidr-regex@5.0.5", "UID": "d9b626fe74a2c8a1" }, "Version": "5.0.5", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/cidr-regex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "clean-stack@2.2.0", "Name": "clean-stack", "Identifier": { "PURL": "pkg:npm/clean-stack@2.2.0", "UID": "d68ee063930e7a5f" }, "Version": "2.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/clean-stack/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cmd-shim@8.0.0", "Name": "cmd-shim", "Identifier": { "PURL": "pkg:npm/cmd-shim@8.0.0", "UID": "dc4dbb1907ad1cac" }, "Version": "8.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/cmd-shim/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "color-support@1.1.3", "Name": "color-support", "Identifier": { "PURL": "pkg:npm/color-support@1.1.3", "UID": "824a7b601c420ee1" }, "Version": "1.1.3", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/color-support/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "combined-stream@1.0.8", "Name": "combined-stream", "Identifier": { "PURL": "pkg:npm/combined-stream@1.0.8", "UID": "3c631e3095db0bec" }, "Version": "1.0.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/combined-stream/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "common-ancestor-path@2.0.0", "Name": "common-ancestor-path", "Identifier": { "PURL": "pkg:npm/common-ancestor-path@2.0.0", "UID": "5b6474ba7f3d4e57" }, "Version": "2.0.0", "Licenses": [ "BlueOak-1.0.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/common-ancestor-path/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "concat-map@0.0.1", "Name": "concat-map", "Identifier": { "PURL": "pkg:npm/concat-map@0.0.1", "UID": "daf584e246f8ae89" }, "Version": "0.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/concat-map/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "console-control-strings@1.1.0", "Name": "console-control-strings", "Identifier": { "PURL": "pkg:npm/console-control-strings@1.1.0", "UID": "e61ae18aa5444085" }, "Version": "1.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/console-control-strings/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "content-disposition@0.5.4", "Name": "content-disposition", "Identifier": { "PURL": "pkg:npm/content-disposition@0.5.4", "UID": "47d8c34a5c5ac850" }, "Version": "0.5.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/content-disposition/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "content-type@1.0.4", "Name": "content-type", "Identifier": { "PURL": "pkg:npm/content-type@1.0.4", "UID": "84f7392d82deda46" }, "Version": "1.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/content-type/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cookie@0.4.1", "Name": "cookie", "Identifier": { "PURL": "pkg:npm/cookie@0.4.1", "UID": "b8addf7d253a0a68" }, "Version": "0.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/cookie-parser/node_modules/cookie/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cookie@0.4.2", "Name": "cookie", "Identifier": { "PURL": "pkg:npm/cookie@0.4.2", "UID": "6d81e725914849d1" }, "Version": "0.4.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/engine.io/node_modules/cookie/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cookie@0.4.2", "Name": "cookie", "Identifier": { "PURL": "pkg:npm/cookie@0.4.2", "UID": "a35fb0d8b35ea287" }, "Version": "0.4.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/express-session/node_modules/cookie/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cookie@0.5.0", "Name": "cookie", "Identifier": { "PURL": "pkg:npm/cookie@0.5.0", "UID": "86ba171a6bde2e99" }, "Version": "0.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/cookie/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cookie-parser@1.4.6", "Name": "cookie-parser", "Identifier": { "PURL": "pkg:npm/cookie-parser@1.4.6", "UID": "2af0ef8d579eb2eb" }, "Version": "1.4.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/cookie-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cookie-signature@1.0.6", "Name": "cookie-signature", "Identifier": { "PURL": "pkg:npm/cookie-signature@1.0.6", "UID": "b3f40efccf7d491a" }, "Version": "1.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/cookie-signature/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "corepack@0.36.0", "Name": "corepack", "Identifier": { "PURL": "pkg:npm/corepack@0.36.0", "UID": "f8e0e53a2f75561c" }, "Version": "0.36.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/corepack/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cors@2.8.5", "Name": "cors", "Identifier": { "PURL": "pkg:npm/cors@2.8.5", "UID": "7678b2576a8119fe" }, "Version": "2.8.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/cors/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "cssesc@3.0.0", "Name": "cssesc", "Identifier": { "PURL": "pkg:npm/cssesc@3.0.0", "UID": "7f5523593daaa2d6" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/cssesc/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@2.6.9", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@2.6.9", "UID": "78249f43ebaaddea" }, "Version": "2.6.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@4.3.4", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@4.3.4", "UID": "5690c7a7698f1957" }, "Version": "4.3.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/agent-base/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@4.3.4", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@4.3.4", "UID": "35a97ffadc1b4e26" }, "Version": "4.3.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/agentkeepalive/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@4.3.4", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@4.3.4", "UID": "f34a873b2df4ce08" }, "Version": "4.3.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/engine.io/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@4.3.4", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@4.3.4", "UID": "1b7681f8d0a06da6" }, "Version": "4.3.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/http-proxy-agent/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@4.3.4", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@4.3.4", "UID": "ac436794f6aef063" }, "Version": "4.3.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/https-proxy-agent/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@4.3.4", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@4.3.4", "UID": "7084180e69cc3dde" }, "Version": "4.3.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/sequelize/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@4.3.4", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@4.3.4", "UID": "d9d4594ec84a36fe" }, "Version": "4.3.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/socket.io-parser/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@4.3.4", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@4.3.4", "UID": "41147047f556a8e9" }, "Version": "4.3.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/socket.io/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@4.3.4", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@4.3.4", "UID": "cfc33fa70683c570" }, "Version": "4.3.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/socks-proxy-agent/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "debug@4.4.3", "Name": "debug", "Identifier": { "PURL": "pkg:npm/debug@4.4.3", "UID": "cbfc08d5e097ff06" }, "Version": "4.4.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/debug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "decompress-response@6.0.0", "Name": "decompress-response", "Identifier": { "PURL": "pkg:npm/decompress-response@6.0.0", "UID": "30b82f61de4244f0" }, "Version": "6.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/decompress-response/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "deep-extend@0.6.0", "Name": "deep-extend", "Identifier": { "PURL": "pkg:npm/deep-extend@0.6.0", "UID": "e945800aea501e3d" }, "Version": "0.6.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/deep-extend/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "delayed-stream@1.0.0", "Name": "delayed-stream", "Identifier": { "PURL": "pkg:npm/delayed-stream@1.0.0", "UID": "ec5b8bf6b1915b31" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/delayed-stream/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "delegates@1.0.0", "Name": "delegates", "Identifier": { "PURL": "pkg:npm/delegates@1.0.0", "UID": "66017515609270fa" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/delegates/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "depd@2.0.0", "Name": "depd", "Identifier": { "PURL": "pkg:npm/depd@2.0.0", "UID": "3df66290ea9428cd" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/depd/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "destroy@1.2.0", "Name": "destroy", "Identifier": { "PURL": "pkg:npm/destroy@1.2.0", "UID": "1a1d4af7d4f2e8e6" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/destroy/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "detect-libc@2.0.3", "Name": "detect-libc", "Identifier": { "PURL": "pkg:npm/detect-libc@2.0.3", "UID": "af84369ea7d028ff" }, "Version": "2.0.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/detect-libc/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "diff@8.0.4", "Name": "diff", "Identifier": { "PURL": "pkg:npm/diff@8.0.4", "UID": "65ff059d673f8358" }, "Version": "8.0.4", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/diff/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "dom-serializer@2.0.0", "Name": "dom-serializer", "Identifier": { "PURL": "pkg:npm/dom-serializer@2.0.0", "UID": "68be9f2bc9f258c2" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/dom-serializer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "domelementtype@2.3.0", "Name": "domelementtype", "Identifier": { "PURL": "pkg:npm/domelementtype@2.3.0", "UID": "cdd7977b7cfb03c5" }, "Version": "2.3.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/domelementtype/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "domhandler@5.0.3", "Name": "domhandler", "Identifier": { "PURL": "pkg:npm/domhandler@5.0.3", "UID": "d6fb3f8c14d14e96" }, "Version": "5.0.3", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/domhandler/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "domutils@3.0.1", "Name": "domutils", "Identifier": { "PURL": "pkg:npm/domutils@3.0.1", "UID": "758209bd09265193" }, "Version": "3.0.1", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/domutils/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "dottie@2.0.6", "Name": "dottie", "Identifier": { "PURL": "pkg:npm/dottie@2.0.6", "UID": "3164fa6a98395c51" }, "Version": "2.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/dottie/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ecdsa-sig-formatter@1.0.11", "Name": "ecdsa-sig-formatter", "Identifier": { "PURL": "pkg:npm/ecdsa-sig-formatter@1.0.11", "UID": "b18469b8809b7698" }, "Version": "1.0.11", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/ecdsa-sig-formatter/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ee-first@1.1.1", "Name": "ee-first", "Identifier": { "PURL": "pkg:npm/ee-first@1.1.1", "UID": "308702bdc5d5af9b" }, "Version": "1.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/ee-first/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "emoji-regex@8.0.0", "Name": "emoji-regex", "Identifier": { "PURL": "pkg:npm/emoji-regex@8.0.0", "UID": "27ea84a5d939fe33" }, "Version": "8.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/emoji-regex/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "encodeurl@1.0.2", "Name": "encodeurl", "Identifier": { "PURL": "pkg:npm/encodeurl@1.0.2", "UID": "1d11153dbc753ed7" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/encodeurl/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "encoding@0.1.13", "Name": "encoding", "Identifier": { "PURL": "pkg:npm/encoding@0.1.13", "UID": "5a457c0f4f67d9da" }, "Version": "0.1.13", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/encoding/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "end-of-stream@1.4.4", "Name": "end-of-stream", "Identifier": { "PURL": "pkg:npm/end-of-stream@1.4.4", "UID": "4de09abdf1bfae7" }, "Version": "1.4.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/end-of-stream/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "engine.io@6.5.4", "Name": "engine.io", "Identifier": { "PURL": "pkg:npm/engine.io@6.5.4", "UID": "8fb5b9abca7dea2c" }, "Version": "6.5.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/engine.io/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "engine.io-parser@5.2.1", "Name": "engine.io-parser", "Identifier": { "PURL": "pkg:npm/engine.io-parser@5.2.1", "UID": "cfba6026cd73fbf4" }, "Version": "5.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/engine.io-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "entities@4.4.0", "Name": "entities", "Identifier": { "PURL": "pkg:npm/entities@4.4.0", "UID": "4a5567070e67b623" }, "Version": "4.4.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/entities/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "env-paths@2.2.1", "Name": "env-paths", "Identifier": { "PURL": "pkg:npm/env-paths@2.2.1", "UID": "b98b791b26bcce7e" }, "Version": "2.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/env-paths/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "env-paths@2.2.1", "Name": "env-paths", "Identifier": { "PURL": "pkg:npm/env-paths@2.2.1", "UID": "4d5f9228dca262ad" }, "Version": "2.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/env-paths/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "err-code@2.0.3", "Name": "err-code", "Identifier": { "PURL": "pkg:npm/err-code@2.0.3", "UID": "3f8bce145f483ee6" }, "Version": "2.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/err-code/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "escape-html@1.0.3", "Name": "escape-html", "Identifier": { "PURL": "pkg:npm/escape-html@1.0.3", "UID": "9e42571d820270ac" }, "Version": "1.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/escape-html/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "etag@1.8.1", "Name": "etag", "Identifier": { "PURL": "pkg:npm/etag@1.8.1", "UID": "e306c344790d47a9" }, "Version": "1.8.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/etag/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "expand-template@2.0.3", "Name": "expand-template", "Identifier": { "PURL": "pkg:npm/expand-template@2.0.3", "UID": "f8a5e3b153c993e" }, "Version": "2.0.3", "Licenses": [ "(MIT OR WTFPL)" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/expand-template/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "exponential-backoff@3.1.3", "Name": "exponential-backoff", "Identifier": { "PURL": "pkg:npm/exponential-backoff@3.1.3", "UID": "1b8f0088b2ee45c2" }, "Version": "3.1.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/exponential-backoff/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "express@4.18.2", "Name": "express", "Identifier": { "PURL": "pkg:npm/express@4.18.2", "UID": "5a0bb338aaf99716" }, "Version": "4.18.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/express/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "express-rate-limit@7.5.1", "Name": "express-rate-limit", "Identifier": { "PURL": "pkg:npm/express-rate-limit@7.5.1", "UID": "42171805e0a16e3c" }, "Version": "7.5.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/express-rate-limit/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "express-session@1.17.3", "Name": "express-session", "Identifier": { "PURL": "pkg:npm/express-session@1.17.3", "UID": "755f37d37e061995" }, "Version": "1.17.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/express-session/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "fastest-levenshtein@1.0.16", "Name": "fastest-levenshtein", "Identifier": { "PURL": "pkg:npm/fastest-levenshtein@1.0.16", "UID": "c2930316b43e3802" }, "Version": "1.0.16", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/fastest-levenshtein/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "fdir@6.5.0", "Name": "fdir", "Identifier": { "PURL": "pkg:npm/fdir@6.5.0", "UID": "803b6232542f97ca" }, "Version": "6.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/tinyglobby/node_modules/fdir/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "file-uri-to-path@1.0.0", "Name": "file-uri-to-path", "Identifier": { "PURL": "pkg:npm/file-uri-to-path@1.0.0", "UID": "cc66860c76e6aa30" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/file-uri-to-path/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "finalhandler@1.2.0", "Name": "finalhandler", "Identifier": { "PURL": "pkg:npm/finalhandler@1.2.0", "UID": "d3adbb6fef658d9e" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/finalhandler/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "follow-redirects@1.15.5", "Name": "follow-redirects", "Identifier": { "PURL": "pkg:npm/follow-redirects@1.15.5", "UID": "4d6eb356b30b44a0" }, "Version": "1.15.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/follow-redirects/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "form-data@4.0.0", "Name": "form-data", "Identifier": { "PURL": "pkg:npm/form-data@4.0.0", "UID": "396c4d7769bbe783" }, "Version": "4.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/form-data/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "forwarded@0.2.0", "Name": "forwarded", "Identifier": { "PURL": "pkg:npm/forwarded@0.2.0", "UID": "6cc9a75d6d5aa98d" }, "Version": "0.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/forwarded/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "fresh@0.5.2", "Name": "fresh", "Identifier": { "PURL": "pkg:npm/fresh@0.5.2", "UID": "22d44ffc10d9a360" }, "Version": "0.5.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/fresh/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "fs-constants@1.0.0", "Name": "fs-constants", "Identifier": { "PURL": "pkg:npm/fs-constants@1.0.0", "UID": "b620ce43b0fd4903" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/fs-constants/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "fs-minipass@2.1.0", "Name": "fs-minipass", "Identifier": { "PURL": "pkg:npm/fs-minipass@2.1.0", "UID": "638e9cf340bfd280" }, "Version": "2.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/fs-minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "fs-minipass@3.0.3", "Name": "fs-minipass", "Identifier": { "PURL": "pkg:npm/fs-minipass@3.0.3", "UID": "fcead9aef62eff18" }, "Version": "3.0.3", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/fs-minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "fs.realpath@1.0.0", "Name": "fs.realpath", "Identifier": { "PURL": "pkg:npm/fs.realpath@1.0.0", "UID": "68ccd36d45c4936b" }, "Version": "1.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/fs.realpath/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "function-bind@1.1.2", "Name": "function-bind", "Identifier": { "PURL": "pkg:npm/function-bind@1.1.2", "UID": "67890e6c0d99f170" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/function-bind/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "gauge@4.0.4", "Name": "gauge", "Identifier": { "PURL": "pkg:npm/gauge@4.0.4", "UID": "c941082061b4919a" }, "Version": "4.0.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/node-gyp/node_modules/gauge/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "get-intrinsic@1.1.3", "Name": "get-intrinsic", "Identifier": { "PURL": "pkg:npm/get-intrinsic@1.1.3", "UID": "b9db664e82a407ce" }, "Version": "1.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/get-intrinsic/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "github-from-package@0.0.0", "Name": "github-from-package", "Identifier": { "PURL": "pkg:npm/github-from-package@0.0.0", "UID": "fde624db47046eee" }, "Version": "0.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/github-from-package/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "glob@13.0.6", "Name": "glob", "Identifier": { "PURL": "pkg:npm/glob@13.0.6", "UID": "172563f1159147e8" }, "Version": "13.0.6", "Licenses": [ "BlueOak-1.0.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/glob/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "glob@7.2.3", "Name": "glob", "Identifier": { "PURL": "pkg:npm/glob@7.2.3", "UID": "8b2122fce06516dc" }, "Version": "7.2.3", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/glob/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "graceful-fs@4.2.10", "Name": "graceful-fs", "Identifier": { "PURL": "pkg:npm/graceful-fs@4.2.10", "UID": "823e060b2beab725" }, "Version": "4.2.10", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/graceful-fs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "graceful-fs@4.2.11", "Name": "graceful-fs", "Identifier": { "PURL": "pkg:npm/graceful-fs@4.2.11", "UID": "48999ee23c560636" }, "Version": "4.2.11", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/graceful-fs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "has@1.0.3", "Name": "has", "Identifier": { "PURL": "pkg:npm/has@1.0.3", "UID": "75fd40682500145a" }, "Version": "1.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/has/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "has-symbols@1.0.3", "Name": "has-symbols", "Identifier": { "PURL": "pkg:npm/has-symbols@1.0.3", "UID": "7c0b6a01692fc25c" }, "Version": "1.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/has-symbols/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "has-unicode@2.0.1", "Name": "has-unicode", "Identifier": { "PURL": "pkg:npm/has-unicode@2.0.1", "UID": "191fb877e89cc3ef" }, "Version": "2.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/has-unicode/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "hosted-git-info@9.0.3", "Name": "hosted-git-info", "Identifier": { "PURL": "pkg:npm/hosted-git-info@9.0.3", "UID": "955c795a2266a14" }, "Version": "9.0.3", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/hosted-git-info/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "htmlparser2@8.0.1", "Name": "htmlparser2", "Identifier": { "PURL": "pkg:npm/htmlparser2@8.0.1", "UID": "5bff0514e7e96ead" }, "Version": "8.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/htmlparser2/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "http-cache-semantics@4.1.1", "Name": "http-cache-semantics", "Identifier": { "PURL": "pkg:npm/http-cache-semantics@4.1.1", "UID": "f0c137f3634df01c" }, "Version": "4.1.1", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/http-cache-semantics/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "http-cache-semantics@4.2.0", "Name": "http-cache-semantics", "Identifier": { "PURL": "pkg:npm/http-cache-semantics@4.2.0", "UID": "f7b0a7c67def6ec7" }, "Version": "4.2.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/http-cache-semantics/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "http-errors@2.0.0", "Name": "http-errors", "Identifier": { "PURL": "pkg:npm/http-errors@2.0.0", "UID": "b4948b4d47975ed1" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/http-errors/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "http-proxy-agent@4.0.1", "Name": "http-proxy-agent", "Identifier": { "PURL": "pkg:npm/http-proxy-agent@4.0.1", "UID": "3721263ef688d207" }, "Version": "4.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/http-proxy-agent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "http-proxy-agent@7.0.2", "Name": "http-proxy-agent", "Identifier": { "PURL": "pkg:npm/http-proxy-agent@7.0.2", "UID": "b03040e191aa89aa" }, "Version": "7.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/http-proxy-agent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "https-proxy-agent@5.0.1", "Name": "https-proxy-agent", "Identifier": { "PURL": "pkg:npm/https-proxy-agent@5.0.1", "UID": "f3ca3b80bec75316" }, "Version": "5.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/https-proxy-agent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "https-proxy-agent@7.0.6", "Name": "https-proxy-agent", "Identifier": { "PURL": "pkg:npm/https-proxy-agent@7.0.6", "UID": "e351f3713548ce82" }, "Version": "7.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/https-proxy-agent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "humanize-ms@1.2.1", "Name": "humanize-ms", "Identifier": { "PURL": "pkg:npm/humanize-ms@1.2.1", "UID": "5c719d7418f181fe" }, "Version": "1.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/humanize-ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "iconv-lite@0.4.24", "Name": "iconv-lite", "Identifier": { "PURL": "pkg:npm/iconv-lite@0.4.24", "UID": "c5c42068585bad50" }, "Version": "0.4.24", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/iconv-lite/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "iconv-lite@0.6.3", "Name": "iconv-lite", "Identifier": { "PURL": "pkg:npm/iconv-lite@0.6.3", "UID": "becf9e1b1f968987" }, "Version": "0.6.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/encoding/node_modules/iconv-lite/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "iconv-lite@0.7.2", "Name": "iconv-lite", "Identifier": { "PURL": "pkg:npm/iconv-lite@0.7.2", "UID": "fd5861248059c4c6" }, "Version": "0.7.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/iconv-lite/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ieee754@1.2.1", "Name": "ieee754", "Identifier": { "PURL": "pkg:npm/ieee754@1.2.1", "UID": "de15f7eaec8444b5" }, "Version": "1.2.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/ieee754/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ignore-walk@8.0.0", "Name": "ignore-walk", "Identifier": { "PURL": "pkg:npm/ignore-walk@8.0.0", "UID": "a266cd064d64a8f9" }, "Version": "8.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/ignore-walk/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "imurmurhash@0.1.4", "Name": "imurmurhash", "Identifier": { "PURL": "pkg:npm/imurmurhash@0.1.4", "UID": "657476b09fe14fd8" }, "Version": "0.1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/imurmurhash/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "indent-string@4.0.0", "Name": "indent-string", "Identifier": { "PURL": "pkg:npm/indent-string@4.0.0", "UID": "b2c7ee52eb7c11a" }, "Version": "4.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/indent-string/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "infer-owner@1.0.4", "Name": "infer-owner", "Identifier": { "PURL": "pkg:npm/infer-owner@1.0.4", "UID": "a878572c1043e975" }, "Version": "1.0.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/infer-owner/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "inflection@1.13.4", "Name": "inflection", "Identifier": { "PURL": "pkg:npm/inflection@1.13.4", "UID": "926d6e66296a32f" }, "Version": "1.13.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/inflection/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "inflight@1.0.6", "Name": "inflight", "Identifier": { "PURL": "pkg:npm/inflight@1.0.6", "UID": "c0f8e85dd4e03fd8" }, "Version": "1.0.6", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/inflight/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "inherits@2.0.4", "Name": "inherits", "Identifier": { "PURL": "pkg:npm/inherits@2.0.4", "UID": "743e1a08f0b7493f" }, "Version": "2.0.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/inherits/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ini@1.3.8", "Name": "ini", "Identifier": { "PURL": "pkg:npm/ini@1.3.8", "UID": "49b17fec09afb9b9" }, "Version": "1.3.8", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/ini/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ini@6.0.0", "Name": "ini", "Identifier": { "PURL": "pkg:npm/ini@6.0.0", "UID": "f005920fa3606b13" }, "Version": "6.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/ini/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "init-package-json@8.2.5", "Name": "init-package-json", "Identifier": { "PURL": "pkg:npm/init-package-json@8.2.5", "UID": "3f8b377ec7565070" }, "Version": "8.2.5", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/init-package-json/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ip@2.0.0", "Name": "ip", "Identifier": { "PURL": "pkg:npm/ip@2.0.0", "UID": "d670557a8e38f41f" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/ip/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ip-address@10.5.0", "Name": "ip-address", "Identifier": { "PURL": "pkg:npm/ip-address@10.5.0", "UID": "c0bf6846f3271c23" }, "Version": "10.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/ip-address/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ipaddr.js@1.9.1", "Name": "ipaddr.js", "Identifier": { "PURL": "pkg:npm/ipaddr.js@1.9.1", "UID": "5c2f37d7873f7e3d" }, "Version": "1.9.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/ipaddr.js/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ipaddr.js@2.1.0", "Name": "ipaddr.js", "Identifier": { "PURL": "pkg:npm/ipaddr.js@2.1.0", "UID": "18fe69f25996301f" }, "Version": "2.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/ssrf-req-filter/node_modules/ipaddr.js/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-cidr@6.0.4", "Name": "is-cidr", "Identifier": { "PURL": "pkg:npm/is-cidr@6.0.4", "UID": "4d71ad1f3f6a859a" }, "Version": "6.0.4", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/is-cidr/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-fullwidth-code-point@3.0.0", "Name": "is-fullwidth-code-point", "Identifier": { "PURL": "pkg:npm/is-fullwidth-code-point@3.0.0", "UID": "69e255603a2214ba" }, "Version": "3.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/is-fullwidth-code-point/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "is-lambda@1.0.1", "Name": "is-lambda", "Identifier": { "PURL": "pkg:npm/is-lambda@1.0.1", "UID": "3ce6cad8e3f894dc" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/is-lambda/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "isexe@2.0.0", "Name": "isexe", "Identifier": { "PURL": "pkg:npm/isexe@2.0.0", "UID": "fea1f77ba92eb62a" }, "Version": "2.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/isexe/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "isexe@4.0.0", "Name": "isexe", "Identifier": { "PURL": "pkg:npm/isexe@4.0.0", "UID": "bf53a631dc9c831" }, "Version": "4.0.0", "Licenses": [ "BlueOak-1.0.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/isexe/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "jose@4.15.4", "Name": "jose", "Identifier": { "PURL": "pkg:npm/jose@4.15.4", "UID": "b4f4d908a022bd71" }, "Version": "4.15.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/jose/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "json-parse-even-better-errors@5.0.0", "Name": "json-parse-even-better-errors", "Identifier": { "PURL": "pkg:npm/json-parse-even-better-errors@5.0.0", "UID": "caf28ac402e028fa" }, "Version": "5.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/json-parse-even-better-errors/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "json-stringify-nice@1.1.4", "Name": "json-stringify-nice", "Identifier": { "PURL": "pkg:npm/json-stringify-nice@1.1.4", "UID": "c5c27ed2359935d9" }, "Version": "1.1.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/json-stringify-nice/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "jsonparse@1.3.1", "Name": "jsonparse", "Identifier": { "PURL": "pkg:npm/jsonparse@1.3.1", "UID": "6d24ba846346e57e" }, "Version": "1.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/jsonparse/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "jsonwebtoken@9.0.2", "Name": "jsonwebtoken", "Identifier": { "PURL": "pkg:npm/jsonwebtoken@9.0.2", "UID": "a57e57801436e453" }, "Version": "9.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/jsonwebtoken/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "just-diff@6.0.2", "Name": "just-diff", "Identifier": { "PURL": "pkg:npm/just-diff@6.0.2", "UID": "c6c2fd84314937b7" }, "Version": "6.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/just-diff/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "just-diff-apply@5.5.0", "Name": "just-diff-apply", "Identifier": { "PURL": "pkg:npm/just-diff-apply@5.5.0", "UID": "f52effebae09b036" }, "Version": "5.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/just-diff-apply/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "jwa@1.4.1", "Name": "jwa", "Identifier": { "PURL": "pkg:npm/jwa@1.4.1", "UID": "6648b4e5ac26dc29" }, "Version": "1.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/jwa/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "jws@3.2.2", "Name": "jws", "Identifier": { "PURL": "pkg:npm/jws@3.2.2", "UID": "38f9df3df1965732" }, "Version": "3.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/jws/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmaccess@10.0.3", "Name": "libnpmaccess", "Identifier": { "PURL": "pkg:npm/libnpmaccess@10.0.3", "UID": "56a696973189118e" }, "Version": "10.0.3", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmaccess/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmdiff@8.1.12", "Name": "libnpmdiff", "Identifier": { "PURL": "pkg:npm/libnpmdiff@8.1.12", "UID": "ac1ef02da491284a" }, "Version": "8.1.12", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmdiff/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmexec@10.3.2", "Name": "libnpmexec", "Identifier": { "PURL": "pkg:npm/libnpmexec@10.3.2", "UID": "79ad1abe8fe2bc7c" }, "Version": "10.3.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmexec/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmfund@7.0.26", "Name": "libnpmfund", "Identifier": { "PURL": "pkg:npm/libnpmfund@7.0.26", "UID": "92fa7b7c1730d98a" }, "Version": "7.0.26", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmfund/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmorg@8.0.1", "Name": "libnpmorg", "Identifier": { "PURL": "pkg:npm/libnpmorg@8.0.1", "UID": "3a1e54c9b0191383" }, "Version": "8.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmorg/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmpack@9.1.13", "Name": "libnpmpack", "Identifier": { "PURL": "pkg:npm/libnpmpack@9.1.13", "UID": "96e2cc51d2d8e957" }, "Version": "9.1.13", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmpack/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmpublish@11.2.0", "Name": "libnpmpublish", "Identifier": { "PURL": "pkg:npm/libnpmpublish@11.2.0", "UID": "53ea952e92b7fe56" }, "Version": "11.2.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmpublish/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmsearch@9.0.1", "Name": "libnpmsearch", "Identifier": { "PURL": "pkg:npm/libnpmsearch@9.0.1", "UID": "9e31ad9b20de8711" }, "Version": "9.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmsearch/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmteam@8.0.2", "Name": "libnpmteam", "Identifier": { "PURL": "pkg:npm/libnpmteam@8.0.2", "UID": "71eccb7f85b7085c" }, "Version": "8.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmteam/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "libnpmversion@8.0.4", "Name": "libnpmversion", "Identifier": { "PURL": "pkg:npm/libnpmversion@8.0.4", "UID": "dd4ad49426954b86" }, "Version": "8.0.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmversion/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lodash@4.17.21", "Name": "lodash", "Identifier": { "PURL": "pkg:npm/lodash@4.17.21", "UID": "d36399f819217b44" }, "Version": "4.17.21", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/lodash/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lodash.includes@4.3.0", "Name": "lodash.includes", "Identifier": { "PURL": "pkg:npm/lodash.includes@4.3.0", "UID": "c5817f30d0eb7442" }, "Version": "4.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/lodash.includes/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lodash.isboolean@3.0.3", "Name": "lodash.isboolean", "Identifier": { "PURL": "pkg:npm/lodash.isboolean@3.0.3", "UID": "f0629f20e7525a13" }, "Version": "3.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/lodash.isboolean/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lodash.isinteger@4.0.4", "Name": "lodash.isinteger", "Identifier": { "PURL": "pkg:npm/lodash.isinteger@4.0.4", "UID": "be075744ba7870fe" }, "Version": "4.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/lodash.isinteger/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lodash.isnumber@3.0.3", "Name": "lodash.isnumber", "Identifier": { "PURL": "pkg:npm/lodash.isnumber@3.0.3", "UID": "abb910dc7cf8e05b" }, "Version": "3.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/lodash.isnumber/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lodash.isplainobject@4.0.6", "Name": "lodash.isplainobject", "Identifier": { "PURL": "pkg:npm/lodash.isplainobject@4.0.6", "UID": "cdff8c217d8f280" }, "Version": "4.0.6", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/lodash.isplainobject/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lodash.isstring@4.0.1", "Name": "lodash.isstring", "Identifier": { "PURL": "pkg:npm/lodash.isstring@4.0.1", "UID": "fbbe5f83aa3923af" }, "Version": "4.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/lodash.isstring/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lodash.once@4.1.1", "Name": "lodash.once", "Identifier": { "PURL": "pkg:npm/lodash.once@4.1.1", "UID": "bbe4f678fbc14cc7" }, "Version": "4.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/lodash.once/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lru-cache@10.0.3", "Name": "lru-cache", "Identifier": { "PURL": "pkg:npm/lru-cache@10.0.3", "UID": "afa5c247f5831162" }, "Version": "10.0.3", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/lru-cache/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lru-cache@11.5.1", "Name": "lru-cache", "Identifier": { "PURL": "pkg:npm/lru-cache@11.5.1", "UID": "9d6613a6bf625136" }, "Version": "11.5.1", "Licenses": [ "BlueOak-1.0.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/lru-cache/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lru-cache@6.0.0", "Name": "lru-cache", "Identifier": { "PURL": "pkg:npm/lru-cache@6.0.0", "UID": "c0855496502d9a43" }, "Version": "6.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/cacache/node_modules/lru-cache/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lru-cache@6.0.0", "Name": "lru-cache", "Identifier": { "PURL": "pkg:npm/lru-cache@6.0.0", "UID": "d3c8082bed2f1376" }, "Version": "6.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/make-fetch-happen/node_modules/lru-cache/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "lru-cache@6.0.0", "Name": "lru-cache", "Identifier": { "PURL": "pkg:npm/lru-cache@6.0.0", "UID": "225591106fec6885" }, "Version": "6.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/openid-client/node_modules/lru-cache/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "make-fetch-happen@15.0.6", "Name": "make-fetch-happen", "Identifier": { "PURL": "pkg:npm/make-fetch-happen@15.0.6", "UID": "df3f4cc3ab8ef469" }, "Version": "15.0.6", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/make-fetch-happen/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "make-fetch-happen@9.1.0", "Name": "make-fetch-happen", "Identifier": { "PURL": "pkg:npm/make-fetch-happen@9.1.0", "UID": "c1c39ed0888587b7" }, "Version": "9.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/make-fetch-happen/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "media-typer@0.3.0", "Name": "media-typer", "Identifier": { "PURL": "pkg:npm/media-typer@0.3.0", "UID": "9ed9a2d972d300aa" }, "Version": "0.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/media-typer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "merge-descriptors@1.0.1", "Name": "merge-descriptors", "Identifier": { "PURL": "pkg:npm/merge-descriptors@1.0.1", "UID": "d7d741dae63dfe06" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/merge-descriptors/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "methods@1.1.2", "Name": "methods", "Identifier": { "PURL": "pkg:npm/methods@1.1.2", "UID": "ec67f96c3e85de3" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/methods/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mime@1.6.0", "Name": "mime", "Identifier": { "PURL": "pkg:npm/mime@1.6.0", "UID": "a65fd45312411071" }, "Version": "1.6.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/mime/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mime-db@1.52.0", "Name": "mime-db", "Identifier": { "PURL": "pkg:npm/mime-db@1.52.0", "UID": "d95fd697f1f981a2" }, "Version": "1.52.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/mime-db/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mime-types@2.1.35", "Name": "mime-types", "Identifier": { "PURL": "pkg:npm/mime-types@2.1.35", "UID": "4c030f30aec2a2f9" }, "Version": "2.1.35", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/mime-types/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mimic-response@3.1.0", "Name": "mimic-response", "Identifier": { "PURL": "pkg:npm/mimic-response@3.1.0", "UID": "db5241c6cc7a283c" }, "Version": "3.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/mimic-response/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minimatch@10.2.5", "Name": "minimatch", "Identifier": { "PURL": "pkg:npm/minimatch@10.2.5", "UID": "864a32484f674d54" }, "Version": "10.2.5", "Licenses": [ "BlueOak-1.0.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minimatch/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minimatch@3.1.5", "Name": "minimatch", "Identifier": { "PURL": "pkg:npm/minimatch@3.1.5", "UID": "ce57c6c6610c6fa9" }, "Version": "3.1.5", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/minimatch/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minimist@1.2.8", "Name": "minimist", "Identifier": { "PURL": "pkg:npm/minimist@1.2.8", "UID": "97aad626c742dcd5" }, "Version": "1.2.8", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/minimist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass@3.3.6", "Name": "minipass", "Identifier": { "PURL": "pkg:npm/minipass@3.3.6", "UID": "31501ee2399aa940" }, "Version": "3.3.6", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass@3.3.6", "Name": "minipass", "Identifier": { "PURL": "pkg:npm/minipass@3.3.6", "UID": "b7ce61ea2292da41" }, "Version": "3.3.6", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-pipeline/node_modules/minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass@5.0.0", "Name": "minipass", "Identifier": { "PURL": "pkg:npm/minipass@5.0.0", "UID": "28d8b7ac8d274f1d" }, "Version": "5.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/tar/node_modules/minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass@7.1.3", "Name": "minipass", "Identifier": { "PURL": "pkg:npm/minipass@7.1.3", "UID": "4051bad8dec024d1" }, "Version": "7.1.3", "Licenses": [ "BlueOak-1.0.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-collect@1.0.2", "Name": "minipass-collect", "Identifier": { "PURL": "pkg:npm/minipass-collect@1.0.2", "UID": "e9eeee448dc29365" }, "Version": "1.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/minipass-collect/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-collect@2.0.1", "Name": "minipass-collect", "Identifier": { "PURL": "pkg:npm/minipass-collect@2.0.1", "UID": "c5f716d9c0ec4b92" }, "Version": "2.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-collect/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-fetch@1.4.1", "Name": "minipass-fetch", "Identifier": { "PURL": "pkg:npm/minipass-fetch@1.4.1", "UID": "9d69a7c9d8d69be3" }, "Version": "1.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/minipass-fetch/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-fetch@5.0.2", "Name": "minipass-fetch", "Identifier": { "PURL": "pkg:npm/minipass-fetch@5.0.2", "UID": "127b714d1e52aa15" }, "Version": "5.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-fetch/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-flush@1.0.5", "Name": "minipass-flush", "Identifier": { "PURL": "pkg:npm/minipass-flush@1.0.5", "UID": "c16c310195b28d22" }, "Version": "1.0.5", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/minipass-flush/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-flush@1.0.6", "Name": "minipass-flush", "Identifier": { "PURL": "pkg:npm/minipass-flush@1.0.6", "UID": "8916edb862d539fd" }, "Version": "1.0.6", "Licenses": [ "BlueOak-1.0.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-flush/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-pipeline@1.2.4", "Name": "minipass-pipeline", "Identifier": { "PURL": "pkg:npm/minipass-pipeline@1.2.4", "UID": "624c5a12c057a503" }, "Version": "1.2.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/minipass-pipeline/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-pipeline@1.2.4", "Name": "minipass-pipeline", "Identifier": { "PURL": "pkg:npm/minipass-pipeline@1.2.4", "UID": "f9ca1e5f3449b3dc" }, "Version": "1.2.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-pipeline/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-sized@1.0.3", "Name": "minipass-sized", "Identifier": { "PURL": "pkg:npm/minipass-sized@1.0.3", "UID": "5a94052e4a7f4200" }, "Version": "1.0.3", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/minipass-sized/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minipass-sized@2.0.0", "Name": "minipass-sized", "Identifier": { "PURL": "pkg:npm/minipass-sized@2.0.0", "UID": "148942e5c7dd1a67" }, "Version": "2.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-sized/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minizlib@2.1.2", "Name": "minizlib", "Identifier": { "PURL": "pkg:npm/minizlib@2.1.2", "UID": "61d786286a434cfe" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/minizlib/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "minizlib@3.1.0", "Name": "minizlib", "Identifier": { "PURL": "pkg:npm/minizlib@3.1.0", "UID": "c55f100e28b906b" }, "Version": "3.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minizlib/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mkdirp@1.0.4", "Name": "mkdirp", "Identifier": { "PURL": "pkg:npm/mkdirp@1.0.4", "UID": "a4bf7e503185a329" }, "Version": "1.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/mkdirp/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mkdirp-classic@0.5.3", "Name": "mkdirp-classic", "Identifier": { "PURL": "pkg:npm/mkdirp-classic@0.5.3", "UID": "f7dd706788a7add5" }, "Version": "0.5.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/mkdirp-classic/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "moment@2.29.4", "Name": "moment", "Identifier": { "PURL": "pkg:npm/moment@2.29.4", "UID": "b02141ce468fb063" }, "Version": "2.29.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/moment/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "moment-timezone@0.5.43", "Name": "moment-timezone", "Identifier": { "PURL": "pkg:npm/moment-timezone@0.5.43", "UID": "c64da4974a799fea" }, "Version": "0.5.43", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/moment-timezone/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.0.0", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.0.0", "UID": "7ea249b7b50fe4db" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.1.2", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.1.2", "UID": "af37fdfbece9c15" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/agent-base/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.1.2", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.1.2", "UID": "d8774c05e4e36085" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/agentkeepalive/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.1.2", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.1.2", "UID": "91a4f07b281e9681" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/engine.io/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.1.2", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.1.2", "UID": "4530b0739cdd8fcd" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/http-proxy-agent/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.1.2", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.1.2", "UID": "4dbd20ea49d543b0" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/https-proxy-agent/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.1.2", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.1.2", "UID": "b8128863a3c31400" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/sequelize/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.1.2", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.1.2", "UID": "f666c3607b967bf2" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/socket.io-parser/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.1.2", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.1.2", "UID": "6fe527aaab62a000" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/socket.io/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.1.2", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.1.2", "UID": "7f1523065cac49d6" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/socks-proxy-agent/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.1.3", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.1.3", "UID": "ab736e828ace848b" }, "Version": "2.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/jsonwebtoken/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.1.3", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.1.3", "UID": "cd8f3a1c42a98ec" }, "Version": "2.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/send/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ms@2.1.3", "Name": "ms", "Identifier": { "PURL": "pkg:npm/ms@2.1.3", "UID": "50a140c9d554dc56" }, "Version": "2.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/ms/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "mute-stream@3.0.0", "Name": "mute-stream", "Identifier": { "PURL": "pkg:npm/mute-stream@3.0.0", "UID": "b845f193cc4b6309" }, "Version": "3.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/mute-stream/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "napi-build-utils@2.0.0", "Name": "napi-build-utils", "Identifier": { "PURL": "pkg:npm/napi-build-utils@2.0.0", "UID": "81e7072600f47a8d" }, "Version": "2.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/napi-build-utils/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "negotiator@0.6.3", "Name": "negotiator", "Identifier": { "PURL": "pkg:npm/negotiator@0.6.3", "UID": "d4631243bb36e61f" }, "Version": "0.6.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/negotiator/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "negotiator@1.0.0", "Name": "negotiator", "Identifier": { "PURL": "pkg:npm/negotiator@1.0.0", "UID": "28c19cc3e361ce6c" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/negotiator/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "node-abi@3.74.0", "Name": "node-abi", "Identifier": { "PURL": "pkg:npm/node-abi@3.74.0", "UID": "87987a49fb9a8949" }, "Version": "3.74.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/node-abi/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "node-addon-api@7.1.1", "Name": "node-addon-api", "Identifier": { "PURL": "pkg:npm/node-addon-api@7.1.1", "UID": "d33bf6088d9038bf" }, "Version": "7.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/node-addon-api/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "node-gyp@12.4.0", "Name": "node-gyp", "Identifier": { "PURL": "pkg:npm/node-gyp@12.4.0", "UID": "4e4eac31ca0d87bc" }, "Version": "12.4.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/node-gyp/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "node-gyp@8.4.1", "Name": "node-gyp", "Identifier": { "PURL": "pkg:npm/node-gyp@8.4.1", "UID": "58c155bfdfcf941c" }, "Version": "8.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/node-gyp/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "node-unrar-js@2.0.2", "Name": "node-unrar-js", "Identifier": { "PURL": "pkg:npm/node-unrar-js@2.0.2", "UID": "12bcb94ee936fd45" }, "Version": "2.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/node-unrar-js/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "nodemailer@6.9.13", "Name": "nodemailer", "Identifier": { "PURL": "pkg:npm/nodemailer@6.9.13", "UID": "1d2bbe563b5cc4da" }, "Version": "6.9.13", "Licenses": [ "MIT-0" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/nodemailer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "nopt@5.0.0", "Name": "nopt", "Identifier": { "PURL": "pkg:npm/nopt@5.0.0", "UID": "b871abca26a10566" }, "Version": "5.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/node-gyp/node_modules/nopt/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "nopt@9.0.0", "Name": "nopt", "Identifier": { "PURL": "pkg:npm/nopt@9.0.0", "UID": "a0dcc3fd49da4deb" }, "Version": "9.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/nopt/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm@11.19.1", "Name": "npm", "Identifier": { "PURL": "pkg:npm/npm@11.19.1", "UID": "9e1e1f18cba1f0d1" }, "Version": "11.19.1", "Licenses": [ "Artistic-2.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm-audit-report@7.0.0", "Name": "npm-audit-report", "Identifier": { "PURL": "pkg:npm/npm-audit-report@7.0.0", "UID": "a904c3123854995b" }, "Version": "7.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-audit-report/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm-bundled@5.0.0", "Name": "npm-bundled", "Identifier": { "PURL": "pkg:npm/npm-bundled@5.0.0", "UID": "dd3b54d7737b6bb4" }, "Version": "5.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-bundled/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm-install-checks@8.0.0", "Name": "npm-install-checks", "Identifier": { "PURL": "pkg:npm/npm-install-checks@8.0.0", "UID": "341ab23c4124b244" }, "Version": "8.0.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-install-checks/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm-normalize-package-bin@5.0.0", "Name": "npm-normalize-package-bin", "Identifier": { "PURL": "pkg:npm/npm-normalize-package-bin@5.0.0", "UID": "a32c3aa151337c66" }, "Version": "5.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-normalize-package-bin/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm-package-arg@13.0.2", "Name": "npm-package-arg", "Identifier": { "PURL": "pkg:npm/npm-package-arg@13.0.2", "UID": "68d9460fcb7c259b" }, "Version": "13.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-package-arg/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm-packlist@10.0.4", "Name": "npm-packlist", "Identifier": { "PURL": "pkg:npm/npm-packlist@10.0.4", "UID": "e39e77db95896865" }, "Version": "10.0.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-packlist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm-pick-manifest@11.0.3", "Name": "npm-pick-manifest", "Identifier": { "PURL": "pkg:npm/npm-pick-manifest@11.0.3", "UID": "363c2920d8231c7b" }, "Version": "11.0.3", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-pick-manifest/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm-profile@12.0.2", "Name": "npm-profile", "Identifier": { "PURL": "pkg:npm/npm-profile@12.0.2", "UID": "82e0c376c0a7e957" }, "Version": "12.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-profile/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm-registry-fetch@19.1.1", "Name": "npm-registry-fetch", "Identifier": { "PURL": "pkg:npm/npm-registry-fetch@19.1.1", "UID": "acba36c78be68712" }, "Version": "19.1.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-registry-fetch/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npm-user-validate@4.0.0", "Name": "npm-user-validate", "Identifier": { "PURL": "pkg:npm/npm-user-validate@4.0.0", "UID": "1d42085a5251bbea" }, "Version": "4.0.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-user-validate/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "npmlog@6.0.2", "Name": "npmlog", "Identifier": { "PURL": "pkg:npm/npmlog@6.0.2", "UID": "94f760e77712647b" }, "Version": "6.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/node-gyp/node_modules/npmlog/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "object-assign@4.1.1", "Name": "object-assign", "Identifier": { "PURL": "pkg:npm/object-assign@4.1.1", "UID": "90f77b0b136af73" }, "Version": "4.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/object-assign/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "object-hash@2.2.0", "Name": "object-hash", "Identifier": { "PURL": "pkg:npm/object-hash@2.2.0", "UID": "2108c9c3937ef1a9" }, "Version": "2.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/object-hash/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "object-inspect@1.12.2", "Name": "object-inspect", "Identifier": { "PURL": "pkg:npm/object-inspect@1.12.2", "UID": "4a7d67937befe399" }, "Version": "1.12.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/object-inspect/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "oidc-token-hash@5.0.3", "Name": "oidc-token-hash", "Identifier": { "PURL": "pkg:npm/oidc-token-hash@5.0.3", "UID": "291d151aab7fc937" }, "Version": "5.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/oidc-token-hash/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "on-finished@2.4.1", "Name": "on-finished", "Identifier": { "PURL": "pkg:npm/on-finished@2.4.1", "UID": "6bd750adc27f983d" }, "Version": "2.4.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/on-finished/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "on-headers@1.0.2", "Name": "on-headers", "Identifier": { "PURL": "pkg:npm/on-headers@1.0.2", "UID": "1341d7d35d04b4ca" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/on-headers/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "once@1.4.0", "Name": "once", "Identifier": { "PURL": "pkg:npm/once@1.4.0", "UID": "f2ad1313aa88f7de" }, "Version": "1.4.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/once/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "openid-client@5.6.1", "Name": "openid-client", "Identifier": { "PURL": "pkg:npm/openid-client@5.6.1", "UID": "c5193080f29b9b24" }, "Version": "5.6.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/openid-client/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "p-map@4.0.0", "Name": "p-map", "Identifier": { "PURL": "pkg:npm/p-map@4.0.0", "UID": "aad78c2bb567f4a2" }, "Version": "4.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/p-map/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "p-map@7.0.4", "Name": "p-map", "Identifier": { "PURL": "pkg:npm/p-map@7.0.4", "UID": "7de5ffb924393231" }, "Version": "7.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/p-map/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "p-throttle@4.1.1", "Name": "p-throttle", "Identifier": { "PURL": "pkg:npm/p-throttle@4.1.1", "UID": "633d3fef72f3645c" }, "Version": "4.1.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/p-throttle/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "pacote@21.5.1", "Name": "pacote", "Identifier": { "PURL": "pkg:npm/pacote@21.5.1", "UID": "c47695f72b3e695d" }, "Version": "21.5.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/pacote/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "parse-conflict-json@5.0.1", "Name": "parse-conflict-json", "Identifier": { "PURL": "pkg:npm/parse-conflict-json@5.0.1", "UID": "b7220d28f68b757a" }, "Version": "5.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/parse-conflict-json/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "parseurl@1.3.3", "Name": "parseurl", "Identifier": { "PURL": "pkg:npm/parseurl@1.3.3", "UID": "c072101b842465b4" }, "Version": "1.3.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/parseurl/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "passport@0.6.0", "Name": "passport", "Identifier": { "PURL": "pkg:npm/passport@0.6.0", "UID": "c947a238723fb7f3" }, "Version": "0.6.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/passport/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "passport-jwt@4.0.1", "Name": "passport-jwt", "Identifier": { "PURL": "pkg:npm/passport-jwt@4.0.1", "UID": "ac5c92f2aa289fa9" }, "Version": "4.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/passport-jwt/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "passport-strategy@1.0.0", "Name": "passport-strategy", "Identifier": { "PURL": "pkg:npm/passport-strategy@1.0.0", "UID": "9fdcabcbcc7f81eb" }, "Version": "1.0.0", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/passport-strategy/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "path-is-absolute@1.0.1", "Name": "path-is-absolute", "Identifier": { "PURL": "pkg:npm/path-is-absolute@1.0.1", "UID": "786383743bee48e" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/path-is-absolute/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "path-scurry@2.0.2", "Name": "path-scurry", "Identifier": { "PURL": "pkg:npm/path-scurry@2.0.2", "UID": "ed6a2a1491a16f6e" }, "Version": "2.0.2", "Licenses": [ "BlueOak-1.0.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/path-scurry/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "path-to-regexp@0.1.7", "Name": "path-to-regexp", "Identifier": { "PURL": "pkg:npm/path-to-regexp@0.1.7", "UID": "4aed6ec4b2575bdd" }, "Version": "0.1.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/path-to-regexp/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "pause@0.0.1", "Name": "pause", "Identifier": { "PURL": "pkg:npm/pause@0.0.1", "UID": "2f53fbdbb9fa8f2c" }, "Version": "0.0.1", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/pause/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "pg-connection-string@2.6.1", "Name": "pg-connection-string", "Identifier": { "PURL": "pkg:npm/pg-connection-string@2.6.1", "UID": "79c60f91c9aacda2" }, "Version": "2.6.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/pg-connection-string/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "picomatch@4.0.4", "Name": "picomatch", "Identifier": { "PURL": "pkg:npm/picomatch@4.0.4", "UID": "33c5334805cbffab" }, "Version": "4.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/tinyglobby/node_modules/picomatch/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "postcss-selector-parser@7.1.4", "Name": "postcss-selector-parser", "Identifier": { "PURL": "pkg:npm/postcss-selector-parser@7.1.4", "UID": "2630291d022c3549" }, "Version": "7.1.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/postcss-selector-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "prebuild-install@7.1.3", "Name": "prebuild-install", "Identifier": { "PURL": "pkg:npm/prebuild-install@7.1.3", "UID": "2ab80354a807b8e6" }, "Version": "7.1.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/prebuild-install/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "proc-log@6.1.0", "Name": "proc-log", "Identifier": { "PURL": "pkg:npm/proc-log@6.1.0", "UID": "a426910986567598" }, "Version": "6.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/proc-log/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "proggy@4.0.0", "Name": "proggy", "Identifier": { "PURL": "pkg:npm/proggy@4.0.0", "UID": "b9c829fb91367db8" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/proggy/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "promise-all-reject-late@1.0.1", "Name": "promise-all-reject-late", "Identifier": { "PURL": "pkg:npm/promise-all-reject-late@1.0.1", "UID": "759c5c0dfe22841e" }, "Version": "1.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/promise-all-reject-late/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "promise-call-limit@3.0.2", "Name": "promise-call-limit", "Identifier": { "PURL": "pkg:npm/promise-call-limit@3.0.2", "UID": "d3e52c24867edbc5" }, "Version": "3.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/promise-call-limit/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "promise-inflight@1.0.1", "Name": "promise-inflight", "Identifier": { "PURL": "pkg:npm/promise-inflight@1.0.1", "UID": "49488d2f27fcb070" }, "Version": "1.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/promise-inflight/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "promise-retry@2.0.1", "Name": "promise-retry", "Identifier": { "PURL": "pkg:npm/promise-retry@2.0.1", "UID": "3c1155108b51908c" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/promise-retry/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "promzard@3.0.1", "Name": "promzard", "Identifier": { "PURL": "pkg:npm/promzard@3.0.1", "UID": "5df1e06ffd94fafc" }, "Version": "3.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/promzard/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "proxy-addr@2.0.7", "Name": "proxy-addr", "Identifier": { "PURL": "pkg:npm/proxy-addr@2.0.7", "UID": "de768ad757b6600d" }, "Version": "2.0.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/proxy-addr/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "pump@3.0.2", "Name": "pump", "Identifier": { "PURL": "pkg:npm/pump@3.0.2", "UID": "368373945d795d9a" }, "Version": "3.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/pump/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "qrcode-terminal@0.12.0", "Name": "qrcode-terminal", "Identifier": { "PURL": "pkg:npm/qrcode-terminal@0.12.0", "UID": "b17a7c2ec3321961" }, "Version": "0.12.0", "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/qrcode-terminal/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "qs@6.11.0", "Name": "qs", "Identifier": { "PURL": "pkg:npm/qs@6.11.0", "UID": "295d40ed2cd4a12d" }, "Version": "6.11.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/qs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "random-bytes@1.0.0", "Name": "random-bytes", "Identifier": { "PURL": "pkg:npm/random-bytes@1.0.0", "UID": "ca1bcbee108478f2" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/random-bytes/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "range-parser@1.2.1", "Name": "range-parser", "Identifier": { "PURL": "pkg:npm/range-parser@1.2.1", "UID": "3245059fe66058" }, "Version": "1.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/range-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "raw-body@2.5.1", "Name": "raw-body", "Identifier": { "PURL": "pkg:npm/raw-body@2.5.1", "UID": "47e45c2b5442991a" }, "Version": "2.5.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/raw-body/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "rc@1.2.8", "Name": "rc", "Identifier": { "PURL": "pkg:npm/rc@1.2.8", "UID": "bf10d73287b64b82" }, "Version": "1.2.8", "Licenses": [ "(BSD-2-Clause OR MIT OR Apache-2.0)" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/rc/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "read@5.0.1", "Name": "read", "Identifier": { "PURL": "pkg:npm/read@5.0.1", "UID": "a1c68d2ab17afe68" }, "Version": "5.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/read/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "read-cmd-shim@6.0.0", "Name": "read-cmd-shim", "Identifier": { "PURL": "pkg:npm/read-cmd-shim@6.0.0", "UID": "59d39b9ba7aec7ef" }, "Version": "6.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/read-cmd-shim/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "readable-stream@3.6.2", "Name": "readable-stream", "Identifier": { "PURL": "pkg:npm/readable-stream@3.6.2", "UID": "643c781296d5d7b3" }, "Version": "3.6.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/readable-stream/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "retry@0.12.0", "Name": "retry", "Identifier": { "PURL": "pkg:npm/retry@0.12.0", "UID": "17cadf6042767910" }, "Version": "0.12.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/retry/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "retry-as-promised@7.0.4", "Name": "retry-as-promised", "Identifier": { "PURL": "pkg:npm/retry-as-promised@7.0.4", "UID": "d0b1fa7fcc9ddc64" }, "Version": "7.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/retry-as-promised/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "rimraf@3.0.2", "Name": "rimraf", "Identifier": { "PURL": "pkg:npm/rimraf@3.0.2", "UID": "a5ac924f0c2fff4f" }, "Version": "3.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/rimraf/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "safe-buffer@5.2.1", "Name": "safe-buffer", "Identifier": { "PURL": "pkg:npm/safe-buffer@5.2.1", "UID": "8e81aae28ac8c5b4" }, "Version": "5.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/safe-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "safer-buffer@2.1.2", "Name": "safer-buffer", "Identifier": { "PURL": "pkg:npm/safer-buffer@2.1.2", "UID": "cdf3536e56ce54f9" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/safer-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "safer-buffer@2.1.2", "Name": "safer-buffer", "Identifier": { "PURL": "pkg:npm/safer-buffer@2.1.2", "UID": "c91f6999c7debfda" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/safer-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "sax@1.2.4", "Name": "sax", "Identifier": { "PURL": "pkg:npm/sax@1.2.4", "UID": "ba8cf08dddbba9ec" }, "Version": "1.2.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/sax/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "semver@7.6.3", "Name": "semver", "Identifier": { "PURL": "pkg:npm/semver@7.6.3", "UID": "80fb0cb3e5a0f4dd" }, "Version": "7.6.3", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/semver/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "semver@7.8.5", "Name": "semver", "Identifier": { "PURL": "pkg:npm/semver@7.8.5", "UID": "4c91a0ec6a9d4a03" }, "Version": "7.8.5", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/semver/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "send@0.18.0", "Name": "send", "Identifier": { "PURL": "pkg:npm/send@0.18.0", "UID": "9f9a3205c11ce39f" }, "Version": "0.18.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/send/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "sequelize@6.35.2", "Name": "sequelize", "Identifier": { "PURL": "pkg:npm/sequelize@6.35.2", "UID": "cd6d84b9b2e21257" }, "Version": "6.35.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/sequelize/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "sequelize-pool@7.1.0", "Name": "sequelize-pool", "Identifier": { "PURL": "pkg:npm/sequelize-pool@7.1.0", "UID": "8f6243fa5af89737" }, "Version": "7.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/sequelize-pool/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "serve-static@1.15.0", "Name": "serve-static", "Identifier": { "PURL": "pkg:npm/serve-static@1.15.0", "UID": "730b70f716925ba1" }, "Version": "1.15.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/serve-static/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "set-blocking@2.0.0", "Name": "set-blocking", "Identifier": { "PURL": "pkg:npm/set-blocking@2.0.0", "UID": "37e7f49e136251c0" }, "Version": "2.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/set-blocking/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "setprototypeof@1.2.0", "Name": "setprototypeof", "Identifier": { "PURL": "pkg:npm/setprototypeof@1.2.0", "UID": "63e957bae8698175" }, "Version": "1.2.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/setprototypeof/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "side-channel@1.0.4", "Name": "side-channel", "Identifier": { "PURL": "pkg:npm/side-channel@1.0.4", "UID": "a23555e0a9d6c0c6" }, "Version": "1.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/side-channel/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "signal-exit@3.0.7", "Name": "signal-exit", "Identifier": { "PURL": "pkg:npm/signal-exit@3.0.7", "UID": "b9bee02f9e0c3724" }, "Version": "3.0.7", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/signal-exit/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "signal-exit@4.1.0", "Name": "signal-exit", "Identifier": { "PURL": "pkg:npm/signal-exit@4.1.0", "UID": "883b84195e986f6a" }, "Version": "4.1.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/signal-exit/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "sigstore@4.1.1", "Name": "sigstore", "Identifier": { "PURL": "pkg:npm/sigstore@4.1.1", "UID": "8d17e691c88ae318" }, "Version": "4.1.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/sigstore/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "simple-concat@1.0.1", "Name": "simple-concat", "Identifier": { "PURL": "pkg:npm/simple-concat@1.0.1", "UID": "10b2d33b76dc5fa4" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/simple-concat/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "simple-get@4.0.1", "Name": "simple-get", "Identifier": { "PURL": "pkg:npm/simple-get@4.0.1", "UID": "bd398ca7b278f344" }, "Version": "4.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/simple-get/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "smart-buffer@4.2.0", "Name": "smart-buffer", "Identifier": { "PURL": "pkg:npm/smart-buffer@4.2.0", "UID": "67108c59cb121266" }, "Version": "4.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/smart-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "smart-buffer@4.2.0", "Name": "smart-buffer", "Identifier": { "PURL": "pkg:npm/smart-buffer@4.2.0", "UID": "f0c5ee9f68d6fddf" }, "Version": "4.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/smart-buffer/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "socket.io@4.7.4", "Name": "socket.io", "Identifier": { "PURL": "pkg:npm/socket.io@4.7.4", "UID": "4a1f4d29cb7ff1c0" }, "Version": "4.7.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/socket.io/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "socket.io-adapter@2.5.2", "Name": "socket.io-adapter", "Identifier": { "PURL": "pkg:npm/socket.io-adapter@2.5.2", "UID": "b82409d73d6b0137" }, "Version": "2.5.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/socket.io-adapter/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "socket.io-parser@4.2.4", "Name": "socket.io-parser", "Identifier": { "PURL": "pkg:npm/socket.io-parser@4.2.4", "UID": "a3ee475c77390766" }, "Version": "4.2.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/socket.io-parser/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "socks@2.7.1", "Name": "socks", "Identifier": { "PURL": "pkg:npm/socks@2.7.1", "UID": "9d8bf468aa9d4850" }, "Version": "2.7.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/socks/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "socks@2.8.9", "Name": "socks", "Identifier": { "PURL": "pkg:npm/socks@2.8.9", "UID": "824623918d130be7" }, "Version": "2.8.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/socks/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "socks-proxy-agent@6.2.1", "Name": "socks-proxy-agent", "Identifier": { "PURL": "pkg:npm/socks-proxy-agent@6.2.1", "UID": "609665a36d5d0875" }, "Version": "6.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/socks-proxy-agent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "socks-proxy-agent@8.0.5", "Name": "socks-proxy-agent", "Identifier": { "PURL": "pkg:npm/socks-proxy-agent@8.0.5", "UID": "e2e974b7f8f572c4" }, "Version": "8.0.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/socks-proxy-agent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "spdx-exceptions@2.5.0", "Name": "spdx-exceptions", "Identifier": { "PURL": "pkg:npm/spdx-exceptions@2.5.0", "UID": "3602fef2070203cf" }, "Version": "2.5.0", "Licenses": [ "CC-BY-3.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/spdx-exceptions/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "spdx-expression-parse@4.0.0", "Name": "spdx-expression-parse", "Identifier": { "PURL": "pkg:npm/spdx-expression-parse@4.0.0", "UID": "951d3251ced005b" }, "Version": "4.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/spdx-expression-parse/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "spdx-license-ids@3.0.23", "Name": "spdx-license-ids", "Identifier": { "PURL": "pkg:npm/spdx-license-ids@3.0.23", "UID": "565aca18fc1c1d30" }, "Version": "3.0.23", "Licenses": [ "CC0-1.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/spdx-license-ids/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "sqlite3@5.1.7", "Name": "sqlite3", "Identifier": { "PURL": "pkg:npm/sqlite3@5.1.7", "UID": "961002f1b7344767" }, "Version": "5.1.7", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/sqlite3/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ssrf-req-filter@1.1.0", "Name": "ssrf-req-filter", "Identifier": { "PURL": "pkg:npm/ssrf-req-filter@1.1.0", "UID": "8ab2fd72198ab7c2" }, "Version": "1.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/ssrf-req-filter/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ssri@13.0.1", "Name": "ssri", "Identifier": { "PURL": "pkg:npm/ssri@13.0.1", "UID": "97f9e00e517d319" }, "Version": "13.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/ssri/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ssri@8.0.1", "Name": "ssri", "Identifier": { "PURL": "pkg:npm/ssri@8.0.1", "UID": "9bdd5dfd951e5bf4" }, "Version": "8.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/ssri/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "statuses@2.0.1", "Name": "statuses", "Identifier": { "PURL": "pkg:npm/statuses@2.0.1", "UID": "4348665a9ba4a8ed" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/statuses/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "string-width@4.2.3", "Name": "string-width", "Identifier": { "PURL": "pkg:npm/string-width@4.2.3", "UID": "4143e82dadf730b" }, "Version": "4.2.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/string-width/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "string_decoder@1.3.0", "Name": "string_decoder", "Identifier": { "PURL": "pkg:npm/string_decoder@1.3.0", "UID": "6232fec366f8c65" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/string_decoder/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "strip-ansi@6.0.1", "Name": "strip-ansi", "Identifier": { "PURL": "pkg:npm/strip-ansi@6.0.1", "UID": "c11e51c27108eadc" }, "Version": "6.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/strip-ansi/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "strip-json-comments@2.0.1", "Name": "strip-json-comments", "Identifier": { "PURL": "pkg:npm/strip-json-comments@2.0.1", "UID": "fc076941a92da826" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/rc/node_modules/strip-json-comments/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "supports-color@10.2.2", "Name": "supports-color", "Identifier": { "PURL": "pkg:npm/supports-color@10.2.2", "UID": "fb4aab93961faeee" }, "Version": "10.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/supports-color/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "tar@6.1.15", "Name": "tar", "Identifier": { "PURL": "pkg:npm/tar@6.1.15", "UID": "594e7bef31ab36d4" }, "Version": "6.1.15", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/tar/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "tar@7.5.22", "Name": "tar", "Identifier": { "PURL": "pkg:npm/tar@7.5.22", "UID": "6f7608956607843" }, "Version": "7.5.22", "Licenses": [ "BlueOak-1.0.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/tar/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "tar-fs@2.1.2", "Name": "tar-fs", "Identifier": { "PURL": "pkg:npm/tar-fs@2.1.2", "UID": "a6ccbae2c4fe9771" }, "Version": "2.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/tar-fs/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "tar-stream@2.2.0", "Name": "tar-stream", "Identifier": { "PURL": "pkg:npm/tar-stream@2.2.0", "UID": "823676ed9c9e52d7" }, "Version": "2.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/tar-stream/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "text-table@0.2.0", "Name": "text-table", "Identifier": { "PURL": "pkg:npm/text-table@0.2.0", "UID": "db9d37c2491d4eb4" }, "Version": "0.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/text-table/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "tiny-relative-date@2.0.2", "Name": "tiny-relative-date", "Identifier": { "PURL": "pkg:npm/tiny-relative-date@2.0.2", "UID": "22fdc115cb62172a" }, "Version": "2.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/tiny-relative-date/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "tinyglobby@0.2.17", "Name": "tinyglobby", "Identifier": { "PURL": "pkg:npm/tinyglobby@0.2.17", "UID": "36ba4fbf566d3386" }, "Version": "0.2.17", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/tinyglobby/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "toidentifier@1.0.1", "Name": "toidentifier", "Identifier": { "PURL": "pkg:npm/toidentifier@1.0.1", "UID": "67e134c79acea52b" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/toidentifier/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "toposort-class@1.0.1", "Name": "toposort-class", "Identifier": { "PURL": "pkg:npm/toposort-class@1.0.1", "UID": "b55bb3818a8e3116" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/toposort-class/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "treeverse@3.0.0", "Name": "treeverse", "Identifier": { "PURL": "pkg:npm/treeverse@3.0.0", "UID": "815f9702b2f3013d" }, "Version": "3.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/treeverse/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "tuf-js@4.1.0", "Name": "tuf-js", "Identifier": { "PURL": "pkg:npm/tuf-js@4.1.0", "UID": "18ebde3c72f3838e" }, "Version": "4.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/tuf-js/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "tunnel-agent@0.6.0", "Name": "tunnel-agent", "Identifier": { "PURL": "pkg:npm/tunnel-agent@0.6.0", "UID": "baec5167f898f453" }, "Version": "0.6.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/tunnel-agent/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "type-is@1.6.18", "Name": "type-is", "Identifier": { "PURL": "pkg:npm/type-is@1.6.18", "UID": "f68a281c906553d" }, "Version": "1.6.18", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/type-is/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "uid-safe@2.1.5", "Name": "uid-safe", "Identifier": { "PURL": "pkg:npm/uid-safe@2.1.5", "UID": "d94f7b2a97271a8c" }, "Version": "2.1.5", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/uid-safe/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "undici@6.28.0", "Name": "undici", "Identifier": { "PURL": "pkg:npm/undici@6.28.0", "UID": "ce334dba36b60cab" }, "Version": "6.28.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/undici/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "undici-types@7.18.2", "Name": "undici-types", "Identifier": { "PURL": "pkg:npm/undici-types@7.18.2", "UID": "230fb5e69960fe60" }, "Version": "7.18.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/undici-types/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "unique-filename@1.1.1", "Name": "unique-filename", "Identifier": { "PURL": "pkg:npm/unique-filename@1.1.1", "UID": "b032bc67d3d069f0" }, "Version": "1.1.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/unique-filename/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "unique-slug@2.0.2", "Name": "unique-slug", "Identifier": { "PURL": "pkg:npm/unique-slug@2.0.2", "UID": "2c6d24254b554b4e" }, "Version": "2.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/unique-slug/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "unpipe@1.0.0", "Name": "unpipe", "Identifier": { "PURL": "pkg:npm/unpipe@1.0.0", "UID": "e3cc0acad5d4c1b7" }, "Version": "1.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/unpipe/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "util-deprecate@1.0.2", "Name": "util-deprecate", "Identifier": { "PURL": "pkg:npm/util-deprecate@1.0.2", "UID": "c89246d8844ce65a" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/util-deprecate/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "util-deprecate@1.0.2", "Name": "util-deprecate", "Identifier": { "PURL": "pkg:npm/util-deprecate@1.0.2", "UID": "f9c0b05c435e4f77" }, "Version": "1.0.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/util-deprecate/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "utils-merge@1.0.1", "Name": "utils-merge", "Identifier": { "PURL": "pkg:npm/utils-merge@1.0.1", "UID": "ed5d8b51355a8add" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/utils-merge/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "uuid@8.3.2", "Name": "uuid", "Identifier": { "PURL": "pkg:npm/uuid@8.3.2", "UID": "efdb752d6720e16e" }, "Version": "8.3.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/uuid/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "validate-npm-package-name@7.0.2", "Name": "validate-npm-package-name", "Identifier": { "PURL": "pkg:npm/validate-npm-package-name@7.0.2", "UID": "d41f44524c8124aa" }, "Version": "7.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/validate-npm-package-name/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "validator@13.9.0", "Name": "validator", "Identifier": { "PURL": "pkg:npm/validator@13.9.0", "UID": "bae3da9ed34b5990" }, "Version": "13.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/validator/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "vary@1.1.2", "Name": "vary", "Identifier": { "PURL": "pkg:npm/vary@1.1.2", "UID": "22e6eeedeb219424" }, "Version": "1.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/vary/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "walk-up-path@4.0.0", "Name": "walk-up-path", "Identifier": { "PURL": "pkg:npm/walk-up-path@4.0.0", "UID": "f8908523d3316267" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/walk-up-path/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "which@2.0.2", "Name": "which", "Identifier": { "PURL": "pkg:npm/which@2.0.2", "UID": "355238a97367dc13" }, "Version": "2.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/which/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "which@6.0.1", "Name": "which", "Identifier": { "PURL": "pkg:npm/which@6.0.1", "UID": "5058743222eeb3a3" }, "Version": "6.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/which/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "wide-align@1.1.5", "Name": "wide-align", "Identifier": { "PURL": "pkg:npm/wide-align@1.1.5", "UID": "ef3ea2d45c21222c" }, "Version": "1.1.5", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/wide-align/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "wkx@0.5.0", "Name": "wkx", "Identifier": { "PURL": "pkg:npm/wkx@0.5.0", "UID": "1ce9e637d7a4f4d3" }, "Version": "0.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/wkx/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "wrappy@1.0.2", "Name": "wrappy", "Identifier": { "PURL": "pkg:npm/wrappy@1.0.2", "UID": "7fed3bfa6ea9195b" }, "Version": "1.0.2", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/wrappy/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "write-file-atomic@7.0.1", "Name": "write-file-atomic", "Identifier": { "PURL": "pkg:npm/write-file-atomic@7.0.1", "UID": "6ff83d76dff09459" }, "Version": "7.0.1", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/write-file-atomic/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "ws@8.11.0", "Name": "ws", "Identifier": { "PURL": "pkg:npm/ws@8.11.0", "UID": "cb9e9a431e2ad650" }, "Version": "8.11.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/ws/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "xml2js@0.5.0", "Name": "xml2js", "Identifier": { "PURL": "pkg:npm/xml2js@0.5.0", "UID": "69b8a44fd96d13a7" }, "Version": "0.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/xml2js/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "xmlbuilder@11.0.1", "Name": "xmlbuilder", "Identifier": { "PURL": "pkg:npm/xmlbuilder@11.0.1", "UID": "1221e9918a518c24" }, "Version": "11.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/xmlbuilder/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "yallist@4.0.0", "Name": "yallist", "Identifier": { "PURL": "pkg:npm/yallist@4.0.0", "UID": "4de0bb42ec182e9b" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "FilePath": "app/node_modules/yallist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "yallist@4.0.0", "Name": "yallist", "Identifier": { "PURL": "pkg:npm/yallist@4.0.0", "UID": "f844828a67933457" }, "Version": "4.0.0", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-pipeline/node_modules/yallist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "yallist@5.0.0", "Name": "yallist", "Identifier": { "PURL": "pkg:npm/yallist@5.0.0", "UID": "54aace8c0fad3070" }, "Version": "5.0.0", "Licenses": [ "BlueOak-1.0.0" ], "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "FilePath": "usr/local/lib/node_modules/npm/node_modules/yallist/package.json", "AnalyzedBy": "node-pkg" }, { "ID": "yarn@1.22.22", "Name": "yarn", "Identifier": { "PURL": "pkg:npm/yarn@1.22.22", "UID": "a475ae636b391b4" }, "Version": "1.22.22", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:a81b85a0b02f451fac1872d6f0abe015d010d800b457270409335029c55c474d" }, "FilePath": "opt/yarn-v1.22.22/package.json", "AnalyzedBy": "node-pkg" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2025-27152", "VendorIDs": [ "GHSA-jr5f-v2jv-69x6" ], "PkgID": "axios@0.27.2", "PkgName": "axios", "PkgPath": "app/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.27.2", "UID": "701481161630eb5" }, "InstalledVersion": "0.27.2", "FixedVersion": "1.8.2, 0.30.0", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-27152", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:b07d6f132662ba517f8817a5961542054fe9aafc506963a17b64fe4fdc96277b", "Title": "axios: Possible SSRF and Credential Leakage via Absolute URL in axios Requests", "Description": "axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute URLs rather than protocol-relative URLs to axios. Even if ⁠baseURL is set, axios sends the request to the specified absolute URL, potentially causing SSRF and credential leakage. This issue impacts both server-side and client-side usage of axios. This issue is fixed in 1.8.2.", "Severity": "HIGH", "CweIDs": [ "CWE-918" ], "VendorSeverity": { "ghsa": 3, "nvd": 2, "redhat": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P", "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "V3Score": 5.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-27152", "https://advisory.echohq.com/cve/CVE-2025-27152", "https://github.com/advisories/GHSA-jr5f-v2jv-69x6", "https://github.com/axios/axios", "https://github.com/axios/axios/commit/02c3c69ced0f8fd86407c23203835892313d7fde", "https://github.com/axios/axios/commit/fb8eec214ce7744b5ca787f2c3b8339b2f54b00f", "https://github.com/axios/axios/issues/6463", "https://github.com/axios/axios/pull/6829", "https://github.com/axios/axios/releases/tag/v1.8.2", "https://github.com/axios/axios/security/advisories/GHSA-jr5f-v2jv-69x6", "https://nvd.nist.gov/vuln/detail/CVE-2025-27152", "https://www.cve.org/CVERecord?id=CVE-2025-27152" ], "PublishedDate": "2025-03-07T16:15:38.773Z", "LastModifiedDate": "2026-06-17T09:03:06.57Z" }, { "VulnerabilityID": "CVE-2026-25639", "VendorIDs": [ "GHSA-43fc-jf86-j433" ], "PkgID": "axios@0.27.2", "PkgName": "axios", "PkgPath": "app/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.27.2", "UID": "701481161630eb5" }, "InstalledVersion": "0.27.2", "FixedVersion": "1.13.5, 0.30.3", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-25639", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:86a49d0a04b86c690fddb09b4fed1bcbbd49cdeb654ee64ea00d783a42f6071e", "Title": "axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to versions 0.30.3 and 1.13.5, the mergeConfig function in axios crashes with a TypeError when processing configuration objects containing __proto__ as an own property. An attacker can trigger this by providing a malicious configuration object created via JSON.parse(), causing complete denial of service. This vulnerability is fixed in versions 0.30.3 and 1.13.5.", "Severity": "HIGH", "CweIDs": [ "CWE-754", "CWE-1287" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10184", "https://access.redhat.com/errata/RHSA-2026:11414", "https://access.redhat.com/errata/RHSA-2026:13542", "https://access.redhat.com/errata/RHSA-2026:13548", "https://access.redhat.com/errata/RHSA-2026:19712", "https://access.redhat.com/errata/RHSA-2026:25041", "https://access.redhat.com/errata/RHSA-2026:2694", "https://access.redhat.com/errata/RHSA-2026:3087", "https://access.redhat.com/errata/RHSA-2026:3105", "https://access.redhat.com/errata/RHSA-2026:3106", "https://access.redhat.com/errata/RHSA-2026:3107", "https://access.redhat.com/errata/RHSA-2026:3109", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:4942", "https://access.redhat.com/errata/RHSA-2026:5142", "https://access.redhat.com/errata/RHSA-2026:5168", "https://access.redhat.com/errata/RHSA-2026:5174", "https://access.redhat.com/errata/RHSA-2026:5633", "https://access.redhat.com/errata/RHSA-2026:5636", "https://access.redhat.com/errata/RHSA-2026:5665", "https://access.redhat.com/errata/RHSA-2026:5807", "https://access.redhat.com/errata/RHSA-2026:6170", "https://access.redhat.com/errata/RHSA-2026:6174", "https://access.redhat.com/errata/RHSA-2026:6192", "https://access.redhat.com/errata/RHSA-2026:6277", "https://access.redhat.com/errata/RHSA-2026:6308", "https://access.redhat.com/errata/RHSA-2026:6309", "https://access.redhat.com/errata/RHSA-2026:6428", "https://access.redhat.com/errata/RHSA-2026:6497", "https://access.redhat.com/errata/RHSA-2026:6567", "https://access.redhat.com/errata/RHSA-2026:6568", "https://access.redhat.com/errata/RHSA-2026:6802", "https://access.redhat.com/errata/RHSA-2026:7249", "https://access.redhat.com/errata/RHSA-2026:8218", "https://access.redhat.com/errata/RHSA-2026:8229", "https://access.redhat.com/errata/RHSA-2026:8499", "https://access.redhat.com/errata/RHSA-2026:8500", "https://access.redhat.com/errata/RHSA-2026:8501", "https://access.redhat.com/errata/RHSA-2026:9848", "https://access.redhat.com/security/cve/CVE-2026-25639", "https://advisory.echohq.com/cve/CVE-2026-25639", "https://bugzilla.redhat.com/show_bug.cgi?id=2438237", "https://github.com/advisories/GHSA-43fc-jf86-j433", "https://github.com/axios/axios", "https://github.com/axios/axios/commit/28c721588c7a77e7503d0a434e016f852c597b57", "https://github.com/axios/axios/commit/d7ff1409c68168d3057fc3891f911b2b92616f9e", "https://github.com/axios/axios/pull/7369", "https://github.com/axios/axios/pull/7388", "https://github.com/axios/axios/releases/tag/v0.30.3", "https://github.com/axios/axios/releases/tag/v1.13.5", "https://github.com/axios/axios/security/advisories/GHSA-43fc-jf86-j433", "https://nvd.nist.gov/vuln/detail/CVE-2026-25639", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25639.json", "https://www.cve.org/CVERecord?id=CVE-2026-25639" ], "PublishedDate": "2026-02-09T21:15:49.01Z", "LastModifiedDate": "2026-09-10T13:17:46Z" }, { "VulnerabilityID": "CVE-2026-42033", "VendorIDs": [ "GHSA-pf86-5x62-jrwf" ], "PkgID": "axios@0.27.2", "PkgName": "axios", "PkgPath": "app/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.27.2", "UID": "701481161630eb5" }, "InstalledVersion": "0.27.2", "FixedVersion": "1.15.1, 0.31.1", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42033", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:92999158a5931d0809659abdaa91df4506cba1005bd1059a80c5127c8f8a22a1", "Title": "axios: Axios: HTTP Transport Hijacking via Prototype Pollution", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when Object.prototype has been polluted by any co-dependency with keys that axios reads without a hasOwnProperty guard, an attacker can (a) silently intercept and modify every JSON response before the application sees it, or (b) fully hijack the underlying HTTP transport, gaining access to request credentials, headers, and body. The precondition is prototype pollution from a separate source in the same process. This vulnerability is fixed in 1.15.1 and 0.31.1.", "Severity": "HIGH", "CweIDs": [ "CWE-1321", "CWE-915" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:14937", "https://access.redhat.com/errata/RHSA-2026:16476", "https://access.redhat.com/errata/RHSA-2026:16532", "https://access.redhat.com/errata/RHSA-2026:16534", "https://access.redhat.com/errata/RHSA-2026:16535", "https://access.redhat.com/errata/RHSA-2026:16542", "https://access.redhat.com/errata/RHSA-2026:16874", "https://access.redhat.com/errata/RHSA-2026:17468", "https://access.redhat.com/errata/RHSA-2026:17474", "https://access.redhat.com/errata/RHSA-2026:17657", "https://access.redhat.com/errata/RHSA-2026:17699", "https://access.redhat.com/errata/RHSA-2026:19109", "https://access.redhat.com/errata/RHSA-2026:19375", "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:21017", "https://access.redhat.com/errata/RHSA-2026:21338", "https://access.redhat.com/errata/RHSA-2026:21772", "https://access.redhat.com/errata/RHSA-2026:22465", "https://access.redhat.com/errata/RHSA-2026:22619", "https://access.redhat.com/errata/RHSA-2026:22629", "https://access.redhat.com/errata/RHSA-2026:22840", "https://access.redhat.com/errata/RHSA-2026:23361", "https://access.redhat.com/errata/RHSA-2026:24536", "https://access.redhat.com/errata/RHSA-2026:24539", "https://access.redhat.com/errata/RHSA-2026:24853", "https://access.redhat.com/errata/RHSA-2026:24977", "https://access.redhat.com/errata/RHSA-2026:25041", "https://access.redhat.com/errata/RHSA-2026:25089", "https://access.redhat.com/errata/RHSA-2026:25271", "https://access.redhat.com/errata/RHSA-2026:25273", "https://access.redhat.com/errata/RHSA-2026:26214", "https://access.redhat.com/errata/RHSA-2026:26225", "https://access.redhat.com/errata/RHSA-2026:26232", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:48670", "https://access.redhat.com/security/cve/CVE-2026-42033", "https://advisory.echohq.com/cve/CVE-2026-42033", "https://bugzilla.redhat.com/show_bug.cgi?id=2461607", "https://github.com/advisories/GHSA-pf86-5x62-jrwf", "https://github.com/axios/axios", "https://github.com/axios/axios/security/advisories/GHSA-pf86-5x62-jrwf", "https://nvd.nist.gov/vuln/detail/CVE-2026-42033", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42033.json", "https://www.cve.org/CVERecord?id=CVE-2026-42033" ], "PublishedDate": "2026-04-24T18:16:29.993Z", "LastModifiedDate": "2026-09-10T13:20:03.087Z" }, { "VulnerabilityID": "CVE-2026-42035", "VendorIDs": [ "GHSA-6chq-wfr3-2hj9" ], "PkgID": "axios@0.27.2", "PkgName": "axios", "PkgPath": "app/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.27.2", "UID": "701481161630eb5" }, "InstalledVersion": "0.27.2", "FixedVersion": "1.15.1, 0.31.1", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42035", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:187f35c4ad0016b2dce0b35afe9e89f77e27ae15c19b8de700544069a75a31f9", "Title": "axios: Axios: Arbitrary HTTP header injection via prototype pollution", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, a prototype pollution gadget exists in the Axios HTTP adapter (lib/adapters/http.js) that allows an attacker to inject arbitrary HTTP headers into outgoing requests. The vulnerability exploits duck-type checking of the data payload, where if Object.prototype is polluted with getHeaders, append, pipe, on, once, and Symbol.toStringTag, Axios misidentifies any plain object payload as a FormData instance and calls the attacker-controlled getHeaders() function, merging the returned headers into the outgoing request. The vulnerable code resides exclusively in lib/adapters/http.js. The prototype pollution source does not need to originate from Axios itself — any prototype pollution primitive in any dependency in the application's dependency tree is sufficient to trigger this gadget. This vulnerability is fixed in 1.15.1 and 0.31.1.", "Severity": "HIGH", "CweIDs": [ "CWE-113", "CWE-1321" ], "VendorSeverity": { "ghsa": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-42035", "https://advisory.echohq.com/cve/CVE-2026-42035", "https://github.com/advisories/GHSA-6chq-wfr3-2hj9", "https://github.com/axios/axios", "https://github.com/axios/axios/security/advisories/GHSA-6chq-wfr3-2hj9", "https://nvd.nist.gov/vuln/detail/CVE-2026-42035", "https://www.cve.org/CVERecord?id=CVE-2026-42035" ], "PublishedDate": "2026-04-24T18:16:30.273Z", "LastModifiedDate": "2026-06-17T10:47:20.66Z" }, { "VulnerabilityID": "CVE-2026-42043", "VendorIDs": [ "GHSA-pmwg-cvhr-8vh7" ], "PkgID": "axios@0.27.2", "PkgName": "axios", "PkgPath": "app/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.27.2", "UID": "701481161630eb5" }, "InstalledVersion": "0.27.2", "FixedVersion": "1.15.1, 0.31.1", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42043", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:76667b6f8d95f191a195b231af50aa88140d8b8b6361ad5c97047a14290963e0", "Title": "axios: Axios: NO_PROXY bypass via crafted URL", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, an attacker who can influence the target URL of an Axios request can use any address in the 127.0.0.0/8 range (other than 127.0.0.1) to completely bypass the NO_PROXY protection. This vulnerability is due to an incomplete for CVE-2025-62718, This vulnerability is fixed in 1.15.1 and 0.31.1.", "Severity": "HIGH", "CweIDs": [ "CWE-183", "CWE-441", "CWE-918" ], "VendorSeverity": { "ghsa": 3, "nvd": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "V3Score": 7.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "V3Score": 10 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "V3Score": 7.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:14937", "https://access.redhat.com/errata/RHSA-2026:16476", "https://access.redhat.com/errata/RHSA-2026:16532", "https://access.redhat.com/errata/RHSA-2026:16534", "https://access.redhat.com/errata/RHSA-2026:16535", "https://access.redhat.com/errata/RHSA-2026:16542", "https://access.redhat.com/errata/RHSA-2026:16874", "https://access.redhat.com/errata/RHSA-2026:17468", "https://access.redhat.com/errata/RHSA-2026:17474", "https://access.redhat.com/errata/RHSA-2026:17657", "https://access.redhat.com/errata/RHSA-2026:17699", "https://access.redhat.com/errata/RHSA-2026:19109", "https://access.redhat.com/errata/RHSA-2026:19375", "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:21017", "https://access.redhat.com/errata/RHSA-2026:21338", "https://access.redhat.com/errata/RHSA-2026:21772", "https://access.redhat.com/errata/RHSA-2026:22465", "https://access.redhat.com/errata/RHSA-2026:22619", "https://access.redhat.com/errata/RHSA-2026:22629", "https://access.redhat.com/errata/RHSA-2026:22840", "https://access.redhat.com/errata/RHSA-2026:23361", "https://access.redhat.com/errata/RHSA-2026:24536", "https://access.redhat.com/errata/RHSA-2026:24539", "https://access.redhat.com/errata/RHSA-2026:24853", "https://access.redhat.com/errata/RHSA-2026:24977", "https://access.redhat.com/errata/RHSA-2026:25041", "https://access.redhat.com/errata/RHSA-2026:25089", "https://access.redhat.com/errata/RHSA-2026:25271", "https://access.redhat.com/errata/RHSA-2026:25273", "https://access.redhat.com/errata/RHSA-2026:26214", "https://access.redhat.com/errata/RHSA-2026:26225", "https://access.redhat.com/errata/RHSA-2026:26232", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:48670", "https://access.redhat.com/security/cve/CVE-2026-42043", "https://advisory.echohq.com/cve/CVE-2026-42043", "https://bugzilla.redhat.com/show_bug.cgi?id=2461626", "https://github.com/advisories/GHSA-pmwg-cvhr-8vh7", "https://github.com/axios/axios", "https://github.com/axios/axios/security/advisories/GHSA-pmwg-cvhr-8vh7", "https://nvd.nist.gov/vuln/detail/CVE-2026-42043", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42043.json", "https://ubuntu.com/security/notices/USN-8638-1", "https://www.cve.org/CVERecord?id=CVE-2026-42043" ], "PublishedDate": "2026-04-24T18:16:31.457Z", "LastModifiedDate": "2026-09-10T13:20:04.973Z" }, { "VulnerabilityID": "CVE-2026-44486", "VendorIDs": [ "GHSA-j5f8-grm9-p9fc" ], "PkgID": "axios@0.27.2", "PkgName": "axios", "PkgPath": "app/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.27.2", "UID": "701481161630eb5" }, "InstalledVersion": "0.27.2", "FixedVersion": "1.16.0, 0.32.0", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44486", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:208596c171b320fe27cf69251a17bd7ea0101eabe62d910f4ddfdc21e88bb3e8", "Title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios’ Node.js HTTP adapter can leak proxy credentials to a redirect target in affected versions. When a request is sent through an authenticated proxy, Axios may add a Proxy-Authorization header. If Axios then follows a redirect and the redirected request is no longer sent through that proxy, the stale Proxy-Authorization header can remain on the redirected request and be sent to the redirect target. This affects Node.js's use of Axios with automatic redirects enabled and an authenticated proxy configuration. Browser adapters are not affected. This vulnerability is fixed in 0.32.0 and 1.16.0.", "Severity": "HIGH", "CweIDs": [ "CWE-200", "CWE-201" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:27044", "https://access.redhat.com/errata/RHSA-2026:27063", "https://access.redhat.com/errata/RHSA-2026:28964", "https://access.redhat.com/errata/RHSA-2026:29082", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34766", "https://access.redhat.com/errata/RHSA-2026:36611", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41951", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42085", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:50681", "https://access.redhat.com/errata/RHSA-2026:54188", "https://access.redhat.com/errata/RHSA-2026:54206", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:66488", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-44486", "https://advisory.echohq.com/cve/CVE-2026-44486", "https://bugzilla.redhat.com/show_bug.cgi?id=2487947", "https://github.com/advisories/GHSA-j5f8-grm9-p9fc", "https://github.com/axios/axios", "https://github.com/axios/axios/commit/afca61a070728e717203c2bc21e7b589b59b858b", "https://github.com/axios/axios/pull/10794", "https://github.com/axios/axios/releases/tag/v0.32.0", "https://github.com/axios/axios/releases/tag/v1.16.0", "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc", "https://nvd.nist.gov/vuln/detail/CVE-2026-44486", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44486.json", "https://www.cve.org/CVERecord?id=CVE-2026-44486" ], "PublishedDate": "2026-06-11T17:16:32.45Z", "LastModifiedDate": "2026-09-11T13:18:05.413Z" }, { "VulnerabilityID": "CVE-2026-44487", "VendorIDs": [ "GHSA-p92q-9vqr-4j8v" ], "PkgID": "axios@0.27.2", "PkgName": "axios", "PkgPath": "app/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.27.2", "UID": "701481161630eb5" }, "InstalledVersion": "0.27.2", "FixedVersion": "1.16.0, 0.32.0", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44487", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:522e61b31627a023d7cb6c1308d8c3a79bf4700efef2e1e0ff588fb12898ad94", "Title": "axios: Axios: Information disclosure of proxy credentials via redirect flows", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios’s Node.js HTTP adapter may forward a Proxy-Authorization header to a redirected origin during specific proxy-to-direct redirect flows. This affects Node.js usage, where an initial HTTP request is sent through an authenticated HTTP proxy, redirects are followed, and the redirected URL is no longer proxied. Under affected redirect shapes, the final origin can receive the proxy credential that was intended only for the outbound proxy. This vulnerability is fixed in 0.32.0 and 1.16.0.", "Severity": "HIGH", "CweIDs": [ "CWE-201" ], "VendorSeverity": { "ghsa": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:27044", "https://access.redhat.com/errata/RHSA-2026:27063", "https://access.redhat.com/errata/RHSA-2026:28964", "https://access.redhat.com/errata/RHSA-2026:29082", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:29864", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34374", "https://access.redhat.com/errata/RHSA-2026:34525", "https://access.redhat.com/errata/RHSA-2026:34527", "https://access.redhat.com/errata/RHSA-2026:34530", "https://access.redhat.com/errata/RHSA-2026:36611", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40768", "https://access.redhat.com/errata/RHSA-2026:40792", "https://access.redhat.com/errata/RHSA-2026:40795", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41951", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42085", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:54188", "https://access.redhat.com/errata/RHSA-2026:54206", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:66488", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-44487", "https://advisory.echohq.com/cve/CVE-2026-44487", "https://bugzilla.redhat.com/show_bug.cgi?id=2487948", "https://github.com/advisories/GHSA-p92q-9vqr-4j8v", "https://github.com/axios/axios", "https://github.com/axios/axios/releases/tag/v0.32.0", "https://github.com/axios/axios/releases/tag/v1.16.0", "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v", "https://nvd.nist.gov/vuln/detail/CVE-2026-44487", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44487.json", "https://www.cve.org/CVERecord?id=CVE-2026-44487" ], "PublishedDate": "2026-06-11T17:16:32.607Z", "LastModifiedDate": "2026-09-11T13:18:06.053Z" }, { "VulnerabilityID": "CVE-2026-44492", "VendorIDs": [ "GHSA-pjwm-pj3p-43mv" ], "PkgID": "axios@0.27.2", "PkgName": "axios", "PkgPath": "app/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.27.2", "UID": "701481161630eb5" }, "InstalledVersion": "0.27.2", "FixedVersion": "1.16.0, 0.32.0", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44492", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:6898fb1b291df30ebf760168fddb9f7816de0dc128d4f24d0ed362f1fc2a3d7b", "Title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios does not normalise IPv4-mapped IPv6 addresses. When NO_PROXY lists an IPv4 address such as 127.0.0.1 or 169.254.169.254, a request URL using the IPv4-mapped IPv6 form (::ffff:7f00:1, ::ffff:a9fe:a9fe) still routes through the configured proxy. Node.js resolves these addresses to the underlying IPv4 host, so the request reaches the internal service via the proxy rather than being blocked. This vulnerability is fixed in 0.32.0 and 1.16.0.", "Severity": "HIGH", "CweIDs": [ "CWE-918", "CWE-289" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "V3Score": 8.6 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "V3Score": 8.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:26234", "https://access.redhat.com/errata/RHSA-2026:27044", "https://access.redhat.com/errata/RHSA-2026:27063", "https://access.redhat.com/errata/RHSA-2026:28964", "https://access.redhat.com/errata/RHSA-2026:29082", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:33005", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34766", "https://access.redhat.com/errata/RHSA-2026:36108", "https://access.redhat.com/errata/RHSA-2026:36611", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:40119", "https://access.redhat.com/errata/RHSA-2026:40138", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41951", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42085", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:54188", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:66488", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-44492", "https://advisory.echohq.com/cve/CVE-2026-44492", "https://bugzilla.redhat.com/show_bug.cgi?id=2487938", "https://github.com/advisories/GHSA-pjwm-pj3p-43mv", "https://github.com/axios/axios", "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2025-62718", "https://nvd.nist.gov/vuln/detail/CVE-2026-44492", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44492.json", "https://www.cve.org/CVERecord?id=CVE-2026-44492" ], "PublishedDate": "2026-06-11T17:16:33.167Z", "LastModifiedDate": "2026-09-11T13:18:07.357Z" }, { "VulnerabilityID": "CVE-2026-44495", "VendorIDs": [ "GHSA-3g43-6gmg-66jw" ], "PkgID": "axios@0.27.2", "PkgName": "axios", "PkgPath": "app/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.27.2", "UID": "701481161630eb5" }, "InstalledVersion": "0.27.2", "FixedVersion": "1.15.2, 0.31.1", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44495", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:420c2c09254d49ad38ad19dc13b93e41dece82c1ca9776a9192a7374ee720c76", "Title": "axios: Axios: Information disclosure due to prototype pollution vulnerability", "Description": "Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another vulnerability in the same JavaScript process has already polluted Object.prototype.transformResponse, affected Axios versions may treat that inherited value as request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request. This vulnerability is fixed in 0.31.1 and 1.15.2.", "Severity": "HIGH", "CweIDs": [ "CWE-94", "CWE-1321", "CWE-915" ], "VendorSeverity": { "ghsa": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L", "V3Score": 7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H", "V3Score": 7.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:27044", "https://access.redhat.com/errata/RHSA-2026:27063", "https://access.redhat.com/errata/RHSA-2026:27944", "https://access.redhat.com/errata/RHSA-2026:28964", "https://access.redhat.com/errata/RHSA-2026:29082", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34160", "https://access.redhat.com/errata/RHSA-2026:34374", "https://access.redhat.com/errata/RHSA-2026:36108", "https://access.redhat.com/errata/RHSA-2026:36611", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:40768", "https://access.redhat.com/errata/RHSA-2026:40792", "https://access.redhat.com/errata/RHSA-2026:40795", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41951", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:53840", "https://access.redhat.com/errata/RHSA-2026:54188", "https://access.redhat.com/errata/RHSA-2026:54555", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-44495", "https://advisory.echohq.com/cve/CVE-2026-44495", "https://bugzilla.redhat.com/show_bug.cgi?id=2487937", "https://github.com/advisories/GHSA-3g43-6gmg-66jw", "https://github.com/axios/axios", "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw", "https://nvd.nist.gov/vuln/detail/CVE-2026-44495", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44495.json", "https://www.cve.org/CVERecord?id=CVE-2026-44495" ], "PublishedDate": "2026-06-11T17:16:33.45Z", "LastModifiedDate": "2026-09-11T13:18:08.61Z" }, { "VulnerabilityID": "CVE-2026-44496", "VendorIDs": [ "GHSA-hfxv-24rg-xrqf" ], "PkgID": "axios@0.27.2", "PkgName": "axios", "PkgPath": "app/node_modules/axios/package.json", "PkgIdentifier": { "PURL": "pkg:npm/axios@0.27.2", "UID": "701481161630eb5" }, "InstalledVersion": "0.27.2", "FixedVersion": "1.16.0, 0.32.0", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44496", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:b96976da623eea30300fea49d38269bc20b2736c4398240cf221f303cdf6dd52", "Title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name", "Description": "Axios is a promise based HTTP client for the browser and Node.js. Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a regular expression from the configured XSRF cookie name without escaping regex metacharacters. In standard browser environments, an attacker who can influence the cookie name passed to axios can cause expensive regex backtracking while axios reads document.cookie. The practical impact is client-side availability degradation, such as freezing the affected browser tab while axios prepares a request. The issue does not affect ordinary Node.js HTTP adapter usage, React Native, or web workers, where axios does not read document.cookie. This vulnerability is fixed in 0.32.0 and 1.16.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-1333" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:20889", "https://access.redhat.com/errata/RHSA-2026:20938", "https://access.redhat.com/errata/RHSA-2026:27044", "https://access.redhat.com/errata/RHSA-2026:27063", "https://access.redhat.com/errata/RHSA-2026:28571", "https://access.redhat.com/errata/RHSA-2026:28964", "https://access.redhat.com/errata/RHSA-2026:29082", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:30076", "https://access.redhat.com/errata/RHSA-2026:30650", "https://access.redhat.com/errata/RHSA-2026:30651", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:33683", "https://access.redhat.com/errata/RHSA-2026:34766", "https://access.redhat.com/errata/RHSA-2026:36611", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:36882", "https://access.redhat.com/errata/RHSA-2026:36883", "https://access.redhat.com/errata/RHSA-2026:41055", "https://access.redhat.com/errata/RHSA-2026:41064", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41951", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42085", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:46885", "https://access.redhat.com/errata/RHSA-2026:46903", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:57191", "https://access.redhat.com/errata/RHSA-2026:59360", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:66488", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-44496", "https://advisory.echohq.com/cve/CVE-2026-44496", "https://bugzilla.redhat.com/show_bug.cgi?id=2487943", "https://github.com/advisories/GHSA-hfxv-24rg-xrqf", "https://github.com/axios/axios", "https://github.com/axios/axios/releases/tag/v0.32.0", "https://github.com/axios/axios/releases/tag/v1.16.0", "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf", "https://nvd.nist.gov/vuln/detail/CVE-2026-44496", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44496.json", "https://www.cve.org/CVERecord?id=CVE-2026-44496" ], "PublishedDate": "2026-06-11T17:16:33.59Z", "LastModifiedDate": "2026-09-11T13:18:09.287Z" }, { "VulnerabilityID": "CVE-2024-45590", "VendorIDs": [ "GHSA-qwcr-r2fm-qrc7" ], "PkgID": "body-parser@1.20.1", "PkgName": "body-parser", "PkgPath": "app/node_modules/body-parser/package.json", "PkgIdentifier": { "PURL": "pkg:npm/body-parser@1.20.1", "UID": "52df305ec55af0db" }, "InstalledVersion": "1.20.1", "FixedVersion": "1.20.3", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-45590", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:5e0730eca5d426769eeb7362d61d9dd50d328851a0936c56591858386bbcd8fd", "Title": "body-parser: Denial of Service Vulnerability in body-parser", "Description": "body-parser is Node.js body parsing middleware. body-parser \u003c1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue is patched in 1.20.3.", "Severity": "HIGH", "CweIDs": [ "CWE-405" ], "VendorSeverity": { "azure": 3, "cbl-mariner": 3, "ghsa": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2024-45590", "https://github.com/expressjs/body-parser", "https://github.com/expressjs/body-parser/commit/b2695c4450f06ba3b0ccf48d872a229bb41c9bce", "https://github.com/expressjs/body-parser/security/advisories/GHSA-qwcr-r2fm-qrc7", "https://nvd.nist.gov/vuln/detail/CVE-2024-45590", "https://www.cve.org/CVERecord?id=CVE-2024-45590" ], "PublishedDate": "2024-09-10T16:15:21.083Z", "LastModifiedDate": "2026-06-17T07:54:31.697Z" }, { "VulnerabilityID": "CVE-2026-111181", "VendorIDs": [ "GHSA-27r3-jxmh-p828" ], "PkgID": "body-parser@1.20.1", "PkgName": "body-parser", "PkgPath": "app/node_modules/body-parser/package.json", "PkgIdentifier": { "PURL": "pkg:npm/body-parser@1.20.1", "UID": "52df305ec55af0db" }, "InstalledVersion": "1.20.1", "FixedVersion": "2.4.0, 1.20.9", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-111181", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:d9486e860e2254fdde3fd4e667642a901571cc4dc55b4bfacb39a4a828f47540", "Title": "body-parser: body-parser: Denial of Service via unhandled decompression stream error", "Description": "body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash any application using body-parser with default options. When a request carries a Content-Encoding such as gzip, body-parser pipes it into a decompression stream and, after reading the body, leaves that stream with no error listener. A payload of one valid compressed frame followed by trailing bytes decodes and the application responds normally, but the trailing bytes then reach the already-finished decoder, which emits an error that is re-thrown as an uncaught exception and terminates the process. No matching route is required because body parsing runs before routing, so any endpoint that parses a body is affected. The issue is fixed in body-parser 2.4.0 and 1.20.9, and users should upgrade to one of those versions or later. As a workaround, disable request-body inflation (set the body-parser inflate option to false) so encoded requests are rejected before any decompression stream is created.", "Severity": "HIGH", "CweIDs": [ "CWE-248" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-111181", "https://advisory.echohq.com/cve/CVE-2026-111181", "https://cna.openjsf.org/security-advisories.html", "https://github.com/expressjs/body-parser", "https://github.com/expressjs/body-parser/commit/1260c3845f54502a05a87594f09a334786bb34d7", "https://github.com/expressjs/body-parser/commit/f7075eae3a84c3473ab4bf0a777da28db208e916", "https://github.com/expressjs/body-parser/releases/tag/1.20.9", "https://github.com/expressjs/body-parser/releases/tag/v2.4.0", "https://github.com/expressjs/body-parser/security/advisories/GHSA-27r3-jxmh-p828", "https://nvd.nist.gov/vuln/detail/CVE-2026-111181", "https://www.cve.org/CVERecord?id=CVE-2026-111181" ], "PublishedDate": "2026-10-22T15:17:04.763Z", "LastModifiedDate": "2026-10-22T19:17:35.797Z" }, { "VulnerabilityID": "CVE-2026-102276", "VendorIDs": [ "GHSA-6j4f-fj2g-mc7p" ], "PkgID": "brace-expansion@1.1.11", "PkgName": "brace-expansion", "PkgPath": "app/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@1.1.11", "UID": "7dba102d1cf44988" }, "InstalledVersion": "1.1.11", "FixedVersion": "5.0.10, 3.0.7, 2.1.5, 1.1.19", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102276", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:b075fd1fca523f6478cb049a08b19dd006e6b8c3b20fbf890c9c6b9b3bf2fcf1", "Title": "brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns", "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per brace group and uses push.apply to pass every element of a very large comma-part array as a function argument. Patterns containing many comma-separated brace groups trigger the recursive path, while the large array triggers the argument-array path without deep recursion. These paths cause recursive and argument-array native stack exhaustion before max or maxLength can limit output, potentially terminating the Node.js process in a process-terminating denial of service. This issue is fixed in versions 1.1.19, 2.1.5, 3.0.7, and 5.0.10.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-674" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92378", "https://access.redhat.com/security/cve/CVE-2026-102276", "https://advisory.echohq.com/cve/CVE-2026-102276", "https://bugzilla.redhat.com/2542596", "https://bugzilla.redhat.com/2542700", "https://bugzilla.redhat.com/2542706", "https://bugzilla.redhat.com/2542707", "https://bugzilla.redhat.com/2558973", "https://bugzilla.redhat.com/2559870", "https://bugzilla.redhat.com/2559873", "https://bugzilla.redhat.com/2559875", "https://bugzilla.redhat.com/2560016", "https://bugzilla.redhat.com/2560018", "https://bugzilla.redhat.com/2560019", "https://bugzilla.redhat.com/2560021", "https://bugzilla.redhat.com/2560022", "https://bugzilla.redhat.com/show_bug.cgi?id=2542596", "https://bugzilla.redhat.com/show_bug.cgi?id=2542700", "https://bugzilla.redhat.com/show_bug.cgi?id=2542706", "https://bugzilla.redhat.com/show_bug.cgi?id=2542707", "https://bugzilla.redhat.com/show_bug.cgi?id=2558973", "https://bugzilla.redhat.com/show_bug.cgi?id=2559870", "https://bugzilla.redhat.com/show_bug.cgi?id=2559873", "https://bugzilla.redhat.com/show_bug.cgi?id=2559875", "https://bugzilla.redhat.com/show_bug.cgi?id=2560016", "https://bugzilla.redhat.com/show_bug.cgi?id=2560018", "https://bugzilla.redhat.com/show_bug.cgi?id=2560019", "https://bugzilla.redhat.com/show_bug.cgi?id=2560021", "https://bugzilla.redhat.com/show_bug.cgi?id=2560022", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101911", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102276", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102277", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102278", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105481", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105482", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105483", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106069", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106071", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106073", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106074", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497", "https://errata.almalinux.org/9/ALSA-2026-92378.html", "https://errata.rockylinux.org/RLSA-2026:92378", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc", "https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c", "https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc", "https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p", "https://linux.oracle.com/cve/CVE-2026-102276.html", "https://linux.oracle.com/errata/ELSA-2026-92378.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-102276", "https://www.cve.org/CVERecord?id=CVE-2026-102276" ], "PublishedDate": "2026-09-28T21:17:16.033Z", "LastModifiedDate": "2026-09-30T19:57:08.043Z" }, { "VulnerabilityID": "CVE-2026-102278", "VendorIDs": [ "GHSA-qhr7-859c-m2p7" ], "PkgID": "brace-expansion@1.1.11", "PkgName": "brace-expansion", "PkgPath": "app/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@1.1.11", "UID": "7dba102d1cf44988" }, "InstalledVersion": "1.1.11", "FixedVersion": "5.0.11, 3.0.8, 2.1.6, 1.1.20", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102278", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:1518a1081c525d262b4a7b78e60dd3bdaf5b7169ff35ffbc27740fc073f81e6d", "Title": "brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns", "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand_() to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before output limits can apply and potentially terminating the Node.js process. expand_ performs uncontrolled recursion for nested brace alternatives and single-part sets. deeply nested brace groups supplied as an untrusted pattern. expand_ is affected. expand is affected. Comma members is affected. Single set is affected. native stack exhaustion during nested sub-expansion. process-terminating denial of service. This issue is fixed in versions 1.1.20, 2.1.6, 3.0.8, and 5.0.11.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-674" ], "VendorSeverity": { "alma": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92378", "https://access.redhat.com/security/cve/CVE-2026-102278", "https://advisory.echohq.com/cve/CVE-2026-102278", "https://bugzilla.redhat.com/2542596", "https://bugzilla.redhat.com/2542700", "https://bugzilla.redhat.com/2542706", "https://bugzilla.redhat.com/2542707", "https://bugzilla.redhat.com/2558973", "https://bugzilla.redhat.com/2559870", "https://bugzilla.redhat.com/2559873", "https://bugzilla.redhat.com/2559875", "https://bugzilla.redhat.com/2560016", "https://bugzilla.redhat.com/2560018", "https://bugzilla.redhat.com/2560019", "https://bugzilla.redhat.com/2560021", "https://bugzilla.redhat.com/2560022", "https://bugzilla.redhat.com/show_bug.cgi?id=2542596", "https://bugzilla.redhat.com/show_bug.cgi?id=2542700", "https://bugzilla.redhat.com/show_bug.cgi?id=2542706", "https://bugzilla.redhat.com/show_bug.cgi?id=2542707", "https://bugzilla.redhat.com/show_bug.cgi?id=2558973", "https://bugzilla.redhat.com/show_bug.cgi?id=2559870", "https://bugzilla.redhat.com/show_bug.cgi?id=2559873", "https://bugzilla.redhat.com/show_bug.cgi?id=2559875", "https://bugzilla.redhat.com/show_bug.cgi?id=2560016", "https://bugzilla.redhat.com/show_bug.cgi?id=2560018", "https://bugzilla.redhat.com/show_bug.cgi?id=2560019", "https://bugzilla.redhat.com/show_bug.cgi?id=2560021", "https://bugzilla.redhat.com/show_bug.cgi?id=2560022", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101911", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102276", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102277", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102278", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105481", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105482", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105483", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106069", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106071", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106073", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106074", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497", "https://errata.almalinux.org/9/ALSA-2026-92378.html", "https://errata.rockylinux.org/RLSA-2026:92378", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b", "https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c", "https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7", "https://linux.oracle.com/cve/CVE-2026-102278.html", "https://linux.oracle.com/errata/ELSA-2026-92378.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-102278", "https://www.cve.org/CVERecord?id=CVE-2026-102278" ], "PublishedDate": "2026-09-28T21:17:16.517Z", "LastModifiedDate": "2026-10-01T15:17:25.593Z" }, { "VulnerabilityID": "CVE-2026-13149", "VendorIDs": [ "GHSA-3jxr-9vmj-r5cp" ], "PkgID": "brace-expansion@1.1.11", "PkgName": "brace-expansion", "PkgPath": "app/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@1.1.11", "UID": "7dba102d1cf44988" }, "InstalledVersion": "1.1.11", "FixedVersion": "5.0.7, 1.1.16, 2.1.2", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13149", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:d48316c7a78cb87c7316ad1737d256c9e8b0584abe791b60f7bda29ee3c02834", "Title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity", "Description": "brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-407" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:U/V:D/RE:M/U:Amber", "V3Score": 5.3, "V40Score": 7.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:47058", "https://access.redhat.com/security/cve/CVE-2026-13149", "https://advisory.echohq.com/cve/CVE-2026-13149", "https://bugzilla.redhat.com/2494813", "https://bugzilla.redhat.com/2498116", "https://bugzilla.redhat.com/2498120", "https://bugzilla.redhat.com/show_bug.cgi?id=2494813", "https://bugzilla.redhat.com/show_bug.cgi?id=2498116", "https://bugzilla.redhat.com/show_bug.cgi?id=2498120", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13149", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59873", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59874", "https://errata.almalinux.org/9/ALSA-2026-47058.html", "https://errata.rockylinux.org/RLSA-2026:47058", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/835d6be91201122d9adffb0c0c8c094189ace265", "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754", "https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95", "https://github.com/juliangruber/brace-expansion/pull/122", "https://github.com/juliangruber/brace-expansion/pull/123", "https://github.com/juliangruber/brace-expansion/releases/tag/v1.1.16", "https://github.com/juliangruber/brace-expansion/releases/tag/v2.1.2", "https://github.com/juliangruber/brace-expansion/releases/tag/v5.0.7", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-3jxr-9vmj-r5cp", "https://linux.oracle.com/cve/CVE-2026-13149.html", "https://linux.oracle.com/errata/ELSA-2026-48034.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-13149", "https://www.cve.org/CVERecord?id=CVE-2026-13149", "https://www.npmjs.com/package/brace-expansion" ], "PublishedDate": "2026-06-30T10:16:34.56Z", "LastModifiedDate": "2026-10-25T21:10:00.77Z" }, { "VulnerabilityID": "CVE-2026-14257", "VendorIDs": [ "GHSA-mh99-v99m-4gvg" ], "PkgID": "brace-expansion@1.1.11", "PkgName": "brace-expansion", "PkgPath": "app/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@1.1.11", "UID": "7dba102d1cf44988" }, "InstalledVersion": "1.1.11", "FixedVersion": "5.0.8, 3.0.3, 2.1.3, 1.1.17", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14257", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:a27ebf725e4db2e9f3e6220558ac3822fcaf387eb25faa9fee113bc8df492128", "Title": "brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function", "Description": "brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but does not bound the length of each result string. By chaining multiple brace groups, an attacker keeps the result count under the limit while making each result progressively longer, so total memory scales with both count and string length until the process hits a fatal, uncatchable out-of-memory error. About 7.5 KB of input ('{a,b}'.repeat(1500)) crashes a default Node.js process. Any application that passes attacker-influenced strings to brace-expansion.expand() - directly or transitively via minimatch / glob brace patterns - can be crashed by a small request. Fixed in 5.0.8 by adding a maxLength option (default 4,000,000) that bounds accumulated output and intermediate arrays.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55603", "https://access.redhat.com/security/cve/CVE-2026-14257", "https://advisory.echohq.com/cve/CVE-2026-14257", "https://bugzilla.redhat.com/2506433", "https://bugzilla.redhat.com/2507593", "https://bugzilla.redhat.com/2510722", "https://bugzilla.redhat.com/2510801", "https://bugzilla.redhat.com/show_bug.cgi?id=2487258", "https://bugzilla.redhat.com/show_bug.cgi?id=2487269", "https://bugzilla.redhat.com/show_bug.cgi?id=2506433", "https://bugzilla.redhat.com/show_bug.cgi?id=2507593", "https://bugzilla.redhat.com/show_bug.cgi?id=2510722", "https://bugzilla.redhat.com/show_bug.cgi?id=2510801", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14257", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54272", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69152", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69192", "https://errata.almalinux.org/9/ALSA-2026-55603.html", "https://errata.rockylinux.org/RLSA-2026:55603", "https://github.com/advisories/GHSA-mh99-v99m-4gvg", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d", "https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5", "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031", "https://github.com/juliangruber/brace-expansion/commit/d13ff455a58b0d56704f0111e3c2a0b16ceb06eb", "https://github.com/juliangruber/brace-expansion/pull/129", "https://github.com/juliangruber/brace-expansion/pull/130", "https://github.com/juliangruber/brace-expansion/pull/136", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-mh99-v99m-4gvg", "https://linux.oracle.com/cve/CVE-2026-14257.html", "https://linux.oracle.com/errata/ELSA-2026-58819.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14257", "https://www.cve.org/CVERecord?id=CVE-2026-14257", "https://www.npmjs.com/package/brace-expansion" ], "PublishedDate": "2026-07-23T14:17:00.25Z", "LastModifiedDate": "2026-10-24T13:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-69152", "VendorIDs": [ "GHSA-rgw5-rvv9-x895" ], "PkgID": "brace-expansion@1.1.11", "PkgName": "brace-expansion", "PkgPath": "app/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@1.1.11", "UID": "7dba102d1cf44988" }, "InstalledVersion": "1.1.11", "FixedVersion": "1.1.18, 2.1.4, 3.0.6, 5.0.9", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-69152", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:fee1cb29a8b8871c89f7f241c895c944ba1cb45ccae2393ba655bc4932638863", "Title": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation", "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop. The fix for CVE-2026-14257 is bypassed by the vulnerability. This issue is fixed in versions 1.1.18, 2.1.4, 3.0.6, and 5.0.9.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55603", "https://access.redhat.com/security/cve/CVE-2026-69152", "https://advisory.echohq.com/cve/CVE-2026-69152", "https://bugzilla.redhat.com/2506433", "https://bugzilla.redhat.com/2507593", "https://bugzilla.redhat.com/2510722", "https://bugzilla.redhat.com/2510801", "https://bugzilla.redhat.com/show_bug.cgi?id=2487258", "https://bugzilla.redhat.com/show_bug.cgi?id=2487269", "https://bugzilla.redhat.com/show_bug.cgi?id=2506433", "https://bugzilla.redhat.com/show_bug.cgi?id=2507593", "https://bugzilla.redhat.com/show_bug.cgi?id=2510722", "https://bugzilla.redhat.com/show_bug.cgi?id=2510801", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14257", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54272", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69152", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-69192", "https://errata.almalinux.org/9/ALSA-2026-55603.html", "https://errata.rockylinux.org/RLSA-2026:55603", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d", "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac", "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf", "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895", "https://linux.oracle.com/cve/CVE-2026-69152.html", "https://linux.oracle.com/errata/ELSA-2026-58819.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-69152", "https://www.cve.org/CVERecord?id=CVE-2026-69152" ], "PublishedDate": "2026-08-03T17:16:45.953Z", "LastModifiedDate": "2026-10-23T21:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-102276", "VendorIDs": [ "GHSA-6j4f-fj2g-mc7p" ], "PkgID": "brace-expansion@5.0.9", "PkgName": "brace-expansion", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@5.0.9", "UID": "868042afe866f0f9" }, "InstalledVersion": "5.0.9", "FixedVersion": "5.0.10, 3.0.7, 2.1.5, 1.1.19", "Status": "fixed", "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102276", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:ce4037af195c512f80a75e38b3312087e42606c4f7613615d37f04261f2288d7", "Title": "brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns", "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per brace group and uses push.apply to pass every element of a very large comma-part array as a function argument. Patterns containing many comma-separated brace groups trigger the recursive path, while the large array triggers the argument-array path without deep recursion. These paths cause recursive and argument-array native stack exhaustion before max or maxLength can limit output, potentially terminating the Node.js process in a process-terminating denial of service. This issue is fixed in versions 1.1.19, 2.1.5, 3.0.7, and 5.0.10.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-674" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92378", "https://access.redhat.com/security/cve/CVE-2026-102276", "https://advisory.echohq.com/cve/CVE-2026-102276", "https://bugzilla.redhat.com/2542596", "https://bugzilla.redhat.com/2542700", "https://bugzilla.redhat.com/2542706", "https://bugzilla.redhat.com/2542707", "https://bugzilla.redhat.com/2558973", "https://bugzilla.redhat.com/2559870", "https://bugzilla.redhat.com/2559873", "https://bugzilla.redhat.com/2559875", "https://bugzilla.redhat.com/2560016", "https://bugzilla.redhat.com/2560018", "https://bugzilla.redhat.com/2560019", "https://bugzilla.redhat.com/2560021", "https://bugzilla.redhat.com/2560022", "https://bugzilla.redhat.com/show_bug.cgi?id=2542596", "https://bugzilla.redhat.com/show_bug.cgi?id=2542700", "https://bugzilla.redhat.com/show_bug.cgi?id=2542706", "https://bugzilla.redhat.com/show_bug.cgi?id=2542707", "https://bugzilla.redhat.com/show_bug.cgi?id=2558973", "https://bugzilla.redhat.com/show_bug.cgi?id=2559870", "https://bugzilla.redhat.com/show_bug.cgi?id=2559873", "https://bugzilla.redhat.com/show_bug.cgi?id=2559875", "https://bugzilla.redhat.com/show_bug.cgi?id=2560016", "https://bugzilla.redhat.com/show_bug.cgi?id=2560018", "https://bugzilla.redhat.com/show_bug.cgi?id=2560019", "https://bugzilla.redhat.com/show_bug.cgi?id=2560021", "https://bugzilla.redhat.com/show_bug.cgi?id=2560022", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101911", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102276", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102277", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102278", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105481", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105482", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105483", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106069", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106071", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106073", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106074", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497", "https://errata.almalinux.org/9/ALSA-2026-92378.html", "https://errata.rockylinux.org/RLSA-2026:92378", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc", "https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c", "https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc", "https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p", "https://linux.oracle.com/cve/CVE-2026-102276.html", "https://linux.oracle.com/errata/ELSA-2026-92378.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-102276", "https://www.cve.org/CVERecord?id=CVE-2026-102276" ], "PublishedDate": "2026-09-28T21:17:16.033Z", "LastModifiedDate": "2026-09-30T19:57:08.043Z" }, { "VulnerabilityID": "CVE-2026-102278", "VendorIDs": [ "GHSA-qhr7-859c-m2p7" ], "PkgID": "brace-expansion@5.0.9", "PkgName": "brace-expansion", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json", "PkgIdentifier": { "PURL": "pkg:npm/brace-expansion@5.0.9", "UID": "868042afe866f0f9" }, "InstalledVersion": "5.0.9", "FixedVersion": "5.0.11, 3.0.8, 2.1.6, 1.1.20", "Status": "fixed", "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102278", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:27792e8ee07307aa07bc95c374bf86349e67966bbd8034489263898a46b4760e", "Title": "brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns", "Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand_() to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before output limits can apply and potentially terminating the Node.js process. expand_ performs uncontrolled recursion for nested brace alternatives and single-part sets. deeply nested brace groups supplied as an untrusted pattern. expand_ is affected. expand is affected. Comma members is affected. Single set is affected. native stack exhaustion during nested sub-expansion. process-terminating denial of service. This issue is fixed in versions 1.1.20, 2.1.6, 3.0.8, and 5.0.11.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-674" ], "VendorSeverity": { "alma": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92378", "https://access.redhat.com/security/cve/CVE-2026-102278", "https://advisory.echohq.com/cve/CVE-2026-102278", "https://bugzilla.redhat.com/2542596", "https://bugzilla.redhat.com/2542700", "https://bugzilla.redhat.com/2542706", "https://bugzilla.redhat.com/2542707", "https://bugzilla.redhat.com/2558973", "https://bugzilla.redhat.com/2559870", "https://bugzilla.redhat.com/2559873", "https://bugzilla.redhat.com/2559875", "https://bugzilla.redhat.com/2560016", "https://bugzilla.redhat.com/2560018", "https://bugzilla.redhat.com/2560019", "https://bugzilla.redhat.com/2560021", "https://bugzilla.redhat.com/2560022", "https://bugzilla.redhat.com/show_bug.cgi?id=2542596", "https://bugzilla.redhat.com/show_bug.cgi?id=2542700", "https://bugzilla.redhat.com/show_bug.cgi?id=2542706", "https://bugzilla.redhat.com/show_bug.cgi?id=2542707", "https://bugzilla.redhat.com/show_bug.cgi?id=2558973", "https://bugzilla.redhat.com/show_bug.cgi?id=2559870", "https://bugzilla.redhat.com/show_bug.cgi?id=2559873", "https://bugzilla.redhat.com/show_bug.cgi?id=2559875", "https://bugzilla.redhat.com/show_bug.cgi?id=2560016", "https://bugzilla.redhat.com/show_bug.cgi?id=2560018", "https://bugzilla.redhat.com/show_bug.cgi?id=2560019", "https://bugzilla.redhat.com/show_bug.cgi?id=2560021", "https://bugzilla.redhat.com/show_bug.cgi?id=2560022", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101911", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102276", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102277", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102278", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105481", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105482", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-105483", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106069", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106071", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106073", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106074", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497", "https://errata.almalinux.org/9/ALSA-2026-92378.html", "https://errata.rockylinux.org/RLSA-2026:92378", "https://github.com/juliangruber/brace-expansion", "https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b", "https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c", "https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db", "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7", "https://linux.oracle.com/cve/CVE-2026-102278.html", "https://linux.oracle.com/errata/ELSA-2026-92378.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-102278", "https://www.cve.org/CVERecord?id=CVE-2026-102278" ], "PublishedDate": "2026-09-28T21:17:16.517Z", "LastModifiedDate": "2026-10-01T15:17:25.593Z" }, { "VulnerabilityID": "CVE-2026-59724", "VendorIDs": [ "GHSA-gr94-w7qr-f4j3" ], "PkgID": "engine.io@6.5.4", "PkgName": "engine.io", "PkgPath": "app/node_modules/engine.io/package.json", "PkgIdentifier": { "PURL": "pkg:npm/engine.io@6.5.4", "UID": "8fb5b9abca7dea2c" }, "InstalledVersion": "6.5.4", "FixedVersion": "6.6.7", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59724", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:fc92b06c4047f3f8cda30ab46b577577163ec7ec620e51daf3a2f9d073f4c5d0", "Title": "engine.io: Engine.IO: Denial of Service via crafted WebTransport session ID", "Description": "Socket.IO enables bidirectional and low-latency communication for every platform. From 6.5.0 before 6.6.7, Engine.IO servers with WebTransport enabled can resolve a crafted session ID such as __proto__ through an inherited property of the clients object during WebTransport upgrade handling, causing a TypeError and denial of service. This issue is fixed in version 6.6.7.", "Severity": "HIGH", "CweIDs": [ "CWE-20" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-59724", "https://github.com/socketio/socket.io", "https://github.com/socketio/socket.io/commit/1fa1f46cd420ac5b57bb4c04c959b58f3c79158c", "https://github.com/socketio/socket.io/releases/tag/engine.io@6.6.7", "https://github.com/socketio/socket.io/security/advisories/GHSA-gr94-w7qr-f4j3", "https://nvd.nist.gov/vuln/detail/CVE-2026-59724", "https://www.cve.org/CVERecord?id=CVE-2026-59724" ], "PublishedDate": "2026-07-08T16:16:32.98Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-59725", "VendorIDs": [ "GHSA-r635-g3xr-vw7x" ], "PkgID": "engine.io@6.5.4", "PkgName": "engine.io", "PkgPath": "app/node_modules/engine.io/package.json", "PkgIdentifier": { "PURL": "pkg:npm/engine.io@6.5.4", "UID": "8fb5b9abca7dea2c" }, "InstalledVersion": "6.5.4", "FixedVersion": "6.6.7", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59725", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:4bcd9cd4f005e860b0ae9f522218c70e7737d2c03484347df3ff79b4983e1b8a", "Title": "socket.io: engine.io: Socket.IO: Denial of Service via invalid binary POST requests", "Description": "Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not properly close the HTTP response for invalid binary POST requests with Content-Type: application/octet-stream, allowing an unauthenticated attacker to exhaust server-side connections and sockets. This issue is fixed in version 6.6.7.", "Severity": "HIGH", "CweIDs": [ "CWE-404" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-59725", "https://github.com/socketio/socket.io", "https://github.com/socketio/socket.io/commit/fc11285e14964c2132d122164bf130c355f60671", "https://github.com/socketio/socket.io/releases/tag/engine.io@6.6.7", "https://github.com/socketio/socket.io/security/advisories/GHSA-r635-g3xr-vw7x", "https://nvd.nist.gov/vuln/detail/CVE-2026-59725", "https://www.cve.org/CVERecord?id=CVE-2026-59725" ], "PublishedDate": "2026-07-08T16:16:33.133Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2025-7783", "VendorIDs": [ "GHSA-fjxv-7rqg-78g4" ], "PkgID": "form-data@4.0.0", "PkgName": "form-data", "PkgPath": "app/node_modules/form-data/package.json", "PkgIdentifier": { "PURL": "pkg:npm/form-data@4.0.0", "UID": "396c4d7769bbe783" }, "InstalledVersion": "4.0.0", "FixedVersion": "2.5.4, 3.0.4, 4.0.4", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-7783", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:9ae1594a0b11e359764004965e9a203d6450e38680b64dc2adfa6259d76237ed", "Title": "form-data: Unsafe random function in form-data", "Description": "Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js.\n\nThis issue affects form-data: \u003c 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.", "Severity": "CRITICAL", "CweIDs": [ "CWE-330" ], "VendorSeverity": { "ghsa": 4, "redhat": 2, "ubuntu": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N", "V40Score": 9.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N", "V3Score": 5.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-7783", "https://github.com/benweissmann/CVE-2025-7783-poc", "https://github.com/form-data/form-data", "https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0", "https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4", "https://lists.debian.org/debian-lts-announce/2025/07/msg00023.html", "https://nvd.nist.gov/vuln/detail/CVE-2025-7783", "https://ubuntu.com/security/notices/USN-7976-1", "https://www.cve.org/CVERecord?id=CVE-2025-7783" ], "PublishedDate": "2025-07-18T17:15:44.747Z", "LastModifiedDate": "2026-06-17T10:05:39.033Z" }, { "VulnerabilityID": "CVE-2026-12143", "VendorIDs": [ "GHSA-hmw2-7cc7-3qxx" ], "PkgID": "form-data@4.0.0", "PkgName": "form-data", "PkgPath": "app/node_modules/form-data/package.json", "PkgIdentifier": { "PURL": "pkg:npm/form-data@4.0.0", "UID": "396c4d7769bbe783" }, "InstalledVersion": "4.0.0", "FixedVersion": "2.5.6, 3.0.5, 4.0.6", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-12143", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:448cbebbe0eba7278bdc962b91ac218716ad73a542fbff7afe15194b0277afcc", "Title": "form-data: form-data: Form field override via CRLF injection", "Description": "form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (\") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the attacker to terminate the header line and inject additional headers, or to smuggle entire additional multipart parts, into the request the application forwards to a backend. This can let the attacker add or override form fields (e.g. set `is_admin=true`) seen by the downstream parser. This is an instance of CWE-93 (CRLF injection). The fix escapes CR, LF, and `\"` as `%0D`, `%0A`, and `%22` in field names and filenames, matching the serialization browsers use per the WHATWG HTML multipart/form-data encoding algorithm. Exploitation requires the consuming application to use untrusted input as a field name or filename; applications that use only fixed/trusted field names are not affected. Fixed in 2.5.6, 3.0.5, and 4.0.6.", "Severity": "HIGH", "CweIDs": [ "CWE-93" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:36319", "https://access.redhat.com/errata/RHSA-2026:36625", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:40262", "https://access.redhat.com/errata/RHSA-2026:41031", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41929", "https://access.redhat.com/errata/RHSA-2026:41951", "https://access.redhat.com/errata/RHSA-2026:42146", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43052", "https://access.redhat.com/errata/RHSA-2026:44263", "https://access.redhat.com/errata/RHSA-2026:44267", "https://access.redhat.com/errata/RHSA-2026:48124", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:48693", "https://access.redhat.com/errata/RHSA-2026:50300", "https://access.redhat.com/errata/RHSA-2026:54770", "https://access.redhat.com/errata/RHSA-2026:56338", "https://access.redhat.com/errata/RHSA-2026:56366", "https://access.redhat.com/errata/RHSA-2026:56431", "https://access.redhat.com/errata/RHSA-2026:57013", "https://access.redhat.com/errata/RHSA-2026:57545", "https://access.redhat.com/errata/RHSA-2026:57590", "https://access.redhat.com/errata/RHSA-2026:57801", "https://access.redhat.com/errata/RHSA-2026:59136", "https://access.redhat.com/errata/RHSA-2026:59153", "https://access.redhat.com/errata/RHSA-2026:59155", "https://access.redhat.com/errata/RHSA-2026:59556", "https://access.redhat.com/errata/RHSA-2026:59557", "https://access.redhat.com/errata/RHSA-2026:59558", "https://access.redhat.com/errata/RHSA-2026:59559", "https://access.redhat.com/errata/RHSA-2026:59579", "https://access.redhat.com/errata/RHSA-2026:60387", "https://access.redhat.com/errata/RHSA-2026:60388", "https://access.redhat.com/errata/RHSA-2026:60389", "https://access.redhat.com/errata/RHSA-2026:60390", "https://access.redhat.com/errata/RHSA-2026:60391", "https://access.redhat.com/errata/RHSA-2026:60446", "https://access.redhat.com/errata/RHSA-2026:60477", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:62260", "https://access.redhat.com/errata/RHSA-2026:63047", "https://access.redhat.com/errata/RHSA-2026:63355", "https://access.redhat.com/errata/RHSA-2026:63373", "https://access.redhat.com/errata/RHSA-2026:66003", "https://access.redhat.com/errata/RHSA-2026:66488", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-12143", "https://advisory.echohq.com/cve/CVE-2026-12143", "https://bugzilla.redhat.com/show_bug.cgi?id=2488480", "https://cwe.mitre.org/data/definitions/93.html", "https://github.com/advisories/GHSA-hmw2-7cc7-3qxx", "https://github.com/form-data/form-data", "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435", "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229", "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045", "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx", "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data", "https://nvd.nist.gov/vuln/detail/CVE-2026-12143", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12143.json", "https://www.cve.org/CVERecord?id=CVE-2026-12143", "https://www.npmjs.com/package/form-data" ], "PublishedDate": "2026-06-12T19:16:26.56Z", "LastModifiedDate": "2026-09-11T13:17:04.787Z" }, { "VulnerabilityID": "CVE-2024-29415", "VendorIDs": [ "GHSA-2p57-rm9w-gvfp" ], "PkgID": "ip@2.0.0", "PkgName": "ip", "PkgPath": "app/node_modules/ip/package.json", "PkgIdentifier": { "PURL": "pkg:npm/ip@2.0.0", "UID": "d670557a8e38f41f" }, "InstalledVersion": "2.0.0", "Status": "affected", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-29415", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:3ad92d99ae785cb3f890214c66ad41dda3b8c36becb1d57b2f502d77bc984682", "Title": "node-ip: Incomplete fix for CVE-2023-42282", "Description": "The ip package through 2.0.1 for Node.js might allow SSRF because some IP addresses (such as 127.1, 01200034567, 012.1.2.3, 000:0:0000::01, and ::fFFf:127.0.0.1) are improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2023-42282.", "Severity": "HIGH", "CweIDs": [ "CWE-918", "CWE-941" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2024-29415", "https://cosmosofcyberspace.github.io/npm_ip_cve/npm_ip_cve.html", "https://github.com/indutny/node-ip", "https://github.com/indutny/node-ip/issues/150", "https://github.com/indutny/node-ip/pull/143", "https://github.com/indutny/node-ip/pull/144", "https://nvd.nist.gov/vuln/detail/CVE-2024-29415", "https://security.netapp.com/advisory/ntap-20250117-0010", "https://security.netapp.com/advisory/ntap-20250117-0010/", "https://www.cve.org/CVERecord?id=CVE-2024-29415" ], "PublishedDate": "2024-05-27T20:15:08.97Z", "LastModifiedDate": "2026-06-17T07:22:48.58Z" }, { "VulnerabilityID": "CVE-2025-65945", "VendorIDs": [ "GHSA-869p-cjfg-cm3x" ], "PkgID": "jws@3.2.2", "PkgName": "jws", "PkgPath": "app/node_modules/jws/package.json", "PkgIdentifier": { "PURL": "pkg:npm/jws@3.2.2", "UID": "38f9df3df1965732" }, "InstalledVersion": "3.2.2", "FixedVersion": "3.2.3, 4.0.1", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-65945", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:4f4b46bcbe508410c62790532e479cdc58d2d48d36035fc02ebd2ab96f08b851", "Title": "node-jws: auth0/node-jws: Improper signature verification in HS256 algorithm", "Description": "auth0/node-jws is a JSON Web Signature implementation for Node.js. In versions 3.2.2 and earlier and version 4.0.0, auth0/node-jws has an improper signature verification vulnerability when using the HS256 algorithm under specific conditions. Applications are affected when they use the jws.createVerify() function for HMAC algorithms and use user-provided data from the JSON Web Signature protected header or payload in HMAC secret lookup routines, which can allow attackers to bypass signature verification. This issue has been patched in versions 3.2.3 and 4.0.1.", "Severity": "HIGH", "CweIDs": [ "CWE-347" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-65945", "https://advisory.echohq.com/cve/CVE-2025-65945", "https://github.com/advisories/GHSA-869p-cjfg-cm3x", "https://github.com/auth0/node-jws", "https://github.com/auth0/node-jws/commit/34c45b2c04434f925b638de6a061de9339c0ea2e", "https://github.com/auth0/node-jws/commit/4f6e73f24df42f07d632dec6431ade8eda8d11a6", "https://github.com/auth0/node-jws/releases/tag/v3.2.3", "https://github.com/auth0/node-jws/releases/tag/v4.0.1", "https://github.com/auth0/node-jws/security/advisories/GHSA-869p-cjfg-cm3x", "https://nvd.nist.gov/vuln/detail/CVE-2025-65945", "https://www.cve.org/CVERecord?id=CVE-2025-65945" ], "PublishedDate": "2025-12-04T19:16:05.55Z", "LastModifiedDate": "2026-10-18T15:10:00.097Z" }, { "VulnerabilityID": "CVE-2026-4800", "VendorIDs": [ "GHSA-r5fr-rjxr-66jc" ], "PkgID": "lodash@4.17.21", "PkgName": "lodash", "PkgPath": "app/node_modules/lodash/package.json", "PkgIdentifier": { "PURL": "pkg:npm/lodash@4.17.21", "UID": "d36399f819217b44" }, "InstalledVersion": "4.17.21", "FixedVersion": "4.18.0", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-4800", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:b19618a5b9a6f29aa2410a98fed5964edd9d86fac3308f4071d88e38757041fb", "Title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports", "Description": "The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names, and both paths flow into the same Function() constructor sink. When an application passes untrusted input as options.imports key names, an attacker can inject default-parameter expressions that execute arbitrary code at template compilation time. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in, so if Object.prototype has been polluted by another vector the polluted keys are copied into the imports object and passed to Function(). The issue is fixed in 4.18.1 for lodash, lodash-es, lodash-amd, and lodash.template. As a workaround, do not pass untrusted input as key names in options.imports; use only developer-controlled, static key names.", "Severity": "HIGH", "CweIDs": [ "CWE-94" ], "VendorSeverity": { "alma": 3, "ghsa": 3, "nvd": 4, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHBA-2026:21387", "https://access.redhat.com/errata/RHSA-2026:10131", "https://access.redhat.com/errata/RHSA-2026:10175", "https://access.redhat.com/errata/RHSA-2026:10710", "https://access.redhat.com/errata/RHSA-2026:10713", "https://access.redhat.com/errata/RHSA-2026:11454", "https://access.redhat.com/errata/RHSA-2026:11469", "https://access.redhat.com/errata/RHSA-2026:11470", "https://access.redhat.com/errata/RHSA-2026:11471", "https://access.redhat.com/errata/RHSA-2026:11493", "https://access.redhat.com/errata/RHSA-2026:11494", "https://access.redhat.com/errata/RHSA-2026:11495", "https://access.redhat.com/errata/RHSA-2026:11516", "https://access.redhat.com/errata/RHSA-2026:12277", "https://access.redhat.com/errata/RHSA-2026:12279", "https://access.redhat.com/errata/RHSA-2026:13545", "https://access.redhat.com/errata/RHSA-2026:13553", "https://access.redhat.com/errata/RHSA-2026:13571", "https://access.redhat.com/errata/RHSA-2026:13826", "https://access.redhat.com/errata/RHSA-2026:14870", "https://access.redhat.com/errata/RHSA-2026:14871", "https://access.redhat.com/errata/RHSA-2026:16874", "https://access.redhat.com/errata/RHSA-2026:17448", "https://access.redhat.com/errata/RHSA-2026:17468", "https://access.redhat.com/errata/RHSA-2026:17469", "https://access.redhat.com/errata/RHSA-2026:17547", "https://access.redhat.com/errata/RHSA-2026:17549", "https://access.redhat.com/errata/RHSA-2026:17550", "https://access.redhat.com/errata/RHSA-2026:17598", "https://access.redhat.com/errata/RHSA-2026:17789", "https://access.redhat.com/errata/RHSA-2026:19008", "https://access.redhat.com/errata/RHSA-2026:19167", "https://access.redhat.com/errata/RHSA-2026:19409", "https://access.redhat.com/errata/RHSA-2026:19410", "https://access.redhat.com/errata/RHSA-2026:19712", "https://access.redhat.com/errata/RHSA-2026:20041", "https://access.redhat.com/errata/RHSA-2026:20042", "https://access.redhat.com/errata/RHSA-2026:20943", "https://access.redhat.com/errata/RHSA-2026:20946", "https://access.redhat.com/errata/RHSA-2026:21658", "https://access.redhat.com/errata/RHSA-2026:22619", "https://access.redhat.com/errata/RHSA-2026:24331", "https://access.redhat.com/errata/RHSA-2026:24762", "https://access.redhat.com/errata/RHSA-2026:24977", "https://access.redhat.com/errata/RHSA-2026:29795", "https://access.redhat.com/errata/RHSA-2026:34100", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:34608", "https://access.redhat.com/errata/RHSA-2026:36621", "https://access.redhat.com/errata/RHSA-2026:36651", "https://access.redhat.com/errata/RHSA-2026:37186", "https://access.redhat.com/errata/RHSA-2026:40118", "https://access.redhat.com/errata/RHSA-2026:40795", "https://access.redhat.com/errata/RHSA-2026:40945", "https://access.redhat.com/errata/RHSA-2026:40984", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41941", "https://access.redhat.com/errata/RHSA-2026:41944", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:44235", "https://access.redhat.com/errata/RHSA-2026:48699", "https://access.redhat.com/errata/RHSA-2026:54188", "https://access.redhat.com/errata/RHSA-2026:56789", "https://access.redhat.com/errata/RHSA-2026:56854", "https://access.redhat.com/errata/RHSA-2026:56912", "https://access.redhat.com/errata/RHSA-2026:59833", "https://access.redhat.com/errata/RHSA-2026:60023", "https://access.redhat.com/errata/RHSA-2026:8483", "https://access.redhat.com/errata/RHSA-2026:8484", "https://access.redhat.com/errata/RHSA-2026:8490", "https://access.redhat.com/errata/RHSA-2026:8491", "https://access.redhat.com/errata/RHSA-2026:8493", "https://access.redhat.com/errata/RHSA-2026:8498", "https://access.redhat.com/errata/RHSA-2026:9385", "https://access.redhat.com/errata/RHSA-2026:9742", "https://access.redhat.com/security/cve/CVE-2026-4800", "https://advisory.echohq.com/cve/CVE-2026-4800", "https://bugzilla.redhat.com/2453496", "https://bugzilla.redhat.com/show_bug.cgi?id=2431740", "https://bugzilla.redhat.com/show_bug.cgi?id=2453496", "https://cna.openjsf.org/security-advisories.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4800", "https://errata.almalinux.org/9/ALSA-2026-19167.html", "https://errata.rockylinux.org/RLSA-2026:24331", "https://github.com/advisories/GHSA-35jh-r3h4-6jhm", "https://github.com/advisories/GHSA-r5fr-rjxr-66jc", "https://github.com/lodash/lodash", "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c", "https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc", "https://linux.oracle.com/cve/CVE-2026-4800.html", "https://linux.oracle.com/errata/ELSA-2026-24331.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-4800", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4800.json", "https://ubuntu.com/security/notices/USN-8411-1", "https://www.cve.org/CVERecord?id=CVE-2026-4800" ], "PublishedDate": "2026-03-31T20:16:29.66Z", "LastModifiedDate": "2026-10-15T07:18:00.61Z" }, { "VulnerabilityID": "CVE-2025-14874", "VendorIDs": [ "GHSA-rcmh-qjqh-p98v" ], "PkgID": "nodemailer@6.9.13", "PkgName": "nodemailer", "PkgPath": "app/node_modules/nodemailer/package.json", "PkgIdentifier": { "PURL": "pkg:npm/nodemailer@6.9.13", "UID": "1d2bbe563b5cc4da" }, "InstalledVersion": "6.9.13", "FixedVersion": "7.0.11", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-14874", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:d123886f404d7855aa727a4d925101ce69fa3bc88e038dd516fedf5a503291df", "Title": "nodemailer: Nodemailer: Denial of service via crafted email address header", "Description": "A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email address header that triggers infinite recursion in the address parser.", "Severity": "HIGH", "CweIDs": [ "CWE-703" ], "VendorSeverity": { "ghsa": 3, "nvd": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-14874", "https://advisory.echohq.com/cve/CVE-2025-14874", "https://bugzilla.redhat.com/show_bug.cgi?id=2418133", "https://github.com/advisories/GHSA-rcmh-qjqh-p98v", "https://github.com/nodemailer/nodemailer", "https://github.com/nodemailer/nodemailer/commit/6218b8df", "https://github.com/nodemailer/nodemailer/commit/b61b9c0cfd682b6f647754ca338373b68336a150", "https://github.com/nodemailer/nodemailer/security/advisories/GHSA-rcmh-qjqh-p98v", "https://nvd.nist.gov/vuln/detail/CVE-2025-14874", "https://www.cve.org/CVERecord?id=CVE-2025-14874" ], "PublishedDate": "2025-12-18T09:15:44.87Z", "LastModifiedDate": "2026-10-27T05:16:55.207Z" }, { "VulnerabilityID": "CVE-2026-82659", "VendorIDs": [ "GHSA-p6gq-j5cr-w38f" ], "PkgID": "nodemailer@6.9.13", "PkgName": "nodemailer", "PkgPath": "app/node_modules/nodemailer/package.json", "PkgIdentifier": { "PURL": "pkg:npm/nodemailer@6.9.13", "UID": "1d2bbe563b5cc4da" }, "InstalledVersion": "6.9.13", "FixedVersion": "9.0.1", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-82659", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:e8c161033e274c929554ef32357e56ee88212f76b456937b98a8e698e80c58a8", "Title": "nodemailer: Nodemailer: Arbitrary file read and Server-Side Request Forgery via raw option bypass", "Description": "nodemailer before 9.0.1 fails to apply disableFileAccess and disableUrlAccess flags to message-level raw option, allowing authenticated attackers to read arbitrary files or perform server-side request forgery by supplying path or href properties. Attackers can exploit this by crafting raw messages with file paths or URLs that bypass the intended sandbox, with fetched content delivered in the outgoing message to attacker-controlled recipients.", "Severity": "HIGH", "CweIDs": [ "CWE-73" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-82659", "https://advisory.echohq.com/cve/CVE-2026-82659", "https://github.com/Sif-0x01/security-advisories/security/advisories/GHSA-68x8-4h5v-r533", "https://github.com/advisories/GHSA-p6gq-j5cr-w38f", "https://github.com/nodemailer/nodemailer", "https://github.com/nodemailer/nodemailer/commit/a82e060d978f27e5f41369a9a9807b1e3dedc2e2", "https://github.com/nodemailer/nodemailer/releases/tag/v9.0.1", "https://github.com/nodemailer/nodemailer/security/advisories/GHSA-p6gq-j5cr-w38f", "https://nvd.nist.gov/vuln/detail/CVE-2026-82659", "https://www.cve.org/CVERecord?id=CVE-2026-82659", "https://www.vulncheck.com/advisories/nodemailer-before-9.0.1-file-read-and-ssrf-via-raw-option" ], "PublishedDate": "2026-08-31T09:17:03.633Z", "LastModifiedDate": "2026-09-10T15:48:28.757Z" }, { "VulnerabilityID": "CVE-2026-82662", "VendorIDs": [ "GHSA-r7g4-qg5f-qqm2" ], "PkgID": "nodemailer@6.9.13", "PkgName": "nodemailer", "PkgPath": "app/node_modules/nodemailer/package.json", "PkgIdentifier": { "PURL": "pkg:npm/nodemailer@6.9.13", "UID": "1d2bbe563b5cc4da" }, "InstalledVersion": "6.9.13", "FixedVersion": "8.0.8", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-82662", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:feb57ccfd324a4c5b5f7f7c6ee288e9217baa48574200ff2c766e4e5a2c9a9c1", "Title": "nodemailer: Nodemailer: Information disclosure due to disabled TLS certificate verification", "Description": "Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUnauthorized: false, allowing attackers to intercept OAuth2 token requests. Attackers in a machine-in-the-middle position can capture OAuth client secrets, refresh tokens, and access tokens transmitted over compromised HTTPS connections.", "Severity": "HIGH", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "ghsa": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N", "V3Score": 6.5, "V40Score": 8.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-82662", "https://advisory.echohq.com/cve/CVE-2026-82662", "https://github.com/advisories/GHSA-r7g4-qg5f-qqm2", "https://github.com/nodemailer/nodemailer", "https://github.com/nodemailer/nodemailer/security/advisories/GHSA-r7g4-qg5f-qqm2", "https://nvd.nist.gov/vuln/detail/CVE-2026-82662", "https://www.cve.org/CVERecord?id=CVE-2026-82662", "https://www.vulncheck.com/advisories/nodemailer-before-8.0.8-tls-certificate-validation-bypass" ], "PublishedDate": "2026-08-31T09:17:04.093Z", "LastModifiedDate": "2026-09-10T15:48:28.757Z" }, { "VulnerabilityID": "GHSA-2x7j-588g-ccc2", "PkgID": "nodemailer@6.9.13", "PkgName": "nodemailer", "PkgPath": "app/node_modules/nodemailer/package.json", "PkgIdentifier": { "PURL": "pkg:npm/nodemailer@6.9.13", "UID": "1d2bbe563b5cc4da" }, "InstalledVersion": "6.9.13", "FixedVersion": "9.1.0", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-2x7j-588g-ccc2", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:bb7da6774fee16dcb316ab7f6caa7362d1dd208170550e2fcb10a1ff70a5b550", "Title": "Nodemailer: Quadratic (O(n²)) time complexity in addressparser allows remote denial of service via a crafted address list", "Description": "### Summary\n\nNodemailer's address parser (`lib/addressparser/index.js`) parses a list of comma‑separated addresses in **quadratic time — O(n²)** in the number of addresses. A single crafted address string (e.g. a `To`, `Cc`, `Bcc`, `From`, or `Reply‑To` value, or any value passed to the exported `addressparser`) therefore consumes CPU proportional to the **square** of its length and blocks Node's single‑threaded event loop for the entire duration, denying service to every other request in the process.\n\nThis requires **no special application configuration and no cooperating receiver** — it is entirely inside the parser and triggers on the library's default code path. A ~1.5 MB address value freezes the process for ~25–30 seconds of 100% CPU; the cost grows with the square of the input, so a few‑MB value stalls the server for minutes. It is a distinct issue from the recursion DoS fixed as CVE‑2025‑14874 (that path is guarded by a nesting‑depth cap; this one is a flat, comma‑separated list with no such limit).\n\n### Details\n\n`addressparser` tokenizes the input, splits it into per‑address token groups, and then accumulates the parsed results in a loop (`lib/addressparser/index.js`, ~lines 500–505):\n\n```js\naddresses.forEach(addr =\u003e {\n const handled = _handleAddress(addr, depth);\n if (handled.length) {\n parsedAddresses = parsedAddresses.concat(handled); // \u003c-- line ~503\n }\n});\n```\n\n`Array.prototype.concat` builds and returns a **new** array containing a copy of every element accumulated so far. Reassigning `parsedAddresses = parsedAddresses.concat(handled)` on each of the *n* iterations copies 1 + 2 + 3 + … + n elements in total, i.e. **O(n²)** work (and O(n²) transient allocations) for an input containing *n* addresses. Tokenization and `_handleAddress` themselves are linear; the quadratic blowup is entirely this accumulator.\n\n**Root‑cause proof.** Replacing only that line with an in‑place append and re‑running the exact same input:\n\n```\nparsedAddresses = parsedAddresses.concat(handled); -\u003e 100000 addresses: ~6068 ms\nparsedAddresses.push.apply(parsedAddresses, handled); -\u003e 100000 addresses: ~51 ms (≈119x faster, now linear)\n```\n\n**Measured scaling** (nodemailer 9.0.6, `'a@b.com,'.repeat(n)`):\n\n| addresses n | input size | parse time | ratio for 2× input |\n|---|---|---|---|\n| 25,000 | 0.19 MB | ~0.35 s | – |\n| 50,000 | 0.38 MB | ~1.4 s | ×4.0 |\n| 100,000 | 0.76 MB | ~6–8 s | ×3.9 |\n| 200,000 | 1.53 MB | ~25–30 s| ×4.1 |\n\nDoubling the input quadruples the time — the signature of O(n²).\n\n**Reachability.** The parser is invoked on any structured‑address header value on the normal send path (`MimeNode.setHeader('To'/'Cc'/'Bcc'/'From'/'Reply-To', value)` → `_parseAddresses` → `addressparser`, and `getEnvelope()`), so a single `transport.sendMail({ to: \u003ccrafted string\u003e })` triggers it. It is also reached directly through the **exported** `require('nodemailer/lib/addressparser')`, which many applications call to validate or display user‑supplied recipient lists. Confirmed via the public API: `setHeader('To', 'a@b.com,'.repeat(80000))` + `getEnvelope()` blocks for ~3.9 s.\n\n**Suggested fix:** accumulate in place instead of rebuilding the array each iteration, e.g. `parsedAddresses.push.apply(parsedAddresses, handled);` (or `for (const h of handled) parsedAddresses.push(h);`). Optionally cap the number of addresses / input length before parsing.\n\n### PoC\n\nEnvironment: Node.js ≥ 18 and the published `nodemailer@9.0.6`. No transport, network, or configuration required — the cost is in parsing.\n\n`poc-dos.js`:\n```js\n'use strict';\nconst addressparser = require('nodemailer/lib/addressparser');\n\nconsole.log('addresses | input size | parse time');\nfor (const n of [25000, 50000, 100000, 200000]) {\n const payload = 'a@b.com,'.repeat(n); // n valid, comma-separated recipients\n const t0 = process.hrtime.bigint();\n addressparser(payload); // blocks synchronously\n const ms = Number(process.hrtime.bigint() - t0) / 1e6;\n console.log(String(n).padStart(9) + ' | ' + (payload.length / 1048576).toFixed(2) + ' MB | ' + ms.toFixed(0).padStart(7) + ' ms');\n}\n```\n\nRun:\n```\nnpm init -y \u0026\u0026 npm install nodemailer@9.0.6\nnode poc-dos.js\n```\n\nActual output (nodemailer 9.0.6):\n```\naddresses | input size | parse time\n 25000 | 0.19 MB | 381 ms\n 50000 | 0.38 MB | 1435 ms\n 100000 | 0.76 MB | 7949 ms\n 200000 | 1.53 MB | 25154 ms\n```\n\nEquivalent trigger through the normal send API (freezes the event loop):\n```js\nconst nodemailer = require('nodemailer');\nnodemailer.createTransport({ jsonTransport: true })\n .sendMail({ from: 'a@b.com', to: 'a@b.com,'.repeat(150000), subject: 'x', text: 'y' });\n// ~15+ seconds of 100% CPU inside addressparser before anything is sent\n```\n\n### Impact\n\n* **Who is impacted:** any service that runs Nodemailer (or the standalone `nodemailer/lib/addressparser`) on an address value that can be influenced by an untrusted party — a recipient field in a \"send email / invite / share\" feature, a `Reply‑To`/`From` derived from user input, a contact‑import or mailing‑list parser, or any endpoint that validates addresses with `addressparser`. No authentication, special option, or particular receiver is needed.\n\n## Patched in 9.1.0\n\nThree separate quadratic paths were fixed, not one:\n\n* `addressparser` rebuilt its accumulator with `concat()` on every address ([9116da9](https://github.com/nodemailer/nodemailer/commit/9116da9)).\n* The display-name merge loop directly below spliced each fragment out of the array, the same shape reached through `'a, b \u003cc@d.com\u003e,'.repeat(n)` (same commit).\n* `MimeNode#_convertAddresses` checked recipient uniqueness with a linear scan per address ([7cc38af](https://github.com/nodemailer/nodemailer/commit/7cc38af), refined in [34da642](https://github.com/nodemailer/nodemailer/commit/34da642)). This was the most severe of the three and the reported proof of concept did not reach it: `'a@b.com,'.repeat(n)` is one address repeated, which dedupes to a single envelope entry. A list of *distinct* recipients cost O(n^2) here, taking ~35s for 100k even after `addressparser` was fixed.\n\nFixed alongside: `[].concat.apply` in `_parseAddresses` threw `RangeError: Maximum call stack size exceeded` past roughly 124k recipients, with no crafted input needed ([83b8c48](https://github.com/nodemailer/nodemailer/commit/83b8c48)).\n\nParsing 200k addresses now takes ~80ms instead of ~25s, and every path scales linearly. A new `maxRecipients` option (default 100000) throws rather than truncating, as a backstop.", "Severity": "HIGH", "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://advisory.echohq.com/cve/GHSA-2x7j-588g-ccc2", "https://github.com/advisories/GHSA-2x7j-588g-ccc2", "https://github.com/nodemailer/nodemailer", "https://github.com/nodemailer/nodemailer/commit/34da64282dcdc9b0581c721a27ab2fa226673150", "https://github.com/nodemailer/nodemailer/commit/7cc38af418ffa6fc7e86085195ca5ca681694b3e", "https://github.com/nodemailer/nodemailer/commit/9116da9528c6524cefaed75185602a7e85d20434", "https://github.com/nodemailer/nodemailer/pull/1848", "https://github.com/nodemailer/nodemailer/releases/tag/v9.1.0", "https://github.com/nodemailer/nodemailer/security/advisories/GHSA-2x7j-588g-ccc2" ], "PublishedDate": "2026-09-08T21:33:17Z", "LastModifiedDate": "2026-09-08T21:33:17Z" }, { "VulnerabilityID": "GHSA-v53p-9fqp-m79j", "PkgID": "nodemailer@6.9.13", "PkgName": "nodemailer", "PkgPath": "app/node_modules/nodemailer/package.json", "PkgIdentifier": { "PURL": "pkg:npm/nodemailer@6.9.13", "UID": "1d2bbe563b5cc4da" }, "InstalledVersion": "6.9.13", "FixedVersion": "10.0.6", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-v53p-9fqp-m79j", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:371d790b34f282e9f58378c33f0cb7bf005ebc1d3b1f750216eeea96dbea23d8", "Title": "Nodemailer: Quadratic backtracking in the addressparser free-text fallback allows remote denial of service", "Description": "### Summary\n\nWhen `addressparser` finds no address by its strict reading, it falls back to pulling one out of the free text with `/\\s*\\b[^@\\s]+@[^\\s]+\\b\\s*/`. That pattern backtracks quadratically: `[^@\\s]+` is retried from every offset and rescans the run to the next `@` each time. A single header value holding a long whitespace-free run with no usable `@` blocks the Node.js event loop for tens of seconds.\n\nIt is cheaper to exploit than GHSA-prgh-xp8r-p3m5: 273KB is enough for ~43s, where the comment-joined shape needed ~1.5MB for ~10s.\n\n### Details\n\nThe fallback in `src/addressparser/index.ts` ran the pattern as a search. `[^@\\s]+` crosses neither whitespace nor `@`, so from each start offset it scans forward to the next `@` or to the end of the run and then fails, and the engine simply advances one character and repeats. Three shapes make every offset fail:\n\n- the run holds no `@` at all\n- the only `@` has nothing after it\n- the only `@` has nothing before it\n\nA fourth reaches it with a valid address present but placed past a long run, so the long run is walked before the match is found.\n\n### PoC\n\n```js\nconst addressparser = require('nodemailer/lib/addressparser');\nconst s = Date.now();\naddressparser(' \u003e' + '\u003e[x][x]'.repeat(40000)); // 273KB\nconsole.log(Date.now() - s, 'ms'); // ~43000 ms, blocking\n```\n\nMeasured on 10.0.5:\n\n| Value | Parse time |\n| --- | --- |\n| `'[x]'.repeat(40000)` (117KB) | 9.0 s |\n| `'[x]'.repeat(40000) + '@'` (117KB) | 8.9 s |\n| `'@' + '[x]'.repeat(40000)` (117KB) | 8.8 s |\n| `' \u003e' + '\u003e[x][x]'.repeat(40000)` (273KB) | 42.9 s |\n\n### Impact\n\nAlgorithmic-complexity denial of service. Node is single threaded, so the block stalls the whole process. Reachable without authentication anywhere inbound header values are handed to this parser, mailparser being the notable case, and reachable from application input wherever a user-supplied string is used as a message address, since `mime-node` parses `to`, `from` and `cc` when composing.\n\n### Patch\n\nThe search is replaced by a single linear pass that finds the one offset the pattern can match at, which is then applied there with a sticky regex. Match results are unchanged, verified against the previous implementation over 3.4 million random strings comparing both the match offset and the matched text, plus 800k full-parse comparisons.\n\nFound while validating the report in GHSA-prgh-xp8r-p3m5, not reported externally.", "Severity": "HIGH", "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://advisory.echohq.com/cve/GHSA-v53p-9fqp-m79j", "https://github.com/advisories/GHSA-v53p-9fqp-m79j", "https://github.com/nodemailer/nodemailer", "https://github.com/nodemailer/nodemailer/commit/437d7fc47403df176bc39271641541b7a9bce102", "https://github.com/nodemailer/nodemailer/releases/tag/v10.0.6", "https://github.com/nodemailer/nodemailer/security/advisories/GHSA-v53p-9fqp-m79j" ], "PublishedDate": "2026-09-29T23:43:36Z", "LastModifiedDate": "2026-09-29T23:43:36Z" }, { "VulnerabilityID": "CVE-2024-45296", "VendorIDs": [ "GHSA-9wv6-86v2-598j" ], "PkgID": "path-to-regexp@0.1.7", "PkgName": "path-to-regexp", "PkgPath": "app/node_modules/path-to-regexp/package.json", "PkgIdentifier": { "PURL": "pkg:npm/path-to-regexp@0.1.7", "UID": "4aed6ec4b2575bdd" }, "InstalledVersion": "0.1.7", "FixedVersion": "1.9.0, 0.1.10, 8.0.0, 3.3.0, 6.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-45296", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:91d14b6e439f46f632bc3df2267706aeb4eb552b912b05ce12cc6fe629dfbebe", "Title": "path-to-regexp: Backtracking regular expressions cause ReDoS", "Description": "path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a DoS. The bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period (.). For users of 0.1, upgrade to 0.1.10. All other users should upgrade to 8.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-1333" ], "VendorSeverity": { "cbl-mariner": 3, "ghsa": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P", "V3Score": 7.5, "V40Score": 7.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2024-45296", "https://advisory.echohq.com/cve/CVE-2024-45296", "https://github.com/advisories/GHSA-9wv6-86v2-598j", "https://github.com/pillarjs/path-to-regexp", "https://github.com/pillarjs/path-to-regexp/commit/29b96b4a1de52824e1ca0f49a701183cc4ed476f", "https://github.com/pillarjs/path-to-regexp/commit/60f2121e9b66b7b622cc01080df0aabda9eedee6", "https://github.com/pillarjs/path-to-regexp/commit/925ac8e3c5780b02f58cbd4e52f95da8ad2ac485", "https://github.com/pillarjs/path-to-regexp/commit/d31670ae8f6e69cbfd56e835742195b7d10942ef", "https://github.com/pillarjs/path-to-regexp/commit/f1253b47b347dcb909e3e80b0eb2649109e59894", "https://github.com/pillarjs/path-to-regexp/releases/tag/v6.3.0", "https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-9wv6-86v2-598j", "https://nvd.nist.gov/vuln/detail/CVE-2024-45296", "https://security.netapp.com/advisory/ntap-20250124-0001", "https://security.netapp.com/advisory/ntap-20250124-0001/", "https://www.cve.org/CVERecord?id=CVE-2024-45296" ], "PublishedDate": "2024-09-09T19:15:13.33Z", "LastModifiedDate": "2026-06-17T07:53:58.263Z" }, { "VulnerabilityID": "CVE-2024-52798", "VendorIDs": [ "GHSA-rhx6-c78j-4q9w" ], "PkgID": "path-to-regexp@0.1.7", "PkgName": "path-to-regexp", "PkgPath": "app/node_modules/path-to-regexp/package.json", "PkgIdentifier": { "PURL": "pkg:npm/path-to-regexp@0.1.7", "UID": "4aed6ec4b2575bdd" }, "InstalledVersion": "0.1.7", "FixedVersion": "0.1.12", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-52798", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:6c2a105c4f52abde8544bf7cf62fe2fd77024b1020b5d11fad60454d73fa767c", "Title": "path-to-regexp: path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x", "Description": "path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0.1.x release of path-to-regexp. Upgrade to 0.1.12. This vulnerability exists because of an incomplete fix for CVE-2024-45296.", "Severity": "HIGH", "CweIDs": [ "CWE-1333" ], "VendorSeverity": { "cbl-mariner": 2, "ghsa": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P", "V3Score": 7.5, "V40Score": 7.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2024-52798", "https://advisory.echohq.com/cve/CVE-2024-52798", "https://blakeembrey.com/posts/2024-09-web-redos", "https://github.com/advisories/GHSA-rhx6-c78j-4q9w", "https://github.com/pillarjs/path-to-regexp", "https://github.com/pillarjs/path-to-regexp/commit/f01c26a013b1889f0c217c643964513acf17f6a4", "https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-rhx6-c78j-4q9w", "https://nvd.nist.gov/vuln/detail/CVE-2024-52798", "https://security.netapp.com/advisory/ntap-20250124-0002", "https://security.netapp.com/advisory/ntap-20250124-0002/", "https://www.cve.org/CVERecord?id=CVE-2024-52798" ], "PublishedDate": "2024-12-05T23:15:06.31Z", "LastModifiedDate": "2026-06-17T08:07:38.863Z" }, { "VulnerabilityID": "CVE-2026-4867", "VendorIDs": [ "GHSA-37ch-88jc-xwx2" ], "PkgID": "path-to-regexp@0.1.7", "PkgName": "path-to-regexp", "PkgPath": "app/node_modules/path-to-regexp/package.json", "PkgIdentifier": { "PURL": "pkg:npm/path-to-regexp@0.1.7", "UID": "4aed6ec4b2575bdd" }, "InstalledVersion": "0.1.7", "FixedVersion": "0.1.13", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-4867", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:5bef77c11fbc56621f816a6bcba888b47ccbe458a99444a0baf256d88997524d", "Title": "path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters", "Description": "Impact:\n\nA bad regular expression is generated any time you have three or more parameters within a single segment, separated by something that is not a period (.). For example, /:a-:b-:c or /:a-:b-:c-:d. The backtrack protection added in path-to-regexp@0.1.12 only prevents ambiguity for two parameters. With three or more, the generated lookahead does not block single separator characters, so capture groups overlap and cause catastrophic backtracking.\n\nPatches:\n\nUpgrade to path-to-regexp@0.1.13\n\nCustom regex patterns in route definitions (e.g., /:a-:b([^-/]+)-:c([^-/]+)) are not affected because they override the default capture group.\n\nWorkarounds:\n\nAll versions can be patched by providing a custom regular expression for parameters after the first in a single segment. As long as the custom regular expression does not match the text before the parameter, you will be safe. For example, change /:a-:b-:c to /:a-:b([^-/]+)-:c([^-/]+).\n\nIf paths cannot be rewritten and versions cannot be upgraded, another alternative is to limit the URL length.", "Severity": "HIGH", "CweIDs": [ "CWE-1333" ], "VendorSeverity": { "ghsa": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-4867", "https://advisory.echohq.com/cve/CVE-2026-4867", "https://blakeembrey.com/posts/2024-09-web-redos", "https://cna.openjsf.org/security-advisories.html", "https://github.com/advisories/GHSA-37ch-88jc-xwx2", "https://github.com/advisories/GHSA-9wv6-86v2-598j", "https://github.com/pillarjs/path-to-regexp", "https://github.com/pillarjs/path-to-regexp/releases/tag/v.0.1.13", "https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-37ch-88jc-xwx2", "https://nvd.nist.gov/vuln/detail/CVE-2026-4867", "https://www.cve.org/CVERecord?id=CVE-2026-4867" ], "PublishedDate": "2026-03-26T17:16:42.983Z", "LastModifiedDate": "2026-06-17T10:57:21.827Z" }, { "VulnerabilityID": "CVE-2026-90711", "VendorIDs": [ "GHSA-jqcg-44mw-7w3h" ], "PkgID": "proxy-addr@2.0.7", "PkgName": "proxy-addr", "PkgPath": "app/node_modules/proxy-addr/package.json", "PkgIdentifier": { "PURL": "pkg:npm/proxy-addr@2.0.7", "UID": "de768ad757b6600d" }, "InstalledVersion": "2.0.7", "FixedVersion": "2.0.8", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-90711", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:3f5c3adab4d0f49b794d8126ad1f3194cae3d52c2f316850c47e312f9701cb14", "Title": "proxy-addr: proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet", "Description": "proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips. In versions 1.1.0 through 2.0.7, a trust subnet written in IPv4-mapped IPv6 notation with an IPv4-sized prefix, such as ::ffff:10.0.0.0/8 instead of the correct ::ffff:10.0.0.0/104, is accepted without error but trusts every IPv4 address on the internet rather than the block it names. Because the socket peer then becomes trusted at hop 0, any unauthenticated client can supply an arbitrary X-Forwarded-For header and control the address the application reads, which defeats IP-based access control, rate limiting, geolocation, and audit logging. This is a fail-open regression introduced in version 1.1.0. The issue is fixed in proxy-addr 2.0.8, and users should upgrade to 2.0.8 or later. As a workaround, ensure any IPv4-mapped IPv6 trust subnet uses a prefix length of at least 97, or express the range in plain IPv4 notation.", "Severity": "CRITICAL", "CweIDs": [ "CWE-290", "CWE-348", "CWE-697" ], "VendorSeverity": { "ghsa": 4, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-90711", "https://advisory.echohq.com/cve/CVE-2026-90711", "https://cna.openjsf.org/security-advisories.html", "https://github.com/jshttp/proxy-addr", "https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965", "https://github.com/jshttp/proxy-addr/releases/tag/v2.0.8", "https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h", "https://nvd.nist.gov/vuln/detail/CVE-2026-90711", "https://www.cve.org/CVERecord?id=CVE-2026-90711" ], "PublishedDate": "2026-09-15T07:16:33.683Z", "LastModifiedDate": "2026-09-16T19:40:00.317Z" }, { "VulnerabilityID": "CVE-2026-69240", "VendorIDs": [ "GHSA-v8fg-2rw7-q452" ], "PkgID": "sequelize@6.35.2", "PkgName": "sequelize", "PkgPath": "app/node_modules/sequelize/package.json", "PkgIdentifier": { "PURL": "pkg:npm/sequelize@6.35.2", "UID": "cd6d84b9b2e21257" }, "InstalledVersion": "6.35.2", "FixedVersion": "6.37.4", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-69240", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:44c2234b58632c02d97885091b79dd187a85cb0eafa026ecfd846099dbec858c", "Title": "sequelize: Sequelize: SQL Injection via improper handling of Oracle date functions", "Description": "Sequelize is a Node.js ORM tool. Prior to 6.37.4, SQL injection is possible with strings only if dialect is set to oracle. The escape function defined in sql-string.js does not escape quotes if the value starts with TO_TIMESTAMP or TO_DATE. In the Oracle dialect, when val is a string and starts with TO_TIMESTAMP or TO_DATE, escape returns val directly instead of replacing single quotes. An attacker can inject arbitrary SQL expressions through an application value that reaches this escape path. This issue is fixed in version 6.37.4.", "Severity": "CRITICAL", "CweIDs": [ "CWE-89" ], "VendorSeverity": { "ghsa": 4, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-69240", "https://github.com/sequelize/sequelize", "https://github.com/sequelize/sequelize/commit/5deadd2410ae9136a21fb652db206d27bb715f26", "https://github.com/sequelize/sequelize/releases/tag/v6.37.4", "https://github.com/sequelize/sequelize/security/advisories/GHSA-v8fg-2rw7-q452", "https://nvd.nist.gov/vuln/detail/CVE-2026-69240", "https://www.cve.org/CVERecord?id=CVE-2026-69240" ], "PublishedDate": "2026-08-03T21:16:41.97Z", "LastModifiedDate": "2026-09-10T20:36:14.34Z" }, { "VulnerabilityID": "CVE-2026-30951", "VendorIDs": [ "GHSA-6457-6jrx-69cr" ], "PkgID": "sequelize@6.35.2", "PkgName": "sequelize", "PkgPath": "app/node_modules/sequelize/package.json", "PkgIdentifier": { "PURL": "pkg:npm/sequelize@6.35.2", "UID": "cd6d84b9b2e21257" }, "InstalledVersion": "6.35.2", "FixedVersion": "6.37.8", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-30951", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:9b1a406c959912b0a293afb4acbccb755ef9bb558b168532b8eb098673ecb7f2", "Title": "sequelize: Sequelize: Data exfiltration via SQL injection in JSON/JSONB where clause processing", "Description": "Sequelize is a Node.js ORM tool. Prior to 6.37.8, there is SQL injection via unescaped cast type in JSON/JSONB where clause processing. The _traverseJSON() function splits JSON path keys on :: to extract a cast type, which is interpolated raw into CAST(... AS \u003ctype\u003e) SQL. An attacker who controls JSON object keys can inject arbitrary SQL and exfiltrate data from any table. This vulnerability is fixed in 6.37.8.", "Severity": "HIGH", "CweIDs": [ "CWE-89" ], "VendorSeverity": { "ghsa": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:8498", "https://access.redhat.com/security/cve/CVE-2026-30951", "https://bugzilla.redhat.com/show_bug.cgi?id=2446250", "https://github.com/sequelize/sequelize", "https://github.com/sequelize/sequelize/security/advisories/GHSA-6457-6jrx-69cr", "https://nvd.nist.gov/vuln/detail/CVE-2026-30951", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-30951.json", "https://www.cve.org/CVERecord?id=CVE-2026-30951" ], "PublishedDate": "2026-03-10T21:16:48.03Z", "LastModifiedDate": "2026-07-15T02:19:45.85Z" }, { "VulnerabilityID": "CVE-2026-33151", "VendorIDs": [ "GHSA-677m-j7p3-52f9" ], "PkgID": "socket.io-parser@4.2.4", "PkgName": "socket.io-parser", "PkgPath": "app/node_modules/socket.io-parser/package.json", "PkgIdentifier": { "PURL": "pkg:npm/socket.io-parser@4.2.4", "UID": "a3ee475c77390766" }, "InstalledVersion": "4.2.4", "FixedVersion": "3.3.5, 3.4.4, 4.2.6", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33151", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:5aee2b0b7eb7e24b0f0d82eedfc76ba7870a944f59ac126c9c7be2d27aaec44a", "Title": "socket.io: Socket.IO: Denial of Service due to excessive buffering of specially crafted packets", "Description": "Socket.IO is an open source, real-time, bidirectional, event-based, communication framework. Prior to versions 3.3.5, 3.4.4, and 4.2.6, a specially crafted Socket.IO packet can make the server wait for a large number of binary attachments and buffer them, which can be exploited to make the server run out of memory. This issue has been patched in versions 3.3.5, 3.4.4, and 4.2.6.", "Severity": "HIGH", "CweIDs": [ "CWE-20", "CWE-754" ], "VendorSeverity": { "ghsa": 3, "nvd": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-33151", "https://github.com/socketio/socket.io", "https://github.com/socketio/socket.io/commit/719f9ebab0772ffb882bd614b387e585c1aa75d4", "https://github.com/socketio/socket.io/commit/9d39f1f080510f036782f2177fac701cc041faaf", "https://github.com/socketio/socket.io/commit/b25738c416c4e32fbff62ee182afa8f6d0dacf78", "https://github.com/socketio/socket.io/security/advisories/GHSA-677m-j7p3-52f9", "https://nvd.nist.gov/vuln/detail/CVE-2026-33151", "https://www.cve.org/CVERecord?id=CVE-2026-33151" ], "PublishedDate": "2026-03-20T21:17:15.573Z", "LastModifiedDate": "2026-06-17T10:37:02.107Z" }, { "VulnerabilityID": "CVE-2026-69185", "VendorIDs": [ "GHSA-2m8v-j782-fhvr" ], "PkgID": "socket.io-parser@4.2.4", "PkgName": "socket.io-parser", "PkgPath": "app/node_modules/socket.io-parser/package.json", "PkgIdentifier": { "PURL": "pkg:npm/socket.io-parser@4.2.4", "UID": "a3ee475c77390766" }, "InstalledVersion": "4.2.4", "FixedVersion": "4.2.7, 3.4.5, 3.3.6", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-69185", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:3520ff03dde4f1364709d592149b1f6e8bb69469b7bb6283915187f5ae74999b", "Title": "socket.io-parser: Socket.IO: Denial of Service via memory exhaustion from crafted packets", "Description": "Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 4.2.7, 3.4.5, and 3.3.6, a specially crafted Socket.IO packet can make the server wait for a large number of binary attachments and buffer them, which can be exploited to make the server run out of memory. This vulnerability is fixed in 4.2.7, 3.4.5, and 3.3.6.", "Severity": "HIGH", "CweIDs": [ "CWE-20", "CWE-754" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-69185", "https://github.com/socketio/socket.io", "https://github.com/socketio/socket.io/commit/7c6ef571a00656718e9e05e3b948fd1758b2a7b4", "https://github.com/socketio/socket.io/commit/9c6323e5cde41bd75df3379b5fc9293664a5f240", "https://github.com/socketio/socket.io/commit/ced94ffa3ac020a8f3c14eb98a3bf34acb14d291", "https://github.com/socketio/socket.io/security/advisories/GHSA-2m8v-j782-fhvr", "https://nvd.nist.gov/vuln/detail/CVE-2026-69185", "https://www.cve.org/CVERecord?id=CVE-2026-69185" ], "PublishedDate": "2026-08-03T20:17:29.797Z", "LastModifiedDate": "2026-10-23T21:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-59873", "VendorIDs": [ "GHSA-23hp-3jrh-7fpw" ], "PkgID": "tar@6.1.15", "PkgName": "tar", "PkgPath": "app/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.1.15", "UID": "594e7bef31ab36d4" }, "InstalledVersion": "6.1.15", "FixedVersion": "7.5.19", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59873", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:7f24e24ca6b26ba416c50cdec23f7f87108e7949819ef1c9f6ec892a90b69dc8", "Title": "tar: node-tar: Denial of Service via crafted gzip bomb", "Description": "node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry counts, or decompression ratio in extraction and parsing paths such as src/extract.ts, allowing a small crafted gzip bomb to exhaust disk space and CPU. This issue is fixed in version 7.5.19.", "Severity": "CRITICAL", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 4, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H", "V3Score": 7.5, "V40Score": 9.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:47058", "https://access.redhat.com/security/cve/CVE-2026-59873", "https://advisory.echohq.com/cve/CVE-2026-59873", "https://bugzilla.redhat.com/2494813", "https://bugzilla.redhat.com/2498116", "https://bugzilla.redhat.com/2498120", "https://bugzilla.redhat.com/show_bug.cgi?id=2494813", "https://bugzilla.redhat.com/show_bug.cgi?id=2498116", "https://bugzilla.redhat.com/show_bug.cgi?id=2498120", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13149", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59873", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59874", "https://errata.almalinux.org/9/ALSA-2026-47058.html", "https://errata.rockylinux.org/RLSA-2026:47058", "https://github.com/advisories/GHSA-23hp-3jrh-7fpw", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3", "https://github.com/isaacs/node-tar/releases/tag/v7.5.19", "https://github.com/isaacs/node-tar/security/advisories/GHSA-23hp-3jrh-7fpw", "https://linux.oracle.com/cve/CVE-2026-59873.html", "https://linux.oracle.com/errata/ELSA-2026-48034.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-59873", "https://www.cve.org/CVERecord?id=CVE-2026-59873" ], "PublishedDate": "2026-07-08T16:16:33.867Z", "LastModifiedDate": "2026-10-25T17:10:00.197Z" }, { "VulnerabilityID": "CVE-2026-23745", "VendorIDs": [ "GHSA-8qq5-rm4j-mr97" ], "PkgID": "tar@6.1.15", "PkgName": "tar", "PkgPath": "app/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.1.15", "UID": "594e7bef31ab36d4" }, "InstalledVersion": "6.1.15", "FixedVersion": "7.5.3", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-23745", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:d40403535537d0805928c7291cba3e3681d86bd76b7afc283b014eea9a238183", "Title": "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives", "Description": "node-tar is a Tar for Node.js. The node-tar library (\u003c= 7.5.2) fails to sanitize the linkpath of Link (hardlink) and SymbolicLink entries when preservePaths is false (the default secure behavior). This allows malicious archives to bypass the extraction root restriction, leading to Arbitrary File Overwrite via hardlinks and Symlink Poisoning via absolute symlink targets. This vulnerability is fixed in 7.5.3.", "Severity": "HIGH", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "nvd": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", "V3Score": 6.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:18480", "https://access.redhat.com/errata/RHSA-2026:18868", "https://access.redhat.com/errata/RHSA-2026:19712", "https://access.redhat.com/errata/RHSA-2026:2144", "https://access.redhat.com/errata/RHSA-2026:2900", "https://access.redhat.com/errata/RHSA-2026:2926", "https://access.redhat.com/errata/RHSA-2026:3782", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:6192", "https://access.redhat.com/security/cve/CVE-2026-23745", "https://advisory.echohq.com/cve/CVE-2026-23745", "https://bugzilla.redhat.com/2425946", "https://bugzilla.redhat.com/2430538", "https://bugzilla.redhat.com/2431036", "https://bugzilla.redhat.com/2431740", "https://bugzilla.redhat.com/2433645", "https://bugzilla.redhat.com/show_bug.cgi?id=2425946", "https://bugzilla.redhat.com/show_bug.cgi?id=2430538", "https://bugzilla.redhat.com/show_bug.cgi?id=2431036", "https://bugzilla.redhat.com/show_bug.cgi?id=2431740", "https://bugzilla.redhat.com/show_bug.cgi?id=2433645", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15284", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23745", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23950", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24842", "https://errata.almalinux.org/9/ALSA-2026-18868.html", "https://errata.rockylinux.org/RLSA-2026:18868", "https://github.com/advisories/GHSA-8qq5-rm4j-mr97", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e", "https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97", "https://linux.oracle.com/cve/CVE-2026-23745.html", "https://linux.oracle.com/errata/ELSA-2026-18868.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-23745", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23745.json", "https://www.cve.org/CVERecord?id=CVE-2026-23745" ], "PublishedDate": "2026-01-16T22:16:26.83Z", "LastModifiedDate": "2026-09-07T13:18:15.473Z" }, { "VulnerabilityID": "CVE-2026-23950", "VendorIDs": [ "GHSA-r6q2-hw4h-h46w" ], "PkgID": "tar@6.1.15", "PkgName": "tar", "PkgPath": "app/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.1.15", "UID": "594e7bef31ab36d4" }, "InstalledVersion": "6.1.15", "FixedVersion": "7.5.4", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-23950", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:a22aaf4389b3e8cd561a63e24557fa4516524fe44cbbbdad9ec167f3df1dba30", "Title": "node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition", "Description": "node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path collisions in the `path-reservations` system. On case-insensitive or normalization-insensitive filesystems (such as macOS APFS, In which it has been tested), the library fails to lock colliding paths (e.g., `ß` and `ss`), allowing them to be processed in parallel. This bypasses the library's internal concurrency safeguards and permits Symlink Poisoning attacks via race conditions. The library uses a `PathReservations` system to ensure that metadata checks and file operations for the same path are serialized. This prevents race conditions where one entry might clobber another concurrently. This is a Race Condition which enables Arbitrary File Overwrite. This vulnerability affects users and systems using node-tar on macOS (APFS/HFS+). Because of using `NFD` Unicode normalization (in which `ß` and `ss` are different), conflicting paths do not have their order properly preserved under filesystems that ignore Unicode normalization (e.g., APFS (in which `ß` causes an inode collision with `ss`)). This enables an attacker to circumvent internal parallelization locks (`PathReservations`) using conflicting filenames within a malicious tar archive. The patch in version 7.5.4 updates `path-reservations.js` to use a normalization form that matches the target filesystem's behavior (e.g., `NFKD`), followed by first `toLocaleLowerCase('en')` and then `toLocaleUpperCase('en')`. As a workaround, users who cannot upgrade promptly, and who are programmatically using `node-tar` to extract arbitrary tarball data should filter out all `SymbolicLink` entries (as npm does) to defend against arbitrary file writes via this file system entry name collision issue.", "Severity": "HIGH", "CweIDs": [ "CWE-176", "CWE-352", "CWE-367" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "nvd": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L", "V3Score": 8.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 5.9 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:18480", "https://access.redhat.com/errata/RHSA-2026:18868", "https://access.redhat.com/errata/RHSA-2026:2144", "https://access.redhat.com/errata/RHSA-2026:2926", "https://access.redhat.com/errata/RHSA-2026:6192", "https://access.redhat.com/security/cve/CVE-2026-23950", "https://advisory.echohq.com/cve/CVE-2026-23950", "https://bugzilla.redhat.com/2425946", "https://bugzilla.redhat.com/2430538", "https://bugzilla.redhat.com/2431036", "https://bugzilla.redhat.com/2431740", "https://bugzilla.redhat.com/2433645", "https://bugzilla.redhat.com/show_bug.cgi?id=2425946", "https://bugzilla.redhat.com/show_bug.cgi?id=2430538", "https://bugzilla.redhat.com/show_bug.cgi?id=2431036", "https://bugzilla.redhat.com/show_bug.cgi?id=2431740", "https://bugzilla.redhat.com/show_bug.cgi?id=2433645", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15284", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23745", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23950", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24842", "https://errata.almalinux.org/9/ALSA-2026-18868.html", "https://errata.rockylinux.org/RLSA-2026:18868", "https://github.com/advisories/GHSA-r6q2-hw4h-h46w", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/3b1abfae650056edfabcbe0a0df5954d390521e6", "https://github.com/isaacs/node-tar/security/advisories/GHSA-r6q2-hw4h-h46w", "https://linux.oracle.com/cve/CVE-2026-23950.html", "https://linux.oracle.com/errata/ELSA-2026-18868.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-23950", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23950.json", "https://www.cve.org/CVERecord?id=CVE-2026-23950" ], "PublishedDate": "2026-01-20T01:15:57.87Z", "LastModifiedDate": "2026-08-24T13:17:36.63Z" }, { "VulnerabilityID": "CVE-2026-24842", "VendorIDs": [ "GHSA-34x7-hfp2-rc4v" ], "PkgID": "tar@6.1.15", "PkgName": "tar", "PkgPath": "app/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.1.15", "UID": "594e7bef31ab36d4" }, "InstalledVersion": "6.1.15", "FixedVersion": "7.5.7", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-24842", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:5c89747db1087eb44b2d8d1d1df844b7b1227d4412c3804192be1d9144e82f11", "Title": "node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check", "Description": "node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution semantics than the actual hardlink creation logic. This mismatch allows an attacker to craft a malicious TAR archive that bypasses path traversal protections and creates hardlinks to arbitrary files outside the extraction directory. Version 7.5.7 contains a fix for the issue.", "Severity": "HIGH", "CweIDs": [ "CWE-22", "CWE-59" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "V3Score": 8.2 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:18480", "https://access.redhat.com/errata/RHSA-2026:18868", "https://access.redhat.com/errata/RHSA-2026:2900", "https://access.redhat.com/errata/RHSA-2026:33371", "https://access.redhat.com/errata/RHSA-2026:5447", "https://access.redhat.com/errata/RHSA-2026:6192", "https://access.redhat.com/security/cve/CVE-2026-24842", "https://advisory.echohq.com/cve/CVE-2026-24842", "https://bugzilla.redhat.com/2425946", "https://bugzilla.redhat.com/2430538", "https://bugzilla.redhat.com/2431036", "https://bugzilla.redhat.com/2431740", "https://bugzilla.redhat.com/2433645", "https://bugzilla.redhat.com/show_bug.cgi?id=2425946", "https://bugzilla.redhat.com/show_bug.cgi?id=2430538", "https://bugzilla.redhat.com/show_bug.cgi?id=2431036", "https://bugzilla.redhat.com/show_bug.cgi?id=2431740", "https://bugzilla.redhat.com/show_bug.cgi?id=2433645", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15284", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23745", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23950", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24842", "https://errata.almalinux.org/9/ALSA-2026-18868.html", "https://errata.rockylinux.org/RLSA-2026:18868", "https://github.com/advisories/GHSA-34x7-hfp2-rc4v", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/f4a7aa9bc3d717c987fdf1480ff7a64e87ffdb46", "https://github.com/isaacs/node-tar/security/advisories/GHSA-34x7-hfp2-rc4v", "https://linux.oracle.com/cve/CVE-2026-24842.html", "https://linux.oracle.com/errata/ELSA-2026-18868.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-24842", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24842.json", "https://www.cve.org/CVERecord?id=CVE-2026-24842" ], "PublishedDate": "2026-01-28T01:16:14.947Z", "LastModifiedDate": "2026-09-07T13:18:17.38Z" }, { "VulnerabilityID": "CVE-2026-26960", "VendorIDs": [ "GHSA-83g3-92jg-28cx" ], "PkgID": "tar@6.1.15", "PkgName": "tar", "PkgPath": "app/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.1.15", "UID": "594e7bef31ab36d4" }, "InstalledVersion": "6.1.15", "FixedVersion": "7.5.8", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-26960", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:d3157bc8426390f3c42f086789da48129ea3105e7b254e09914bf3fc2f843e49", "Title": "node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation", "Description": "node-tar is a full-featured Tar for Node.js. When using default options in versions 7.5.7 and below, an attacker-controlled archive can create a hardlink inside the extraction directory that points to a file outside the extraction root, enabling arbitrary file read and write as the extracting user. Severity is high because the primitive bypasses path protections and turns archive extraction into a direct filesystem access primitive. This issue has been fixed in version 7.5.8.", "Severity": "HIGH", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "amazon": 3, "ghsa": 3, "nvd": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 7.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-26960", "https://advisory.echohq.com/cve/CVE-2026-26960", "https://github.com/advisories/GHSA-83g3-92jg-28cx", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/2cb1120bcefe28d7ecc719b41441ade59c52e384", "https://github.com/isaacs/node-tar/commit/d18e4e1f846f4ddddc153b0f536a19c050e7499f", "https://github.com/isaacs/node-tar/security/advisories/GHSA-83g3-92jg-28cx", "https://nvd.nist.gov/vuln/detail/CVE-2026-26960", "https://www.cve.org/CVERecord?id=CVE-2026-26960" ], "PublishedDate": "2026-02-20T02:16:53.883Z", "LastModifiedDate": "2026-06-17T10:26:27.197Z" }, { "VulnerabilityID": "CVE-2026-29786", "VendorIDs": [ "GHSA-qffp-2rhf-9h96" ], "PkgID": "tar@6.1.15", "PkgName": "tar", "PkgPath": "app/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.1.15", "UID": "594e7bef31ab36d4" }, "InstalledVersion": "6.1.15", "FixedVersion": "7.5.10", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-29786", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:3c20a3376096fd5c6f92a058271b7f7628ae975c107c64c36fc8879a925d259f", "Title": "node-tar: hardlink path traversal via drive-relative linkpath", "Description": "node-tar is a full-featured Tar for Node.js. Prior to version 7.5.10, tar can be tricked into creating a hardlink that points outside the extraction directory by using a drive-relative link target such as C:../target.txt, which enables file overwrite outside cwd during normal tar.x() extraction. This issue has been patched in version 7.5.10.", "Severity": "HIGH", "CweIDs": [ "CWE-22", "CWE-59" ], "VendorSeverity": { "amazon": 2, "ghsa": 3, "nvd": 2, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N", "V3Score": 6.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", "V3Score": 8.6 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-29786", "https://advisory.echohq.com/cve/CVE-2026-29786", "https://bugzilla.redhat.com/show_bug.cgi?id=2445476", "https://github.com/advisories/GHSA-qffp-2rhf-9h96", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/7bc755dd85e623c0279e08eb3784909e6d7e4b9f", "https://github.com/isaacs/node-tar/security/advisories/GHSA-qffp-2rhf-9h96", "https://nvd.nist.gov/vuln/detail/CVE-2026-29786", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29786.json", "https://www.cve.org/CVERecord?id=CVE-2026-29786" ], "PublishedDate": "2026-03-07T16:15:55.587Z", "LastModifiedDate": "2026-09-01T13:18:36.727Z" }, { "VulnerabilityID": "CVE-2026-31802", "VendorIDs": [ "GHSA-9ppj-qmqm-q256" ], "PkgID": "tar@6.1.15", "PkgName": "tar", "PkgPath": "app/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.1.15", "UID": "594e7bef31ab36d4" }, "InstalledVersion": "6.1.15", "FixedVersion": "7.5.11", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-31802", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:6226bb2f10f950a71363834644890ec82140f795f35d24b8f3573f6384ec20b7", "Title": "tar: tar: File overwrite via drive-relative symlink traversal", "Description": "node-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, tar (npm) can be tricked into creating a symlink that points outside the extraction directory by using a drive-relative symlink target such as C:../../../target.txt, which enables file overwrite outside cwd during normal tar.x() extraction. This vulnerability is fixed in 7.5.11.", "Severity": "HIGH", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "ghsa": 3, "nvd": 2, "redhat": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "V3Score": 5.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 6.2 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-31802", "https://advisory.echohq.com/cve/CVE-2026-31802", "https://github.com/advisories/GHSA-9ppj-qmqm-q256", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/f48b5fa3b7985ddab96dc0f2125a4ffc9911b6ad", "https://github.com/isaacs/node-tar/security/advisories/GHSA-9ppj-qmqm-q256", "https://nvd.nist.gov/vuln/detail/CVE-2026-31802", "https://www.cve.org/CVERecord?id=CVE-2026-31802" ], "PublishedDate": "2026-03-10T07:44:58.02Z", "LastModifiedDate": "2026-06-17T10:34:29.49Z" }, { "VulnerabilityID": "CVE-2026-59874", "VendorIDs": [ "GHSA-8x88-c5mf-7j5w" ], "PkgID": "tar@6.1.15", "PkgName": "tar", "PkgPath": "app/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.1.15", "UID": "594e7bef31ab36d4" }, "InstalledVersion": "6.1.15", "FixedVersion": "7.5.18", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59874", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:0cce10cf834d877513e4c041302260a63cba1b9484d125b34e0098705f620504", "Title": "tar: Node-tar: Denial of Service via malformed tar archive header", "Description": "node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsing the same header. This issue is fixed in version 7.5.18.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:47058", "https://access.redhat.com/security/cve/CVE-2026-59874", "https://advisory.echohq.com/cve/CVE-2026-59874", "https://bugzilla.redhat.com/2494813", "https://bugzilla.redhat.com/2498116", "https://bugzilla.redhat.com/2498120", "https://bugzilla.redhat.com/show_bug.cgi?id=2494813", "https://bugzilla.redhat.com/show_bug.cgi?id=2498116", "https://bugzilla.redhat.com/show_bug.cgi?id=2498120", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13149", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59873", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59874", "https://errata.almalinux.org/9/ALSA-2026-47058.html", "https://errata.rockylinux.org/RLSA-2026:47058", "https://github.com/advisories/GHSA-8x88-c5mf-7j5w", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5", "https://github.com/isaacs/node-tar/releases/tag/v7.5.18", "https://github.com/isaacs/node-tar/security/advisories/GHSA-8x88-c5mf-7j5w", "https://linux.oracle.com/cve/CVE-2026-59874.html", "https://linux.oracle.com/errata/ELSA-2026-48034.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-59874", "https://www.cve.org/CVERecord?id=CVE-2026-59874" ], "PublishedDate": "2026-07-08T16:16:33.99Z", "LastModifiedDate": "2026-10-25T17:10:00.197Z" }, { "VulnerabilityID": "CVE-2026-73566", "VendorIDs": [ "GHSA-r292-9mhp-454m" ], "PkgID": "tar@6.1.15", "PkgName": "tar", "PkgPath": "app/node_modules/tar/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar@6.1.15", "UID": "594e7bef31ab36d4" }, "InstalledVersion": "6.1.15", "FixedVersion": "7.5.21", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-73566", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:bde0f10b12b66018d21086c787e53aa4ab04cdf3ebd950ade19480e17cffe997", "Title": "tar: node-tar: Denial of Service via crafted long-path tar archive", "Description": "node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the recursive mapHas helper to walk an archive entry path upward with path.dirname() and no segment cap when tar.t(...) or tar.x(...) receives a non-empty member-selection list. A crafted GNU L or PAX x long-path header with thousands of slash-separated segments reaches this.filter(entry.path, entry) in Parser[CONSUMEHEADER] in src/parse.ts before Unpack[CHECKPATH] applies maxDepth, causing an uncatchable RangeError stack overflow that terminates asynchronous and streaming Node.js consumers. This issue is fixed in version 7.5.21.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-674" ], "VendorSeverity": { "amazon": 3, "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-73566", "https://advisory.echohq.com/cve/CVE-2026-73566", "https://github.com/advisories/GHSA-r292-9mhp-454m", "https://github.com/isaacs/node-tar", "https://github.com/isaacs/node-tar/commit/631ae59121bf8fc8a22bbae35f074cb9b789cd4a", "https://github.com/isaacs/node-tar/releases/tag/v7.5.21", "https://github.com/isaacs/node-tar/security/advisories/GHSA-r292-9mhp-454m", "https://nvd.nist.gov/vuln/detail/CVE-2026-73566", "https://www.cve.org/CVERecord?id=CVE-2026-73566" ], "PublishedDate": "2026-08-13T18:18:19.25Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2025-48387", "VendorIDs": [ "GHSA-8cj5-5rvv-wf4v" ], "PkgID": "tar-fs@2.1.2", "PkgName": "tar-fs", "PkgPath": "app/node_modules/tar-fs/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar-fs@2.1.2", "UID": "a6ccbae2c4fe9771" }, "InstalledVersion": "2.1.2", "FixedVersion": "1.16.5, 2.1.3, 3.0.9", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-48387", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:e29b53ae556b239848328764498d37d0f48c7ead14080aef56488159b5d3cc8d", "Title": "tar-fs: tar-fs has issue where extract can write outside the specified dir with a specific tarball", "Description": "tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.0.9, 2.1.3, and 1.16.5 have an issue where an extract can write outside the specified dir with a specific tarball. This has been patched in versions 3.0.9, 2.1.3, and 1.16.5. As a workaround, use the ignore option to ignore non files/directories.", "Severity": "HIGH", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "cbl-mariner": 3, "ghsa": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "V3Score": 7.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-48387", "https://advisory.echohq.com/cve/CVE-2025-48387", "https://github.com/advisories/GHSA-8cj5-5rvv-wf4v", "https://github.com/google/security-research/security/advisories/GHSA-xrg4-qp5w-2c3w", "https://github.com/mafintosh/tar-fs", "https://github.com/mafintosh/tar-fs/commit/647447b572bc135c41035e82ca7b894f02b17f0f", "https://github.com/mafintosh/tar-fs/security/advisories/GHSA-8cj5-5rvv-wf4v", "https://lists.debian.org/debian-lts-announce/2025/06/msg00012.html", "https://nvd.nist.gov/vuln/detail/CVE-2025-48387", "https://ubuntu.com/security/notices/USN-8367-1", "https://www.cve.org/CVERecord?id=CVE-2025-48387" ], "PublishedDate": "2025-06-02T20:15:22.93Z", "LastModifiedDate": "2026-06-17T09:29:35.47Z" }, { "VulnerabilityID": "CVE-2025-59343", "VendorIDs": [ "GHSA-vj76-c3g6-qr5v" ], "PkgID": "tar-fs@2.1.2", "PkgName": "tar-fs", "PkgPath": "app/node_modules/tar-fs/package.json", "PkgIdentifier": { "PURL": "pkg:npm/tar-fs@2.1.2", "UID": "a6ccbae2c4fe9771" }, "InstalledVersion": "2.1.2", "FixedVersion": "3.1.1, 2.1.4, 1.16.6", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-59343", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:1bdda7c66a0c49ac46a7d24325ff39ff8261ab0648060302a730516b87142041", "Title": "tar-fs: tar-fs symlink validation bypass", "Description": "tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.1.1, 2.1.3, and 1.16.5 are vulnerable to symlink validation bypass if the destination directory is predictable with a specific tarball. This issue has been patched in version 3.1.1, 2.1.4, and 1.16.6. A workaround involves using the ignore option on non files/directories.", "Severity": "HIGH", "CweIDs": [ "CWE-22", "CWE-61" ], "VendorSeverity": { "ghsa": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-59343", "https://advisory.echohq.com/cve/CVE-2025-59343", "https://github.com/advisories/GHSA-vj76-c3g6-qr5v", "https://github.com/mafintosh/tar-fs", "https://github.com/mafintosh/tar-fs/commit/0bd54cdf06da2b7b5b95cd4b062c9f4e0a8c4e09", "https://github.com/mafintosh/tar-fs/commit/0bd54cdf06da2b7b5b95cd4b062c9f4e0a8c4e09%20%28v3.1.1%29", "https://github.com/mafintosh/tar-fs/security/advisories/GHSA-vj76-c3g6-qr5v", "https://lists.debian.org/debian-lts-announce/2025/09/msg00028.html", "https://nvd.nist.gov/vuln/detail/CVE-2025-59343", "https://ubuntu.com/security/notices/USN-8367-1", "https://www.cve.org/CVERecord?id=CVE-2025-59343" ], "PublishedDate": "2025-09-24T18:15:42.297Z", "LastModifiedDate": "2026-06-17T09:45:56.623Z" }, { "VulnerabilityID": "CVE-2026-109383", "VendorIDs": [ "GHSA-2m5v-pch6-74hx" ], "PkgID": "undici@6.28.0", "PkgName": "undici", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/undici/package.json", "PkgIdentifier": { "PURL": "pkg:npm/undici@6.28.0", "UID": "ce334dba36b60cab" }, "InstalledVersion": "6.28.0", "FixedVersion": "6.29.1, 7.30.1, 8.12.2", "Status": "fixed", "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109383", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:0373283db2b2f1999bf326abfdf622c0ab95c984d246092eaf54ea1461f2fd49", "Title": "undici: undici: Certificate validation bypass via dropped TLS options in Agent", "Description": "undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its constructor options through a JSON-based deep clone before forwarding them to each per-origin pool, and because JSON cannot represent functions, a caller-supplied tls option containing a checkServerIdentity callback is silently dropped before it reaches the TLS layer. As a result, a TLS peer whose certificate a custom checkServerIdentity was written to reject, but which passes Node's default hostname and chain checks, is silently accepted. Because Agent is the default dispatcher behind request, fetch, and setGlobalDispatcher, this affects the path most applications use, and EnvHttpProxyAgent is affected on its direct and no-proxy routes as well, while only applications that pass a function-valued tls option such as a custom checkServerIdentity for certificate or public-key pinning are at risk. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, which preserve the tls option outside the JSON clone so custom verification callbacks are forwarded unchanged, and users should upgrade to one of those versions or later. As a workaround, pass the TLS options through connect instead of tls, or for proxied destinations use requestTls and proxyTls.", "Severity": "HIGH", "CweIDs": [ "CWE-295" ], "VendorSeverity": { "amazon": 3, "ghsa": 3, "nvd": 4, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-109383", "https://advisory.echohq.com/cve/CVE-2026-109383", "https://cna.openjsf.org/security-advisories.html", "https://github.com/nodejs/undici", "https://github.com/nodejs/undici/commit/04cb74b1db131ff8f5b4557dce811cbf5f4664b4", "https://github.com/nodejs/undici/commit/8c59f6b302898cb2e9b0f7962cd7212b6e597c9f", "https://github.com/nodejs/undici/commit/f75eac00ac17", "https://github.com/nodejs/undici/commit/f75eac00ac177f7b2e6c8bfbd52d4113164286e6", "https://github.com/nodejs/undici/releases/tag/v6.29.1", "https://github.com/nodejs/undici/releases/tag/v7.30.1", "https://github.com/nodejs/undici/releases/tag/v8.12.2", "https://github.com/nodejs/undici/security/advisories/GHSA-2m5v-pch6-74hx", "https://nvd.nist.gov/vuln/detail/CVE-2026-109383", "https://www.cve.org/CVERecord?id=CVE-2026-109383" ], "PublishedDate": "2026-10-15T19:17:20.853Z", "LastModifiedDate": "2026-10-19T20:45:52.41Z" }, { "VulnerabilityID": "CVE-2026-109869", "VendorIDs": [ "GHSA-xjj6-f33q-929c" ], "PkgID": "undici@6.28.0", "PkgName": "undici", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/undici/package.json", "PkgIdentifier": { "PURL": "pkg:npm/undici@6.28.0", "UID": "ce334dba36b60cab" }, "InstalledVersion": "6.28.0", "FixedVersion": "6.29.1, 7.30.1, 8.12.2", "Status": "fixed", "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109869", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:f1f9adaaacaa9529adad5b118298121c2304b2f0613dabac4a05fc27086e5036", "Title": "undici: undici: Denial of Service via unhandled stream error on excessive content encodings", "Description": "undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.0.0 through 8.12.1, its fetch() implementation crashes the Node.js process when a malicious server returns a response with more than five content codings and closes the connection before sending the body. undici rejects such responses because of a content-encoding limit, but it created the internal response stream before that check and returned without attaching an error listener or aborting the request, so the early close surfaces a content-length mismatch on the orphaned stream, which Node.js treats as an unhandled error and terminates the process. A remote, unauthenticated server can trigger this with a single response, even when the application correctly catches the fetch() rejection, resulting in a denial of service. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, and users should upgrade to one of those versions or later. There is no workaround.", "Severity": "HIGH", "CweIDs": [ "CWE-248", "CWE-459" ], "VendorSeverity": { "amazon": 3, "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-109869", "https://advisory.echohq.com/cve/CVE-2026-109869", "https://cna.openjsf.org/security-advisories.html", "https://github.com/nodejs/undici", "https://github.com/nodejs/undici/commit/07ded4941b1e72afec862958c3b8ddf468f3b429", "https://github.com/nodejs/undici/commit/1325a87dfb3492f8e87e6b0a84b3bda4e82e3436", "https://github.com/nodejs/undici/commit/b5084c7dc239", "https://github.com/nodejs/undici/commit/b5084c7dc239172d75c336b1cd51ddac023938a5", "https://github.com/nodejs/undici/releases/tag/v6.29.1", "https://github.com/nodejs/undici/releases/tag/v7.30.1", "https://github.com/nodejs/undici/releases/tag/v8.12.2", "https://github.com/nodejs/undici/security/advisories/GHSA-xjj6-f33q-929c", "https://nvd.nist.gov/vuln/detail/CVE-2026-109869", "https://www.cve.org/CVERecord?id=CVE-2026-109869" ], "PublishedDate": "2026-10-15T19:17:21.77Z", "LastModifiedDate": "2026-10-19T20:45:20.34Z" }, { "VulnerabilityID": "CVE-2026-19534", "VendorIDs": [ "GHSA-rfgv-xxqx-mfg5" ], "PkgID": "undici@6.28.0", "PkgName": "undici", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/undici/package.json", "PkgIdentifier": { "PURL": "pkg:npm/undici@6.28.0", "UID": "ce334dba36b60cab" }, "InstalledVersion": "6.28.0", "FixedVersion": "6.28.1, 7.29.1, 8.10.2", "Status": "fixed", "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-19534", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:55a7573e4bf9ce694af0b4f0f64e65a293ffd3d96a2b9b0055825af2c9bdea08", "Title": "undici: undici: Denial of Service via unrequested WebSocket subprotocol", "Description": "undici's WebSocket client crashes the whole Node.js process during the opening handshake when a server responds with a subprotocol that the client never requested. A default WebSocket connection sends no subprotocol, but if the server's 101 response includes a Sec-WebSocket-Protocol header, undici dereferences a null value while checking it against the requested list and throws an uncaught TypeError. Because that code runs inside a microtask with no surrounding error handling, the exception propagates and terminates the process under Node's default behavior, instead of gracefully failing the connection as required by the WebSocket protocol. Any application that opens a WebSocket to an attacker-controlled or compromised server, or over a plaintext connection subject to a machine-in-the-middle, can be crashed remotely without authentication in the default configuration. This affects undici versions from 6.7.0 up to 6.28.1, from 7.0.0 up to 7.29.1, and from 8.0.0 up to 8.10.2. Users should upgrade to undici 6.28.1, 7.29.1, or 8.10.2.", "Severity": "HIGH", "CweIDs": [ "CWE-248", "CWE-252" ], "VendorSeverity": { "alma": 3, "amazon": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:76750", "https://access.redhat.com/security/cve/CVE-2026-19534", "https://advisory.echohq.com/cve/CVE-2026-19534", "https://bugzilla.redhat.com/2481394", "https://bugzilla.redhat.com/2528759", "https://bugzilla.redhat.com/show_bug.cgi?id=2481394", "https://bugzilla.redhat.com/show_bug.cgi?id=2528759", "https://cna.openjsf.org/security-advisories.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19534", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9496", "https://errata.almalinux.org/9/ALSA-2026-76750.html", "https://errata.rockylinux.org/RLSA-2026:76750", "https://github.com/nodejs/undici", "https://github.com/nodejs/undici/commit/2af0faf88b906d3127a360c3ac75164c0f95e5a5", "https://github.com/nodejs/undici/commit/6615e0175e9b635bcd2e3e87a47daa82f6f5b728", "https://github.com/nodejs/undici/commit/66e12816064cf3068f63bd134748b7fc4e779bad", "https://github.com/nodejs/undici/releases/tag/v6.28.1", "https://github.com/nodejs/undici/releases/tag/v7.29.1", "https://github.com/nodejs/undici/releases/tag/v8.10.2", "https://github.com/nodejs/undici/security/advisories/GHSA-rfgv-xxqx-mfg5", "https://linux.oracle.com/cve/CVE-2026-19534.html", "https://linux.oracle.com/errata/ELSA-2026-76750.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-19534", "https://www.cve.org/CVERecord?id=CVE-2026-19534" ], "PublishedDate": "2026-09-04T18:17:51.647Z", "LastModifiedDate": "2026-09-16T20:41:08.75Z" }, { "VulnerabilityID": "CVE-2026-87018", "VendorIDs": [ "GHSA-qrxm-fqhp-jwvm" ], "PkgID": "undici@6.28.0", "PkgName": "undici", "PkgPath": "usr/local/lib/node_modules/npm/node_modules/undici/package.json", "PkgIdentifier": { "PURL": "pkg:npm/undici@6.28.0", "UID": "ce334dba36b60cab" }, "InstalledVersion": "6.28.0", "FixedVersion": "6.29.1, 7.30.1, 8.12.2", "Status": "fixed", "Layer": { "DiffID": "sha256:1e7c31449d3b67bab8f9bdb22fdd16ea983e167875bf91f9655583354477d417" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-87018", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:5dbd164ddf1e6d388124df6d9dfcfb816034ba80d17f08db6fa5bd711c2a2429", "Title": "undici: undici: Denial of Service via TLS renegotiation with mismatched certificate", "Description": "undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, the client process crashes when a TLS 1.2 server renegotiates after the connection is established and presents a different, CA-trusted certificate whose hostname does not match the requested host. Node.js re-runs hostname verification on the renegotiated handshake and destroys the socket with a certificate-altname error, but undici's established-socket error handler asserted that this error code could never occur, so the peer-controlled error became an uncaught assertion that terminates the Node.js process, affecting both the HTTP/1.1 and HTTP/2 paths. A malicious or compromised HTTPS endpoint reached through undici or the global fetch() can crash the client with a single server-initiated renegotiation, taking down all in-flight requests and background work in the process, and exploitation needs no CA compromise because the attacker controls the endpoint and can present two ordinary valid certificates. Only TLS 1.2 is affected, since TLS 1.3 does not support renegotiation. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, and users should upgrade to one of those versions or later. As a workaround, restrict outbound connections to TLS 1.3 so renegotiation cannot occur, when the target endpoints support it.", "Severity": "HIGH", "CweIDs": [ "CWE-248", "CWE-617" ], "VendorSeverity": { "amazon": 3, "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-87018", "https://advisory.echohq.com/cve/CVE-2026-87018", "https://cna.openjsf.org/security-advisories.html", "https://github.com/nodejs/undici", "https://github.com/nodejs/undici/commit/12cfd96c3f430897656e3edc1c5e02be8c1cd309", "https://github.com/nodejs/undici/commit/b40fbfc0651703cf9fa9f6ced68b679f28d8bb28", "https://github.com/nodejs/undici/commit/e257e9f8fb42eedd50727b9cf65e548c8925e4a8", "https://github.com/nodejs/undici/releases/tag/v6.29.1", "https://github.com/nodejs/undici/releases/tag/v7.30.1", "https://github.com/nodejs/undici/releases/tag/v8.12.2", "https://github.com/nodejs/undici/security/advisories/GHSA-qrxm-fqhp-jwvm", "https://nvd.nist.gov/vuln/detail/CVE-2026-87018", "https://www.cve.org/CVERecord?id=CVE-2026-87018" ], "PublishedDate": "2026-10-15T19:17:46.6Z", "LastModifiedDate": "2026-10-19T20:41:16.643Z" }, { "VulnerabilityID": "CVE-2025-12758", "VendorIDs": [ "GHSA-vghf-hv5q-vc2g" ], "PkgID": "validator@13.9.0", "PkgName": "validator", "PkgPath": "app/node_modules/validator/package.json", "PkgIdentifier": { "PURL": "pkg:npm/validator@13.9.0", "UID": "bae3da9ed34b5990" }, "InstalledVersion": "13.9.0", "FixedVersion": "13.15.22", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-12758", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:dfd531b0f63230b706d0ee82ed80b1fb5b18a034da6ca90862dd40b2e7836121", "Title": "Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elements", "Description": "Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength() function that does not take into account Unicode variation selectors (\\uFE0F, \\uFE0E) appearing in a sequence which lead to improper string length calculation. This can lead to an application using isLength for input validation accepting strings significantly longer than intended, resulting in issues like data truncation in databases, buffer overflows in other system components, or denial-of-service.", "Severity": "HIGH", "CweIDs": [ "CWE-792", "CWE-172" ], "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P", "V3Score": 7.5, "V40Score": 7.7 } }, "References": [ "http://seclists.org/fulldisclosure/2026/Jan/27", "https://gist.github.com/koral--/ad31208b25b9e3d1e2e35f1d4d72572e", "https://github.com/validatorjs/validator.js", "https://github.com/validatorjs/validator.js/commit/d457ecaf55b0f3d8bd379d82757425d0d13dd382", "https://github.com/validatorjs/validator.js/pull/2616", "https://nvd.nist.gov/vuln/detail/CVE-2025-12758", "https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-14152011", "https://security.snyk.io/vuln/SNYK-JS-VALIDATOR-13653476" ], "PublishedDate": "2025-11-27T05:16:12.193Z", "LastModifiedDate": "2026-10-19T13:10:00.11Z" }, { "VulnerabilityID": "CVE-2024-37890", "VendorIDs": [ "GHSA-3h5v-q93c-6h6q" ], "PkgID": "ws@8.11.0", "PkgName": "ws", "PkgPath": "app/node_modules/ws/package.json", "PkgIdentifier": { "PURL": "pkg:npm/ws@8.11.0", "UID": "cb9e9a431e2ad650" }, "InstalledVersion": "8.11.0", "FixedVersion": "5.2.4, 6.2.3, 7.5.10, 8.17.1", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-37890", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:bdfb7b189ceeb699e1b09ec32b88cede2e6a22ec31ff24aecd02683538d354d0", "Title": "nodejs-ws: denial of service when handling a request with many HTTP headers", "Description": "ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in ws@8.17.1 (e55e510) and backported to ws@7.5.10 (22c2876), ws@6.2.3 (eeb76d3), and ws@5.2.4 (4abd8f6). In vulnerable versions of ws, the issue can be mitigated in the following ways: 1. Reduce the maximum allowed length of the request headers using the --max-http-header-size=size and/or the maxHeaderSize options so that no more headers than the server.maxHeadersCount limit can be sent. 2. Set server.maxHeadersCount to 0 so that no limit is applied.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "cbl-mariner": 3, "ghsa": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2024-37890", "https://advisory.echohq.com/cve/CVE-2024-37890", "https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "https://github.com/websockets/ws", "https://github.com/websockets/ws/commit/22c28763234aa75a7e1b76f5c01c181260d7917f", "https://github.com/websockets/ws/commit/4abd8f6de4b0b65ef80b3ff081989479ed93377e", "https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c", "https://github.com/websockets/ws/commit/eeb76d313e2a00dd5247ca3597bba7877d064a63", "https://github.com/websockets/ws/issues/2230", "https://github.com/websockets/ws/pull/2231", "https://github.com/websockets/ws/security/advisories/GHSA-3h5v-q93c-6h6q", "https://nodejs.org/api/http.html#servermaxheaderscount", "https://nvd.nist.gov/vuln/detail/CVE-2024-37890", "https://www.cve.org/CVERecord?id=CVE-2024-37890" ], "PublishedDate": "2024-06-17T20:15:13.203Z", "LastModifiedDate": "2026-06-17T07:38:59.847Z" }, { "VulnerabilityID": "CVE-2026-48779", "VendorIDs": [ "GHSA-96hv-2xvq-fx4p" ], "PkgID": "ws@8.11.0", "PkgName": "ws", "PkgPath": "app/node_modules/ws/package.json", "PkgIdentifier": { "PURL": "pkg:npm/ws@8.11.0", "UID": "cb9e9a431e2ad650" }, "InstalledVersion": "8.11.0", "FixedVersion": "5.2.5, 6.2.4, 7.5.11, 8.21.0", "Status": "fixed", "Layer": { "DiffID": "sha256:e17c1f28fade6fa078b2a2158a953c84d4c2c5339d4495b8ed88c1e0879cf332" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48779", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory npm", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm" }, "Fingerprint": "sha256:95969f83978eca3e299dd22af0c65f7cc3fe5042fc59638bf0ca7e2802b5b9ab", "Title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments", "Description": "ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process termination due to OOM. This issue has been fixed in versions 5.2.5, 6.2.4, 7.5.11, and 8.21.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-770", "CWE-1050" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:26638", "https://access.redhat.com/errata/RHSA-2026:27171", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:33155", "https://access.redhat.com/errata/RHSA-2026:33160", "https://access.redhat.com/errata/RHSA-2026:33163", "https://access.redhat.com/errata/RHSA-2026:33173", "https://access.redhat.com/errata/RHSA-2026:33183", "https://access.redhat.com/errata/RHSA-2026:33574", "https://access.redhat.com/errata/RHSA-2026:34342", "https://access.redhat.com/errata/RHSA-2026:36754", "https://access.redhat.com/errata/RHSA-2026:36820", "https://access.redhat.com/errata/RHSA-2026:37272", "https://access.redhat.com/errata/RHSA-2026:40984", "https://access.redhat.com/errata/RHSA-2026:41928", "https://access.redhat.com/errata/RHSA-2026:41941", "https://access.redhat.com/errata/RHSA-2026:41944", "https://access.redhat.com/errata/RHSA-2026:48151", "https://access.redhat.com/errata/RHSA-2026:56366", "https://access.redhat.com/errata/RHSA-2026:56431", "https://access.redhat.com/errata/RHSA-2026:57013", "https://access.redhat.com/errata/RHSA-2026:57590", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:65126", "https://access.redhat.com/errata/RHSA-2026:66488", "https://access.redhat.com/errata/RHSA-2026:66545", "https://access.redhat.com/security/cve/CVE-2026-48779", "https://advisory.echohq.com/cve/CVE-2026-48779", "https://bugzilla.redhat.com/show_bug.cgi?id=2489661", "https://github.com/advisories/GHSA-96hv-2xvq-fx4p", "https://github.com/websockets/ws", "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7", "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53", "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94", "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8", "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p", "https://nvd.nist.gov/vuln/detail/CVE-2026-48779", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48779.json", "https://www.cve.org/CVERecord?id=CVE-2026-48779" ], "PublishedDate": "2026-06-17T13:20:42.887Z", "LastModifiedDate": "2026-10-26T12:10:00.13Z" } ] } ] }